last executing test programs: 12m0.264751988s ago: executing program 32 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0xe0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x49) close(r4) mq_timedsend(r4, &(0x7f0000000340)="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", 0x1000, 0x8, &(0x7f0000001340)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 11m51.683911786s ago: executing program 1 (id=54): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0xfffffffffffffffd) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) 11m50.737352714s ago: executing program 1 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f80)=@nat={'nat\x00', 0x670, 0x5, 0x4d0, 0x2d0, 0x228, 0xfeffffff, 0x0, 0x390, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@ttl={{0x28}, {0x82846f83166753ff, 0x96}}, @common=@inet=@hashlimit3={{0x158}, {'bridge_slave_0\x00', {0x0, 0xed74, 0x5, 0x6, 0x9, 0x8, 0x5, 0x1, 0x18, 0x80}, {0x2}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010100, @multicast2, @port=0x4e23, @icmp_id=0x68}}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x5e, 0x2, 0xa}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @multicast2, @port=0x4e23, @port=0x4e20}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r1 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1000000000002, 0x40600) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd601b000000641100fe8000000000000000000000000000aaff02000000000000000000000000000140000e25006490780200000000000000020000001983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4bb6af91bfb69252b136c8f50eaee89ebe26e39726e261b1997fe90de7841c2e1f2def4140df2b9c11e876f120f5f7bfc5"], 0x0) creat(0x0, 0xa) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 11m50.303478482s ago: executing program 1 (id=58): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x9c2, 0x2, 0xac7d, 0x1fd, 0x1, 0x1}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) write(r2, &(0x7f0000000000)='12', 0x2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffc, 0x325, 0x0, r3}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000000000007ffb, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x3, {0x1, @sliced={0xeeb, [0x7, 0xa, 0x7, 0x4, 0x101, 0x3ff, 0x0, 0x6, 0x3, 0x7, 0xb, 0x2, 0x100, 0x4, 0x1, 0xf000, 0x1, 0x583, 0x8e4, 0x8000, 0x7e5, 0x7, 0x4, 0x1000, 0x6, 0x4, 0x3, 0x7, 0x2e9, 0x1ff, 0xe5c9, 0x800, 0x9, 0x8, 0x5, 0xa99, 0x7, 0x5, 0x0, 0x7f, 0xe02e, 0x6, 0x1, 0x1000, 0x5, 0x6, 0x7, 0x5]}}, 0xfffffe00}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='+ 2 0 0', 0x7) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/246, 0xf6}], 0x1}, 0x60000100) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000020040880) 11m49.32321094s ago: executing program 1 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xe0) connect$netlink(r4, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x20030400}, 0xc) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x49) close(r5) mq_timedsend(r5, &(0x7f0000000340)="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", 0x1000, 0x8, &(0x7f0000001340)={0x77359400}) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 11m46.316853147s ago: executing program 33 (id=65): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xa891) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11m46.054300664s ago: executing program 1 (id=68): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x14, 0x0) 11m39.872375412s ago: executing program 1 (id=77): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x4, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x7fff, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 11m39.724088764s ago: executing program 34 (id=77): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x4, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x7fff, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 11m24.737779557s ago: executing program 7 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xe0) connect$netlink(r4, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x20030400}, 0xc) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x49) close(r5) mq_timedsend(r5, &(0x7f0000000340)="40cba50e9c26d86689207e05a2afebb231f92b301621d844c05c5008d8edeed6db27781b459801ef50545f7687f2b45aa7ec13f8b2354140bf15d81ffcde73969e7411a13d4162308d2470d4b2214948e9d043db6d85fe1d3f0fbef031e975e7bd84da65dd6bbd6ada5459872d530c2dd89772fabb0987c7ecf96f9beaf427b5623736d63b406194b3db6f59bc508de553c40638e003a593f1b3629dfae71db0ec2e2baf8030662ff4931952032956e5bd5cb547f072a8cf88451a1b13249c6d7f43f8d401a420b7dc40910d8215e819bf45db0656ab861743129e0bac54066aa577e93663137580f8b4e1eaa3e56bac8e261ffaf20446bf518beb3605c197f030612f7ce231a0ec296b6cb1e6fbda23b40eb2fbc4f2edfd7c09b5168b42188d9acfff4a85110861418151d246f20ce3fedb573f52996e7aeed6b4348713f37284f4cd01e9a0016add9631ce49850fc2b74b81a5858326ac4a8cec3b31027fd1a829da196b8444bbf85a55f775a4fc8de7d7ea06624e7ced7129e6651e0cceb6b2201a339effd129aee1ba33a641862b33b1822f13a5d5bacb22b3e2a065547a9b5c74fbd3f99d5ccf8c0af14b38f3b49d49c57f529db317681839e93a83937c4fe1ed2a114a4c0da39b37b9fde73a62282994a7a69793d12d66612f11019886e65c989a313f70ea2a2fd8728f34bc5a9b84515f50abeddb359558400b2a78a7c78adee0a7d11b897ac724774f2c1461c6e7af50404bc9d8c9a219bd7a610045810b152ad22d55709e505509941ec1a25bec14ff4b89c7b9827d9dbb6a4cc8371753f6c9ea95b479bf2181417d1ba5890cac8c5fea8470d72fabeca09ae6e4508d5d5a1dcb5de9b0ccc9928fea1db4b0cad45af13b44c9051749622de5637bd7b45ff22f9e633dcd42d19f6e57d26776a3c518cd68df3f913e8600b61219d8259f4552bf7175d563de3cf76604e9ae3d4bde38e180d217dc6b8d7d3bdac01fb13877aea3eb0f088d6bc19f663c47b16c13c1dba93399113807123722ad249d9d995fffcfe8072c46ac9dc01d809ee7eb4bec94789ed6d2629d8dccd259ade5a989c634d28fb6dae26f4ee75b6a610f35047dd1ce534fa1a4ce94e3389cec9a93a5bfbcb1f46002a6195aaf9cd2637bbf8a5c116bd5594498823d5c025d9a88661a45237812c009bf6e646841a1d5f9575d364ee9ce31550504ab588603150cd5eb3c286f908b719a429c5cd39c750a995e40581e0fb85a65b982df1dd202ab4f7fca1edf0243a50b87681ba91ff1477ab20b9e45c90dde2ba3f60527814b44ec6a71c7016e6a4a1d2770554a3c21db907120ead743982220f0cb78296883bb566625f8a366c58d0f36c085f2e0d74d0688227d10f167fd79b75226bd730bfd638c2ef579a805c2bf1ac146dd63344fd04e1c8e1374bdc2f769607f6183d5198247c0e868723b33a1efa77e170a4d6182f24f46876f43cd42faa83721dffede5f16f1a7e2189f5c443f064de020d64ec2bd396762498832300d7b8ac19e6ae9611c23f742ab46436fc75bafeb371af523eb6ca47323009c3e54c6a4736c197dc0e13b17f5baeabacfcd2923a8b21777d2bd9a8c69ba5a643a3c5c59d7349cbb8ba4746a2b4b6529f9b60f8b743b94a5073c94c96968cafd2888242485f5e8285fcea9d589db7d869d4d2437834327d45198f7d0b286de4179c81411f030217269edcb3eb6342d48efe9825b62471c33862bc01633e730caa45999ee6b565caf02667b521c742f353f4a56c07e90da81a029a5fc5d59e89601461b7858f63c59ef16a0dbff894a20a03461c6834a311264617fa1693a89189e2f6ce358d82afe9afaa1f2319777d039039a0e7468906af121f29ada7b2ad864577628fb05bd74e822bd094f6a75cedfcdce990a608556354eb09b95197ea9e0fc942e09981cc37eea203e342afde20b8c3c220ed57c4f813eb2096a445c8e8864b062bf944cab1c92794c81c9bd007d95ecf82c3aaf5c46e8b6e0408490fdac371212e90ec4fac04c5f0cdc2a72896b8cf165c55bef3f86961c92a4ba31838b49a5ab3b9850fdbf8ec166603df778841625e7ad663bbad1a945e94e6e8f930272c9a02d65f26cb35049a018768c3c510d74420e5c9ed7610e05c11b2a525ad836507e42c9d5c6ec11f1a66ac8a305be729b65b47ad2cccb0f00781f98ab6b106cac8a2e06058779895a23082fc8994e5fb45fc430263087bd78b1e49994f1878b2a57818066f4f720166b43e03eeaf3269d538c2f558ec304b0d07e0c2c6d383f4c2f1cdf79089df536190ed14c2098887aac3957fa9eb6cd30a7ae77f840ddb3c45d010db3db6573e595220aa1a1cd8eb2918296e20f6856f9dc9609fced0ef91fad979723117869e0f98c87c7ffc507e7fe490304e7e62df0d32fddc6b0de323065d2dfd8b021c1ad124d8e740150b56c4d5e530f23ba5a1a2a21baa131b5e070fc1c4a21c65e45147135b398894911fd3ddcc10bfaa8471ab309e373b5c47632fa38f685fea50be38e9c98b0f0a7fd6ed3c1699d275fe3e2a32c48091dced2838c96d6ec3bb9964eb7ac4ce09b5593c80fd14b398bb23a9f8e0a38f96df2e84d20b621df2897020f942613ced43bde4ba8e85c01071e9c1c74c52b763f300e9ef64ac88944a463dfb059c92dcca19905cf7a4df2dd6a1d979f5498e9eb4f056cd3846356959957c0623e2648314477c239c69277a5fc570dc0104de305f944b7ae973f0aca31256048460cd8dbbbdc922a0d1ced585f290475120a31a8fc5935f09765c782d1076b24fe2dbfd13d1a543f3a4e2e5aeed3cb1857a91cfd6501172be1abfe2cb534a79bf4debb1fc6a1d99c36cba767ae142555f5c6b044c05c23e74ca0bccc460854f7dd7b6ddf41b6dcf85627350c94c29d8749ce1c3c394da9a96c11665db5204a42e124c18d33f3ba31f2d190bde5ff809c253cdfe20d1e33f674c4b7eddcfcdbb80497754b7a672a5b7c55f841369cc32bbf786ea70a8c5c8d71bd23ee180f43863c683135b1cc7353701c955554a5dbfe4805343e394e2434d580d46c66c4419fce1c31384a04643104ab94dd521109a4fbd318d0bd6ece44b92c866ec512c351a04e37d62b969844deedcdcdcee2f5de547279111a070bae0a87258b4e964313475f2ac93177056f4891047d4f02ae1a9cf66e9c850178564cee2994cdd368ee23f84bea8c189399c2c4bb6782ae113da5f0ccc918e64f70335add20d18f0db2ddbdc6764ca75a6dea5088a3f937db83d4a42c4c11721baed82ed757cd42d4ea16becf6cf1a59a07fc7b3521b8cf4a6cfd8256776da3efd67b1498ee03fa70b64fbec529f40a5c10b880be5f34f7b0e59c784c3ac2ad62625102539d4c1a2b60c46f6816a4795f1ef70fe482d2fbb370cf4585ff0835590a295d584eeba35c884b29a089d1015df67f0f0c87a606524bd8c889242097241b52e3d42bdf62a62fb8c9a853ae0817b7a0bb33a40be286887d178d68e4ca8de20d67327231ae934fa8823f1baa20d685fbfc648fa9e53697ab304a7acf9d4b8ad29e269dd40f64ed41e427b213473b3fe8c49325ecdb94793b06fe442e43c62bd9cd8eed8ce2f657497dcc87a6aa105d8d21b33d49d60420bc0e65c2cf8298f2d2b2d259aa645cdab19476696766b156fc0689c52a985a2b9432bc356e09d17bb2fba7ea565f6b3f4bb9a21c19474025a2237b47032950667c0003868618f2a8b0754c056888ee8e6009588df09ea5b88a870ee860e9a2742ee0aca2634d22cc305e6c99a31c3d949491d2b9f3c2664bdbba1b3e4e6c3f82c42b0bada805f8d2bb36fce88481bf57e34d14048c4af3a1704a250ac8a38d65a72670b2e00b968874c4a94cb44e68c2f1ae4c3f34581efeffa2bc87170daddc54dcc07969cf54ac05d068cb53ea8405b3dd69947e34cf4f36667b79afddb460c059b4e421e28bf46b6f335938b02c34c772dd2adac687a418a79b5dcf82c14bcac38ee68fb1581ae4b2ac01d38ce94c7fe6d8973ad5f1e184d62f225c597ff8d02030fb6bdfbcfe44259b569993877e24df1d484e01a394406d622a98679d102f1783ba0368b7737f7f434cd611db2d2342764f2ee085ddf83818453d430cc3328d5569ff0b4d7de761dedc2a34d4b833fe4c9e48fd551f47657f2569ee893b17ea08405ce298e25f74a91e39bf238f408a5400b80415b052799631df34665bcf2f87d7b2efad45a4c4e87125f30351d5103d152c3f2a8e9859477b4767be380876ae55748d62485b58f1a82a7496f805f466927bc6c6d4bc11580fd2a5365dce3d01892ca34f21330a925bdb550d6c2968ad62ed38992cb09f133e3bbf38a94c55dac2f468a9950c4a19cc0c63d269cd09df390766375417494155e60923947cca61a7358560c37fab740432c047c0dcf7d24442a61ea5c3d84b87312d0cc28422234b8c142c7c61cf5aee0c8fbee78efb9f296513c6449433bd8d23db32973b890546d1c6d3588fcb92c3aa991ebe57a8f6bcd0b161498470270975856068ebef33bba71a79081aef50d684d42dd4f4b90721879c083b05dbbbac4889259f8f4310da18aaacc6259f7ffebacec2c76527bd777557a738cdb3ac485bc768323182b2a0634f0c5aec04f3eb9885fc53c9db2fa117dbd93e0277963f1569f65a2411a20f987398810ab8fadc9091fc19abe2418ed42044bf6b58145afe69bbb4939a1b8d6e84c10ef15aecc78da4822a5899940f1a1366a837c9d231dab93f26458e8249095c123d248014943f6b0fd771e55edfdb04d5962afb2423e2e620071991dcf427ce9b8a14f63184375e61d435614cfe1214b94524fc2c2a71cddb88aa1de22edbbe2eabf64134901a0c27b17e13203f1cc3a8572ebfeeee1d2a92eede87a4629c8db0a66f1fc7c09dfc038447083882bd4baeba757d1ae83d22e55deb78740a8a3f1088bb492891be23b648e206933ebb9e87a5ff3ee5bc42c791f554ba91bc83c2d58f99ac8fd77d2f809c307e20fa9eb96e53c06c2a5cd921c0133dd21b8c84b0bd39b2ab96cffe38f836e578115a13ad23ebfba1eada11f7edcc4832baf37d8265e98454c93a4e02bb91c5d0b048cd9812596738d5332f4cdc8aa006ee099d7d5bc2002872fca570b2441bac20fd0fcf30ce4f7c8fe63a75c9dd14736f8b822a2508a0bd570079ef534a70c6f4c92cc0fb4c2928356d437008ae290f234166bca9c6903ec9398d4336a8928a57ea94121245f437961b9a3ea0a47bdfba55c57d872702a2c320af64ea6fe6b1cce608ba33737ebba6f9edaabe88a76a53c496eac80f89d06c2678fc0973598ba1da1e5183a5bb78d64b6cf0bbf2d1e84d65058ff6167192028f566085e89d4b76626ee50c5a00c1b6045dde976b8b6439c81418c189431042ae3007f6b5cd44f4a3298cebc3146e58de5923d8887af6532a04c074498a7aa0a4a9d4bf52f405aa2f4b25ba329c319d2402b735ed1377701397d9f3fe5e5a236eb92b9fa665d0a706e476bc5d39976787659bcbd756bdbcb871a8503b8749592078378e74c0560143abc7ea9160b518566a34a4e6e58c53624eeeceeca615f0c311c59a6047be1f3e54cc65e08f626fa4f3cd6a7c3715d36046a74f37c608ccd686aa15118adabf96599a14b22327c6a507d06c0400c2a5f3b5a445476ab03fde574f7ef3eaf36866d8502fec0cb6fbddf45385b4913cb97c984cfc79e6ef09f05793a23a05f2286928ade625d55f801fb9e84e647042ad12ef1f8b7c79c8815301", 0x1000, 0x8, &(0x7f0000001340)={0x77359400}) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 11m22.920333326s ago: executing program 7 (id=125): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000040)) 11m18.439926411s ago: executing program 7 (id=144): inotify_init1(0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$midi(0x3, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000002035120480400001020301090227000101181004090400000101030006072401090007000905050220000cf78005"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1}) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x20, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc916, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x0, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x1, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="140b", 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r7, 0x1) 11m18.182329274s ago: executing program 35 (id=144): inotify_init1(0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$midi(0x3, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000002035120480400001020301090227000101181004090400000101030006072401090007000905050220000cf78005"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1}) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x20, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc916, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x0, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x1, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="140b", 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r7, 0x1) 5m15.234589805s ago: executing program 2 (id=1400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000800), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x841) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r3, 0x26, 0x1, 0x6, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r5, 0x25, 0x4, @val=@tcx={@void, @value=r2, @void, @void, r9}}, 0x1c) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) 5m14.255493252s ago: executing program 2 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 5m13.885077606s ago: executing program 2 (id=1409): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m13.654342378s ago: executing program 2 (id=1411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m10.580879824s ago: executing program 2 (id=1424): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) read(r2, &(0x7f0000000180)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./debug\x00', 0x98100) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0xa59, 0x0, r2}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000001180)={0x3, r4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0 0', 0x3) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fcntl$dupfd(r6, 0x406, r7) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @multicast2}, 0x1, 0x3, 0x0, 0x2}}, 0x26) setns(0xc9, 0x0) r9 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r9, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000000)=r5, 0x1) mkdirat(r8, &(0x7f00000011c0)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, r9, 0x1b5cb000) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) 5m10.368553189s ago: executing program 2 (id=1426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x8010) 5m9.521444336s ago: executing program 8 (id=1431): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3, 0x3000000}) 5m9.076002136s ago: executing program 8 (id=1434): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0xc0a02, 0xce) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(0x3) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r2, 0xa) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="042ffd02"], 0x200) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) close_range(r4, 0xffffffffffffffff, 0x0) 5m8.15743592s ago: executing program 8 (id=1444): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0x2a}, 0x28) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) keyctl$revoke(0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x7, 0x7, 0x1, 0x0, 0x6, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f00000003c0)=""/207, 0xcf) read(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m7.213673648s ago: executing program 8 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=-2,lpwwnn=0x1111111111111111,lpwwpn=0x0222222222222222', 0x6c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xc4}}, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010101, 0x100, 0xd, 0x400, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d4, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in=@empty, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@multicast2, 0x20004d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x0, 0x1, 0x3, 0x2, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = open$dir(&(0x7f00000003c0)='./file1\x00', 0x50900, 0x19f) getdents(r4, &(0x7f0000000400)=""/215, 0xd7) 5m6.989268983s ago: executing program 8 (id=1449): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000200)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xb, 0xff, 0x5, 0x5, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x28}}, 0x840) 5m6.679538065s ago: executing program 8 (id=1453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) 5m6.373890124s ago: executing program 36 (id=1453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) 4m55.271289758s ago: executing program 37 (id=1426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x8010) 3m52.308877297s ago: executing program 9 (id=1721): r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0x8000000) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531cda5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38167f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0xc1c41}, &(0x7f0000001ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x23456}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 3m51.208694088s ago: executing program 9 (id=1724): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4000, @local}, 0x10, 0x0}, 0x30004091) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3006c016) 3m51.080684913s ago: executing program 9 (id=1725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_pauseparam={0x13, 0x0, 0x4, 0x856c}}) r1 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r2, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x40010) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0xb7, 0xca, 0xa5, 0x10, 0x15c2, 0x37, 0xc446, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfa, 0x80, 0xa0, 0x6, "", [{{0x9, 0x4, 0xb1, 0x0, 0x0, 0xb3, 0x34, 0xb4, 0x9}}]}}]}}, 0x0) 3m50.280124739s ago: executing program 9 (id=1729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') syz_fuse_handle_req(r1, &(0x7f0000000780)="85f6374cf2dac87a762dbf17e202b77ef1690da417a63df463297ce845159bafc6cb7ca2b288a39edaf7730e277c2ecce8c9be44837fd21b6fc0b54cc738efffc7ab0624262c49d4650cd427ea05f2176ca13c9ba417ef2e0d977ff56cefd64810aaa364e5f4c0d8717d79198719b75ea96d6596bd658eae8a574b45e23a5c8569cea0e2a3e90a04f788d3b89f256bbb5fdd09109c2a83323d01b89149c86aed3d1cac28debd5f1273033f1e27a6a8ca09ae37e401f88def23965a798b1fcf2d88cad2300e0bf12862fb9267ce6cc06820a1bf4a95935594c4a049dd164d8751c4653ddc3432b77e1af836d8078b9a1eb8004cbc0cf2bead8f17980e1999718d30ba530ac7cc5b13917b27fc80c3e9a7776218c05a78bfc3c6b5768945c873e6fcdf264ead638e849ffa75f13ede968522147b9edda3c0edc606af90727ec825888be32bce866346393312babce57070452dc6c5a7b6a94deed74c361acb5c3d10adaa502c53b97fd47668ac9093b411f13c09cb4850f4c860ff947c77e1eb4204b15b050c11665cbcdd4ad58b551528c96ec787bdc15f44f28eafa5f8cc95014f7ac7354d3c8c96bfdc8846348937ef076d11e0073ac05922d7f2661c7ba8d831375563d2c888bc6ae3371545e79526b4a66b7d4811384d6d09ab130792aa40e53251c4373819f589483c37e0a372fcde26177ae56fe696fa62fbadb3a3f7523c0026c94351dcd63a738813830032649f5cfe3a1ac52288f93869d1f7cbf658b7d80d421cea8bb2a677798f774020f6e22cc95e6d03e9594628d14df9afec6a28accf967e0c14ed20de0cb7a44be1b8f84a955e3953c160e79a274e8b924cf5667c79b9a07031207baeef2e39d24a4da61d52c1f769471ca8515eaec22c437bdd6ddfbb54ebefcfc0d30ebbf9a5aed40bc3f6de85de2cd61c7129110d7a54dcd4cf93edb30696c550c6b599aaebe402a38c166b4c3d6a992e3fd2f4350bd1489aaad2f6d5c71232d79bf07a7fd3d9514696cd13c861771313b5291950a16cfef555880e6753162fd540c24b38734e091dee42edefba6b57f642d986004b90af198b4ff53745815a99398123545b6d010073e528c2d040006d95ed1333532dbb2e728d0d460bee84838ca0373db83316fa7722a2d6727e5052ef5590dcfe91e55c1f09fd91258204527c01d9d893cda46a7468db883cb9a405b9ed255016d911734b545d2b956753dc0f96a7117439c4587f3cd3325f33f8d5f13835f7adb9462dcc6cff2585ede7171d429d8d58b16690580cbc5f14d8b5d570638139c1cb375feeeec464e82565092f2ce5f77dea990a9b953aa45d54849d9cfdd0650628f4af4ddc42be05bc3f1096eb6388ea1cc385a3761a47ca9072316b18685b6b16de03a19cd9252fbd33f05e8ab46e65c9356dbcdc46cfc79708be85e6ba17cd759d84e42390297c512b347f880e0f373a981d2a6c562ff89ea3318ca09d9efc349e3856d7b8f04a8daae4a5ab32fac979e26199efd61f7e585b8e2f9fa7cae8f819484b3b5adbef6708988f2636334ffb700b739aef6d77bc7c674d2ab47cd0e509a5913eac2c6513f4178dcd7025827a786e71866f224d1d618b45e08e7308cdf19d65c159bdbe11d9704f81af7518a39b73f72bda030fde3410e86b3c4c79c2d9125fee8ac87302f994e12707cd1b7ac381f54d281826490c00317db77843735116835435aad57dd0338ccb36a3af54ce12010fd3ac062265906f45ad8fcc65f930645fca06369951454026110e0a4021a2fa8021b85205daa51a70982ec3429e0501a9904d668de8ce741f90a5fbcf182a9a5070ce94167f6a0673be19e17fd442f020411e422b753f21061f71784d7a3505699f19685da1600dbefbd467c86e38eaa8572a35ae2e9c507ad71a18f115088b382a1446465e4a72152681c3fe15fb5a69d234efd156b5e8717e0fe9d1e67d8bba017d6d65808905a100c4533da9eafc7fcc7a10d2a1ed2c7c1e46a71fc768c00897cb3c0e64c8c5df5eae07fdffbb7cf5bdff851431b111c143cf191e2d4e7b3b77c7821708b28107781da62ded0ed65279bd7f79251b97d88f2bb207ccd053568694dece53c26bc1c3e35cf6829b7e0134599aee3a83d30cd2064132f5523c21bedfdeeb6ec1a9c160d3d9419f1090bfe40addb80f0ad1006716195d4c399a3c4deda2ea2a85cb448497ceef7f6506dc0e768ad32616566afca835a40578b90b670cafb45de1578a628b8857511cd1df8fcfd79b4effeac12d619e9c362a1531781ec23e6cb3820b92a590b676fa2b1c62a665727bddd380245ebb5b1c4067b199cbd39302e256860f7a43870a3c5443ab4c0a184a2534389cca3d369f43dad29e4bd36c60d08dd347073ec06713a41ae3873344a7f4effb13adaa770973556b6334bb017b7edbc53e13b523c3bf8d2768dcda762f957ff22dfa981f9c5f954575c6dbe0056afc254c97f9a3a53192ac1445a5b73ea2431b37dc87f86979c758054438cefe23ee0f594bc91b455541c7ea32e2d77f4fe9b08f7c4d9cc3945eb9d70b53eab840878878ab8a6b73d08dcfe7236b731eb75102e833eb9c018174da881599f064955b04f9c90d2fd569d783119ea500fa9d0869986ccba9f94c9cf397e1d5b240687083f0f1a43ca237d4a57fdeabaa0ce0d212b18e75a8e0104a9ceaf6bce5dd8251919a06de909e0c61a9d0dbf648d224e975f788c8bebd0fa6f45d13aaab7857e42f0c0392ac6f8aeb31fdd3f90108b14b65ee60f854c9f34ccf2e2acd918e1a09167cd6acbf7364dc28a0520611b763f05ad527e59ba14e798fa4d6425bff343780b68038410998de61bf86987cce31e71b6cf3b6c00c65392a7850530a800382a2ca3fda86b3e66f84578a5869800fe532df7369f66ac191b88f6c49ea8a015761ce35aa3aab9ae7d776568579064f1916b42ab3563cc6261464c5f1be358a7914e645296e388083a9332303d47337a12d0a3bfb0382118b9663ef8913c1a35f693c71ae6bba8a0b81fd7599e4bc1168d7990a4ef1753c73229321c9d630d82556aa7f7ef40de7ec591374cae3fb33ec4e39d0aae3085717c8b57f90532a2aae4b017fdf1adb8eee35c435aef8ab63191291aaa0c8d784bb6450bf1165b58abdde0a7e166e4ef40fae75949c496f619a2e753832c8ffdb1576f373e509f40de900d519afefd8f69225dbafee8c81346dd34af4b7d885e46b7cac93f3f94d5b052f22aab41ed3b07f1cb1ab94fbfe70ff954f74b7e3fa0952d2b9138cd3e85cd5234694972db6f7e8f99569e3798009f3845c6754469a40e05d9e51378ae4037566aeadce5887ce733a590a7d2f6179a5b0f16d3d93e8ffd888ee6bf202f76247fa79d4564059c3d975c845c70963aa54eee58a0e72001943e28d515f5125449ae1822375c1c1030c5a45ff94e78d81db0d8a961c807582c1756eac652e785638e61747007f4de0db28665a7f8af0329447b8cd29d8667881861699e8ef611be7090335e742ffab2a3a42fc691e45879d6e6c7f27f77f9891f9a5327979cbc0f3353453c9d0d56084e551e9bcb82ddd83e1889dd86cff7eebef38865b67e4666479d7dca0266270156850a594fbab99c0f38f1bff7d12207fad477f3d231508877c6cfb342a48d631f224bf254437d8b6aa4b2b30387c30878dd0d7c5e2adb789a90594a95ede78a2a0e437ce05bbcb1ee159656edabdc1f9eb8aad14fe33e31b70f0cbf4f07957842f1246d57212dc95266de3cbc001ea7c68e2122f510abb0b22238fc4ba0ce8f0ba3912cb65a13f5b4e0b3579b188e718702037bdca720696c152b4045400f82cf5997280d9661a844221124b8291d8763f18f06e402d4f9bd1b96738e46371f97ffbaf7da500caf2801452265d7f73cebe5c0bd29af76bde48eeea7434df6bf1a46e6f1674adb70e2c05df37d128ec293a65e13de6e3dc29856168b7b3faeeb4af25e77f06cafd79f52477a477aa1ed56627620b49866877ca72a68a4d7221cef542e3c8ac85b037fcb49ec434065d4d24660ac8195121d88bc4fa1b082f0e55633dbe6446171b8bd49dbc6d2e4249f54e33d7301c61c0fb408c0e84428a3cdeaa971fa9136e32796ae4a7afeef9cc293d429f1abdcee700dbbb041181b8eae411d2c58bb05afd3f678a78d55ffaed458f0c719caf6817a50afbd98e0180fc22727a9e671e4418b7882e8f47ec54d8811a618b74783bad14fd167753a4466b4e3e84dff9d2eb823d805bc7d938fda65486d15b01a3e99bab75a48914e8618bce14bdf1f3601cd27869de0a6aeab7a0e16051d39d8ecbe59d2574065e84b104159095e46c2e187724e1538b411e2b7c74ca480dd6e021b1077d2b0cb9a423d5581762918151d124d7e44a999e09e6031b7328bc5d936d78e56c507d6f99958a439e0e23c2f6f7d50261299c661b871afd8de9982548ad7b9562b03de3cf9f58b245f4c7d3dcb521b48a5c8b8c96620aea252ad443be1cf6aee56619d1f7c52bbf4efd67e3529585924b07eb3d8db13f78b4e997a83967e4a744fc33d6b4d79c8d2ac6db77587b87f8ff706ab44bc279e7ad208f9c9a025f88a7532380c144d807936136fd8655d0d482e1e238558fc2d33050b431048df6a561101f81e621ee618e999cc1a3e245e9b7ab1e3b9cd079fcee4b7abb6567b394cb1de25f6ae3e3967ad2d1ad04a84f28be38bf88f05d28432e8104249a7db448dd498b6fa48f25fc707ac6b2d7ab14321bcf52693917f193b423352b78bcb06dc6cebfce7d75d7a889e33e310a4a7ca5eb4b874f9786bec5a8804c09a5d3205b64cae14f61093bca2274699ef0462671b9d955b58eee74bed9a8ff115a442dec2731e6d8feb830002c09f281c86e53f263832a4dd755124f2559c68135736e11564523f46d9b06a2b6734edebf54f2b94400696119fecdebc002f7f7d81976c8850df4ac3f87a0247fcdc9a20bcc7bca6d4e03117a8d6e164a327bf3cc6e55ac8f87f263f04073d4a6f5dc658c01cd5e2fd9e67e7cd3667d6dff354b29ba874fe591391fbb98f2ec778cb299007d1f3bc25b65cfb44364fef705464ae9b1bd4d3f368b63ce5bab67c80e7bd70f1cbb35a3a522c46d4be4accdcb7c699c725689d7a5e33acac5e60650a61695474b35194bd039a9851e5637f95d81ccfcf0e8a219f1aa0c019c9c4f5a8ded7a221df702aeef0bff7bde7e0612304b4abfa24ea39cc693fad863468c216b2950e27f1c1137c0cfefbf02d3a428e86686ef4154bf42e0f2c3e26299b15e481bbc780a75d03bf2ac3e7c8799948c4e98978c3be9556982e4390171b012e088d5d3adfacd002410998b0e4972c64e531087be017a61318620fad6a54dbc13b216ce895200a1b37bc57f152fb927bd3d9e15cc71a8115b63b09a561961914448768dc6b1b386bf4f4584e23580a00c07294c9c6006c78fe6dc26138d4bf85f2d03cd9fba85402f216ee1f3912edcb87d3f7f6506c11d45c32709e55cac7245698c1f4ce15b0e35f5e0800a44c2d451cb617cfdfadf00372e30a48d69b4d10acb0b85754c18a7dad97a9a6929e0cad15fb287f8d665d54b3a5fb08fa1daef81d9e222f5d3d56972ee2fcd11caf6fbaf5696a10d93ece2e0f68f4c6496ab5d88661a71d16be73f0bca308a49a1284232aa52c1909966da9a1c420d48b852bc09f5ed89ddb2ada32fbf38722775308abbe0993018dbe6f4320ae998443f499ecf41d5d9f612f4dde45bd3f850e9f47315d9344b41f76357e7d66f321b1bd26f9b0b1c5e69bf2aed12c4c4c999230421933b404fa63c793894b4fb840c835aff6dd6a93418182b731692f756b481a3962bdb20d03bf46615c721845f216665d4d294e2cb813265f1f72c42a3dd4cda19727bb5b6d9d330419f6e159c19fc313961046561fa1c36a25c9cfde4e7f167abd75015f437339a57dd663d48f51590a8d84c36c1a4b40b097a6efecdfb744ea8bafd437e944b5dac0f5628fa92f8d046a2c6ecdeec42ac37b31aa0156bbbcea4bb09331661b90d0031b5d63127e6f183cf1f2475df889c14c9a51cbeebc7be64ec543fad2c2b564969c2b911d56e0152f5e4307caf34ec1eb501f9a89b18e3728736c7c41b4ad236bed71fb55be99a53bb3196ad56b7c89e4a9314ecbab4b05ebd34a3a89953159470f6fec63b4a36e5a9690fed49743d9d492e4009ce7e49a8537e5d683693795cf9368ccefb013eb74841a9a9223c9619908ca1998fdb8e231270a9af3c2a43c054a7c698bc3edd1e62e9097b678d5af090e4f3f8d2999d3d408b5101c100e4c58838c2117133eac7d9db1db4aebc73c9784c4730d923f2492618cb9bc865d151cca178e429a7e69411471d8f60f05992a2f0d6323f54cd22120342e9d9cb43e366e3be2d7e1f8cd970c68fa9637a60e7d9ab4f405b07b0c2e281a61c4b445de84e2855ab60c6b6403ecf7634810195c938998fcbdbcb6ab1a88c863d0f9b16cd15444e5e3f46756cd8a1a8982f028add01ee626956832bccfe0ef32646bc9162bb8da05da40c70b954abbd805b46f64453a868253c6cd4f1c5439927c830696fa733c68549171d19ea2957547b2a705eb8cc2fddb7f07554907d8ceba186937df000bebcb5614a292f2fce136f66175585197160bcc160715aa238b0b8e0c6eea58c69ff7b2c990a13eac06a19ec74fa577f8f779315c915a2faab59a915d23aebfdac69963ff8c4dd09e34dce2e56c87d0e45553103c1590fc7fdf7639031f901b88def2f708d2e2777653c060f6d9f7f64c8a61fe6cb642985bac6dcfdd13e4e16f34456ecaf890e19434ad0574ed7574df5511faf6e703e814e0a80deaea51f619422c3ac120c77956b7280bcd3cae7b559b9190eeb31750cb80a523d03bb93d820894f4706fbeb2383d3afe3d05b07d74c8c2463715d0d9358eaacb19060070dba3e943ebec9d6f6bf485cb54e1e71a1dc629d2c89a54fb2ed739e4d612f36d7828ac652433086272ae2a26925de1005ec787165c0085dd2d8686684fb884c83dfadaaf3a709da69908124f67d101de596377ec5d5ed897153f6fd93496d31e44d8a79d1cc12564ca3ce953f2f62c78d973b4425620b3486b8207711eeab7044a702940f22244219426584be81c2ddf4b05f89ccaeceba7978273debd5f5d842753ada09ada53f473a69834fc74a8b9647cd684835d6a1dab40cb0a2a81a79cf311ff9064380b85b11aefada715195f594d37690cf2410b97e443ec39f3aaea6e3d8d9a6e75bf705b51b84b325dc66e2197c90ff0ae87c923fcf170ccb1e845d83ac53daa3af2c83c8d9ec427ac8fa97d8950affef67565c33cfe473836463bfff1ba913986247f84b1d75282b621d9840d90df21e423f7a4e719e34cce06bb1629084e11f15b31b5334ae5dc84e31b4a91b197ee56c4c739159b18d652543e46adf4f9bdebf16e0c6ce216ef1013a60c1057aee255d8fe337455429bc1f63864a4c9d8f4f923b039928878f6773c4e1a464c4f4807cc67ac9fb464aad264e47f42c8c22d7c2b87ae39214b1e52c7567ba084fa31e509feaa1e37e558ab2473700dd0d610d12df8527823a076b2629be256322bb605347b552753f2cd3720a22e5c34404bff69c76f68554ac621f9e764d02bfa50a11e1b2cb921955f273f35a276f6840881901c0dd102765e4226c7aafa35bc14be1317a8d49b79be79a298eb99b421c0b66fcc1cfb38bb83d6a19bc78182a95440e6fff029d5a78e3be3b3e22902014ed0a65c34dfd546f8fd3b7b83e87f3f63e2ca90b05ffe53ebdd05bebf33d59d848bb620cbced0f00acd6c61f46080cd8412e710353641c829d27d8bceb8857be1fab84b9c6d9af7908cd244ffebbb25d97ac64136b00ac8217b3f6a38e4e576bfe5ae656fbeef1c45bca0ce57e72f2610f60340c71e1255d1f1711c3f234da1cb5759c43b83623adb75140de734503706d419998a69f9428b2db6ad0c0ba7244dfa26c8a1bd733c0eeb166bb826e90f2d2796f149d34702aa23b6214b1270b6d4a49591b1c4ee1e09f7e093a2890b89e162af3b6cc8eb3cf805ef29e99a8aa9f42033c4228882428ec7c90be62302c11411c1f7b060e772af2eb11fd9552bf12f03c13251b86517f554aa054bab28f2bfc6a9da592650a208d13313b64916197a56baf71e4f1416007b7673481fd3d483f9f1796dba16092640f96c53bf01ba53b8826bc20c98d47e5bbbf1996f87a76005f26d22a640d7b5a747e87e0839cd2724bc8b747195d75d14968a0bfa8cd3cd74bce77b0ad7c56e99eae76c4cd0ed1212641fada9250175e5977d2c86c2200794458d4880d60e0cd1bd88a2b10d45202a84533c02d2efc9c76bd0e3485aef2c1a51c36856122e0e73df85ae70e9168b48bf453a7b1e5565618a31c1d00ca2abde934faff9aa46c93e6b6091835f2c5b0f6af1b3906951ef5a91d1801bc630af28ab98fb868b4f79bf69f7582a634ec08dd9216005bbada4a91625eff54f8c923d2efdfb734db43f249a4c8c423f31844fe2a7bb6b9cbee43fa8de0dec053ad78d6e53dbb9c8d28fa314620cfc31a49af3b60e74a665a9dfd7ecc0fde668560b4aa88285a7a41710520f9e2a9b70d6881652273cf7fd49d4f112cbd0ed479dbfe1b56ceb72d581b452c345bde198016f83a578a65bfae282dafbef57fd1a64fff9329955ef615ed3e3716635a202b42acfdfe1ead388768adf16ad645de6e6cff66bcb0336db046b0931a4b5d8cf0ad4da7fc182576257dabf32277cdda70a1c9e8976535cd0f056d67db9551f71c809f5a2ced3022485cbed3c5294e1ca55f074a8f55bbce2f48fa607aded2730042ac5f14d466eb28a2a901b121e41299076677f22f4a71855d15aca513860bc142127cee0b2e99147bc1fc84cc587cc10a4337b5f60969894b4c35982689885f95b1b5190ec6dfc579a58aefa851fcd45c65cfb667f5c1914c890e7b61619d78769cc7cfa4afabf996bba574b49439e20ad21e0bb4d8d99f62b0814c904e706b1f46ae8d3bc0f88e60d2ac60b6591b62bfb50fd0332cc5511338c375f9e59a76e2d826504a5eec3efaa9fe50ac5cd5962ca1d2d02883bbb4e1dc2c794b5ae2b0e1b7c81e04ca90e2818f1833d9f42bc8c8f81b1facc6a1cd0e1b596ae745dbab92c70ae272f885e46e5ee53aa40273f796c4f82eb5fa91031577965df139236fa8084d7d4f83e9caccbfb76eaf638166c2e8c9969a3688cc10dfa25c9930757b4e935acb9ae130c8dc75b8c9c21450357f2c4776eda5d205a76278069d024b427101f253effd9f887ff5694e99e2ec92521f6b44d1767ad760704400714f85e8dc39f7e5b7c2b09bdbdeec6d7bb559669b488ba787d88aefece0606e38d788522608fc99c16ea3c8e25c3d622b51a11ee3f62ceb49d84d21899118cd3079736411fb16f71a9986634e9104d253606afa2a8d604fabc5a05d431aa2e0fa63693d1892c345a0a7575903f308ea881fd4beaefd0e96d53123ac28aec47411f27442c0024fa6846c75cafbbed94fe9b8eb2bab26f19f41690d7322a5754895c42db6a393c217dcee81f9b107e16da3cfa88f6e0ec4fdb0bd342f7a5fd903cc3b532eb469e5e2bb105b05780302192973a01644372bc00067f1353544514e1aba31d0d5d95934a710ed2ec47b27a155b9a8aa4abb90480ebe2de782df6f47200de32f3eb1343faabd9f1d80622265e484e88d4e542c273029480db1888300f387779c79183697d520ed06b1e8642dc7b59892955dbef3a32af7ee1518f464ebb3b037cf990f3ab2289dc6c61481c11e2d4ecfc9e0b17decdc2bd3ed5d0d6534f0d8e097f25d05fe57bf3718e98f57753345730f369d781d7a47b909853f9938f98af4055c8a4a56cec0837ed50f7acd2d5534f8d0d282d24abd8802be33d334842ece03d1763bfe2da7071c21f622a56b5b5a577564eb9a98a263d5dd802dc8867f8947372dc9c7419fb5be9393b3f7f8031b26d08992a85cde6a21d16ee95e051f33de4f199db8864c5f941b7ff5508eb1c795ce070e2f381403a55ad818db782850b39738dfcbf888f9a6394e1eaba174a5180847ce75338ab0fd23bebb965aff3620a920c60961f124836a52461444bdf6c8c08f243ca826956829ee012f12f80a9487b1aef042b277e47f668d47d84502573adde1b12cfffd370b14f210a4162b09c1c669409c7706b1d9cb891b8e5774292399e4dd8946ab177957c82efd856b7c0cd05ee6c042291547e76beada186eea3148d322a3ef491497a240f34091662f0ec7ed1c59ad0c19069187339e7f585b642122009e8bea22bf01f0850ea873ec1abb0493f2f1a556dec7094c9c442e8655cd02faeaedc7648207a5a66b3ac41e76760dfe1e26d928fa2158a14a30ca59cfee5b07c5f96f05096414ba7e44555b58e5e4fcb132c50a87c77ce88308975f7895e99cff270359803d1b59fed0280ffdea03dfd13802b3003ce82f3771446d4b69212efa962668d4b86d00461592cf21f537352ad6ea1090cb43bad7bd43c524d0c06c1e29345653c7879a2b0784b48b7a889f514a80605970f977f831647f36e8f79288aa298f35dabe10922ad18c60ba6f05cb8ff8947ba61e7dc6901ac93aff7489deaf58410aacd21e9b12e808fa6cfafcbf6ab65d9559c16e42105b46e08cb4c9472d9b6a276cc6780b7f164bb8692079bfd5a4d3b2167624cb81b8aa8993d87edaacfa2b96770003d791498b11a023d1ba6e6c9d74fdd4d2fba03295f0f94957bca629985cce55dcd019349cd00aed89afcd1690fc2b097f16d89bcbbf44807c9f1407a28bb48f02680c4fce8c415d2b3cb5e697ec3334135d1af6f89890935fbd3b59d422e99bed4e6a4f9387e922a77b5a2b41e8ca08fcb20eab61d7302470492d7c44e9a8a6bce32770dbfe049cb8f517d06ea57272290fd0208cfc59f0bb290148a31e150753762e520da0fdf25883ad2d93e27bef03cd88f2921c84f7172b61f821837cd63076d124a27be9f0b63b5694d8a797f3ab639d6923e5dc1d27fbbda1c171886966846d191c0d49cc50414ede7535b08754cf80a83ae49d47a9bf6bec1d2b7a4574a937fec57be87a99c103c242120161db1b467c7ad4e5c2c7c00482043fb5f1146461cf415dde15a305c9bf3029e302f45b297499bdf20b8b1499f0d591ecb117288ac5b686c3d7726d456ae66a94012c469793a59b8f3c4819041a699e92daa04d22386d6fa68eb186966454f57a8be61e19c41e82e3f0e8a1ea5f34a6fc85874008690346bb2dd5a20e38040c65912ac47b87e870e8a19be0f87050abc0cc71f937e01d77ff38c2f42cb548e006443ec4bb9c9d77c12beceea916014b4f7c35196058148753ba22ee167288edc737aeeeb99648723c550fe070ace79f2e321eb2e852f59d6d7b6e727c1dfa326bff6298e9ed4f0504db55fa6bde144ff3c01a7ea10d08f454a21339b80068c449f80c04c30139c4ef7158491a45cceee51ffded034e76e6cfe181317661185d01233325bfa8afcd11a85dd0a133e69cef5b0e7371742d", 0x2000, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x1) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x200000000000007}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[], 0x6f4}}, 0x8001) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x20}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @local, 0x4}}, 0x24) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002f00090025bd7000000000000400000008000c0002000008"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) socket(0x10, 0x2, 0x0) 3m48.946960892s ago: executing program 9 (id=1733): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a310000000009000100"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x7, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827aa7000fbeedf250400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990004000000080000000500d2000e0000000500d2000e0000000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ustat(0x90000000000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_default\x00') connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4a21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20000002}, 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4b, 0x1800005, 0x81, 0x7fffffff, 0xfff8, 0x0, 0x10000, 0x0, 0x4bfb, 0x4, 0x200000000042, 0x20000000000004, 0x3, 0x5, 0x9, 0x100000090], 0x0, 0x10ae95}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000002c0)=""/232, &(0x7f00000003c0)=0xe8) ptrace(0x10, r6) 3m45.415437703s ago: executing program 9 (id=1744): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) flock(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x10000, 0x3, 0x4, 0x2000800001a0, 0x6], 0x0, 0x0, 0x0}, 0x78) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 3m29.868163967s ago: executing program 38 (id=1744): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) flock(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x10000, 0x3, 0x4, 0x2000800001a0, 0x6], 0x0, 0x0, 0x0}, 0x78) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 12.028312434s ago: executing program 3 (id=2686): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000780)=[{0x4010, 0x0, 0x0, 0x0}, {0x9, 0x200, 0x0, 0x0}], 0x2}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x8}, {0x7}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000140)=0xe) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0xfffffffe, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001415020008001b00000000001c001a8018000a80140009"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7, @ANYRESHEX=r8], 0x15) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') r9 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r9, &(0x7f0000000100)=""/253, 0xfd, 0x1) read$FUSE(r9, &(0x7f0000001ac0)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x2}) 9.8279668s ago: executing program 3 (id=2695): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x189) open_tree(r0, 0x0, 0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x200) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff0500050002000000050001"], 0x60}}, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902"], 0x0) shutdown(r1, 0x1) 6.064436631s ago: executing program 3 (id=2712): r0 = msgget$private(0x0, 0x5) msgctl$IPC_SET(r0, 0x1, &(0x7f0000005c80)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x8}, 0x0, 0x0, 0x6, 0x9, 0xffffffffffff7ffe, 0x200000000000, 0x6, 0xd, 0xe6f}) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="397f04000000677afef2"], 0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x8800) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffff) fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='com.apple.system.Security\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x15, 0x7, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x69, 0x0, 0x3}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 5.682562349s ago: executing program 5 (id=2714): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x129081, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x145}], 0x1}, 0xff00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000180)={0x8, 0x1}) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) 5.556787716s ago: executing program 6 (id=2715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fanotify_init(0x200, 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x15aaffd3b9686782, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xc2a00, 0x0) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, 0x2010, r2, 0xd8578000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f00000024c0), 0x0, 0x48200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000280)={0x0, 0xa883, 0x8759e7e628373aa}) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x3c9, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x75, 0xcb, 0xf2, 0x20, 0xc52, 0x2442, 0x1453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b7, 0x1, 0x20, 0x0, 0x80, 0xf, "", [{{0x9, 0x4, 0x46, 0x5, 0xf, 0xf9, 0x58, 0x6e, 0x8, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x7, 0x3, 0x3, 0x8}]}, @generic={0xda, 0x30, "b61f96fa3dfc42e7296e886a2ac0f3acdf57569584e83560833c3e8621be0a102dc86a53bd276a5545820c105180ff983c5b5ed4f245db9fc0b1f579b9cd045d1633bf8866eae18254b12c9a5888c6b475944355e65694c8f2276b2c10f53903bc59478f8addb3490696bc2081cd47f5d35ea35ac8863027a71ace5068cc69c2f4b27abb0f2554129d90f2d80c68cf0cb896ca57d8cd7ae387e38a12743ebfeb65299bb0b4ad4062f58e09bda162afa308e08d2b9a86a16d178f69e7b2117aaa65e1095be4be49152ba962d67b52cfb0f47c8e6aa435a533"}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x3b, 0x4, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5e, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x71, 0x81, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x7}, @generic={0x63, 0x6, "6add031b62669e991c95a805ab123e569b6d71fe94645a66420e418751756949d3c50618b01c68d374febe8bdf075426345061ea1386562ea4c4c3e157ac140b44985ee8b9e97d08116f4b643e5cfc686f0f3527a91b3dbcdde7eaf63612a2665b"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0xc, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf8, 0x8}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0xf, 0x6, 0x6, [@generic={0x23, 0x22, "8c88c893553fc25825e4bd40acce0facdfcb3ea68a881a2a335c468706bbdc4451"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x4, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0xc0, 0xe, 0x73}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x5, 0x3f, [@generic={0xf, 0x21, "1fdf501a9baa8daf70d0b35021"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xf, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7f, 0xc3, 0x4, [@generic={0xe4, 0x5, "771389d784ce4794bcfe9ebfa05b5aa84ac02d4d79c49c354399af402262b567ba49070ac6fcaef891dc9ee3f56e3be560da915348725735a07f329c9d65a4289643fec33bb5666a94a5344090973c3990b8785c9764dccb745850ce70a4e22c42c582b811fb550e0967ff2cbfce5b546b9add1cabd33fe07046076553646a2e70a03692b6b1c055747e54576229e5d6a3c48d757bbe8c9a3ef209d612c291a98f45b613ae5a95df452c7ac9381605d496e11193f2848ece0ccca3061e0c69a73d7938652440fec764768a3667c93a262ae8ab7a39006fd7fd8513be1235f9d30b29"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xb, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x2}, @generic={0x91, 0x4, "673395002bb4c6e49317d21d9a66c9cdc46a5641fc537c55233daa7b3bc55a6185d64a248f66453c856660da52477bd64d105b3f83ec7e19eebe2566f8f967589c23a7f8f61338a451140cce3dc7c1abe3abb8deebe386519ca13953ab2d4a1c609d65b94ca4ea04ea10e841604340c067a85e8065971b12e8d364921233a0b00e1e48ab6601604501a91015b9cbd7"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x4f, 0x2e, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x12, 0x4, 0x7f}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xc, 0x3, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x10, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0xa, 0x4, 0x6, 0xff, 0x3}, 0x2d, &(0x7f0000000800)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xac, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "63f16f66778887eef85c7055132f7c36"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xf, 0x7, 0x60}]}, 0x3, [{0x5f, &(0x7f0000000840)=@string={0x5f, 0x3, "3908bba8769e7349d3af16fba6958692404d4e49844fed555a166a0a80aa9573e776d8a81d9ccf2c9eefceaf24b62d18dec16bd41c65fcea7f7b13558741853f9afb4f16c004027bbfe2b3c693d27a1f48570e65b003bf43ba206ee9f0"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x406}}, {0x80, &(0x7f0000000900)=@string={0x80, 0x3, "6c2467cd5d3d566881421c64c0b4c2b0a487e30f35b78851e455dd62f306fb3a7b5b9af2374a05153028551c5d766c3258de1e511a9d862a162082fedbbd66f544ac99b3129c78512af99549ca6e5a9bbf575be97d1287fb74bc1526096b70adbb517dbea09f41a8c815d36b9f7424c6211da45296a5ee350f0acd41564c"}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x44040) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000a80)={0xbc, 0x0, 0x1}) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000140)=""/210) 5.400623348s ago: executing program 0 (id=2717): request_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0) 5.327239421s ago: executing program 0 (id=2718): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="18010000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.258330327s ago: executing program 0 (id=2719): r0 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 5.136289189s ago: executing program 0 (id=2720): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2001}, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) (async) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) (async) ioctl$FIBMAP(r4, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r4, 0x4420}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000000c0)={0xfffffffffffffbf7, 0x1000000001, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x3, 0xf9}) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "fd"}, @main=@item_012={0x2, 0x0, 0xb, '\x004'}]}}, 0x0}, 0x0) 4.310090421s ago: executing program 6 (id=2721): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4000000) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) syz_usb_connect(0x2, 0x38, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) 3.615689482s ago: executing program 5 (id=2722): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) close_range(r2, 0xffffffffffffffff, 0x0) 2.983452217s ago: executing program 5 (id=2724): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x20008045}, 0x0) 2.878964858s ago: executing program 5 (id=2725): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {0x0}, {&(0x7f0000002a00)=""/15, 0xf}], 0x3}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}, {{0x0, 0x0, 0x0}, 0x40}], 0x3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) (fail_nth: 13) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/162, 0x0, 0xf000}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r3}) 2.643737755s ago: executing program 5 (id=2728): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b00010324bd7002fadbdf2507"], 0x14}}, 0xc048) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x204c01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYBLOB="01000003000000000000200000000c00060001000000000000001c002d80050001"], 0x3c}}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045009, &(0x7f0000000040)) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000003e40f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(r5, r6, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r9], 0x24}}, 0x4000000) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x2e02, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r11, 0x2219, 0x7721, 0x33, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xd8, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x1, 0x8, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "9e3593280208"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x7, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0x219}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mdlm_detail={0x62, 0x24, 0x13, 0xc1, "5256356941c507718b5775403499cf7b1d53d376d3837c3e415a5cb3935cfbbeea18e9e6e843cf7f6cf9e0fc407d6c4a8f07f805e4d157dcbb89d90da59fe9e60713f992c871f4005debd22d9eb33b3d811b9eb293c7675c2ec1b2137d06"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x54, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd7, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x5, 0xa8, 0x3, 0xe18d7852fc594427, 0x6}, 0x37, &(0x7f0000000580)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "1ccee42bda007346ec429ceabd0f4982"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x63, 0xfc, 0x9, 0x8, 0x2}, @generic={0x13, 0x10, 0x3, "a69c8cc4dc0dc9acbeb41acce205731a"}]}, 0x4, [{0x9c, &(0x7f00000005c0)=@string={0x9c, 0x3, "d566b40ec93daca40ad527aacc34d2de5934eb5ab4358231bd1196bae61155bd150a953ada81a5979645c6fd3ae8caab7838a9389105211c0818cab1ae39c92d518588e8eabc575f965d3d9cba5c2b00d08bdf24632288af7338ea89c4d40cedc3875fca3e9df10cf4523c5f145bf1cc56ed1c571b696c91390db8b29cb448615689bc0787217bd5b8d0c6af4cf9eb021e6aaa126727058aac8c"}}, {0xc2, &(0x7f00000007c0)=ANY=[@ANYBLOB="c2036f5d4680ecf8071bc9addbfe1bde8f494902fb98e40f0bdedec847a3127d7add828be9f18201d368b206ae1f2df855856292ef2c0347d0bbc01de6e63d7b726280b741e903984aaef4f7af94028499392d437097a24b5143f3bb2ebdc6c79b504e354946866220e5f84e17d685c4e8847c67c3fb8d95239e5daee215120700000000000000679a3f4c744c1e15316a4a9537a9acfb1c64b3370f92193e18343a51885ca2255e2d92dffff8186c6f2128b6d7dd00000000000000000000010000"]}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3001}}]}) 2.548483075s ago: executing program 4 (id=2729): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="18010000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.54006343s ago: executing program 6 (id=2730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x78}}, 0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x3d, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x7, 0x8, {{0x16, 0x4, 0x2, 0x29, 0x58, 0x64, 0x0, 0xf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x49, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @private=0xa010100, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x5, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @rand_addr=0x64010101, @broadcast]}, @end, @ssrr={0x89, 0x7, 0x12, [@dev={0xac, 0x14, 0x14, 0x28}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x5, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7800, 0x7800, 0xa, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x710, 0x8000, 0x3, 0x3, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x3e, 0x0, [{0x2, 0x8, "32e9d92cfdf0"}, {0x5, 0x11, "363dc247c5eb803da1da50768263eb"}, {0x5, 0x2}, {0x0, 0xf, "ff6540187ffd9227f3d448b015"}, {0x7, 0x7, "19b77b7f33"}, {0x6, 0x7, "59cb90367f"}]}, @rr={0x7, 0x1b, 0xb2, [@multicast2, @rand_addr=0x64010101, @local, @private=0xa010101, @empty, @private=0xa010102]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)={0x0, @multicast1, @broadcast}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000900)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x8, 0x6, {{0x16, 0x4, 0x3, 0x22, 0x58, 0x68, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "66e4bf4dba8b53"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x21, [@private=0xa010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @rand_addr=0x64010102, @private=0xa010101, @loopback, @private=0xa010101, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a00)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a40)={@private1, 0x0}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x4, 0x5, {{0x35, 0x4, 0x3, 0x8, 0xd4, 0x67, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, {[@lsrr={0x83, 0x1b, 0x89, [@dev={0xac, 0x14, 0x14, 0x42}, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010100, @private=0xa010102]}, @end, @generic={0x82, 0x4, "d5a2"}, @timestamp_addr={0x44, 0x2c, 0x65, 0x1, 0x7, [{@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @lsrr={0x83, 0x27, 0x9d, [@dev={0xac, 0x14, 0x14, 0xd}, @empty, @empty, @multicast1, @multicast2, @loopback, @loopback, @private=0xa010102, @remote]}, @rr={0x7, 0x23, 0x3c, [@empty, @multicast1, @remote, @broadcast, @local, @remote, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xb, 0x3, 0xe, [{@multicast2, 0xa}, {@rand_addr=0x64010102, 0x22}, {@local, 0x5}, {@multicast1, 0xffff}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x1b8, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x12, 0x1, 0x301, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.40617372s ago: executing program 4 (id=2731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="400000001e005f03149033fb265c925872da5c49a7b59b00ff01000000f80700b3586ff6dc63441b7870322ba7932851f61133ed82dc348b364a7c2d8f7c9f078f60de2881b49197c55566fc27115571d54041ee83361e977754c27866a86a411cbf9e94ac44c541d44e6c7cf1eda8284173ca214542a0646ba379283ba78eea62d0c817fc3aed42864d682461ec8b92fff867f3447b3df7b96bde3f78c8c3024ab9a030b5f6a91421d091aa", 0xac) 2.308880996s ago: executing program 6 (id=2732): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x129081, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x145}], 0x1}, 0xff00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000180)={0x8, 0x1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) 2.308045078s ago: executing program 3 (id=2733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000100)}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @local, 0x10001}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x9, @remote, 0x1}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e22, @multicast2}], 0x9c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x5b) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={r4, &(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x70100, &(0x7f0000000440)={@_ha_fsid={[0x4, 0xa]}, {0xfffb, 0x4bd0, 0xba, 0x2}}, 0xd0, &(0x7f0000000480), &(0x7f0000000500)=0x8}) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) tkill(r9, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) 2.050642229s ago: executing program 6 (id=2734): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) close_range(r2, 0xffffffffffffffff, 0x0) 1.590786259s ago: executing program 0 (id=2735): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x20008045}, 0x0) 1.249803873s ago: executing program 4 (id=2736): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4044011, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x0, 0x8, 0x0, @local}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x84) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24c2", 0x2}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) 1.070034664s ago: executing program 0 (id=2737): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x40400, 0x20) syz_fuse_handle_req(r0, &(0x7f00000001c0)="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", 0x2000, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000002200)={0x14, &(0x7f00000000c0)={0x40, 0x8, 0xd0, {0xd0, 0xb, "ec66dce92e9a1a0a9650bf77c46cfc7c2e0ddb82696d770165b4bd2bc2b2d42dc665f57fb477c809d7fc3f32f8d03db2813d564bdb178d02acd1652f6d7a8a462bcf3bddc38342c6c5200b5c23bad7024d533673d4197397f345d07c3d9d4843a4e02778147159d135be1093818f6103ed12748ae18d51d7ec06a20c5593df9ae82b62a012643d71feed9183d72a3e41fda6d5e981816709a1d3a3a750ee574f362d650d2b2e55240239b5e5acba14bb708f89fa802d3ec95204432649ab58276bc716f04bc3f674e957bb6dbaf8"}}, &(0x7f00000021c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}}, &(0x7f00000023c0)={0x34, &(0x7f0000002240)={0x20, 0xe, 0x6, "2f2b99414446"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000002300)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000002340)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000002380)={0xc0, 0xa2, 0x2f, "1d2a42f3ecc2c1e0f9108df751b8d16d9d86ad3512328af9d21e3e289f2c21f2afbdc717cb6db0bbd6bae2230e7398"}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020) 991.899257ms ago: executing program 6 (id=2738): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) (async) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="201301d2a044d1529c8f0e3352855101f5b000000000274e46323d1d2cd7691fe73bffae0ee5b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mq_notify(r3, &(0x7f0000000100)={0x0, 0x3f, 0x1}) (async) mq_notify(r3, &(0x7f0000000240)={0x0, 0x10002c, 0x1, @thr={0x0, 0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r1, r1, 0x0, 0x200000000000000) 991.428374ms ago: executing program 3 (id=2739): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000ffff27"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 796.012084ms ago: executing program 4 (id=2740): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x42701, 0x1bf) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'team0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000500)='./mnt\x00', 0x2000, 0x1) (fail_nth: 13) 752.364595ms ago: executing program 5 (id=2741): syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) tkill(0x0, 0x2a) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0) 369.398073ms ago: executing program 4 (id=2742): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) connect$llc(r2, 0x0, 0x0) syz_emit_vhci(0x0, 0x11) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000000000000000000000000000061198c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 119.780029ms ago: executing program 4 (id=2743): r0 = msgget$private(0x0, 0x5) msgctl$IPC_SET(r0, 0x1, &(0x7f0000005c80)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x8}, 0x0, 0x0, 0x6, 0x9, 0xffffffffffff7ffe, 0x200000000000, 0x6, 0xd, 0xe6f}) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="397f04000000677afef2"], 0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x8800) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffff) fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='com.apple.system.Security\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x15, 0x7, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x69, 0x0, 0x3}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 0s ago: executing program 3 (id=2744): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) dup2(r1, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r2, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10, 0x42}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x42b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39f}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00') socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='tcp 20', 0x6) kernel console output (not intermixed with test programs): 34][T15889] RAX: ffffffffffffffda RBX: 00007f5506825fa0 RCX: 00007f550659e159 [ 730.563846][T15889] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 730.563858][T15889] RBP: 00007f5506635024 R08: 0000000000000000 R09: 0000000000000000 [ 730.563868][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.563880][T15889] R13: 00007f5506826038 R14: 00007f5506825fa0 R15: 00007ffdad9d7d78 [ 730.563903][T15889] [ 730.563912][T15889] socket: no more sockets [ 730.658268][ T984] usbhid 4-1:0.0: can't add hid device: -71 [ 730.658352][ T984] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 730.802773][ T984] usb 4-1: USB disconnect, device number 35 [ 730.869798][T11857] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 731.053810][T15898] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2397'. [ 731.104932][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 731.480313][ T9] usb 6-1: reset high-speed USB device number 87 using dummy_hcd [ 731.508272][ T9] usb 6-1: device reset changed ep0 maxpacket size! [ 731.533263][ T9] usb 6-1: USB disconnect, device number 87 [ 731.655125][ T984] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 731.790528][T15907] netlink: Conntrack attr has 8 unknown bytes [ 731.790569][T15907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.845455][ T984] usb 4-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 731.857246][ T984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.869336][ T984] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.884785][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.892942][ T984] usb 4-1: Product: syz [ 731.897219][ T984] usb 4-1: Manufacturer: syz [ 731.897238][ T984] usb 4-1: SerialNumber: syz [ 731.916520][ T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 731.948954][ T31] kauditd_printk_skb: 87 callbacks suppressed [ 731.948988][ T31] audit: type=1400 audit(1788161478.113:3449): avc: denied { watch } for pid=15909 comm="syz.0.2402" path="/117/net_prio.prioidx" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 731.949025][ T31] audit: type=1400 audit(1788161478.113:3450): avc: denied { watch_sb watch_reads } for pid=15909 comm="syz.0.2402" path="/117/net_prio.prioidx" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 732.104897][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 732.112936][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 732.112995][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=1111, bcdDevice=dd.87 [ 732.113025][ T9] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 732.114573][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 732.114600][ T9] usb 6-1: can't read configurations, error -61 [ 732.145256][ T10] usb 7-1: new full-speed USB device number 99 using dummy_hcd [ 732.245296][ T9] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 732.304202][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 732.304238][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice= 0.40 [ 732.305131][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 4 [ 732.307944][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.307965][ T10] usb 7-1: Product: syz [ 732.307977][ T10] usb 7-1: Manufacturer: syz [ 732.307991][ T10] usb 7-1: SerialNumber: syz [ 732.405009][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 732.412793][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 732.412885][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=1111, bcdDevice=dd.87 [ 732.412914][ T9] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 732.414669][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 732.414695][ T9] usb 6-1: can't read configurations, error -61 [ 732.415011][ T9] usb usb6-port1: attempt power cycle [ 732.506127][T15906] FAULT_INJECTION: forcing a failure. [ 732.506127][T15906] name failslab, interval 1, probability 0, space 0, times 0 [ 732.506175][T15906] CPU: 1 UID: 0 PID: 15906 Comm: syz.3.2401 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.506203][T15906] Tainted: [L]=SOFTLOCKUP [ 732.506210][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 732.506221][T15906] Call Trace: [ 732.506227][T15906] [ 732.506235][T15906] dump_stack_lvl+0x100/0x190 [ 732.506266][T15906] should_fail_ex.cold+0x5/0xa [ 732.506293][T15906] should_failslab+0xc2/0x120 [ 732.506314][T15906] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 732.506337][T15906] ? kstrdup_const+0x63/0x80 [ 732.506368][T15906] kstrdup+0x51/0xe0 [ 732.506395][T15906] kstrdup_const+0x63/0x80 [ 732.506421][T15906] __kernfs_new_node+0x9b/0xa10 [ 732.506447][T15906] ? check_prev_add+0xfe/0xe60 [ 732.506468][T15906] ? __pfx___kernfs_new_node+0x10/0x10 [ 732.506493][T15906] ? lock_acquire+0x1d1/0x380 [ 732.506511][T15906] ? kernfs_root+0x23/0x2a0 [ 732.506532][T15906] ? find_held_lock+0x2b/0x80 [ 732.506553][T15906] ? kernfs_root+0xee/0x2a0 [ 732.506573][T15906] ? kernfs_root+0xee/0x2a0 [ 732.506599][T15906] kernfs_new_node+0x117/0x150 [ 732.506627][T15906] kernfs_create_link+0xcc/0x240 [ 732.506647][T15906] sysfs_do_create_link_sd+0x90/0x140 [ 732.506671][T15906] sysfs_create_link+0x61/0xc0 [ 732.506692][T15906] driver_sysfs_add+0x91/0x2d0 [ 732.506718][T15906] really_probe+0x146/0xa60 [ 732.506740][T15906] __driver_probe_device+0x210/0x460 [ 732.506757][T15906] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 732.506778][T15906] driver_probe_device+0x4a/0x140 [ 732.506805][T15906] __driver_attach+0x21f/0x5b0 [ 732.506822][T15906] ? __pfx___driver_attach+0x10/0x10 [ 732.506838][T15906] bus_for_each_dev+0x13e/0x1d0 [ 732.506860][T15906] ? __pfx_bus_for_each_dev+0x10/0x10 [ 732.506877][T15906] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 732.506894][T15906] ? usb_store_new_id+0x138/0x710 [ 732.506910][T15906] usb_store_new_id+0x56a/0x710 [ 732.506925][T15906] ? __pfx_usb_store_new_id+0x10/0x10 [ 732.506946][T15906] ? lock_acquire+0x1d1/0x380 [ 732.506963][T15906] ? sysfs_file_kobj+0x21/0x290 [ 732.506981][T15906] ? find_held_lock+0x2b/0x80 [ 732.507003][T15906] ? sysfs_file_kobj+0xe4/0x290 [ 732.507018][T15906] ? sysfs_file_kobj+0xe4/0x290 [ 732.507030][T15906] ? __pfx_new_id_store+0x10/0x10 [ 732.507048][T15906] drv_attr_store+0x74/0xb0 [ 732.507063][T15906] ? __pfx_drv_attr_store+0x10/0x10 [ 732.507077][T15906] sysfs_kf_write+0xf2/0x150 [ 732.507098][T15906] kernfs_fop_write_iter+0x3e0/0x5f0 [ 732.507124][T15906] ? __pfx_sysfs_kf_write+0x10/0x10 [ 732.507145][T15906] vfs_write+0x6af/0x1050 [ 732.507168][T15906] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 732.507188][T15906] ? __pfx_vfs_write+0x10/0x10 [ 732.507204][T15906] ? find_held_lock+0x2b/0x80 [ 732.507236][T15906] ksys_write+0x12a/0x250 [ 732.507252][T15906] ? __pfx_ksys_write+0x10/0x10 [ 732.507275][T15906] do_syscall_64+0x123/0x790 [ 732.507297][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.507310][T15906] RIP: 0033:0x7fa5b579e159 [ 732.507321][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.507335][T15906] RSP: 002b:00007fa5b668b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.507354][T15906] RAX: ffffffffffffffda RBX: 00007fa5b5a26180 RCX: 00007fa5b579e159 [ 732.507366][T15906] RDX: 0000000000000009 RSI: 0000200000000800 RDI: 0000000000000008 [ 732.507377][T15906] RBP: 00007fa5b668b090 R08: 0000000000000000 R09: 0000000000000000 [ 732.507387][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.507398][T15906] R13: 00007fa5b5a26218 R14: 00007fa5b5a26180 R15: 00007ffe4ec324e8 [ 732.507422][T15906] [ 732.507760][T15906] ushc 4-1:1.0: really_probe: driver_sysfs_add failed [ 732.524915][ T5700] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 732.557603][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.559098][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 732.573196][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.573510][ T10] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 732.598912][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.702911][ T5700] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 732.710415][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.710444][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.710462][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.710494][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.722507][ T5700] usb 5-1: config 0 descriptor?? [ 732.765856][ T9] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 732.788502][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 732.798998][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 732.799057][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=1111, bcdDevice=dd.87 [ 732.799085][ T9] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 732.816361][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 732.816408][ T9] usb 6-1: can't read configurations, error -61 [ 732.817284][ T10] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 732.830740][ T10] usb 7-1: USB disconnect, device number 99 [ 732.955712][ T9] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 732.960043][ T9714] udevd[9714]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.966589][ T31] audit: type=1400 audit(1788161479.123:3451): avc: denied { mount } for pid=15914 comm="syz.4.2404" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 732.978854][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 732.980971][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 732.981005][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=1111, bcdDevice=dd.87 [ 732.981033][ T9] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 732.987267][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 732.987295][ T9] usb 6-1: can't read configurations, error -61 [ 732.987625][ T9] usb usb6-port1: unable to enumerate USB device [ 733.013856][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.013884][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.013902][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.013919][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.013937][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.013954][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.013972][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.013989][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.014007][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.014024][ T5700] gt683r_led 0003:1770:FF00.0020: unknown main item tag 0x0 [ 733.034465][ T5700] gt683r_led 0003:1770:FF00.0020: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 733.076492][ T31] audit: type=1326 audit(1788161479.243:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15914 comm="syz.4.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe39cb9e159 code=0x0 [ 733.190243][ C1] net_ratelimit: 1 callbacks suppressed [ 733.190257][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 733.360905][ T31] audit: type=1400 audit(1788161479.523:3453): avc: denied { setattr } for pid=15922 comm="syz.0.2405" name="TIPC" dev="sockfs" ino=72183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.362743][ T31] audit: type=1400 audit(1788161479.523:3454): avc: denied { ioctl } for pid=15922 comm="syz.0.2405" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 734.225027][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 734.412431][ T5700] usb 4-1: USB disconnect, device number 36 [ 734.764482][ T5605] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 734.773565][ T6535] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 734.925822][ T6535] usb 6-1: Using ep0 maxpacket: 16 [ 734.936240][ T6535] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 734.948733][ T6535] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.960586][ T6535] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.960604][ T6535] usb 6-1: config 0 interface 0 has no altsetting 0 [ 734.960623][ T6535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.991352][ T6535] usb 6-1: config 0 descriptor?? [ 735.063131][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 735.148211][T15949] team0: Port device team_slave_0 removed [ 735.265040][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 735.333130][ T10] usb 5-1: USB disconnect, device number 122 [ 735.354293][ T31] audit: type=1400 audit(1788161481.513:3455): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 735.391799][ T5700] gt683r_led 0003:1770:FF00.0020: failed to send set report request: -19 [ 735.428976][ T6535] mcp2221 0003:04D8:00DD.0021: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 735.606278][ T31] audit: type=1400 audit(1788161481.753:3456): avc: denied { wake_alarm } for pid=15954 comm="syz.4.2415" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 735.607210][T15959] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 736.304963][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 736.522228][ T10] usb 6-1: USB disconnect, device number 92 [ 736.660305][ T31] audit: type=1400 audit(1788161482.823:3457): avc: denied { relabelfrom } for pid=15964 comm="syz.0.2418" name="NETLINK" dev="sockfs" ino=72860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 736.712123][T15967] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 736.712767][ T31] audit: type=1400 audit(1788161482.873:3458): avc: denied { relabelto } for pid=15964 comm="syz.0.2418" name="NETLINK" dev="sockfs" ino=72860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 737.341029][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 737.341066][ T31] audit: type=1400 audit(1788161483.503:3460): avc: denied { read } for pid=15983 comm="syz.5.2423" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 737.341743][ T31] audit: type=1400 audit(1788161483.503:3461): avc: denied { open } for pid=15983 comm="syz.5.2423" path="/493/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 737.348359][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 737.352866][ T31] audit: type=1400 audit(1788161483.523:3462): avc: denied { listen } for pid=15983 comm="syz.5.2423" lport=54660 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 737.403382][ T31] audit: type=1400 audit(1788161483.573:3463): avc: denied { accept } for pid=15983 comm="syz.5.2423" lport=54660 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 737.403751][ T31] audit: type=1400 audit(1788161483.573:3464): avc: denied { write } for pid=15983 comm="syz.5.2423" path="socket:[72897]" dev="sockfs" ino=72897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 737.404086][ T31] audit: type=1400 audit(1788161483.573:3465): avc: denied { setopt } for pid=15983 comm="syz.5.2423" lport=54660 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 737.670673][ T31] audit: type=1400 audit(1788161483.833:3466): avc: denied { write } for pid=15979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.781460][ T31] audit: type=1400 audit(1788161483.943:3467): avc: denied { write } for pid=16004 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.871239][T11857] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 737.883238][T16011] FAULT_INJECTION: forcing a failure. [ 737.883238][T16011] name failslab, interval 1, probability 0, space 0, times 0 [ 737.896717][T16011] CPU: 1 UID: 0 PID: 16011 Comm: syz.6.2430 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.896747][T16011] Tainted: [L]=SOFTLOCKUP [ 737.896754][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 737.896765][T16011] Call Trace: [ 737.896771][T16011] [ 737.896779][T16011] dump_stack_lvl+0x100/0x190 [ 737.896809][T16011] should_fail_ex.cold+0x5/0xa [ 737.896835][T16011] should_failslab+0xc2/0x120 [ 737.896857][T16011] __kvmalloc_node_noprof+0x113/0x9b0 [ 737.896879][T16011] ? vmemdup_user+0x2a/0xe0 [ 737.896909][T16011] vmemdup_user+0x2a/0xe0 [ 737.896934][T16011] path_setxattrat+0x29e/0x3b0 [ 737.896959][T16011] ? __pfx_path_setxattrat+0x10/0x10 [ 737.896984][T16011] ? ksys_write+0x190/0x250 [ 737.897000][T16011] ? ksys_write+0x190/0x250 [ 737.897038][T16011] ? fput+0x7c/0x100 [ 737.897059][T16011] ? ksys_write+0x1ac/0x250 [ 737.897075][T16011] ? __pfx_ksys_write+0x10/0x10 [ 737.897094][T16011] __x64_sys_fsetxattr+0xc5/0x140 [ 737.897117][T16011] ? do_syscall_64+0xae/0x790 [ 737.897136][T16011] ? lockdep_hardirqs_on+0x7d/0x110 [ 737.897156][T16011] do_syscall_64+0x123/0x790 [ 737.897182][T16011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.897201][T16011] RIP: 0033:0x7fd4f3b9e159 [ 737.897216][T16011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.897233][T16011] RSP: 002b:00007fd4f4ad4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 737.897251][T16011] RAX: ffffffffffffffda RBX: 00007fd4f3e25fa0 RCX: 00007fd4f3b9e159 [ 737.897261][T16011] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 737.897271][T16011] RBP: 00007fd4f4ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 737.897281][T16011] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 737.897290][T16011] R13: 00007fd4f3e26038 R14: 00007fd4f3e25fa0 R15: 00007ffd090bbc78 [ 737.897311][T16011] [ 738.104886][ T984] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 738.256810][ T984] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 738.267481][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 738.267507][ T984] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 738.267535][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 738.267556][ T984] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 738.310689][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.318773][ T984] usb 1-1: Product: syz [ 738.318786][ T984] usb 1-1: Manufacturer: syz [ 738.318795][ T984] usb 1-1: SerialNumber: syz [ 738.336900][ T984] usb 1-1: config 0 descriptor?? [ 738.350224][ T984] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 738.384983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 738.405717][ T10] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 738.558336][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.558755][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.576654][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 738.579174][ T10] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 738.582241][ T10] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 738.585341][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.585363][ T10] usb 7-1: Product: syz [ 738.585376][ T10] usb 7-1: Manufacturer: syz [ 738.585388][ T10] usb 7-1: SerialNumber: syz [ 738.593818][ T10] usb 7-1: config 0 descriptor?? [ 738.601156][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 738.601190][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 738.647886][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 738.647901][ T984] scsi host1: usb-storage 1-1:0.0 [ 738.651608][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 738.651645][ T10] usb 7-1: media controller created [ 738.685071][ T984] usb 1-1: USB disconnect, device number 29 [ 738.751123][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 738.777408][ T10] usb 7-1: selecting invalid altsetting 7 [ 738.777448][ T10] cxusb: set interface failed [ 738.777472][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 738.852820][ T31] audit: type=1400 audit(1788161485.013:3468): avc: denied { relabelfrom } for pid=16036 comm="syz.3.2435" name="" dev="pipefs" ino=73086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 738.866062][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 738.866077][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 738.891889][ T9] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 738.967169][ T10] rc_core: IR keymap rc-dvico-portable not found [ 738.967985][ T10] Registered IR keymap rc-empty [ 738.968924][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 738.972884][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input71 [ 738.989622][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 738.989643][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 739.053654][ T31] audit: type=1400 audit(1788161485.213:3469): avc: denied { write } for pid=16023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.083185][ T9] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 739.093525][ T9] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 739.093560][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.093581][ T9] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 739.093604][ T9] usb 6-1: config 0 has no interface number 0 [ 739.093622][ T9] usb 6-1: config 0 has no interface number 1 [ 739.093679][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.106876][ T5700] dvb-usb: bulk message failed: -22 (1/0) [ 739.169681][ T9] usb 6-1: config 0 descriptor?? [ 739.180818][ T9] usb 6-1: unknown number of interfaces: 2 [ 739.214896][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 739.345598][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 739.401333][T16030] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 739.424946][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 739.454858][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 739.559551][ T6535] usb 6-1: USB disconnect, device number 93 [ 739.566386][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 739.676490][ T984] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 739.699245][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 739.814896][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 739.829076][ T984] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 739.829556][ T984] usb 4-1: config 0 has no interfaces? [ 739.829596][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.842636][ T984] usb 4-1: config 0 descriptor?? [ 739.925168][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 740.046688][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 740.086024][ T9] usb 4-1: USB disconnect, device number 37 [ 740.154976][ T5700] dvb-usb: bulk message failed: -22 (1/0) [ 740.265257][ T5700] dvb-usb: bulk message failed: -22 (1/0) [ 740.375871][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 740.464940][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 740.496916][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 740.605806][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 740.718135][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 740.825109][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 740.948667][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 741.055032][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 741.161408][ T984] usb 7-1: USB disconnect, device number 100 [ 741.192415][T11857] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 741.273867][ T984] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 741.447759][T16119] binder: 16118:16119 ioctl c0306201 200000000040 returned -22 [ 741.448093][T16119] binder: 16118:16119 ioctl c0306201 200000000640 returned -22 [ 741.494874][ T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 741.504935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 741.586950][T16123] netlink: 'syz.4.2450': attribute type 12 has an invalid length. [ 741.667844][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.677952][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 741.688309][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.688385][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.704710][T16128] FAULT_INJECTION: forcing a failure. [ 741.704710][T16128] name failslab, interval 1, probability 0, space 0, times 0 [ 741.704740][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.6.2451 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.704764][T16128] Tainted: [L]=SOFTLOCKUP [ 741.704770][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 741.704780][T16128] Call Trace: [ 741.704787][T16128] [ 741.704796][T16128] dump_stack_lvl+0x100/0x190 [ 741.704827][T16128] should_fail_ex.cold+0x5/0xa [ 741.704850][T16128] should_failslab+0xc2/0x120 [ 741.704870][T16128] kmem_cache_alloc_noprof+0x92/0x6a0 [ 741.704889][T16128] ? sk_prot_alloc+0x60/0x2a0 [ 741.704915][T16128] sk_prot_alloc+0x60/0x2a0 [ 741.704936][T16128] sk_alloc+0x36/0xe80 [ 741.704961][T16128] inet6_create+0x385/0x12b0 [ 741.704985][T16128] ? inet6_create+0x7f/0x12b0 [ 741.705008][T16128] __sock_create+0x339/0x860 [ 741.705034][T16128] __sys_socket+0x14d/0x260 [ 741.705056][T16128] ? __pfx___sys_socket+0x10/0x10 [ 741.705084][T16128] __x64_sys_socket+0x72/0xb0 [ 741.705105][T16128] ? lockdep_hardirqs_on+0x7d/0x110 [ 741.705124][T16128] do_syscall_64+0x123/0x790 [ 741.705145][T16128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.705163][T16128] RIP: 0033:0x7fd4f3b9e159 [ 741.705177][T16128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.705193][T16128] RSP: 002b:00007fd4f4ad4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 741.705211][T16128] RAX: ffffffffffffffda RBX: 00007fd4f3e25fa0 RCX: 00007fd4f3b9e159 [ 741.705222][T16128] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 741.705232][T16128] RBP: 00007fd4f3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 741.705244][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.705255][T16128] R13: 00007fd4f3e26038 R14: 00007fd4f3e25fa0 R15: 00007ffd090bbc78 [ 741.705280][T16128] [ 741.835876][ T9] usb 6-1: config 0 descriptor?? [ 741.925524][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 741.977274][ T984] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 742.125653][ T984] usb 7-1: Using ep0 maxpacket: 32 [ 742.135930][ T984] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 742.138487][ T984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.142121][ T984] usb 7-1: config 0 descriptor?? [ 742.151824][ T984] as10x_usb: device has been detected [ 742.152368][ T984] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 742.196588][ T984] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 742.279756][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 742.289869][T16115] FAULT_INJECTION: forcing a failure. [ 742.289869][T16115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.289925][T16115] CPU: 1 UID: 0 PID: 16115 Comm: syz.5.2447 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.289950][T16115] Tainted: [L]=SOFTLOCKUP [ 742.289956][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 742.289964][T16115] Call Trace: [ 742.289970][T16115] [ 742.289977][T16115] dump_stack_lvl+0x100/0x190 [ 742.290006][T16115] should_fail_ex.cold+0x5/0xa [ 742.290031][T16115] _copy_from_user+0x2e/0xd0 [ 742.290055][T16115] copy_msghdr_from_user+0x9f/0x4c0 [ 742.290079][T16115] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 742.290104][T16115] ? lock_acquire+0x1d1/0x380 [ 742.290121][T16115] ? get_pid_task+0x2a/0x250 [ 742.290144][T16115] ___sys_sendmsg+0x106/0x1e0 [ 742.290166][T16115] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.290186][T16115] ? get_pid_task+0x106/0x250 [ 742.290215][T16115] ? find_held_lock+0x2b/0x80 [ 742.290250][T16115] __sys_sendmsg+0x160/0x210 [ 742.290266][T16115] ? __pfx___sys_sendmsg+0x10/0x10 [ 742.290293][T16115] do_syscall_64+0x123/0x790 [ 742.290314][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.290331][T16115] RIP: 0033:0x7f414779e159 [ 742.290345][T16115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.290360][T16115] RSP: 002b:00007f41486a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.290378][T16115] RAX: ffffffffffffffda RBX: 00007f4147a25fa0 RCX: 00007f414779e159 [ 742.290388][T16115] RDX: 00000000000080e0 RSI: 0000200000000100 RDI: 0000000000000004 [ 742.290399][T16115] RBP: 00007f41486a7090 R08: 0000000000000000 R09: 0000000000000000 [ 742.290408][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.290418][T16115] R13: 00007f4147a26038 R14: 00007f4147a25fa0 R15: 00007fff41d29bc8 [ 742.290440][T16115] [ 742.298909][ T984] invalid firmware file [ 742.298937][ T984] as10x_usb: firmware: as102_data1_st.hex loaded with success [ 742.355791][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 742.367096][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 742.376696][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 742.396562][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 742.412636][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 742.544966][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 742.602328][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 742.602371][ T31] audit: type=1400 audit(1788161488.773:3475): avc: denied { bind } for pid=16143 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 742.643782][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 742.652963][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 742.662506][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 742.670094][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 742.686844][ T984] invalid firmware file [ 742.686888][ T984] as10x_usb: firmware: as102_data2_st.hex loaded with success [ 742.864443][ T984] invalid firmware file [ 742.871864][ T984] as10x_usb: firmware: as102_data1_st.hex loaded with success [ 742.882862][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 742.889642][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 742.898093][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 742.904901][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 742.919260][ T9] pwc: Registered as video103. [ 742.927256][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72 [ 742.956814][ T9] usb 6-1: USB disconnect, device number 94 [ 743.211411][ T984] invalid firmware file [ 743.211463][ T984] as10x_usb: firmware: as102_data2_st.hex loaded with success [ 743.213250][ T984] Registered device nBox DVB-T Dongle [ 743.218696][ T984] usb 7-1: USB disconnect, device number 101 [ 743.305072][ T984] Unregistered device nBox DVB-T Dongle [ 743.312101][ T984] as10x_usb: device has been disconnected [ 743.352697][T16158] binder: 16157:16158 ioctl c0306201 200000000040 returned -22 [ 743.355066][T16158] binder: 16157:16158 ioctl c0306201 200000000640 returned -22 [ 743.584967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 744.624931][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 744.853671][T16174] ip6gre1: entered allmulticast mode [ 745.119874][ T5700] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 745.147992][T16183] random: crng reseeded on system resumption [ 745.149856][ T31] audit: type=1400 audit(1788161491.303:3476): avc: denied { write } for pid=16181 comm="syz.0.2470" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 745.149922][ T31] audit: type=1400 audit(1788161491.303:3477): avc: denied { open } for pid=16181 comm="syz.0.2470" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 745.347483][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 745.380909][ T5700] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 745.401174][ T5700] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.401252][ T5700] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 745.401284][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.578312][ T31] audit: type=1400 audit(1788161491.743:3478): avc: denied { create } for pid=16181 comm="syz.0.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 745.593330][ T5700] mdc800 4-1:1.0: probe fails -> wrong Interface [ 745.641781][T16191] binder: 16190:16191 ioctl c0306201 200000000040 returned -22 [ 745.649699][T16191] binder: 16190:16191 ioctl c0306201 200000000640 returned -22 [ 745.664993][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 745.841085][T16196] usb usb7: usbfs: process 16196 (syz.6.2473) did not claim interface 0 before use [ 745.894915][ T5700] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 745.904943][ T10] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 746.055968][ T5700] usb 6-1: Using ep0 maxpacket: 16 [ 746.061314][ T5700] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 746.064028][ T5700] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.064055][ T5700] usb 6-1: config 0 interface 0 has no altsetting 0 [ 746.064081][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.068644][ T5700] usb 6-1: config 0 descriptor?? [ 746.108292][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 746.114343][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 746.121424][ T10] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 746.121458][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 746.121508][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 746.121529][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 746.121549][ T10] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 746.121569][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 746.127110][ T10] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 746.127135][ T10] usb 5-1: Product: syz [ 746.127148][ T10] usb 5-1: Manufacturer: syz [ 746.127161][ T10] usb 5-1: SerialNumber: syz [ 746.192938][ T10] usb 5-1: config 0 descriptor?? [ 746.195085][T16188] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 746.223330][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 746.244605][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 746.439206][ T10] usb 5-1: USB disconnect, device number 123 [ 746.439286][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 746.441424][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 746.579859][T16200] infiniband syz2: set active [ 746.579984][T16200] infiniband syz2: added veth0 [ 746.603293][ T984] usb 4-1: USB disconnect, device number 38 [ 746.609312][T16200] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 746.609346][T16200] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 746.609378][T16200] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 746.699239][T16200] RDS/IB: syz2: added [ 746.699319][T16200] smc: adding ib device syz2 with port count 1 [ 746.699336][T16200] smc: ib device syz2 port 1 has no pnetid [ 746.709691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 746.742213][ T5700] usbhid 6-1:0.0: can't add hid device: -71 [ 746.742312][ T5700] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 746.748868][ T5700] usb 6-1: USB disconnect, device number 95 [ 746.778895][ T31] audit: type=1400 audit(1788161492.943:3479): avc: denied { execute } for pid=16206 comm="syz.6.2476" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 746.955807][ T31] audit: type=1400 audit(1788161493.123:3480): avc: denied { write } for pid=16211 comm="syz.6.2478" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 747.370031][T16224] loop6: detected capacity change from 0 to 2640 [ 747.386005][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.399566][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.411637][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.420600][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.429281][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.470750][T16227] binder: 16225:16227 ioctl c0306201 200000000040 returned -22 [ 747.471072][T16227] binder: 16225:16227 ioctl c0306201 200000000640 returned -22 [ 747.538654][ T31] audit: type=1400 audit(1788161493.703:3481): avc: denied { read } for pid=16226 comm="syz.5.2484" path="socket:[73616]" dev="sockfs" ino=73616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 747.681852][ T31] audit: type=1400 audit(1788161493.843:3482): avc: denied { append } for pid=16226 comm="syz.5.2484" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 747.685034][ T5700] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 747.744949][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 747.795640][T16237] jffs2: notice: (16237) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 747.842090][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 747.842722][ T5700] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 747.847434][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 747.847460][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 747.847482][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 747.847501][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 747.847521][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 747.851271][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.851292][ T5700] usb 5-1: Product: syz [ 747.851305][ T5700] usb 5-1: Manufacturer: syz [ 747.851317][ T5700] usb 5-1: SerialNumber: syz [ 747.858632][ T5700] usb 5-1: config 0 descriptor?? [ 747.947266][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.947670][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.948041][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.972836][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.981350][ T9660] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.006517][ T31] audit: type=1400 audit(1788161494.173:3483): avc: denied { bind } for pid=16242 comm="syz.6.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 748.006565][ T31] audit: type=1400 audit(1788161494.173:3484): avc: denied { listen } for pid=16242 comm="syz.6.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 748.006596][ T31] audit: type=1400 audit(1788161494.173:3485): avc: denied { accept } for pid=16242 comm="syz.6.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 748.049062][T16244] netlink: 'syz.3.2486': attribute type 29 has an invalid length. [ 748.311528][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 748.311592][ T5700] input input73: Device does not respond to id packet M [ 748.318195][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 748.318233][ T5700] input input73: Device does not respond to id packet P [ 748.344554][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 748.344613][ T5700] input input73: Device does not respond to id packet B [ 748.626208][T16257] ubi0: attaching mtd0 [ 748.667729][T16257] ubi0: scanning is finished [ 748.667930][T16257] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 748.784955][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 749.425751][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -110 [ 749.426101][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 749.426439][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 749.426806][ T5700] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 749.441573][ T5700] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 749.521590][ T5700] usb 5-1: USB disconnect, device number 124 [ 749.732112][T16257] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 749.824914][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 749.941726][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'. [ 750.018337][ T31] audit: type=1400 audit(1788161496.183:3486): avc: denied { read } for pid=16266 comm="syz.3.2491" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 750.135583][T16275] input: syz0 as /devices/virtual/input/input74 [ 750.856264][T16300] rdma_op ffff88802b366238 conn xmit_rdma 0000000000000000 [ 750.874974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 751.036344][ T31] audit: type=1400 audit(1788161497.203:3487): avc: denied { write } for pid=16281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.158338][ T31] audit: type=1400 audit(1788161497.323:3488): avc: denied { write } for pid=16307 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.239806][T16299] ip_tables: iptables: counters copy to user failed while replacing table [ 751.626522][T16316] ceph: No mds server is up or the cluster is laggy [ 751.627109][ T5700] libceph: connect (1)[c::]:6789 error -101 [ 751.627258][ T5700] libceph: mon0 (1)[c::]:6789 connect error [ 751.905563][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 752.143679][ T5700] libceph: connect (1)[c::]:6789 error -101 [ 752.202556][ T5700] libceph: mon0 (1)[c::]:6789 connect error [ 752.944958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 753.179028][T16331] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 753.470975][ T31] audit: type=1400 audit(1788161499.633:3489): avc: denied { write } for pid=16313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.634469][ T31] audit: type=1400 audit(1788161499.793:3490): avc: denied { write } for pid=16364 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.648503][T16363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.695439][ T5700] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 753.714436][T16373] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 753.722953][T16373] netlink: 'syz.3.2510': attribute type 4 has an invalid length. [ 753.731206][T16373] netlink: 'syz.3.2510': attribute type 2 has an invalid length. [ 753.741011][T16373] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 753.741048][T16373] netlink: 'syz.3.2510': attribute type 5 has an invalid length. [ 753.741063][T16373] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2510'. [ 753.779156][T16373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=16373 comm=syz.3.2510 [ 753.838838][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2511'. [ 753.844933][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 753.846851][ T5700] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 753.849312][ T5700] usb 1-1: config 73 has an invalid interface number: 24 but max is 0 [ 753.849334][ T5700] usb 1-1: config 73 has no interface number 0 [ 753.849356][ T5700] usb 1-1: config 73 interface 24 has no altsetting 0 [ 753.855259][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.855282][ T5700] usb 1-1: Product: syz [ 753.855295][ T5700] usb 1-1: Manufacturer: syz [ 753.855308][ T5700] usb 1-1: SerialNumber: syz [ 753.892238][ T31] audit: type=1400 audit(1788161500.053:3491): avc: denied { setopt } for pid=16348 comm="syz.5.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 753.984924][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 754.078004][ T5700] go7007 1-1:73.24: probe with driver go7007 failed with error -12 [ 754.083530][ T5700] usb 1-1: USB disconnect, device number 30 [ 754.294046][ T31] audit: type=1400 audit(1788161500.453:3492): avc: denied { read } for pid=16393 comm="syz.5.2516" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 754.319395][ T31] audit: type=1400 audit(1788161500.483:3493): avc: denied { read open } for pid=16393 comm="syz.5.2516" path="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 754.567130][ T31] audit: type=1400 audit(1788161500.733:3494): avc: denied { append } for pid=16403 comm="syz.5.2520" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 754.852154][T16419] FAULT_INJECTION: forcing a failure. [ 754.852154][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 754.865734][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.4.2527 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.865763][T16419] Tainted: [L]=SOFTLOCKUP [ 754.865770][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 754.865781][T16419] Call Trace: [ 754.865788][T16419] [ 754.865796][T16419] dump_stack_lvl+0x100/0x190 [ 754.865828][T16419] should_fail_ex.cold+0x5/0xa [ 754.865854][T16419] should_failslab+0xc2/0x120 [ 754.865875][T16419] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 754.865897][T16419] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 754.865926][T16419] kmemdup_nul+0x49/0xd0 [ 754.865954][T16419] vfs_parse_fs_qstr+0x112/0x1c0 [ 754.865980][T16419] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 754.866012][T16419] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 754.866038][T16419] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 754.866061][T16419] vfs_parse_monolithic_sep+0x195/0x210 [ 754.866089][T16419] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 754.866114][T16419] ? alloc_fs_context+0x65a/0xf40 [ 754.866142][T16419] path_mount+0x77f/0x24c0 [ 754.866170][T16419] ? __pfx_path_mount+0x10/0x10 [ 754.866192][T16419] ? lockdep_hardirqs_on+0x7d/0x110 [ 754.866215][T16419] ? putname+0xb1/0x110 [ 754.866235][T16419] ? kmem_cache_free+0x127/0x6c0 [ 754.866269][T16419] ? __x64_sys_mount+0x293/0x310 [ 754.866293][T16419] __x64_sys_mount+0x293/0x310 [ 754.866319][T16419] ? __pfx___x64_sys_mount+0x10/0x10 [ 754.866351][T16419] do_syscall_64+0x123/0x790 [ 754.866373][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.866392][T16419] RIP: 0033:0x7fe39cb9e159 [ 754.866408][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.866424][T16419] RSP: 002b:00007fe39db1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.866443][T16419] RAX: ffffffffffffffda RBX: 00007fe39ce25fa0 RCX: 00007fe39cb9e159 [ 754.866455][T16419] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 754.866466][T16419] RBP: 00007fe39db1c090 R08: 0000200000000080 R09: 0000000000000000 [ 754.866477][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.866488][T16419] R13: 00007fe39ce26038 R14: 00007fe39ce25fa0 R15: 00007ffcd20aa198 [ 754.866511][T16419] [ 755.024956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 755.535006][ T5701] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 755.687974][ T5701] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 755.698738][ T5701] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.698781][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 755.698821][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 755.735802][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.735837][ T5701] usb 1-1: Product: syz [ 755.735862][ T5701] usb 1-1: Manufacturer: syz [ 755.735879][ T5701] usb 1-1: SerialNumber: syz [ 755.741691][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2532'. [ 755.771783][ T5701] usb 1-1: config 0 descriptor?? [ 755.778826][T16425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.846639][ T5701] rc_core: IR keymap rc-streamzap not found [ 755.846671][ T5701] Registered IR keymap rc-empty [ 755.847550][ T5701] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 755.871385][ T5701] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input75 [ 755.899454][T16451] FAULT_INJECTION: forcing a failure. [ 755.899454][T16451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.899501][T16451] CPU: 0 UID: 0 PID: 16451 Comm: syz.5.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.899525][T16451] Tainted: [L]=SOFTLOCKUP [ 755.899530][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 755.899539][T16451] Call Trace: [ 755.899545][T16451] [ 755.899552][T16451] dump_stack_lvl+0x100/0x190 [ 755.899598][T16451] should_fail_ex.cold+0x5/0xa [ 755.899628][T16451] _copy_to_user+0x32/0xd0 [ 755.899654][T16451] tomoyo_flush+0x161/0x520 [ 755.899677][T16451] tomoyo_io_printf+0x312/0x3c0 [ 755.899697][T16451] ? __pfx_tomoyo_io_printf+0x10/0x10 [ 755.899718][T16451] ? _copy_to_user+0xaf/0xd0 [ 755.899741][T16451] ? tomoyo_flush+0x3f5/0x520 [ 755.899762][T16451] tomoyo_read_profile+0x8b6/0x1810 [ 755.899783][T16451] ? tomoyo_flush+0x3f5/0x520 [ 755.899798][T16451] ? __import_iovec+0x1d2/0x640 [ 755.899825][T16451] tomoyo_read_control+0x29c/0x540 [ 755.899848][T16451] ? __pfx_tomoyo_read+0x10/0x10 [ 755.899864][T16451] vfs_readv+0x5d8/0x8d0 [ 755.899893][T16451] ? __pfx_vfs_readv+0x10/0x10 [ 755.899920][T16451] ? lock_acquire+0x1d1/0x380 [ 755.899937][T16451] ? __fget_files+0x34/0x3d0 [ 755.899966][T16451] ? __fget_files+0x21f/0x3d0 [ 755.899989][T16451] ? do_preadv+0x1ac/0x270 [ 755.900010][T16451] do_preadv+0x1ac/0x270 [ 755.900034][T16451] ? __pfx_do_preadv+0x10/0x10 [ 755.900062][T16451] do_syscall_64+0x123/0x790 [ 755.900084][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.900100][T16451] RIP: 0033:0x7f414779e159 [ 755.900114][T16451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.900129][T16451] RSP: 002b:00007f41486a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 755.900145][T16451] RAX: ffffffffffffffda RBX: 00007f4147a25fa0 RCX: 00007f414779e159 [ 755.900155][T16451] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000004 [ 755.900165][T16451] RBP: 00007f41486a7090 R08: 0000000000000003 R09: 0000000000000000 [ 755.900175][T16451] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 755.900185][T16451] R13: 00007f4147a26038 R14: 00007f4147a25fa0 R15: 00007fff41d29bc8 [ 755.900208][T16451] [ 756.067926][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 756.083900][T16425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.084201][T16425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.123201][ T5700] usb 1-1: USB disconnect, device number 31 [ 756.445523][ T5701] usb 7-1: new low-speed USB device number 102 using dummy_hcd [ 756.607466][ T5701] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 756.628257][ T5701] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 756.638005][ T5701] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 756.650557][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.650651][ T5701] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.650680][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 756.650926][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.664093][ T5701] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 756.664153][ T5701] usb 7-1: config 168 interface 0 has no altsetting 0 [ 756.746398][ T5701] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 756.754121][ T5701] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 756.769816][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.769882][ T5701] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.783207][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 756.783265][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.783296][ T5701] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 756.799767][ T5701] usb 7-1: config 168 interface 0 has no altsetting 0 [ 756.886786][ T5701] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 756.895262][ T5701] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 756.895355][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.908576][ T5701] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.908612][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 756.908643][ T5701] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.920997][ T5701] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 756.921097][ T5701] usb 7-1: config 168 interface 0 has no altsetting 0 [ 757.080459][ T5701] usb 7-1: string descriptor 0 read error: -22 [ 757.080538][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.104930][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 757.118279][ T5701] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 758.144927][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 758.451552][ T5701] usb 7-1: USB disconnect, device number 102 [ 758.663538][T16459] adutux: No device or device unplugged -19 [ 758.934897][ T5701] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 759.025057][ T984] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 759.088101][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 759.088808][ T5701] usb 5-1: not running at top speed; connect to a high speed hub [ 759.088832][ T5701] usb 5-1: New USB device found, idVendor=1410, idProduct=a006, bcdDevice=f7.4e [ 759.090223][ T5701] usb 5-1: config 5 has an invalid interface number: 89 but max is 2 [ 759.090241][ T5701] usb 5-1: config 5 has an invalid interface number: 45 but max is 2 [ 759.090256][ T5701] usb 5-1: config 5 has an invalid interface number: 26 but max is 2 [ 759.090273][ T5701] usb 5-1: config 5 has no interface number 0 [ 759.090287][ T5701] usb 5-1: config 5 has no interface number 1 [ 759.090300][ T5701] usb 5-1: config 5 has no interface number 2 [ 759.090333][ T5701] usb 5-1: config 5 interface 45 has no altsetting 0 [ 759.090347][ T5701] usb 5-1: config 5 interface 26 has no altsetting 0 [ 759.092015][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.092035][ T5701] usb 5-1: Product: syz [ 759.092047][ T5701] usb 5-1: Manufacturer: syz [ 759.092060][ T5701] usb 5-1: SerialNumber: syz [ 759.176074][ T984] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 759.177332][ T984] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 759.177352][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.177367][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 759.177385][ T984] usb 1-1: config 0 has no interface number 0 [ 759.177406][ T984] usb 1-1: config 0 interface 199 has no altsetting 0 [ 759.177448][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.183140][ T984] usb 1-1: config 0 descriptor?? [ 759.184950][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 759.261063][ T31] audit: type=1400 audit(1788161505.423:3495): avc: denied { setopt } for pid=16495 comm="syz.5.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 759.301518][ T31] audit: type=1400 audit(1788161505.463:3496): avc: denied { connect } for pid=16495 comm="syz.5.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 759.502122][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2550'. [ 759.507582][ T5701] usb 5-1: USB disconnect, device number 125 [ 759.960181][T16514] netlink: 'syz.3.2553': attribute type 4 has an invalid length. [ 759.965913][T16510] hpfs: Bad magic ... probably not HPFS [ 759.973913][T16514] netlink: 'syz.3.2553': attribute type 10 has an invalid length. [ 759.986344][T16514] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2553'. [ 759.996347][T16514] bond0: (slave gre0): refused to change device type [ 760.003430][T16514] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 760.224929][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 760.475273][T16517] FAULT_INJECTION: forcing a failure. [ 760.475273][T16517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.490101][T16517] CPU: 0 UID: 0 PID: 16517 Comm: syz.5.2554 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.490138][T16517] Tainted: [L]=SOFTLOCKUP [ 760.490144][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 760.490156][T16517] Call Trace: [ 760.490163][T16517] [ 760.490171][T16517] dump_stack_lvl+0x100/0x190 [ 760.490205][T16517] should_fail_ex.cold+0x5/0xa [ 760.490233][T16517] _copy_to_user+0x32/0xd0 [ 760.490264][T16517] video_usercopy+0x61e/0x1730 [ 760.490294][T16517] ? __pfx_video_usercopy+0x10/0x10 [ 760.490332][T16517] v4l2_ioctl+0x1bd/0x250 [ 760.490358][T16517] ? __pfx_v4l2_ioctl+0x10/0x10 [ 760.490382][T16517] __x64_sys_ioctl+0x18e/0x210 [ 760.490414][T16517] do_syscall_64+0x123/0x790 [ 760.490438][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.490457][T16517] RIP: 0033:0x7f414779e159 [ 760.490475][T16517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.490493][T16517] RSP: 002b:00007f41486a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.490512][T16517] RAX: ffffffffffffffda RBX: 00007f4147a25fa0 RCX: 00007f414779e159 [ 760.490525][T16517] RDX: 0000200000000100 RSI: 00000000c0205648 RDI: 0000000000000003 [ 760.490537][T16517] RBP: 00007f41486a7090 R08: 0000000000000000 R09: 0000000000000000 [ 760.490548][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.490559][T16517] R13: 00007f4147a26038 R14: 00007f4147a25fa0 R15: 00007fff41d29bc8 [ 760.490584][T16517] [ 760.984641][ T984] usb 1-1: string descriptor 0 read error: -71 [ 760.986144][ T984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 760.986176][ T984] dvb-usb: bulk message failed: -22 (3/0) [ 761.012897][ T984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 761.016775][ T984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 761.016813][ T984] usb 1-1: media controller created [ 761.019673][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 761.108778][ T984] dvb-usb: bulk message failed: -22 (6/0) [ 761.108855][ T984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 761.122570][ T984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input76 [ 761.135768][ T984] dvb-usb: schedule remote query interval to 150 msecs. [ 761.135802][ T984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 761.264954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 761.967066][ T984] usb 1-1: USB disconnect, device number 32 [ 762.033496][T16533] FAULT_INJECTION: forcing a failure. [ 762.033496][T16533] name failslab, interval 1, probability 0, space 0, times 0 [ 762.049038][T16533] CPU: 0 UID: 0 PID: 16533 Comm: syz.4.2560 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.049069][T16533] Tainted: [L]=SOFTLOCKUP [ 762.049077][T16533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 762.049088][T16533] Call Trace: [ 762.049096][T16533] [ 762.049105][T16533] dump_stack_lvl+0x100/0x190 [ 762.049138][T16533] should_fail_ex.cold+0x5/0xa [ 762.049167][T16533] should_failslab+0xc2/0x120 [ 762.049189][T16533] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 762.049211][T16533] ? __d_alloc+0x35/0xa50 [ 762.049239][T16533] __d_alloc+0x35/0xa50 [ 762.049264][T16533] d_alloc_pseudo+0x1c/0xc0 [ 762.049281][T16533] alloc_file_pseudo+0x118/0x290 [ 762.049306][T16533] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 762.049332][T16533] ? mas_preallocate+0x528/0xee0 [ 762.049357][T16533] __shmem_file_setup+0x205/0x460 [ 762.049381][T16533] ? __pfx___shmem_file_setup+0x10/0x10 [ 762.049407][T16533] ? vm_area_alloc+0x1f/0x160 [ 762.049435][T16533] shmem_zero_setup+0x96/0x1b0 [ 762.049465][T16533] __mmap_region+0x2692/0x32c0 [ 762.049497][T16533] ? __pfx___mmap_region+0x10/0x10 [ 762.049531][T16533] ? __lock_acquire+0x4c5/0x1ec0 [ 762.049562][T16533] ? __lock_acquire+0x4c5/0x1ec0 [ 762.049579][T16533] ? __lock_acquire+0x4c5/0x1ec0 [ 762.049617][T16533] ? do_raw_spin_unlock+0x145/0x1e0 [ 762.049687][T16533] ? avc_has_perm_noaudit+0x145/0x3b0 [ 762.049718][T16533] mmap_region+0x3db/0x6d0 [ 762.049744][T16533] ? rcu_is_watching+0x13/0xc0 [ 762.049767][T16533] ? __pfx_mmap_region+0x10/0x10 [ 762.049791][T16533] ? selinux_mmap_addr+0xe2/0x110 [ 762.049813][T16533] ? bpf_lsm_mmap_addr+0x9/0x30 [ 762.049834][T16533] ? security_mmap_addr+0x71/0x1e0 [ 762.049854][T16533] ? __get_unmapped_area+0x255/0x3e0 [ 762.049879][T16533] do_mmap+0x12c7/0x1c30 [ 762.049905][T16533] ? lock_acquire+0x1d1/0x380 [ 762.049923][T16533] ? __pfx_do_mmap+0x10/0x10 [ 762.049945][T16533] ? selinux_mmap_file+0x154/0x1c0 [ 762.049973][T16533] ? __pfx_down_write_killable+0x10/0x10 [ 762.050002][T16533] vm_mmap_pgoff+0x28d/0x470 [ 762.050026][T16533] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 762.050050][T16533] ? __pfx_do_futex+0x10/0x10 [ 762.050080][T16533] ksys_mmap_pgoff+0xe4/0x610 [ 762.050102][T16533] ? __x64_sys_futex+0x358/0x4d0 [ 762.050127][T16533] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 762.050144][T16533] ? xfd_validate_state+0x129/0x190 [ 762.050165][T16533] __x64_sys_mmap+0x125/0x190 [ 762.050188][T16533] do_syscall_64+0x123/0x790 [ 762.050209][T16533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.050229][T16533] RIP: 0033:0x7fe39cb9e159 [ 762.050245][T16533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.050262][T16533] RSP: 002b:00007fe39db1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 762.050282][T16533] RAX: ffffffffffffffda RBX: 00007fe39ce25fa0 RCX: 00007fe39cb9e159 [ 762.050296][T16533] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 0000000000000000 [ 762.050309][T16533] RBP: 00007fe39cc35024 R08: ffffffffffffffff R09: 0000000000000000 [ 762.050323][T16533] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 762.050336][T16533] R13: 00007fe39ce26038 R14: 00007fe39ce25fa0 R15: 00007ffcd20aa198 [ 762.050364][T16533] [ 762.111815][ T984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 762.304932][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 762.422540][ T31] audit: type=1400 audit(1788161508.583:3497): avc: denied { write } for pid=16538 comm="syz.4.2564" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 762.465435][ T5701] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 762.601881][ T5605] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 762.617588][ T5701] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 762.620736][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.630457][ T5701] usb 4-1: config 0 descriptor?? [ 762.641913][ T5701] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 763.094939][ T984] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 763.344956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 763.348815][ T984] usb 5-1: No LPM exit latency info found, disabling LPM. [ 763.348864][ T984] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.434922][ T984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 763.435010][ T984] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 763.435042][ T984] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.435063][ T984] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 764.081881][ T5701] usb 4-1: USB disconnect, device number 39 [ 764.222480][ T31] audit: type=1400 audit(1788161510.383:3498): avc: denied { execute } for pid=16576 comm="syz.0.2577" name="file2" dev="ramfs" ino=76928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 764.245738][ T31] audit: type=1400 audit(1788161510.413:3499): avc: denied { execute_no_trans } for pid=16576 comm="syz.0.2577" path="/file2" dev="ramfs" ino=76928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 764.385897][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 764.552527][ T31] audit: type=1400 audit(1788161510.713:3500): avc: denied { read } for pid=16589 comm="syz.5.2581" name="power" dev="configfs" ino=76945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 764.575751][ T31] audit: type=1800 audit(1788161510.713:3501): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2581" name="power" dev="configfs" ino=76945 res=0 errno=0 [ 765.424945][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 766.357795][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.374038][ T984] usb 5-1: can't set config #1, error -71 [ 766.401701][ T984] usb 5-1: USB disconnect, device number 126 [ 766.464939][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 767.263906][T16607] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.264155][T16607] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.504958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 768.544963][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 768.854549][T16607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.874978][ T6535] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 768.876969][T16607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.985054][ T984] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 768.992792][T16607] tipc: Resetting bearer [ 769.034933][ T6535] usb 1-1: Using ep0 maxpacket: 32 [ 769.040905][ T6535] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 769.051566][ T6535] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 769.051610][ T6535] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 769.051655][ T6535] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 769.051683][ T6535] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 769.051706][ T6535] usb 1-1: config 0 interface 0 has no altsetting 0 [ 769.109985][ T6535] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 769.110022][ T6535] usb 1-1: Product: syz [ 769.110050][ T6535] usb 1-1: Manufacturer: syz [ 769.110065][ T6535] usb 1-1: SerialNumber: syz [ 769.134469][ T6535] usb 1-1: config 0 descriptor?? [ 769.143267][ T6535] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 769.162794][ T6535] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 769.185549][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 769.197794][ T984] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 769.208264][ T984] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 769.220002][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 769.230725][T16607] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 769.237449][T16607] ip6gretap1: left allmulticast mode [ 769.246762][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.255396][ T984] usb 5-1: Product: syz [ 769.255415][ T984] usb 5-1: Manufacturer: syz [ 769.255430][ T984] usb 5-1: SerialNumber: syz [ 769.273269][ T984] usb 5-1: config 0 descriptor?? [ 769.281523][ T984] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 769.291030][ T984] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 769.315559][T16607] erspan1: left allmulticast mode [ 769.345119][ T8082] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.345175][ T8082] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.345224][ T8082] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.345279][ T8082] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.467906][T16639] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 769.555317][ T31] audit: type=1400 audit(1788161515.713:3502): avc: denied { write } for pid=16648 comm="syz.5.2598" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 769.584942][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 769.603085][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2598'. [ 769.667124][T14828] Bluetooth: hci0: Frame reassembly failed (-84) [ 769.672403][T16650] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2598'. [ 769.681455][ T5723] usb 1-1: USB disconnect, device number 33 [ 769.696188][ T5723] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 769.711374][T16649] 9p: Bad value for 'rfdno' [ 769.939354][ T984] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 769.945865][ T984] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 770.624929][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 770.819468][ T984] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 770.820314][ T984] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 770.822151][ T984] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 770.823647][ T984] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 770.824741][ T984] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 770.825200][ T984] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 770.834335][ T984] usb 5-1: USB disconnect, device number 127 [ 771.664921][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 771.679492][T11857] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 771.684421][ T5605] Bluetooth: hci0: command 0x1003 tx timeout [ 772.704926][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 773.455225][ T5723] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 773.525106][ T984] usb 6-1: new low-speed USB device number 96 using dummy_hcd [ 773.744945][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.118300][ T5723] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 774.120616][ T5723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.120672][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.145273][ T5784] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 774.160763][ T5723] usb 1-1: selecting invalid altsetting 1 [ 774.160883][ T5723] dvb_ttusb_budget: ttusb_init_controller: error [ 774.160893][ T5723] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 774.218986][ T984] usb 6-1: Invalid ep0 maxpacket: 64 [ 774.253406][ T5723] DVB: Unable to find symbol stv0299_attach() [ 774.288040][ T5723] DVB: Unable to find symbol tda8083_attach() [ 774.288060][ T5723] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 774.339880][ T5784] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 774.342307][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.342327][ T5784] usb 7-1: Product: syz [ 774.342338][ T5784] usb 7-1: Manufacturer: syz [ 774.342351][ T5784] usb 7-1: SerialNumber: syz [ 774.344478][ T5784] usb 7-1: config 0 descriptor?? [ 774.355288][ T5784] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 774.378455][ T984] usb 6-1: new low-speed USB device number 97 using dummy_hcd [ 774.564848][ T984] usb 6-1: Invalid ep0 maxpacket: 64 [ 774.570445][ T984] usb usb6-port1: attempt power cycle [ 774.598475][T16686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.598860][T16686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.784919][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 774.861311][ T5784] gspca_m5602: Failed to find a sensor [ 774.861332][ T5784] ALi m5602 7-1:0.0: ALi m5602 webcam failed [ 774.864555][ T5784] usb 7-1: USB disconnect, device number 103 [ 774.915070][ T984] usb 6-1: new low-speed USB device number 98 using dummy_hcd [ 774.937140][ T5723] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 774.945112][ T984] usb 6-1: Invalid ep0 maxpacket: 64 [ 774.994974][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 775.074881][ T984] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 775.084869][ T5723] usb 4-1: Using ep0 maxpacket: 8 [ 775.091856][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 775.091906][ T5723] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 775.092727][ T5723] usb 4-1: too many endpoints for config 1 interface 0 altsetting 9: 65, using maximum allowed: 30 [ 775.092760][ T5723] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 65 [ 775.092783][ T5723] usb 4-1: config 1 interface 0 has no altsetting 0 [ 775.095592][ T5723] usb 4-1: string descriptor 0 read error: -22 [ 775.095687][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.120342][ T984] usb 6-1: Invalid ep0 maxpacket: 64 [ 775.133668][ T984] usb usb6-port1: unable to enumerate USB device [ 775.145950][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 775.146906][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 775.146932][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.146981][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.150045][ T9] usb 5-1: config 0 descriptor?? [ 775.504437][ T5723] usbhid 4-1:1.0: can't add hid device: -32 [ 775.504560][ T5723] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 775.512646][T16706] netlink: 'syz.3.2615': attribute type 2 has an invalid length. [ 775.556449][ T31] audit: type=1400 audit(1788161521.723:3503): avc: denied { create } for pid=16707 comm="syz.4.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 775.596485][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 775.596604][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 775.602780][ T9] usb 5-1: USB disconnect, device number 2 [ 775.824938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 776.169958][ T9] usb 1-1: USB disconnect, device number 34 [ 776.317298][T16719] input: syz0 as /devices/virtual/input/input77 [ 776.865049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 776.939147][T16735] overlayfs: workdir and upperdir must be separate subtrees [ 777.366860][T16754] syzkaller0: entered promiscuous mode [ 777.373842][T16754] syzkaller0: entered allmulticast mode [ 777.452966][T16747] tipc: Started in network mode [ 777.453011][T16747] tipc: Node identity aab2cb38fa32, cluster identity 4711 [ 777.453178][T16747] tipc: Enabled bearer , priority 0 [ 777.493151][T16747] tipc: Resetting bearer [ 777.524924][ T984] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 777.675797][ T984] usb 7-1: Using ep0 maxpacket: 16 [ 777.681906][ T984] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 777.692193][ T984] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 777.692290][ T984] usb 7-1: config 0 interface 0 has no altsetting 0 [ 777.712921][ T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.712958][ T984] usb 7-1: Product: syz [ 777.712983][ T984] usb 7-1: Manufacturer: syz [ 777.712999][ T984] usb 7-1: SerialNumber: syz [ 777.741647][ T984] usb 7-1: config 0 descriptor?? [ 777.765153][ T9] usb 4-1: USB disconnect, device number 40 [ 777.905930][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 777.914736][T16758] jffs2: notice: (16758) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 777.951844][T16740] tipc: Resetting bearer [ 778.007254][ T984] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input78 [ 778.036385][T16740] tipc: Disabling bearer [ 778.188201][T16765] input: syz1 as /devices/virtual/input/input80 [ 778.304978][ T984] rc_core: IR keymap rc-imon-pad not found [ 778.305018][ T984] Registered IR keymap rc-empty [ 778.305091][ T984] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 778.305111][ T984] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 778.430801][ T31] audit: type=1400 audit(1788161524.583:3504): avc: denied { write } for pid=16764 comm="syz.5.2629" name="ports" dev="configfs" ino=3530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 778.557728][ T31] audit: type=1400 audit(1788161524.693:3505): avc: denied { write } for pid=16764 comm="syz.5.2629" name="ports" dev="configfs" ino=3530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 778.557892][ T31] audit: type=1400 audit(1788161524.693:3506): avc: denied { remove_name } for pid=16764 comm="syz.5.2629" name="1" dev="configfs" ino=77912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 778.558034][ T31] audit: type=1400 audit(1788161524.693:3507): avc: denied { rmdir } for pid=16764 comm="syz.5.2629" name="1" dev="configfs" ino=77912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 778.721291][ T984] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 778.821293][ T984] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input79 [ 778.954933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 778.980551][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 779.052166][ T984] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:104> initialized [ 779.070611][ T984] usb 7-1: USB disconnect, device number 104 [ 779.309174][ T31] audit: type=1804 audit(1788161525.473:3508): pid=16786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2636" name="bus" dev="ramfs" ino=77617 res=1 errno=0 [ 779.334151][ T31] audit: type=1804 audit(1788161525.493:3509): pid=16786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2636" name="bus" dev="ramfs" ino=77617 res=1 errno=0 [ 779.455739][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 779.586914][ T9] usb 4-1: device descriptor read/64, error -71 [ 779.677105][ T31] audit: type=1400 audit(1788161525.843:3510): avc: denied { name_bind } for pid=16790 comm="syz.6.2638" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 779.871671][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 779.984933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 780.118852][ T9] usb 4-1: device descriptor read/64, error -71 [ 780.286746][ T9] usb usb4-port1: attempt power cycle [ 780.966417][T16799] input: syz1 as /devices/virtual/input/input81 [ 781.025073][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 781.025283][ T9] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 781.045345][ T9] usb 4-1: device descriptor read/8, error -71 [ 781.378708][ T9] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 781.396146][ T9] usb 4-1: device descriptor read/8, error -71 [ 781.451195][ T31] audit: type=1400 audit(1788161527.613:3511): avc: denied { write } for pid=16797 comm="syz.0.2640" name="ports" dev="configfs" ino=3530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 781.506091][ T9] usb usb4-port1: unable to enumerate USB device [ 781.562315][ T5784] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 781.677824][ T31] audit: type=1400 audit(1788161527.813:3512): avc: denied { write } for pid=16797 comm="syz.0.2640" name="ports" dev="configfs" ino=3530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 781.727896][ T5784] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 781.733436][ T5784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 781.733502][ T5784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 781.733570][ T5784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 781.733653][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.771535][T16805] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 781.920293][ T984] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 782.064958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 782.089627][ T984] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 782.107783][ T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.117528][ T984] usb 7-1: Product: syz [ 782.121735][ T984] usb 7-1: Manufacturer: syz [ 782.126391][ T984] usb 7-1: SerialNumber: syz [ 782.362572][ T984] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 782.451290][T16817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2643'. [ 782.696352][ T31] audit: type=1800 audit(1788161528.633:3513): pid=16817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2643" name="memory_backed" dev="configfs" ino=78002 res=0 errno=0 [ 782.771722][ T984] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 783.104921][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 783.410382][ T9714] udevd[9714]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.834906][ T984] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 784.040662][ T984] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 784.054319][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.062783][ T984] usb 1-1: Product: syz [ 784.062806][ T984] usb 1-1: Manufacturer: syz [ 784.062831][ T984] usb 1-1: SerialNumber: syz [ 784.068203][ T5605] Bluetooth: hci0: command 0xfc05 tx timeout [ 784.068401][ T5605] Bluetooth: hci0: Resetting usb device. [ 784.070812][ C1] Bluetooth: hci0: urb ffff88802bd20a00 failed to resubmit (2) [ 784.072069][T11857] Bluetooth: hci0: Reading Intel version command failed (-110) [ 784.154082][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 784.385083][ T5723] usb 7-1: USB disconnect, device number 105 [ 784.436829][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 784.512660][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2652'. [ 784.525108][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 784.538159][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 784.721601][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 785.194981][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 785.202891][ T5784] usb 5-1: USB disconnect, device number 3 [ 785.638956][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 785.639000][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 785.674249][ T984] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 785.735879][T16861] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2659'. [ 785.743639][T16861] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2659'. [ 785.835060][ T31] audit: type=1400 audit(1788161531.903:3514): avc: denied { setopt } for pid=16855 comm="syz.6.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 786.046611][ T984] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 786.167054][T16867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=16867 comm=syz.3.2662 [ 786.234943][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 786.406401][ T5784] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 786.531362][T16877] 9pnet_virtio: no channels available for device syz [ 786.555353][ T5784] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.565779][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.565828][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.590610][ T5784] usb 5-1: config 0 descriptor?? [ 786.807018][ T5784] usbhid 5-1:0.0: can't add hid device: -71 [ 786.807108][ T5784] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 786.812157][ T5784] usb 5-1: USB disconnect, device number 4 [ 786.955184][ T984] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 787.116641][ T984] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 787.128377][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 787.128421][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.128461][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.152116][ T984] usb 6-1: config 0 descriptor?? [ 787.275016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 787.295344][ T5784] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 787.403383][ T5701] usb 1-1: USB disconnect, device number 35 [ 787.446485][ T5784] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 787.458410][ T5784] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 787.458465][ T5784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 787.458496][ T5784] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.494674][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.505098][ T5784] usb 5-1: Product: syz [ 787.505137][ T5784] usb 5-1: Manufacturer: syz [ 787.505154][ T5784] usb 5-1: SerialNumber: syz [ 787.523931][T16865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 787.578863][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.579249][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.584628][ T984] usbhid 6-1:0.0: can't add hid device: -71 [ 787.584706][ T984] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 787.598699][ T984] usb 6-1: USB disconnect, device number 100 [ 788.314929][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 788.824880][ T5784] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 788.954884][ T5784] usb 1-1: device descriptor read/64, error -71 [ 789.344942][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 789.645100][ T5784] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 789.739716][T16916] misc userio: Invalid payload size [ 789.785158][ T5784] usb 1-1: device descriptor read/64, error -71 [ 789.821063][ T9] usb 5-1: USB disconnect, device number 5 [ 789.895575][ T5784] usb usb1-port1: attempt power cycle [ 790.235233][ T5784] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 790.235896][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 790.257753][ T5784] usb 1-1: device descriptor read/8, error -71 [ 790.384944][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.386783][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 790.387630][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 790.387666][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.388471][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 790.388488][ T9] usb 5-1: Manufacturer: syz [ 790.393305][ T9] usb 5-1: config 0 descriptor?? [ 790.400875][ T9] igorplugusb 5-1:0.0: endpoint incorrect [ 790.494875][ T5784] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 790.505077][ T10] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 790.515434][ T5784] usb 1-1: device descriptor read/8, error -71 [ 790.575167][ T984] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 790.602875][ T5723] usb 5-1: USB disconnect, device number 6 [ 790.622301][T16933] xt_IDLETIMER: label is empty or not nul-terminated [ 790.625113][ T5784] usb usb1-port1: unable to enumerate USB device [ 790.655716][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 790.658169][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.658191][ T10] usb 7-1: Product: syz [ 790.658204][ T10] usb 7-1: Manufacturer: syz [ 790.658216][ T10] usb 7-1: SerialNumber: syz [ 790.724898][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 790.731686][ T984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 790.740304][ T984] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 790.751709][ T984] usb 4-1: config 4 interface 0 has no altsetting 0 [ 790.762805][ T984] usb 4-1: string descriptor 0 read error: -22 [ 790.762897][ T984] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 790.783768][ T984] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 790.793226][ T984] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 790.793485][ T984] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 790.793519][ T984] usb 4-1: media controller created [ 790.805422][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.068579][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 791.080798][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 791.424928][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 791.911273][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 791.911332][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 791.916215][ T984] zl10353_read_register: readreg error (reg=127, ret==0) [ 791.917539][T16931] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 791.935353][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 791.961618][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 792.027038][ T5701] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 792.135098][ T984] usb 4-1: USB disconnect, device number 45 [ 792.181032][ T5701] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 792.184395][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 792.184426][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.184454][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.189098][ T5701] usb 6-1: config 0 descriptor?? [ 792.251717][ T31] audit: type=1400 audit(1788161538.413:3515): avc: denied { create } for pid=16965 comm="syz.4.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 792.256972][ T31] audit: type=1400 audit(1788161538.413:3516): avc: denied { ioctl } for pid=16965 comm="syz.4.2694" path="socket:[78611]" dev="sockfs" ino=78611 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 792.455076][ T6535] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 792.474974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 792.495041][ T5693] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 792.599117][T16954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.608742][T16954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.623464][ T5701] usbhid 6-1:0.0: can't add hid device: -71 [ 792.623569][ T5701] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 792.624943][ T6535] usb 1-1: Using ep0 maxpacket: 32 [ 792.629365][ T6535] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 792.629698][ T5701] usb 6-1: USB disconnect, device number 101 [ 792.631079][ T6535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.631113][ T6535] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.631133][ T6535] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.631151][ T6535] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 792.631173][ T6535] usb 1-1: config 0 interface 0 has no altsetting 0 [ 792.631197][ T6535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.670131][ T5693] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 792.689367][ T6535] usb 1-1: config 0 descriptor?? [ 792.706794][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.706819][ T5693] usb 5-1: Product: syz [ 792.706832][ T5693] usb 5-1: Manufacturer: syz [ 792.706844][ T5693] usb 5-1: SerialNumber: syz [ 792.722614][ T5693] usb 5-1: config 0 descriptor?? [ 792.748443][ T5693] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 007 [ 792.795066][ T984] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 792.925074][ T984] usb 4-1: device descriptor read/64, error -71 [ 793.098690][ T6535] hid-thrustmaster 0003:044F:B65D.0022: invalid report_size -1097706239 [ 793.098742][ T6535] hid-thrustmaster 0003:044F:B65D.0022: item 0 4 1 7 parsing failed [ 793.102317][ T6535] hid-thrustmaster 0003:044F:B65D.0022: parse failed with error -22 [ 793.102392][ T6535] hid-thrustmaster 0003:044F:B65D.0022: probe with driver hid-thrustmaster failed with error -22 [ 793.132380][ T5693] (null): failure reading functionality [ 793.148879][ T5693] i2c i2c-1: connected i2c-tiny-usb device [ 793.187880][ T984] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 793.310786][ T5693] usb 1-1: USB disconnect, device number 40 [ 793.325533][ T984] usb 4-1: device descriptor read/64, error -71 [ 793.359168][ T31] audit: type=1400 audit(1788161539.523:3517): avc: denied { map } for pid=16976 comm="syz.5.2698" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 793.360259][T16966] syzkaller1: entered promiscuous mode [ 793.360277][T16966] syzkaller1: entered allmulticast mode [ 793.451706][ T984] usb usb4-port1: attempt power cycle [ 793.504966][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 793.520695][ T5693] usb 5-1: USB disconnect, device number 7 [ 793.611112][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.611569][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.611783][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.611983][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.612177][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.612369][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.612561][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.612752][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.612952][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.613148][T16979] netlink: 'syz.5.2699': attribute type 4 has an invalid length. [ 793.668335][ T5701] usb 7-1: USB disconnect, device number 106 [ 793.794933][ T984] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 793.806427][T16979] trusted_key: encrypted_key: keylen parameter is missing [ 793.806715][T16988] trusted_key: encrypted_key: keylen parameter is missing [ 793.815454][ T984] usb 4-1: device descriptor read/8, error -71 [ 794.166123][ T984] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 794.185430][ T984] usb 4-1: device descriptor read/8, error -71 [ 794.280373][T16994] FAULT_INJECTION: forcing a failure. [ 794.280373][T16994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.280441][T16994] CPU: 1 UID: 0 PID: 16994 Comm: syz.0.2701 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.280468][T16994] Tainted: [L]=SOFTLOCKUP [ 794.280474][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 794.280485][T16994] Call Trace: [ 794.280492][T16994] [ 794.280500][T16994] dump_stack_lvl+0x100/0x190 [ 794.280531][T16994] should_fail_ex.cold+0x5/0xa [ 794.280553][T16994] ? prepare_alloc_pages+0x16d/0x5b0 [ 794.280578][T16994] should_fail_alloc_page+0xeb/0x140 [ 794.280601][T16994] prepare_alloc_pages+0x1f0/0x5b0 [ 794.280624][T16994] ? rcu_is_watching+0x13/0xc0 [ 794.280650][T16994] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 794.280685][T16994] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 794.280714][T16994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 794.280744][T16994] ? __lock_acquire+0x4c5/0x1ec0 [ 794.280765][T16994] ? irqentry_exit+0x24d/0xa10 [ 794.280786][T16994] ? lockdep_hardirqs_on+0x7d/0x110 [ 794.280806][T16994] ? irqentry_exit+0x24d/0xa10 [ 794.280829][T16994] ? lock_acquire+0x1d1/0x380 [ 794.280849][T16994] ? __might_fault+0xc5/0x140 [ 794.280874][T16994] ? __might_fault+0xc5/0x140 [ 794.280902][T16994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.280924][T16994] ? policy_nodemask+0xed/0x4f0 [ 794.280950][T16994] alloc_pages_mpol+0x201/0x550 [ 794.280979][T16994] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 794.281003][T16994] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 794.281028][T16994] alloc_pages_noprof+0x1a/0x160 [ 794.281054][T16994] rds_page_remainder_alloc+0x57/0x1440 [ 794.281080][T16994] rds_message_copy_from_user+0x1ca/0xcf0 [ 794.281110][T16994] ? trace_kmalloc+0xeb/0x110 [ 794.281131][T16994] ? __kasan_kmalloc+0xaa/0xb0 [ 794.281151][T16994] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 794.281177][T16994] ? __asan_memset+0x23/0x50 [ 794.281204][T16994] ? sg_init_table+0x20/0x60 [ 794.281230][T16994] rds_sendmsg+0x22b0/0x34d0 [ 794.281255][T16994] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 794.281287][T16994] ? __pfx_rds_sendmsg+0x10/0x10 [ 794.281326][T16994] ? selinux_socket_sendmsg+0x198/0x2f0 [ 794.281356][T16994] ? ____sys_sendmsg+0xa4d/0xbe0 [ 794.281378][T16994] ____sys_sendmsg+0xa4d/0xbe0 [ 794.281399][T16994] ? __pfx_rds_sendmsg+0x10/0x10 [ 794.281426][T16994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.281460][T16994] ___sys_sendmsg+0x190/0x1e0 [ 794.281485][T16994] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.281508][T16994] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 794.281539][T16994] ? find_held_lock+0x2b/0x80 [ 794.281580][T16994] __sys_sendmsg+0x160/0x210 [ 794.281599][T16994] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.281623][T16994] ? trace_hardirqs_off+0x70/0x170 [ 794.281653][T16994] do_syscall_64+0x123/0x790 [ 794.281676][T16994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.281696][T16994] RIP: 0033:0x7f550659e159 [ 794.281712][T16994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.281730][T16994] RSP: 002b:00007f55074a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.281748][T16994] RAX: ffffffffffffffda RBX: 00007f5506826180 RCX: 00007f550659e159 [ 794.281761][T16994] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 794.281773][T16994] RBP: 00007f55074a3090 R08: 0000000000000000 R09: 0000000000000000 [ 794.281784][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.281795][T16994] R13: 00007f5506826218 R14: 00007f5506826180 R15: 00007ffdad9d7d78 [ 794.281820][T16994] [ 794.298914][ T984] usb usb4-port1: unable to enumerate USB device [ 794.517036][T16993] jffs2: notice: (16993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 794.545439][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 794.561532][ T31] audit: type=1400 audit(1788161540.733:3518): avc: denied { write } for pid=16992 comm="syz.4.2702" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 794.562019][ T31] audit: type=1400 audit(1788161540.733:3519): avc: denied { add_name } for pid=16992 comm="syz.4.2702" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 794.562322][ T31] audit: type=1400 audit(1788161540.733:3520): avc: denied { create } for pid=16992 comm="syz.4.2702" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 794.861036][T17005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2703'. [ 795.285011][ T10] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 795.426163][ T5723] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 795.465375][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 795.476068][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 795.476106][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.476137][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.489524][ T10] usb 1-1: config 0 descriptor?? [ 795.584922][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 795.605151][ T5723] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 795.606374][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 795.606396][ T5723] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 795.606416][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.606465][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.657081][ T5723] usb 5-1: config 0 descriptor?? [ 795.780227][ T5723] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 795.780323][ T5723] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 796.354751][ T984] usb 5-1: USB disconnect, device number 8 [ 796.385510][T17009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.385890][T17009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.403242][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 796.403360][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 796.425256][ T10] usb 1-1: USB disconnect, device number 41 [ 796.596746][T17025] syzkaller0: entered promiscuous mode [ 796.596774][T17025] syzkaller0: entered allmulticast mode [ 796.624934][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 796.706060][ T5784] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 796.871310][ T5784] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 796.877911][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.877935][ T5784] usb 4-1: Product: syz [ 796.877947][ T5784] usb 4-1: Manufacturer: syz [ 796.877959][ T5784] usb 4-1: SerialNumber: syz [ 796.905398][ T5784] usb 4-1: config 0 descriptor?? [ 796.907590][ T5784] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 050 [ 796.969635][ T31] audit: type=1400 audit(1788161543.133:3521): avc: denied { connect } for pid=17036 comm="syz.4.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 797.250706][T17048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.317262][ T5784] (null): failure reading functionality [ 797.664910][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 797.751911][ T5784] i2c i2c-1: connected i2c-tiny-usb device [ 797.912854][ T5723] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 798.075374][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 798.086519][ T5723] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 798.107282][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.118760][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.118883][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.305381][ T5723] usb 1-1: config 0 descriptor?? [ 798.704938][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 799.455271][T17067] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2723'. [ 799.479943][ T5784] usb 4-1: USB disconnect, device number 50 [ 799.744985][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 799.765768][ T31] audit: type=1400 audit(1788161545.933:3522): avc: denied { getopt } for pid=17077 comm="syz.4.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 800.034880][ T984] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 800.186669][ T984] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 800.187516][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 800.187542][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.187571][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.222599][ T984] usb 6-1: config 0 descriptor?? [ 800.341777][T17086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2731'. [ 800.431665][ T31] audit: type=1400 audit(1788161546.593:3523): avc: denied { setopt } for pid=17089 comm="syz.3.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.435199][T17093] ceph: No mds server is up or the cluster is laggy [ 800.460729][ T31] audit: type=1400 audit(1788161546.623:3524): avc: denied { ioctl } for pid=17076 comm="syz.5.2728" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 800.714885][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 800.715057][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 800.785169][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 800.876471][ T31] audit: type=1400 audit(1788161547.033:3525): avc: denied { read write } for pid=17076 comm="syz.5.2728" name="video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 800.890384][ T31] audit: type=1400 audit(1788161547.043:3526): avc: denied { open } for pid=17076 comm="syz.5.2728" path="/dev/video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 800.899175][ T31] audit: type=1400 audit(1788161547.063:3527): avc: denied { read append } for pid=17076 comm="syz.5.2728" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 800.899518][ T31] audit: type=1400 audit(1788161547.063:3528): avc: denied { open } for pid=17076 comm="syz.5.2728" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 800.906272][ T31] audit: type=1400 audit(1788161547.073:3529): avc: denied { allowed } for pid=17076 comm="syz.5.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 800.906808][ T31] audit: type=1400 audit(1788161547.073:3530): avc: denied { create } for pid=17076 comm="syz.5.2728" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 800.937045][ T31] audit: type=1400 audit(1788161547.103:3531): avc: denied { read write } for pid=17076 comm="syz.5.2728" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 800.989005][T17079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.989370][T17079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.030378][ T984] usbhid 6-1:0.0: can't add hid device: -71 [ 801.030781][ T984] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 801.083376][ T984] usb 6-1: USB disconnect, device number 102 [ 801.134404][ T5723] usbhid 1-1:0.0: can't add hid device: -71 [ 801.134500][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 801.225049][ T5723] usb 1-1: USB disconnect, device number 42 [ 801.265646][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 801.272929][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 801.613599][T17117] jffs2: notice: (17117) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 801.640832][T17117] FAULT_INJECTION: forcing a failure. [ 801.640832][T17117] name failslab, interval 1, probability 0, space 0, times 0 [ 801.654470][T17117] CPU: 0 UID: 0 PID: 17117 Comm: syz.4.2740 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.654498][T17117] Tainted: [L]=SOFTLOCKUP [ 801.654505][T17117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 801.654515][T17117] Call Trace: [ 801.654522][T17117] [ 801.654529][T17117] dump_stack_lvl+0x100/0x190 [ 801.654560][T17117] should_fail_ex.cold+0x5/0xa [ 801.654585][T17117] should_failslab+0xc2/0x120 [ 801.654608][T17117] kmem_cache_alloc_noprof+0x92/0x6a0 [ 801.654627][T17117] ? check_tn_node+0x118/0x770 [ 801.654651][T17117] ? jffs2_add_full_dnode_to_inode+0xa7/0x1740 [ 801.654677][T17117] jffs2_add_full_dnode_to_inode+0xa7/0x1740 [ 801.654696][T17117] ? jffs2_do_read_inode_internal+0x1d0/0x4ac0 [ 801.654720][T17117] ? jffs2_do_read_inode_internal+0x2aa/0x4ac0 [ 801.654742][T17117] ? kfree+0x22b/0x6d0 [ 801.654773][T17117] jffs2_do_read_inode_internal+0x653/0x4ac0 [ 801.654810][T17117] ? __pfx_jffs2_do_read_inode_internal+0x10/0x10 [ 801.654841][T17117] ? lock_acquire+0x1d1/0x380 [ 801.654866][T17117] ? jffs2_do_read_inode+0x173/0x520 [ 801.654896][T17117] jffs2_do_read_inode+0x1b3/0x520 [ 801.654925][T17117] ? __pfx_jffs2_do_read_inode+0x10/0x10 [ 801.654952][T17117] ? __pfx_iget_locked+0x10/0x10 [ 801.654979][T17117] ? __mutex_lock+0x26c/0x1bd0 [ 801.655007][T17117] jffs2_iget+0x32b/0xe30 [ 801.655036][T17117] ? __pfx_jffs2_iget+0x10/0x10 [ 801.655067][T17117] ? lock_acquire+0x1d1/0x380 [ 801.655085][T17117] ? do_raw_spin_lock+0x128/0x260 [ 801.655112][T17117] jffs2_lookup+0x353/0x410 [ 801.655139][T17117] lookup_one_qstr_excl+0x1cd/0x250 [ 801.655164][T17117] ? mnt_want_write+0x164/0x420 [ 801.655185][T17117] filename_create+0x1cf/0x400 [ 801.655204][T17117] ? __pfx_filename_create+0x10/0x10 [ 801.655226][T17117] ? __might_fault+0xc5/0x140 [ 801.655255][T17117] filename_mknodat+0x190/0x7f0 [ 801.655282][T17117] ? __pfx_filename_mknodat+0x10/0x10 [ 801.655303][T17117] ? strncpy_from_user+0x19d/0x2d0 [ 801.655336][T17117] ? do_getname+0x191/0x390 [ 801.655363][T17117] __x64_sys_mknod+0x8f/0xc0 [ 801.655382][T17117] do_syscall_64+0x123/0x790 [ 801.655401][T17117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.655417][T17117] RIP: 0033:0x7fe39cb9e159 [ 801.655435][T17117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.655450][T17117] RSP: 002b:00007fe39db1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 801.655466][T17117] RAX: ffffffffffffffda RBX: 00007fe39ce25fa0 RCX: 00007fe39cb9e159 [ 801.655476][T17117] RDX: 0000000000000709 RSI: 0000000000002000 RDI: 0000200000000500 [ 801.655484][T17117] RBP: 00007fe39db1c090 R08: 0000000000000000 R09: 0000000000000000 [ 801.655493][T17117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.655502][T17117] R13: 00007fe39ce26038 R14: 00007fe39ce25fa0 R15: 00007ffcd20aa198 [ 801.655523][T17117] [ 801.797039][ T984] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 801.817597][ T5723] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 801.825043][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 801.925193][T17117] jffs2: error: (17117) new_fragment: cannot allocate a jffs2_node_frag object [ 801.925211][T17117] jffs2: error: (17117) jffs2_build_inode_fragtree: Add node to tree failed -12 [ 801.925353][T17117] jffs2: error: (17117) jffs2_do_read_inode_internal: Failed to build final fragtree for inode #4: error -12 [ 801.925468][T17117] jffs2: iget() failed for ino #4 [ 801.946148][ T984] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 801.947100][ T984] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.947137][ T984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.951350][ T984] usb 7-1: config 0 descriptor?? [ 801.956365][ T984] pwc: Askey VC010 type 2 USB webcam detected. [ 802.029495][ T5723] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 802.040082][ T5723] usb 1-1: config 0 has no interfaces? [ 802.076588][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.076623][ T5723] usb 1-1: Product: syz [ 802.076648][ T5723] usb 1-1: Manufacturer: syz [ 802.076665][ T5723] usb 1-1: SerialNumber: syz [ 802.103023][ T5723] usb 1-1: config 0 descriptor?? [ 802.154485][ T984] pwc: recv_control_msg error -32 req 02 val 2b00 [ 802.156027][ T984] pwc: recv_control_msg error -32 req 02 val 2700 [ 802.156493][ T984] pwc: recv_control_msg error -32 req 02 val 2c00 [ 802.178172][ T5784] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 802.178978][ T984] pwc: recv_control_msg error -32 req 04 val 1000 [ 802.212911][ T984] pwc: recv_control_msg error -32 req 04 val 1300 [ 802.216309][ T984] pwc: recv_control_msg error -32 req 04 val 1400 [ 802.222234][ T984] pwc: recv_control_msg error -32 req 02 val 2000 [ 802.227425][ T984] pwc: recv_control_msg error -32 req 02 val 2100 [ 802.229900][ T984] pwc: recv_control_msg error -32 req 04 val 1500 [ 802.236927][ T984] pwc: recv_control_msg error -32 req 02 val 2500 [ 802.336764][ T5784] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 802.350367][ T5784] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 802.358624][ T5784] usb 6-1: config 1 has no interface number 0 [ 802.368280][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.378108][ T5784] usb 6-1: Product: syz [ 802.382632][ T5784] usb 6-1: Manufacturer: syz [ 802.387612][ T5784] usb 6-1: SerialNumber: syz [ 802.407679][ T5784] usb 6-1: cannot find UAC_HEADER [ 802.426306][T17136] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 802.443884][ T984] pwc: recv_control_msg error -71 req 02 val 2600 [ 802.445631][ T984] pwc: recv_control_msg error -71 req 02 val 2900 [ 802.445961][ T984] pwc: recv_control_msg error -71 req 02 val 2800 [ 802.448003][ T984] pwc: recv_control_msg error -71 req 04 val 1100 [ 802.448644][ T984] pwc: recv_control_msg error -71 req 04 val 1200 [ 802.457263][ T984] pwc: Registered as video103. [ 802.464269][ T984] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input86 [ 802.489427][ T984] usb 7-1: USB disconnect, device number 107 [ 802.545564][ T5723] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 802.602721][ T5784] snd-usb-audio 6-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 802.623030][ T5784] usb 6-1: USB disconnect, device number 103 [ 802.705415][ T5723] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 802.719312][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.731215][ T5723] usb 5-1: Product: syz [ 802.735885][ T5723] usb 5-1: Manufacturer: syz [ 802.735906][ T5723] usb 5-1: SerialNumber: syz [ 802.767493][ T5723] usb 5-1: config 0 descriptor?? [ 802.786695][ T5723] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 009 [ 802.822984][T17139] [ 802.825347][T17139] ====================================================== [ 802.826837][ T9714] udevd[9714]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.848078][T17139] WARNING: possible circular locking dependency detected [ 802.855105][T17139] syzkaller #0 Tainted: G L [ 802.861082][T17139] ------------------------------------------------------ [ 802.864925][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 802.874928][T17139] syz.3.2744/17139 is trying to acquire lock: [ 802.880998][T17139] ffff88804a1e5368 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 802.890927][T17139] [ 802.890927][T17139] but task is already holding lock: [ 802.898283][T17139] ffffffff90fbb080 (rpcb_create_local_mutex){+.+.}-{4:4}, at: rpcb_create_local+0x100/0x270 [ 802.908377][T17139] [ 802.908377][T17139] which lock already depends on the new lock. [ 802.908377][T17139] [ 802.918770][T17139] [ 802.918770][T17139] the existing dependency chain (in reverse order) is: [ 802.927771][T17139] [ 802.927771][T17139] -> #5 (rpcb_create_local_mutex){+.+.}-{4:4}: [ 802.936098][T17139] lock_acquire+0x1d1/0x380 [ 802.941114][T17139] __mutex_lock+0x1a4/0x1bd0 [ 802.946215][T17139] rpcb_create_local+0x100/0x270 [ 802.951674][T17139] svc_bind+0x1e8/0x260 [ 802.956339][T17139] nfsd_create_serv+0x2da/0x4a0 [ 802.961692][T17139] write_ports+0x2ef/0xcc0 [ 802.966614][T17139] nfsctl_transaction_write+0x106/0x1a0 [ 802.972668][T17139] vfs_write+0x2aa/0x1050 [ 802.977508][T17139] ksys_write+0x12a/0x250 [ 802.982335][T17139] do_syscall_64+0x123/0x790 [ 802.987446][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.993840][T17139] [ 802.993840][T17139] -> #4 (nfsd_mutex){+.+.}-{4:4}: [ 803.001032][T17139] lock_acquire+0x1d1/0x380 [ 803.006042][T17139] __mutex_lock+0x1a4/0x1bd0 [ 803.011136][T17139] nfsd_nl_svc_export_set_reqs_doit+0x8a/0x2f0 [ 803.017794][T17139] genl_family_rcv_msg_doit+0x214/0x300 [ 803.023842][T17139] genl_rcv_msg+0x560/0x800 [ 803.028868][T17139] netlink_rcv_skb+0x159/0x420 [ 803.034143][T17139] genl_rcv+0x28/0x40 [ 803.038635][T17139] netlink_unicast+0x585/0x850 [ 803.043912][T17139] netlink_sendmsg+0x8b0/0xda0 [ 803.049186][T17139] ____sys_sendmsg+0xa4d/0xbe0 [ 803.054456][T17139] ___sys_sendmsg+0x190/0x1e0 [ 803.059636][T17139] __sys_sendmsg+0x160/0x210 [ 803.064725][T17139] do_syscall_64+0x123/0x790 [ 803.069818][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.076217][T17139] [ 803.076217][T17139] -> #3 (cb_lock){++++}-{4:4}: [ 803.083164][T17139] lock_acquire+0x1d1/0x380 [ 803.088181][T17139] down_read+0x99/0x4c0 [ 803.092843][T17139] genl_rcv+0x19/0x40 [ 803.097334][T17139] netlink_unicast+0x585/0x850 [ 803.102606][T17139] netlink_sendmsg+0x8b0/0xda0 [ 803.107879][T17139] sock_sendmsg+0x394/0x410 [ 803.112906][T17139] splice_to_socket+0xb3c/0x11a0 [ 803.118366][T17139] do_splice+0x109c/0x1fa0 [ 803.123286][T17139] __do_splice+0x33b/0x370 [ 803.128216][T17139] __x64_sys_splice+0x187/0x250 [ 803.133575][T17139] do_syscall_64+0x123/0x790 [ 803.138677][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.145094][T17139] [ 803.145094][T17139] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 803.152476][T17139] lock_acquire+0x1d1/0x380 [ 803.157501][T17139] __mutex_lock+0x1a4/0x1bd0 [ 803.162615][T17139] pipe_lock+0x69/0x80 [ 803.167198][T17139] iter_file_splice_write+0x1fd/0x10b0 [ 803.173165][T17139] do_splice+0x109c/0x1fa0 [ 803.178086][T17139] __do_splice+0x33b/0x370 [ 803.183003][T17139] __x64_sys_splice+0x187/0x250 [ 803.188358][T17139] do_syscall_64+0x123/0x790 [ 803.193451][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.199846][T17139] [ 803.199846][T17139] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 803.207212][T17139] lock_acquire+0x1d1/0x380 [ 803.212215][T17139] mnt_want_write+0x6f/0x420 [ 803.217305][T17139] ovl_create_object+0x130/0x3b0 [ 803.222744][T17139] lookup_open+0x1255/0x1990 [ 803.227839][T17139] path_openat+0xa2c/0x2440 [ 803.232845][T17139] do_file_open+0x20e/0x430 [ 803.237852][T17139] do_sys_openat2+0x10f/0x1e0 [ 803.243032][T17139] __x64_sys_openat+0x12d/0x210 [ 803.248386][T17139] do_syscall_64+0x123/0x790 [ 803.253478][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.259872][T17139] [ 803.259872][T17139] -> #0 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 803.268717][T17139] check_prev_add+0xeb/0xe60 [ 803.273807][T17139] __lock_acquire+0x1492/0x1ec0 [ 803.279156][T17139] lock_acquire+0x1d1/0x380 [ 803.284160][T17139] down_read+0x99/0x4c0 [ 803.288837][T17139] lookup_slow+0x42/0x70 [ 803.293585][T17139] link_path_walk+0x1377/0x1cc0 [ 803.298936][T17139] path_lookupat+0x74/0xc40 [ 803.303938][T17139] filename_lookup+0x202/0x590 [ 803.309201][T17139] kern_path+0x37/0x50 [ 803.313780][T17139] unix_find_other+0xfc/0xab0 [ 803.318965][T17139] unix_stream_connect+0x435/0x1a40 [ 803.324670][T17139] kernel_connect+0x107/0x160 [ 803.329846][T17139] xs_local_connect+0x5ee/0xd40 [ 803.335198][T17139] xprt_connect+0x7d1/0x9c0 [ 803.340204][T17139] call_connect+0x1d9/0x2f0 [ 803.345210][T17139] __rpc_execute+0x36d/0x11d0 [ 803.350387][T17139] rpc_execute+0x303/0x3f0 [ 803.355302][T17139] rpc_run_task+0x4a4/0x660 [ 803.360305][T17139] rpc_call_null_helper+0x13e/0x190 [ 803.366004][T17139] rpc_ping+0xb4/0x150 [ 803.370570][T17139] rpc_create_xprt+0x387/0x440 [ 803.375832][T17139] rpc_create+0x46e/0x7f0 [ 803.380661][T17139] rpcb_create_af_local+0x177/0x360 [ 803.386363][T17139] rpcb_create_local+0x211/0x270 [ 803.391807][T17139] svc_bind+0x1e8/0x260 [ 803.396468][T17139] nfsd_create_serv+0x2da/0x4a0 [ 803.401818][T17139] write_ports+0x2ef/0xcc0 [ 803.406733][T17139] nfsctl_transaction_write+0x106/0x1a0 [ 803.412780][T17139] vfs_write+0x2aa/0x1050 [ 803.417617][T17139] ksys_write+0x12a/0x250 [ 803.422444][T17139] do_syscall_64+0x123/0x790 [ 803.427535][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.433933][T17139] [ 803.433933][T17139] other info that might help us debug this: [ 803.433933][T17139] [ 803.444135][T17139] Chain exists of: [ 803.444135][T17139] &ovl_i_mutex_dir_key[depth]#2 --> nfsd_mutex --> rpcb_create_local_mutex [ 803.444135][T17139] [ 803.458628][T17139] Possible unsafe locking scenario: [ 803.458628][T17139] [ 803.466054][T17139] CPU0 CPU1 [ 803.471394][T17139] ---- ---- [ 803.476736][T17139] lock(rpcb_create_local_mutex); [ 803.481826][T17139] lock(nfsd_mutex); [ 803.488302][T17139] lock(rpcb_create_local_mutex); [ 803.495910][T17139] rlock(&ovl_i_mutex_dir_key[depth]#2); [ 803.501617][T17139] [ 803.501617][T17139] *** DEADLOCK *** [ 803.501617][T17139] [ 803.509734][T17139] locks held by syz.3.2744/17139: 4, last CPU#0: [ 803.516037][T17139] #0: ffff88807e258470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 803.525068][T17139] #1: ffff888031a76460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 803.534094][T17139] #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 803.542857][T17139] #3: ffffffff90fbb080 (rpcb_create_local_mutex){+.+.}-{4:4}, at: rpcb_create_local+0x100/0x270 [ 803.553362][T17139] [ 803.553362][T17139] stack backtrace: [ 803.559232][T17139] CPU: 0 UID: 0 PID: 17139 Comm: syz.3.2744 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.570148][T17139] Tainted: [L]=SOFTLOCKUP [ 803.574447][T17139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 803.584481][T17139] Call Trace: [ 803.587741][T17139] [ 803.590654][T17139] dump_stack_lvl+0x100/0x190 [ 803.595319][T17139] print_circular_bug.cold+0x178/0x1be [ 803.600768][T17139] check_noncircular+0x146/0x160 [ 803.605710][T17139] check_prev_add+0xeb/0xe60 [ 803.610292][T17139] ? selinux_inode_permission+0x14a/0x1130 [ 803.616105][T17139] __lock_acquire+0x1492/0x1ec0 [ 803.620948][T17139] ? kernfs_iop_permission+0x94/0xc0 [ 803.626222][T17139] lock_acquire+0x1d1/0x380 [ 803.630707][T17139] ? lookup_slow+0x42/0x70 [ 803.635115][T17139] ? __pfx___might_resched+0x10/0x10 [ 803.640389][T17139] ? find_held_lock+0x2b/0x80 [ 803.645054][T17139] down_read+0x99/0x4c0 [ 803.649203][T17139] ? lookup_slow+0x42/0x70 [ 803.653603][T17139] ? __pfx_down_read+0x10/0x10 [ 803.658350][T17139] ? __d_lookup+0x266/0x4a0 [ 803.662833][T17139] lookup_slow+0x42/0x70 [ 803.667062][T17139] link_path_walk+0x1377/0x1cc0 [ 803.671895][T17139] path_lookupat+0x74/0xc40 [ 803.676380][T17139] ? do_syscall_64+0x123/0x790 [ 803.681125][T17139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.687174][T17139] filename_lookup+0x202/0x590 [ 803.691920][T17139] ? __pfx_filename_lookup+0x10/0x10 [ 803.697192][T17139] ? do_getname_kernel+0x5d/0x250 [ 803.702203][T17139] ? __asan_memcpy+0x3c/0x60 [ 803.706782][T17139] kern_path+0x37/0x50 [ 803.710830][T17139] unix_find_other+0xfc/0xab0 [ 803.715497][T17139] ? __pfx_unix_find_other+0x10/0x10 [ 803.720782][T17139] unix_stream_connect+0x435/0x1a40 [ 803.725971][T17139] kernel_connect+0x107/0x160 [ 803.730630][T17139] ? __pfx_kernel_connect+0x10/0x10 [ 803.735807][T17139] ? release_sock+0x21/0x280 [ 803.740390][T17139] ? __local_bh_enable_ip+0xa5/0x120 [ 803.745656][T17139] xs_local_connect+0x5ee/0xd40 [ 803.750490][T17139] ? __pfx_xs_local_connect+0x10/0x10 [ 803.755853][T17139] ? do_raw_spin_unlock+0x145/0x1e0 [ 803.761039][T17139] ? _raw_spin_unlock+0x28/0x50 [ 803.765880][T17139] xprt_connect+0x7d1/0x9c0 [ 803.770369][T17139] ? __pfx_call_connect+0x10/0x10 [ 803.775377][T17139] call_connect+0x1d9/0x2f0 [ 803.779867][T17139] __rpc_execute+0x36d/0x11d0 [ 803.784523][T17139] ? __pfx___rpc_execute+0x10/0x10 [ 803.789613][T17139] ? rpc_task_get_xprt.part.0+0xdd/0x2a0 [ 803.795237][T17139] rpc_execute+0x303/0x3f0 [ 803.799639][T17139] rpc_run_task+0x4a4/0x660 [ 803.804142][T17139] rpc_call_null_helper+0x13e/0x190 [ 803.809332][T17139] ? __pfx_rpc_call_null_helper+0x10/0x10 [ 803.815044][T17139] ? rpc_client_register+0x3e0/0x6f0 [ 803.820319][T17139] ? __pfx_rpc_client_register+0x10/0x10 [ 803.825939][T17139] ? rcu_is_watching+0x13/0xc0 [ 803.830690][T17139] ? rpc_new_client+0xb07/0x1300 [ 803.835616][T17139] rpc_ping+0xb4/0x150 [ 803.839667][T17139] rpc_create_xprt+0x387/0x440 [ 803.844411][T17139] rpc_create+0x46e/0x7f0 [ 803.848720][T17139] ? kernel_text_address+0x8d/0x100 [ 803.853906][T17139] ? __pfx_rpc_create+0x10/0x10 [ 803.858744][T17139] ? check_prev_add+0x354/0xe60 [ 803.863576][T17139] rpcb_create_af_local+0x177/0x360 [ 803.868762][T17139] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 803.874472][T17139] ? find_held_lock+0x2b/0x80 [ 803.879135][T17139] ? rpcb_create_local+0x1da/0x270 [ 803.884233][T17139] ? rpcb_create_local+0x1da/0x270 [ 803.889331][T17139] rpcb_create_local+0x211/0x270 [ 803.894254][T17139] svc_bind+0x1e8/0x260 [ 803.898395][T17139] nfsd_create_serv+0x2da/0x4a0 [ 803.903228][T17139] ? __pfx_nfsd_create_serv+0x10/0x10 [ 803.904935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 803.915414][T17139] ? net_generic+0xea/0x2a0 [ 803.919906][T17139] write_ports+0x2ef/0xcc0 [ 803.924306][T17139] ? __pfx_write_ports+0x10/0x10 [ 803.929223][T17139] ? __might_fault+0xc5/0x140 [ 803.933888][T17139] ? find_held_lock+0x2b/0x80 [ 803.938549][T17139] ? __might_fault+0xc5/0x140 [ 803.943212][T17139] ? __pfx_write_ports+0x10/0x10 [ 803.948130][T17139] ? _copy_from_user+0x59/0xd0 [ 803.952882][T17139] ? __pfx_write_ports+0x10/0x10 [ 803.957799][T17139] nfsctl_transaction_write+0x106/0x1a0 [ 803.963341][T17139] vfs_write+0x2aa/0x1050 [ 803.967661][T17139] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 803.973709][T17139] ? lock_acquire+0x1d1/0x380 [ 803.978366][T17139] ? __fget_files+0x34/0x3d0 [ 803.982939][T17139] ? __pfx_vfs_write+0x10/0x10 [ 803.987688][T17139] ? find_held_lock+0x2b/0x80 [ 803.992353][T17139] ? __fget_files+0x215/0x3d0 [ 803.997014][T17139] ? __fget_files+0x21f/0x3d0 [ 804.001674][T17139] ksys_write+0x12a/0x250 [ 804.005984][T17139] ? __pfx_ksys_write+0x10/0x10 [ 804.010815][T17139] do_syscall_64+0x123/0x790 [ 804.015387][T17139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.021274][T17139] RIP: 0033:0x7fa5b579e159 [ 804.025683][T17139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.045270][T17139] RSP: 002b:00007fa5b668b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.053666][T17139] RAX: ffffffffffffffda RBX: 00007fa5b5a26180 RCX: 00007fa5b579e159 [ 804.061616][T17139] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000006 [ 804.069566][T17139] RBP: 00007fa5b5835024 R08: 0000000000000000 R09: 0000000000000000 [ 804.077520][T17139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.085472][T17139] R13: 00007fa5b5a26218 R14: 00007fa5b5a26180 R15: 00007ffe4ec324e8 [ 804.093431][T17139] [ 804.103633][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.162074][T12091] svc: failed to register nfsdv3 RPC service (errno 111). [ 804.171548][T12091] svc: failed to register nfsaclv3 RPC service (errno 111). [ 804.179516][T12091] failed to unregister tcp with rpcbind [ 804.185409][T12091] svc: failed to register nfsdv3 RPC service (errno 97). [ 804.185580][T12091] svc: failed to register nfsaclv3 RPC service (errno 97). [ 804.185592][T12091] failed to unregister tcp with rpcbind [ 804.314111][ T5723] (null): failure reading functionality [ 804.320517][ T5723] i2c i2c-1: connected i2c-tiny-usb device [ 804.523017][T17134] syzkaller1: entered promiscuous mode [ 804.523040][T17134] syzkaller1: entered allmulticast mode [ 804.616160][ T5701] usb 5-1: USB disconnect, device number 9 [ 804.944935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 805.198942][ T5701] usb 1-1: USB disconnect, device number 43 [ 805.984886][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 807.024887][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 808.064859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 809.104897][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 810.144934][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 811.184887][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 812.224892][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available