last executing test programs: 14m8.404753185s ago: executing program 0 (id=1282): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="d7", 0x1}], 0x2) syz_usb_disconnect(r0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000002080)='cmdline\x00') 14m4.208825014s ago: executing program 0 (id=1297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000500), 0x9, 0xc400) sendmsg$nl_generic(r1, 0x0, 0x2004c004) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0xd00, 0x4, 0x1, 0x0, 0x3, 0xcc7, 0x8, 0x7, 0x5, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x8c, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0xffff, 0xfffffff4]}) 14m3.721699214s ago: executing program 0 (id=1299): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) 14m3.6354728s ago: executing program 0 (id=1300): r0 = getpid() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000240)=0x4, 0x4) sendmmsg$unix(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 14m3.533405316s ago: executing program 0 (id=1302): r0 = socket(0x2b, 0x800, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x1f}}], 0x2, 0x8005) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@null, 0xd, 'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0xc8240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 14m3.086287234s ago: executing program 0 (id=1304): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640)={0x1, 0x0, [{0x8080000, 0x63, &(0x7f00000001c0)=""/99}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 14m2.091062647s ago: executing program 32 (id=1304): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640)={0x1, 0x0, [{0x8080000, 0x63, &(0x7f00000001c0)=""/99}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 11m59.334772045s ago: executing program 5 (id=1816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000010a01040000af9459f1e2b0357b56d6dcb0b8312be60000000000000200ee7ba8c59934f0e231d86e62f98655ec00002a00060076db049f6d90a483b9421960fab0ed9097f5a13d7a10a2903d119611dd0000090001005b5a36d0b03b64ecd6cb8a54e544ceb387809cc83858d5"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) writev(r4, &(0x7f0000000040), 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = dup(r0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000400)={r6, 0x38, "b7e4efb652b763997f278111b47139d262dfcebbbe306e1ef08d52e04a8604bc3e6e86a8be61a041d1ed70aaa02e7211d1377946bd00682f"}, &(0x7f00000000c0)=0x40) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x9eef, @rand_addr=' \x01\x00', 0x14c0}]}, &(0x7f0000000100)=0x10) 11m55.756938583s ago: executing program 5 (id=1827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x1fffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x1f00, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r1, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 11m55.29528474s ago: executing program 5 (id=1829): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xfffffffffffffeb0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m55.031488042s ago: executing program 5 (id=1830): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x4000000000000159, 0x0, &(0x7f0000000280)=[0x0]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x1000, 0x1, 0x0, 0x7}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)="f9", 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x444, 0x40, 0x401, 0x2, 0xc355, 0x17c, 0x7fffffff}}], 0x30, 0x4040850}, 0x40000) 11m54.782026574s ago: executing program 5 (id=1832): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xdaa9, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_pgetevents(r4, 0x3, 0x5, &(0x7f0000000680)=[{}, {}, {}, {}, {}], &(0x7f0000000440)={r7, r8+60000000}, &(0x7f0000000740)={&(0x7f0000000480)={[0x5]}, 0x8}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000580)={'filter\x00', 0xb2, "0affd25e67bbec17b1d862c6f1e9e1ec17f9c850dd5b92763037ca499d04800883069fe6ef9a2ea83db0019983c802c20dcbf71bfe4e9d2b829965cf0c73d10a97dc40c7c7d05e82e062ec2e398b3506ce51e2ce842988fdd0aa834bbc7bd5c11a0927e147e86c8b38a194b9102acf4070c33fdf6a24ad2b9ffccbb207b8575f9cff0980e94faf24f26d5b48eb24e0aebffb786b6928970147f469a39d7f7e698a8e8da7c6075eb94f4a10a12954a39b4009"}, &(0x7f0000000240)=0xd6) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000200)={r10, 0x1000}, 0x8) 11m53.768942004s ago: executing program 5 (id=1838): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001"], 0x54}}, 0x4800) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 11m38.662595924s ago: executing program 33 (id=1838): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001"], 0x54}}, 0x4800) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 8m24.295515347s ago: executing program 3 (id=2541): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x80001, 0x5, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x2, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r6 = syz_clone3(0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r7, 0x402, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x1, r5, 0x4}) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES16=r7, @ANYRES16=r6, @ANYBLOB="010026bd70003c02000002000000eb000100", @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8044) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="116346900303000000cc7c2fe84c5849a3a94fd56840876c9b109421381fedea5fa252d62e9c7418336a7997447107c343f1df409a1e130986ed409cc71d38459ca274094820cce499", 0x49}], 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x0, 0xffffffffffffffff}}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(r9, 0x3, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r10 = getpid() sched_setscheduler(r10, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r11, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 8m23.699550467s ago: executing program 3 (id=2543): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e26, 0x403, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x4c040) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 8m23.245263587s ago: executing program 3 (id=2545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = signalfd(r0, &(0x7f0000000040)={[0xd]}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58, &(0x7f0000000240)}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x1000000008, 0x2, 0x4000000080000e52, 0x4, 0x40b, 0x1043, 0x200000000006, 0x4, 0x5, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8, 0xfffffffffffffffc], 0xdddd0000, 0xc0110}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m22.390974399s ago: executing program 3 (id=2548): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000900)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 8m22.244472978s ago: executing program 3 (id=2551): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x2010) 8m22.184779755s ago: executing program 3 (id=2552): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="d7", 0x1}], 0x2) syz_usb_disconnect(r0) 8m6.8492014s ago: executing program 34 (id=2552): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="d7", 0x1}], 0x2) syz_usb_disconnect(r0) 1m24.611795796s ago: executing program 6 (id=3984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpid() r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r2, 0x1000, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000f000000000000000600000018110000", @ANYRES32, @ANYBLOB="00000000000003ccb702000014000000b703000000008500000083000000bf090000000000005509010000000000950000dda4d50d68000000000018280000", @ANYRES32, @ANYBLOB="00000000fdffffff9500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x8e, &(0x7f0000000300)=""/142, 0x40f00, 0x22, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0x1ff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x10, 0x2}, 0x94) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) 1m22.888160573s ago: executing program 6 (id=3990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '.'}, {0x20, '\x00'}, {0x20, '-'}, {0x20, '\x00'}], 0xa, "63118a2bde2e61adaba6ddca9436"}, 0x21) socket(0x22, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="980b96f3aeee473f0247072144940782ea7e2534dfe0317258294331ebce04bfc8f8f0797af7096c7eb07204fb17b8077de4ca14fd6470c900a51b8c2f7d17d16a369cd78cb47f5dfbd6d102d62dfa36d6cc05d3da8ec030bbd9b4ae80768a84a707259a5bf2ec37c15bbc00f05a05f340a2c6ba33cf31c8cf66acf0d3520cd72f4abdcf356ffc3a63838cfb14f07abbc83c93f9b68b6f978685484eee23b5709d4d469b64d6c3601c6bae8e384894a9f885f4f42fe512f2139de0ea876d27114e5776d60143c01e0d649aac3831b4907c90077e07a1643fd46b1fbf6eb6d3c99ccb8ad9fb", 0xe5}, {&(0x7f0000000440)="eadeec6b36ad0b78e49d578fd33ac9b5dcab4fcdfef2cc58adab15b899efc3f67f117ef5fc6a5030ac15", 0x2a}, {&(0x7f0000000480)="1a254b9275a5c32c5db2398f4a7aaf53c7d81d11032bd2140ab3", 0x1a}, {&(0x7f00000004c0)="86339143749cf41517b25606fd70a7a421e48275f6266c469d3eae35da10e8465b70fe0624545cd4dda6e07fc24775eddf5c0a1e66080896429ffe46e6f3fabbcec90bb79673f4ec7e066c2b34536852a8f5a120ae1de112b1b3e3", 0x5b}, {&(0x7f0000000540)="e5935c48fa139d5de80f2a69c6a927273c", 0x11}, {&(0x7f0000000580)="e0d9ec624000a966fb6e9b3a398de084c1e37e716979a6b9e91dd0088496cc9d09255153774fb53ae787096f06c625e2188adb65cd10efea0589ca8ee0b5a94d2e9b463d5ce62f25085fe112f20c5fe73152f17add1107a98bc657ce6d4729099013f1ae28cc789f664badbba3aac0698c5808f35d6564b0649fc3520aa8d61a22d7668c50d36909b1cc4639a7ef2f7343e190fa0365f13475584467d777672b220c22ced80075551b1f304269", 0xad}, {&(0x7f0000000fc0)="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", 0x1000}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES16=0x0, @ANYRES8=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000002c00000000000000a7ff00003a010000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYRES32=r7, @ANYRES16=r7, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x140}}, {{&(0x7f0000002100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002480)=[{&(0x7f00000006c0)="67b010917672f4b5a2fe77cef6d39db2eb6d413ef3c53a2e3e3b6300e21c4aeb0ca2b5e05599d11c623baccd13b163c6d94b146e438ffa28a4aac4da8ad4fc8852b00164f130d975db4b9b7ee560c2d236b82827b39d2c6d1a8bb875cd2f5904499eed792a4ce05c6f3ab122c19fe01d2e51cca90078ec657555811c1ba351fff282f994923566194b8eb0a6674fd5faceeac2b8d8d0f5f4fc999e961db79d96bcf2d2710f9ac1c278adca2339552de1891b528e19baba7e9d0ecdf34b59dc3efbfde477fd687836a627fad0bc0c3aa8f224e9cf3dd8b04df5edab61904e", 0xde}, {&(0x7f0000000b00)="af0c6fd8156286e51be52abb14dcc496ad79c0d58b321a2981a8fa76bedc6031c886257384c741fb", 0x28}, {&(0x7f0000002280)="e3e11df9ba49ffd5627aa44ccc57cdbfa27bbf8d92eaad20eeed2502777ca4d5ab375f0e4a50c34b7f22977b7871737c4522ea82331a9d3d35bb767cf77531e80c7858c149f530d5acf04589475f0d4d94e7c16a1260029c09ca14aaa9201bd982e13cfe4364ba0b45c18ca8896201556ec67a6ee36b3af25c194d768749b0035ff9d851744a1ca211c7c84566a34651f2a48ccb862456c1b7bed74ec3fe8cdc7a2ada69874f78de362e12399c71e31be36d15d493a58232e04346ec61eacc9dad3904df7bc4296021c4a9d4f1f85fc42d473a", 0xd3}, {&(0x7f0000002380)="73cef3dc2879e5be2429ada553a967a8b814db80c4e3d6524f9ebd22bc08e669d56771563918c01a1b0d6d188287c2cb05c122728460859575895c9547f1d741048afb3561ec71e06425afcbd6d78f83fa6e54c5b812fd589214216c1f15732ce6ed09ee10d334f911cfaa4a83074aa3", 0x70}, {&(0x7f0000002400)="a378b9d106eeebff8557bf715a86a748a1a6e788bf2d04203299add8539ff56143f852e50c20fef6cccd49a1f84410a517deefe436301507d18d54b9f8d97e825642f1214b233ad85c812a0275ae0ed2ea3ca39102222cb2b477c384af4b095ee42cf2d97c73590cd32e230774c8a32b168a81744e93a4bbc38b442560", 0x7d}], 0x5, 0x0, 0x0, 0x80001}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0xe8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2a000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, &(0x7f0000000140)) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000140)={r9}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7e, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r10}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x11, &(0x7f0000000200)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) 1m21.923748462s ago: executing program 6 (id=3992): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00'}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40}}, 0x90) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x9) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 1m21.013789641s ago: executing program 6 (id=3997): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f000000a900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) times(0xfffffffffffffffc) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x408c5}, 0x4048040) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x28, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) read$FUSE(r0, 0x0, 0x9) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xb}, {0xc, 0xfff1}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m19.165110059s ago: executing program 6 (id=4002): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000010000800018000000180000000200000000005c000100000004002000000000b6038fad40b20002"], 0x0, 0x32, 0x0, 0x1}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100005800c00068008"], 0x34}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) 1m17.663328286s ago: executing program 6 (id=4004): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x7, 0x89}, {0x1}, 0x94, 0x2, 0x9}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r6, &(0x7f0000000500)=""/166, 0xa6) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x7) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 1m2.310499417s ago: executing program 35 (id=4004): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x7, 0x89}, {0x1}, 0x94, 0x2, 0x9}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r6, &(0x7f0000000500)=""/166, 0xa6) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x7) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 27.801902918s ago: executing program 7 (id=4180): r0 = socket(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fstat(r1, 0x0) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002500)={0x10, 0x19, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000400), 0x0, 0x14}, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x10, 0xffffffff, 0x1, 0x1a449, 0x3, 0x0, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0xffffffff, 0x10000, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r3, 0x6411) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) setsockopt(r0, 0x29, 0x6, 0x0, 0x2000) 26.568444111s ago: executing program 7 (id=4182): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x804) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x101, 0x0, 0x0, {0xe, 0x0, 0x4}, [@CTA_LABELS_MASK={0x10, 0x17, [0xfff, 0x3, 0x8000]}, @CTA_TUPLE_ORIG={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)={0x2a0, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41590085}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33d2982d}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x142d5d5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71af996e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5567517}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f5de7a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24467a49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48f82d77}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e80384b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa4f9f2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd50557}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cc71e70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35fde564}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbec6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e4ddd9c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36254b39}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x515870d2}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6662c751}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x465b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdbfa688}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40e14c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf52f6ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1516af72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fe080c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc698}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4094a895}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60170146}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x522bc9e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x453f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ab8c959}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfca3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31990f0c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeab3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc361}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bfd288b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36222ac5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bb30852}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef56}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b9b5a9d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa749}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cd82149}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2401}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1303}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7613}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) syz_emit_vhci(&(0x7f00000009c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001380)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xdd9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1000}]}}}]}, @NFT_MSG_NEWTABLE={0x15c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x101, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5bc, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x580, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x498, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x488, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xa1}, @NFTA_BITWISE_XOR={0x1ec, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "48edc59b10c03577207a611cfab80a5bcadcafb3ae"}, @NFTA_DATA_VALUE={0xaf, 0x1, "aea5d5468c6ccf41de23e5a871ac16a7a0d9ff789c3cbcc67ae386cf7e954ab4d1b25bc379ab55e8160613d5259ad0ca804da7c8910a44f5b3b053fb4ce779b9998756bdfae8cc9e30d8727ae0aea0f3625f7dbaf171d4fe621f3b6208c2e9aac57872c1de4a5683c36d92fd0a29fbfeccac04ade793d15d6542e12524b7655bc311094987eb36a2f16125b05b78dd439565f597ae1a1ddde0c79b85cdc8e2b7a05bfbe7626ba25e019003"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x20, 0x1, "518f1ca5a5328e60a11bfe07c75c158d61ce87d492027e6e4305ed1d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_XOR={0x278, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "e52204e644b403a452e6f197c3b19a7e4226712a1f097e68b3e4e89ae449feb528b48e2244bcc5721eea8b943262da6f531c9fd874a5d3aa34755c4da3632d7fdf40aa03e6a21d8f95c204c3e677a7af1d648981e417c908254859b08ffe673777d92c14d4d57cedf4c6dd6a5835ff67a0284404ecafcde1493f3314da2fc719678a3a128ee1f917ec1b0f694c6dc399a497ceae5ac3a9fd071a670e2a4ffc663be236c68fd51d6457c6c1d2afd0419cf98a10b2a1833464710356b6ef1efa60dea47a"}, @NFTA_DATA_VALUE={0x48, 0x1, "7490392dac74a9484171ca5e84fb3b262229944f28d928a92b576bf5be6d5a5d251913d3107d04641095b7ce10b31874b039db87b51da02a3c531cf032964bf9e494c69b"}, @NFTA_DATA_VALUE={0x5d, 0x1, "25bb739995af62bfe8fc0348f1e3be2c2ca45747e025dd2d2a56ab22960db07f9b155b8d2009e6d11c58142ee71c52e5208d0c6a813306202b49f9987d312210e2fda61922d4a7fdfb4fc9b77a439f3b1b97cb0c3083bc3f9e"}, @NFTA_DATA_VALUE={0x70, 0x1, "d05ca0050d3175a3eea19618c15201275b45555c9a0db39a3b3f2c102143285ab1a7b8fdfd5a00b5497cb632ae796e7752f1f59ebc46a812d31feaf5f794b42cd163d1d0b33ba1e91e7d36dab3a3661af0ef01ed82bfc6d382c1045d309c84eb1f86350c612b39601a356bbc"}, @NFTA_DATA_VALUE={0x3c, 0x1, "2774125c0aadf6bb96cd971c2d9749b2a7ab7540b9d0572f64fe3408b2f776b6e371980ca9b22d96f69d3d3e571d3a9aec717b0c0e860d94"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x56}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x49}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x4, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x3f, 0x8, "6036f363fa55f42cc6488cc42fbe6c2d0635b2be6e952da7ef71f95ac4c83097facfc9ad3bc4f5db2cb8cce16eb36cf6599d4196adcf0b3716d01f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x85c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x17, 0x89c6, 0x8001, 0x7, 0x400, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001580)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0xcc66ff74fc61767e}, 0x20000000) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001700), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r10, 0x2, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0xd8, 0x2, 0xa, 0x1002, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x97, 0x6, "f8f3d1b0fabd52267b823f4c96af1654624d0678bbf8fadb4c7c89db7c2612152eb0ef4f7e5814b7f3702efad65bc5e270c9ffccd5bee5da15e79d053018c564c966467c88bd64346e80e2ea4998861d10d69d029deeda7bf217a0268f852a7151f1b37cf484a0cbd4b49ea38f6e5d45bca228a49e9072442ba2c1943fd306fcb610c4fdcfa6858953134756b3b9ef4aa408d3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0xc090}, 0x800) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000002b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x5, [@datasec={0x9, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x2, 0x6}, {0x1, 0x5}, {0x81, 0x9, 0x6}, {0x3, 0x9, 0x734}, {0x5, 0x5, 0x2b6}, {0x4, 0xf8, 0xf5d1}], "bc15"}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000002b80)=""/184, 0x75, 0xb8, 0x1, 0x91}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x11, 0x19, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ac0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001b00)=""/4096, 0x41000, 0x2, '\x00', r5, 0x0, r11, 0x8, &(0x7f0000002c80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002cc0)={0x2, 0xf, 0x7ff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[r7], 0x0, 0x10, 0x100}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)={0x98, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x576}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x93}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x666e}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x10}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000004}, 0x84) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r12, &(0x7f0000003240)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003200)={&(0x7f0000003080)={0x15c, r13, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040) 26.043422342s ago: executing program 7 (id=4185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80442, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x30f02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r9, 0x401054d5, &(0x7f0000000380)=ANY=[]) r10 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', r8}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000400)={0x30, 0x0, 0x5ff86e90d91413cd, 0x0, 0x2, 0x6, 0x800, 0x0}) 25.907270516s ago: executing program 7 (id=4186): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40}}, 0x90) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x9) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x8, [0x10, 0xb, 0x8, 0x1, 0x9, 0xb, 0x5, 0xb, 0x5, 0xf, 0x4, 0x2, 0xc, 0x10, 0x10, 0x1], 0x1, [0x7, 0x60, 0x0, 0xfe05, 0xfff9, 0xbb, 0x2, 0x3, 0x6, 0x3, 0x5, 0x0, 0x70af, 0x3, 0x80, 0x5], [0x4, 0x8, 0x3, 0x2d, 0x6, 0x2, 0x2, 0x8, 0x1ff, 0x7, 0x6, 0x5, 0x6, 0x7, 0x3, 0x5]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) capset(0x0, &(0x7f0000000080)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 24.602716081s ago: executing program 7 (id=4191): syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') epoll_create(0x7) lseek(0xffffffffffffffff, 0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0xffff) unshare(0x20000400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 22.30375919s ago: executing program 7 (id=4196): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r5 = socket(0x10, 0x80003, 0x0) write(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000280), 0x0) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x6) r9 = syz_open_dev$video(&(0x7f0000000040), 0x1002000000000003, 0x101002) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) socket$inet6(0xa, 0x80002, 0x0) 13.458009417s ago: executing program 8 (id=4229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) gettid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) r5 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) sendmmsg$inet(r2, &(0x7f0000000bc0), 0x0, 0x28d1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$inet(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x91, 0xab, 0xf76d, 0x7f, 0x2, 0x10}}, {0x4}}]}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130a030000000000000000000a00000709480d0073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0xc8b0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) 9.614398758s ago: executing program 8 (id=4235): r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0xc0, 0x4) uname(0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x4000000000000101}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_format(r3, &(0x7f00000002c0)='-1\x00', 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000043c0)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100d01f"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 8.943648268s ago: executing program 8 (id=4237): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00024000000000000000030c000140000000000000010108000540400000010800044000000001"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10b4b3cad0fe92d2"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) lstat(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xd) r4 = syz_io_uring_setup(0x47d1, &(0x7f0000000480)={0x0, 0x86f7, 0x10100, 0x300}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 8.081443327s ago: executing program 1 (id=4238): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r0}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x4c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) 7.769457915s ago: executing program 2 (id=4240): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a02000000ff00180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1c}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x80000004}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x6, 0x0, 0xc0, 0x80000002}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f37, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = eventfd2(0x3, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000300)=r6, 0x1) 6.825322463s ago: executing program 1 (id=4241): syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc, 0x100, @val=0x80}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xfff6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbe5b}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0xc010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x40, 0x1, 0x4, 0x5, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, {[@rr={0x7, 0x13, 0x76, [@remote, @remote, @private=0xa010101, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x90) 6.78295243s ago: executing program 8 (id=4242): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, r4, 0x0, 0x69deddea}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xdc, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9a74}}, {0x8, 0x6, r5}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0098000aac0f0004ac0f00", @ANYRESHEX, @ANYRES64=r2, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f00000001c0)={r8, r9+60000000}, &(0x7f0000000380)={[0xa66e]}, 0x8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r11, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r7, 0x0, 0xc, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r7, &(0x7f000000e280), 0x58a, 0x42, 0x0) 6.268177683s ago: executing program 36 (id=4196): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r5 = socket(0x10, 0x80003, 0x0) write(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000280), 0x0) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x6) r9 = syz_open_dev$video(&(0x7f0000000040), 0x1002000000000003, 0x101002) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) socket$inet6(0xa, 0x80002, 0x0) 6.055529305s ago: executing program 2 (id=4244): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0xe, &(0x7f0000000040)={0xffffffffc7078cf8, 0x1e}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x4000800) recvfrom(r3, 0x0, 0x0, 0x2101, 0x0, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, 0x0) inotify_init1(0xc1800) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in=@multicast1}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x1, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f0000000080)=0xd96) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.877129743s ago: executing program 1 (id=4245): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r0}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x4c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) 4.865550847s ago: executing program 1 (id=4246): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8000, 0x6, 0x8, 0x1ff, 0x5}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000000), 0x65) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)=ANY=[@ANYBLOB="600013f6f8001000030000000000000013000000", @ANYRES64=r4, @ANYRES64=r2, @ANYRES8=r5, @ANYBLOB='\b \n\x00', @ANYRES32=r8, @ANYBLOB], 0x60}}, 0x8000) ptrace(0x10, r0) 4.839049052s ago: executing program 2 (id=4247): r0 = fanotify_init(0x4, 0x800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000500"/104], 0x68) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x434a0c1d, 0x5, 0x8, 0x4, r1}) setpriority(0x1, r2, 0xffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a4000600500000001e00"/19, @ANYRES32=r0, @ANYBLOB="1400350076657468305f766972745f7769666900"], 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002180), 0x101000, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071102c00000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000040000000a580e06", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1807000003000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="000000000040000000000c000000b7000000e3ffffff9400000000000000a321aff2fc1bb605b465d95cbc546a6231313ac9107d783db70921fe3c000000002593cec6ed3d67e682a76117e8b521d8b09d9be1136fd1"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r5, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r5, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) (async) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.341663214s ago: executing program 2 (id=4248): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/unix\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xf, 0x10000, 0x4, 0xfffffffe, 0x0, '@\x00'}) write(0xffffffffffffffff, &(0x7f0000000080)="c2", 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x4001, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x11c, &(0x7f0000000240)=0x7fffffff, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) acct(0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r3, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r11, 0x0, 0x4, 0x1, &(0x7f0000000a80)="e3", 0x5}) 4.203674326s ago: executing program 4 (id=4249): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x60641400, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x20, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000780)) 3.567575397s ago: executing program 1 (id=4250): syz_open_dev$dri(0x0, 0x5, 0x281) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r3 = socket$kcm(0x10, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0xa, 0x3, 0xff) open(0x0, 0x1d7280, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000680)={0x7f, 0x813, 0x0, &(0x7f0000000540)="30438b6c39bff9d4b5edea6254a653", 0x0, 0xf}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, 0x0, 0x3, 0x0, 0x10001, 0x802, {0xac7c, 0x0, 0xffff, 0x67, 0xf4b, 0x1, 0x2, 0x1, 0x412f, 0x0, 0xffd, 0x7f, 0xf9cee6ae, 0xffffffff, "fe1d00989d396e0000000020b42717e47f00"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="bcec9c18c2c5be59c89464642107", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000001060000"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r8, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0031c9000000c9074725c5e33806985e5257b5305d2514697cf11c5a8976537b26cf05793e1dbda8dcf7f49ee6e41b2a7ba1f37fa2bcb89ab4e54e6ac310b36d170fb158cb81bc5c8a765ad058f41c4316853a9da98708720be47b3f4ea946f09494417b9b5e597877ae7e0a919a740f5edfd29e2985b9ea649389358148d3a6d50e10add2ca21659337216fc6c647a79bd3b1af7da9bc02a452eb3636d543a3d97d38874849e96374784a40d573cc4b290cecc561688684df70118a9e20cd79240c1b2eb9fa51"], &(0x7f0000000400)=ANY=[@ANYBLOB="00038e0000008e038c882a88ec26dfab2a4aaf3756784940cd49e0e13c68b2aa1849192c10c636482a558ac9719d63e082cc134e657ec44df737171a72d0a2376f1e27282f77e02e8106d60ebff47fb8e18eaa55b8ea1a4201d38e6150a066a9948fd3a99ffef7526b2c2913c00fb3f9f2156d54dc96f7add067829e56f61bb21eff37c1dbec396a853aa2a5d4de7549840fecfb910ae85345897de57da024fdc78f5fc54d681dba88e0b9693d9ab7ac6b6be598508d427dfcbf263be7ca12f851fee2940daeb9c44ea6e2182594306a54b8679b48a2e8538ad79ad423c0f7d12d6f39e9c09443da9a98251f99ac9e5010beaa370ba39624e2d2f3ef947bfb364d6b5669a8416ca0523b7d7c048dde8590c34b672c3c219356"]}, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="20050d0000007b834cf3f7601e7a4d69c5d9ae87d1ecf4b3149a592924"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)=ANY=[@ANYBLOB="c005004060f8"], &(0x7f00000006c0)=ANY=[@ANYBLOB="5e0501000000f800100000000000002a3a7c87fa2e4eb09158d2328a3ad2dd96d66e7584da885d"]}) 3.392815028s ago: executing program 2 (id=4251): socket(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fstat(r0, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002500)={0x10, 0x19, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000400), 0x0, 0x14}, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x10, 0xffffffff, 0x1, 0x1a449, 0x3, 0x0, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0xffffffff, 0x10000, 0xfffffff8]}) 3.005990878s ago: executing program 4 (id=4252): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r0}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x4c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r8, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.938156989s ago: executing program 8 (id=4253): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x7, 0x89}, {0x1}, 0x94, 0x2, 0x9}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r6, &(0x7f0000000500)=""/166, 0xa6) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x7) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 2.281075445s ago: executing program 4 (id=4254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '.'}, {0x20, '\x00'}, {0x20, '-'}, {0x20, '\x00'}], 0xa, "63118a2bde2e61adaba6ddca9436"}, 0x21) socket(0x22, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="980b96f3aeee473f0247072144940782ea7e2534dfe0317258294331ebce04bfc8f8f0797af7096c7eb07204fb17b8077de4ca14fd6470c900a51b8c2f7d17d16a369cd78cb47f5dfbd6d102d62dfa36d6cc05d3da8ec030bbd9b4ae80768a84a707259a5bf2ec37c15bbc00f05a05f340a2c6ba33cf31c8cf66acf0d3520cd72f4abdcf356ffc3a63838cfb14f07abbc83c93f9b68b6f978685484eee23b5709d4d469b64d6c3601c6bae8e384894a9f885f4f42fe512f2139de0ea876d27114e5776d60143c01e0d649aac3831b4907c90077e07a1643fd46b1fbf6eb6d3c99ccb8ad9fb", 0xe5}, {&(0x7f0000000440)="eadeec6b36ad0b78e49d578fd33ac9b5dcab4fcdfef2cc58adab15b899efc3f67f117ef5fc6a5030ac15", 0x2a}, {&(0x7f0000000480)="1a254b9275a5c32c5db2398f4a7aaf53c7d81d11032bd2140ab3", 0x1a}, {&(0x7f00000004c0)="86339143749cf41517b25606fd70a7a421e48275f6266c469d3eae35da10e8465b70fe0624545cd4dda6e07fc24775eddf5c0a1e66080896429ffe46e6f3fabbcec90bb79673f4ec7e066c2b34536852a8f5a120ae1de112b1b3e3", 0x5b}, {&(0x7f0000000540)="e5935c48fa139d5de80f2a69c6a927273c", 0x11}, {&(0x7f0000000580)="e0d9ec624000a966fb6e9b3a398de084c1e37e716979a6b9e91dd0088496cc9d09255153774fb53ae787096f06c625e2188adb65cd10efea0589ca8ee0b5a94d2e9b463d5ce62f25085fe112f20c5fe73152f17add1107a98bc657ce6d4729099013f1ae28cc789f664badbba3aac0698c5808f35d6564b0649fc3520aa8d61a22d7668c50d36909b1cc4639a7ef2f7343e190fa0365f13475584467d777672b220c22ced80075551b1f304269", 0xad}, {&(0x7f0000000fc0)="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", 0x1000}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES16=0x0, @ANYRES8=r5, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000002c00000000000000a7ff00003a010000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32=r8, @ANYRES16=r8, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x140}}, {{&(0x7f0000002100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002480)=[{&(0x7f00000006c0)="67b010917672f4b5a2fe77cef6d39db2eb6d413ef3c53a2e3e3b6300e21c4aeb0ca2b5e05599d11c623baccd13b163c6d94b146e438ffa28a4aac4da8ad4fc8852b00164f130d975db4b9b7ee560c2d236b82827b39d2c6d1a8bb875cd2f5904499eed792a4ce05c6f3ab122c19fe01d2e51cca90078ec657555811c1ba351fff282f994923566194b8eb0a6674fd5faceeac2b8d8d0f5f4fc999e961db79d96bcf2d2710f9ac1c278adca2339552de1891b528e19baba7e9d0ecdf34b59dc3efbfde477fd687836a627fad0bc0c3aa8f224e9cf3dd8b04df5edab61904e", 0xde}, {&(0x7f0000000b00)="af0c6fd8156286e51be52abb14dcc496ad79c0d58b321a2981a8fa76bedc6031c886257384c741fb", 0x28}, {&(0x7f0000002280)="e3e11df9ba49ffd5627aa44ccc57cdbfa27bbf8d92eaad20eeed2502777ca4d5ab375f0e4a50c34b7f22977b7871737c4522ea82331a9d3d35bb767cf77531e80c7858c149f530d5acf04589475f0d4d94e7c16a1260029c09ca14aaa9201bd982e13cfe4364ba0b45c18ca8896201556ec67a6ee36b3af25c194d768749b0035ff9d851744a1ca211c7c84566a34651f2a48ccb862456c1b7bed74ec3fe8cdc7a2ada69874f78de362e12399c71e31be36d15d493a58232e04346ec61eacc9dad3904df7bc4296021c4a9d4f1f85fc42d473a", 0xd3}, {&(0x7f0000002380)="73cef3dc2879e5be2429ada553a967a8b814db80c4e3d6524f9ebd22bc08e669d56771563918c01a1b0d6d188287c2cb05c122728460859575895c9547f1d741048afb3561ec71e06425afcbd6d78f83fa6e54c5b812fd589214216c1f15732ce6ed09ee10d334f911cfaa4a83074aa3", 0x70}, {&(0x7f0000002400)="a378b9d106eeebff8557bf715a86a748a1a6e788bf2d04203299add8539ff56143f852e50c20fef6cccd49a1f84410a517deefe436301507d18d54b9f8d97e825642f1214b233ad85c812a0275ae0ed2ea3ca39102222cb2b477c384af4b095ee42cf2d97c73590cd32e230774c8a32b168a81744e93a4bbc38b442560", 0x7d}], 0x5, 0x0, 0x0, 0x80001}}], 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0xe8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2a000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r9, 0x80045301, &(0x7f0000000140)) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000140)={r10}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000080)=0x7e, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000000)={r11}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r12, 0xffffffffffffffff, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x11, &(0x7f0000000200)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) 2.184554172s ago: executing program 2 (id=4255): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x27000000) write$char_usb(r1, 0x0, 0x0) 1.47851933s ago: executing program 8 (id=4256): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x60641400, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x20, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r2, 0x0, 0x0, 0x8000) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, 0x0, 0x0) 1.326606846s ago: executing program 4 (id=4257): r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) close(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 301.296108ms ago: executing program 4 (id=4258): syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e0c00031000d857"], 0xf) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "6a2e741f96f58ce056dde837f5c9de4b45f353155981360c2bb1c8cf093fa02e2ae7f96b30e668513403cfda2488685ae70e243fba27197f07c187f72db815a8921e2ad9a68d9b40f284451fc1d545d5d02a08a443e05748b1104e4674cc5e9501467349e888e0e0b4efe21420925fcf3efe71f8d1cefe973906e7ae5fce99412314617dd3b757013255af6915a546c4b57164c2611d2f5fef9234a8ee5ce476e33bc4ee51e081a346929a1044afa7f0f5ef89b80a73b1226eb9bcd8f1a075ecaebdab271286e3be1f182113c75fa89331dc15487ed4c88e988df82e4566af6fed0377efd21c188193705d68acb819b71e4f0462967d7e2d6dfe86d6a4def599e7c06e292eba896b36be1ddf8f0cb3a8f60691188e73446bd835d32fa29fde1c33082492793d180ca7b9b7151595d849a5d48591d9307aa15e66c3138d45d363ad9578eec22c641f30b79079f70a39323c2d7118395782b7238fd42982ac06182af6d440c7c0140527de7ae88554b90f8793e57ef52fa67da458419b842c770b172e14200330e113cbd88337aca1999f395393be45006a390a45d36723523dbdd33ed79b1126cd3b5ee7674fe010d5fcfd9fb7065be2f6cad628c06a5201558521698b35d6a2324b3566e594d62b2a6918dd0b4b2c45462e0f159c7cb176da1611aa392703ba98c08879c524e75dc241c11836b4d1b62c5411b7cbe36bb9979953da1b5d7d54ca8302d6c6880f0002be7cd5173fe511d4919b5448be4e48b5115d6a62d3f4e85111a3c6067b5fadda31a2eece5373e654eb947b1ceee502c141cfaef659b96b22a999b9bcc7eac3d09b60dc0cdceb95ebecc1106f1061fb2ea361b04c070ec537d9950cc6caf361f74b0b7e0c2dc1fdcd40b7f0ad84272683e3f680fe15645d81db8173326624ed875e193b6ecf471cafe8d552d0b1f0c1492bbe632d3a4ce0405dbe4f64953c68280ee7dbe31b7c686f7e4bac2edc1b3fa5d64370e89f8f3bc2aab9b83de0fcb2d1948492615c04d5396b521c144563706d4d7d795adf0284467983bf7eb121f83b9087766c9b45321a8753bd22b480ccd4a67c85078795525973e6abc8109312aa8d88dd9225d02e76393cbeaeb72885edb07b27fc29c5c9d0f3a9bc680f1ef6dbe7ed72b2e0a8bd77e99e9cf44ce20f1dc8341adea1708b68e75bf1e3c8a7feb9e091d4108cd6389990a81f8f60a5e05db75cce063b96750022abdfeffe1d14a324a9f2c8da7a5330100e683c696ad17d2a543010856ada0974f96e05c21a006f28b77b12d746dffedf424487c0abf75034f4922930fbab3ce0a065ccc7bb2af486592f7c6691ce9764ec9379e74143815305bb1baadb906d965cc594b430d44e2c6928efdece36b96702fb54c10d73bee8c299b3648ce5e90444d554c0e6fc10a6a111379fdf6dbd50be5726a1045fb50ecf5f117ec2126d786fbb0c02c455c9d145338c626a8b1d2f9ba7151b12e898cbf6141269c7027aac9f225385e352ee068d8773286f0bf8df0846391986f80ced92279ab69b407e006364c0dbaaa450dee06bcfb0579de0799f27d54f823f980cbaad318de1a1bb9b676ea89f61a79ed98c740dec4c6a069b76f39d3e47d325018f0cc6bdc3cc65d4d615e49b16450220192383846bbfc59ef0155deac4dc423fd6aed5cb4369889899ff0c72837b93b111016e15c5e798fef010762dc3eacd5536a5368b2cc9a72c71b25e6c48398f8cd111e9dda8a9d025860a4abbdab3b844ad683e533c4f123bdb346178af95d2d7233168fa813ccebe57158645823028cf0ace4b838020ca7ca023ed630a2c6e9ce9b37a8de73191b9249e972741692c0c422ed31b9e2d36d7e8d88712cee37c1c5e5870163e006eccc9b467b6f650a06c7fe86775acb5857c9f87f75b11c1899363ffc2dfe9b5c7d1bd851841a87f4acc63e8f36402b010c725683768612ccd20e94dd202bc58dbf75a1526d0244f581a01899ed2b61c5eaf58de03bb3423ba137341ed6e7a3ab50371ca61c6ab330d373bf7c4f410d3a6218fd4de05e97ebcd413e73bac03ddf930b8295fb252e133f07f183c048ac60943dde00f9442660e7748ff80b1de5dd9b695ad1bc83dc664e3bce29654b7b21ec9938ccd64bc4adc70c0bf4085323b2f548063f40c6fffcac7694d6163a6be1c6f2423dd416f77b681fe8735dd521785b60f190a2ea78b7f7358045d561e55c7ee7eb852c8fc90969635310da151579438d23c9a95868ccb3fb611bdfdfc2705b3a11e744db306f7427eb78847e26a0643d4c529fbbbc6cf58f3757d84f2572d378cca88dc9771519000ef4a5df01fdfac6e3b834a51f9f8c334fcb69a0437047a19ad9b09231355e6a174b10ddeaefc66f592f889b441104d3a0ef888aff93b186831a60c6afb11eda20aa71b91f04d464865236144818b778145751c4dbf78609f60c9c15af0bbc0648d04886f90627f367b1e566767679e830fbd437e4432afcb7a49320d40e77d06406702137d500edff1769240fe89b21e958b84eebbd3c8538cd5788803b1dbc8d862274b3ebc0c7f9b51a02b3dcded27351261a6f944f6686d8652673618518542e106ffef7a4ef9c9742c7cb4d444ff738549f16493706d33b5492a5863ef711e0c3e39cae65cc82864f77ddbd50110c93b0867ace6a666c12934282963b90b6d0365b6831051d524f1c946c37e93bfd30be98a26f7c884f64d512dce16561ca513f59b7303ce2e8164915ac480d5cf08ea5dc3632a9beeeded0a4b3dd5744cfdede13e76caf99e80724e8bb5c875d6956eaacca2b872ae80cd858d11a274c55447327428b7d376c531ed11b20bbc490360baa5cd40ba5e3a375379227bdbdf707d387e3348a3792d40f4651a772275cb3477d6ba9ee0e3bef66010fdd39d9a59418f61e8eb8bf2b33e275abcf330f304dcecee54829aec8e2f93063ab415eda7e7f1be7fafdaa38436c419cb19d5341b9699b81db90ddac62e30775824940440f9b78420b813d362402549f420cd3dd282b3fd553a0b80a56ad36e335dd48946a68d20ec63f6c071efd0bfa89dbcbe69c421ba7d728f0a27edee59dd5ab3c5cc755d411f5fc9041f8bd3def90dcc68d9a2101da026a5eca3ce17975106fe8d5850cdc8c9a7fe6117e8a8d01b96c8e9ca81e0386bae57c3265d09c0dc45c86521f35fcaab4e26ad32cb1f7f85d5d7717bef4c6979a3d18111cf55016799ac31fb103f69a234364d56c4eb94896fb5e9d8f92c31b94cb0d41f3aabef77081a2c1de6c6682300e745061f3ae29b7454e20f768e4fda498bebbb759818157d58bef88d4c7d50d3b9160be596fb6ed83825aaea6535f12e7b54ecb64305004920169b1ea916092c98ff51596e2f000b42298fc4e77257e90c9fa8dac828fad0e8a69ffacdf1ba61b9a6d14596113b2184099ba74d8765e2cb6347c35706d8f922fea070c31134cc6b587e5469a22e215a274b1566c1d48fccfcb969b62c42e97eeb7518dcdb04fdeecd509a4bf36d5317c7c860b77aae700ebf8a4b11d234d4a235ec2f386348bd837cb5f0a4cd3e70049c710a7d85c174d21cfb84f9ed95dcf17d84718abf6d47d252e5a32a19813c69b51c59d3a2933d22233a600f2969fdbbb2d7b937a3fcb3ea31476ec561b8eddeaf9bc8b2682096af68138bac4c841039a92a42eab706adc0501da9864b23d1c75b1eb23219bd0b32f34d5e5fb87649b8a9a2e369997d94a8a995e11c5e7c22bfeb4b13f464b5e90f57f5b1696c029ea59c6b1f26d05ee3dbc0ded034851c2bc4ed828ce82174544e48d5644cd1c5510e2cf18d66cc374086509a0cdc2320ae2e3e953929e1ca42a63286afcbc1c7c3259a200299877ae7632e3ddfb3ab4d0f27516d281531150f7d933824097f5041dc5d6e5681a4dda5317faf5b0bb96ff1930bfa0ee9b5d6d7c8ab69a44a8128f136d011ce4b9de58b78f2a8cf62f3fb6245cb1f948e2be512347520fd3a7c207fcac105e9219d4a929f3a0ce3312bc031e78634b7f1a3515377118e512ea1a68153ffa2fa925eb64744e134320a32225b82b59876ab635ad72ed12072aaeee5d003c26c5d1bd54ef35888b739f2e9272c3390a3cf1422e62e69c7e341d19466974edcd2117c17649d2e1676309305e15781b512f96e0119e9cf963577e94a0374eabc7acf0a39f52d6a592e6c5fbaaafe76b91757c357fbb3947306dd11dd6c41c4c95c3f50320e6341f78bf5decccd0aedb55f0875f17087870c090607ae7c36b5c64c3b1acf93ceb54ed9ce3644a1d54b7805bbdee787a80878430761e4b392f0337bbe201d82413046ffd34678a3821881e678901f2db187325c5ffca4dd7a4dbbe3fb709229d3e085106cf0a8d038479322bd63d00d58522a861db565006267d4b56c1b3a61d5d02d01331e6d12ab1dc40a208054d289633f662d20a00f14d90626233518ab2d2a14744a8c2b2b4e861f1c3f00af13711692e9c7635ce7e3df0a4ada7310d6d05fb036a8a289814546e9a484799cae140642a1237c18161b00abf7fdb174aed93aec40bcc20d1ccad0096fade8c7442720b8b88d24d60463a7199c80f041eca35c2a54223c8dff2c2c0fdc50a3061c1dba36a9f462e16a72a658d485d8d4d44c4766dc3e8b23da41233853355d8e24e2178ab3269ffb96b0023d066c8715270ef8a384202a8292e1d0856ca49fea5f2873b7f6cb950e3cc91c398480ff0a0790dfc5110f0b49b404ccbbe3f82d85a1a66718a919ec41eaad96b5e9a36240753fd8028592d62557936e61e39f22f112298039d14cb5475f487c2f9355bd65df4b7b0c0fc8201c0355dff89bb54e1b2bdfa24a11afc7acabf50f8c093ddc4b42b2ab23761af2238ece6913c23b7ec5644de2ee02644a480ad445e9e437e330e4f2f63a75ac569f7498d19922a3600c4cddab5b5feaaaa7de1f8d3c678b8336ba9cb0d7f1ab764c0237f34ae9b0a3d66f556b3f6b25b6a3244e08ff20596808a34b3330663dfa4339ec28b8524287f1bea3e37cddc6888e98c4fe9e075d6e52bb8f3b45f612e04afa0d691994c9c483c9bc81ff8195fd97c356aa2cc4bdd7ae4da020feacd5976218297e7c41fa7170918e9ce8cb19bd877f6acb19f7fec8c05456f541e6df5e8d1735259b70c88ae9e97eb71b09e77689b747c6e91f03bda4334270800d18c559c978c962a72375ea16677dd76c0b6cfd975110c3f40c4877ef0b64b3b7025897e5f288314a6d0deaa394dc32402c80f285f6a31f80dd76df9a347be42121d25cf428994f0a648bb5b947315c67954d65b34d9ff8bc57bc0b3976f220a6eb16d5f6643fa97c683b96a7d12f999e55075d30e1423e255dc179a7ce06a1e80eaf38e86b38ad849af5161ca98dd553e356105e399720b503b736cbf9902339a0d3a45969cd6d4cf025b27adc47f4d31be9e5ada2260599840ab02625e6d522bd23fcc3f066877d67c3f3cb07d7caf30fb602d5be81530119ce45bcd8f47927573c97c8a2a31e4f548ceca26be1a96786dbf53d19722b07f8ddb2f7e2213c3b3369086b88cc338ebfee1ccda6f9664ba2260122e6b14de2a62d7d7bf62c8fe777542002640df4bc2191e91e56230ecda44342447ba772d5acae83297b9661c41751d786f35886bea3ce88081b6e4c30d76831a570572ca5c8c96b013554402488b250ba93463bad0a72e7ebdcc103d06d98c1cb05f149e759b37d4853f4a5b49178962c9af5047aa32226c78abc09063357ba0d2d551ce467cad90913e30282a983caa92fd2"}, 0x1004) 139.142704ms ago: executing program 4 (id=4259): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8000, 0x6, 0x8, 0x1ff, 0x5}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000000), 0x65) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) read$FUSE(r6, &(0x7f0000000000)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)=ANY=[@ANYBLOB="600013f6f8001000030000000000000013000000", @ANYRES64=r4, @ANYRES64=r2, @ANYRES8=r5, @ANYBLOB='\b \n\x00', @ANYRES32=r8, @ANYBLOB], 0x60}}, 0x8000) ptrace(0x10, r0) 0s ago: executing program 1 (id=4260): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103b02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/unix\x00') read$FUSE(r1, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xf, 0x10000, 0x4, 0xfffffffe, 0x0, '@\x00'}) write(r0, &(0x7f0000000080)="c2", 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x4001, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x11c, &(0x7f0000000240)=0x7fffffff, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r9, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) acct(0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r4, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r12, 0x0, 0x4, 0x1, &(0x7f0000000a80)="e3", 0x5}) kernel console output (not intermixed with test programs): 17055][T19300] usb 8-1: Product: syz [ 1143.923319][T19300] usb 8-1: Manufacturer: syz [ 1143.944248][T19300] usb 8-1: SerialNumber: syz [ 1143.963594][T20556] bridge0: port 1(team0) entered blocking state [ 1143.969902][T20556] bridge0: port 1(team0) entered forwarding state [ 1144.013394][ T1160] bridge0: port 1(team0) entered disabled state [ 1144.072236][T19300] usb 8-1: config 0 descriptor?? [ 1144.149471][T19300] usb 8-1: selecting invalid altsetting 1 [ 1144.161107][T19300] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 1144.167545][T19300] usb 8-1: unable to init card! (ret=-5) [ 1144.187962][T19300] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1144.297805][ T30] audit: type=1400 audit(2000000398.880:6655): avc: denied { connect } for pid=20587 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1144.377409][T19300] usb 8-1: USB disconnect, device number 32 [ 1144.390231][ T30] audit: type=1400 audit(2000000398.970:6656): avc: denied { bind } for pid=20587 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1144.414684][ T30] audit: type=1400 audit(2000000398.970:6657): avc: denied { listen } for pid=20587 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1144.438287][ T30] audit: type=1400 audit(2000000398.970:6658): avc: denied { accept } for pid=20587 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1144.721433][T19300] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1144.781111][T14997] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1144.871084][T19300] usb 3-1: Using ep0 maxpacket: 32 [ 1144.877722][T19300] usb 3-1: config 0 has an invalid interface number: 164 but max is 0 [ 1144.898873][T19300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.931223][T14997] usb 5-1: Using ep0 maxpacket: 32 [ 1144.939623][T19300] usb 3-1: config 0 has no interface number 0 [ 1144.950102][T14997] usb 5-1: config index 0 descriptor too short (expected 22052, got 36) [ 1144.960148][T19300] usb 3-1: config 0 interface 164 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1144.970497][T14997] usb 5-1: config 4 has too many interfaces: 127, using maximum allowed: 32 [ 1144.979495][T19300] usb 3-1: config 0 interface 164 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1144.993180][T14997] usb 5-1: config 4 has an invalid descriptor of length 174, skipping remainder of the config [ 1145.004086][T14997] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 127 [ 1145.021686][T19300] usb 3-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=9f.72 [ 1145.033045][T19300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.042595][T19300] usb 3-1: Product: syz [ 1145.067345][T20605] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3671'. [ 1145.076588][T20605] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3671'. [ 1145.076777][T19300] usb 3-1: Manufacturer: syz [ 1145.091032][T14997] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1145.100137][T14997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.121107][T14997] usb 5-1: Product: syz [ 1145.125398][T14997] usb 5-1: Manufacturer: syz [ 1145.134552][T19300] usb 3-1: SerialNumber: syz [ 1145.142810][T14997] usb 5-1: SerialNumber: syz [ 1145.371963][T19300] usb 3-1: config 0 descriptor?? [ 1145.402679][T19300] gspca_main: spca500-2.14.0 probing 8086:0630 [ 1146.737353][T11959] usb 3-1: USB disconnect, device number 120 [ 1147.885545][T20632] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1148.434101][T14997] usb 5-1: USB disconnect, device number 14 [ 1148.651142][ T30] audit: type=1326 audit(2000000403.100:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1148.818725][ T30] audit: type=1326 audit(2000000403.110:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1148.925989][ T30] audit: type=1326 audit(2000000403.110:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1149.037726][T20657] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1149.046940][T20657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1149.117607][ T30] audit: type=1326 audit(2000000403.290:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1149.217875][ T30] audit: type=1326 audit(2000000403.290:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1149.506412][ T30] audit: type=1400 audit(2000000403.300:6664): avc: denied { name_bind } for pid=20649 comm="syz.4.3681" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1149.649246][ T30] audit: type=1326 audit(2000000403.310:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1149.673422][ T30] audit: type=1326 audit(2000000403.310:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1149.706151][ T30] audit: type=1326 audit(2000000403.310:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1149.730039][ T30] audit: type=1326 audit(2000000403.310:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.2.3679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1149.897248][T20666] netlink: 'syz.2.3686': attribute type 83 has an invalid length. [ 1150.431087][T14997] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1150.587635][T20678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1150.616034][T20683] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1150.725004][T14997] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1150.767010][T14997] usb 5-1: config 0 has no interface number 0 [ 1150.782049][T14997] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=83.29 [ 1150.791578][T14997] usb 5-1: New USB device strings: Mfr=243, Product=0, SerialNumber=0 [ 1150.799738][T14997] usb 5-1: Manufacturer: syz [ 1151.070000][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3693'. [ 1151.201525][T14997] usb 5-1: config 0 descriptor?? [ 1151.230760][T14997] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1151.386024][T20699] fuse: Unknown parameter '' [ 1152.091542][T11959] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1152.281060][T11959] usb 8-1: Using ep0 maxpacket: 32 [ 1153.062575][T11959] usb 8-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1153.071661][T11959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.079626][T11959] usb 8-1: Product: syz [ 1153.083845][T11959] usb 8-1: Manufacturer: syz [ 1153.088408][T11959] usb 8-1: SerialNumber: syz [ 1153.095150][T11959] usb 8-1: config 0 descriptor?? [ 1153.121292][T11959] usb 8-1: selecting invalid altsetting 1 [ 1153.127048][T11959] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 1153.128887][T14997] usb 5-1: USB disconnect, device number 15 [ 1153.255210][T11959] usb 8-1: unable to init card! (ret=-5) [ 1153.372846][T11959] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1153.415155][T11959] usb 8-1: USB disconnect, device number 33 [ 1153.658613][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3706'. [ 1153.886926][T20745] FAULT_INJECTION: forcing a failure. [ 1153.886926][T20745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.927468][T20745] CPU: 0 UID: 0 PID: 20745 Comm: syz.1.3707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.927498][T20745] Tainted: [L]=SOFTLOCKUP [ 1153.927504][T20745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1153.927514][T20745] Call Trace: [ 1153.927520][T20745] [ 1153.927527][T20745] dump_stack_lvl+0x100/0x190 [ 1153.927559][T20745] should_fail_ex.cold+0x5/0xa [ 1153.927581][T20745] _copy_from_user+0x2e/0xd0 [ 1153.927609][T20745] drm_ioctl+0x520/0xc60 [ 1153.927638][T20745] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 1153.927666][T20745] ? __pfx_drm_ioctl+0x10/0x10 [ 1153.927699][T20745] ? selinux_file_ioctl+0x139/0x290 [ 1153.927721][T20745] ? selinux_file_ioctl+0xb4/0x290 [ 1153.927745][T20745] ? __pfx_drm_ioctl+0x10/0x10 [ 1153.927769][T20745] __x64_sys_ioctl+0x18e/0x210 [ 1153.927800][T20745] do_syscall_64+0x106/0xf80 [ 1153.927815][T20745] ? clear_bhb_loop+0x40/0x90 [ 1153.927837][T20745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.927854][T20745] RIP: 0033:0x7f53d459bf79 [ 1153.927869][T20745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.927885][T20745] RSP: 002b:00007f53d5424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.927902][T20745] RAX: ffffffffffffffda RBX: 00007f53d4815fa0 RCX: 00007f53d459bf79 [ 1153.927914][T20745] RDX: 0000200000000140 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1153.927925][T20745] RBP: 00007f53d5424090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.927935][T20745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.927945][T20745] R13: 00007f53d4816038 R14: 00007f53d4815fa0 R15: 00007ffc24f53428 [ 1153.927968][T20745] [ 1156.692013][T20765] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1156.841910][T20775] netlink: 'syz.1.3716': attribute type 83 has an invalid length. [ 1157.753829][T20789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1158.386042][T20798] FAULT_INJECTION: forcing a failure. [ 1158.386042][T20798] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.404426][T19300] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1158.441312][T20798] CPU: 0 UID: 0 PID: 20798 Comm: syz.6.3723 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.441341][T20798] Tainted: [L]=SOFTLOCKUP [ 1158.441347][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1158.441358][T20798] Call Trace: [ 1158.441364][T20798] [ 1158.441372][T20798] dump_stack_lvl+0x100/0x190 [ 1158.441403][T20798] should_fail_ex.cold+0x5/0xa [ 1158.441426][T20798] should_failslab+0xc2/0x120 [ 1158.441446][T20798] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1158.441463][T20798] ? dst_alloc+0x99/0x1a0 [ 1158.441479][T20798] ? find_held_lock+0x2b/0x80 [ 1158.441496][T20798] ? ip_check_mc_rcu+0x60e/0x780 [ 1158.441521][T20798] dst_alloc+0x99/0x1a0 [ 1158.441540][T20798] rt_dst_alloc+0x35/0x3a0 [ 1158.441565][T20798] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1158.441600][T20798] ip_route_output_key_hash+0x118/0x2b0 [ 1158.441628][T20798] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1158.441663][T20798] ? find_held_lock+0x2b/0x80 [ 1158.441684][T20798] ip_route_output_flow+0x27/0x150 [ 1158.441702][T20798] udp_sendmsg+0x1ad5/0x2880 [ 1158.441727][T20798] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1158.441752][T20798] ? __pfx_udp_sendmsg+0x10/0x10 [ 1158.441771][T20798] ? process_measurement+0x1f4/0x2350 [ 1158.441800][T20798] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1158.441829][T20798] ? __lock_acquire+0x4a5/0x2630 [ 1158.441868][T20798] udpv6_sendmsg+0x146b/0x2d20 [ 1158.441897][T20798] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1158.441930][T20798] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1158.441965][T20798] ? inode_has_perm+0x16d/0x1d0 [ 1158.441983][T20798] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1158.442003][T20798] ? inet6_sendmsg+0x105/0x140 [ 1158.442022][T20798] inet6_sendmsg+0x105/0x140 [ 1158.442043][T20798] sock_write_iter+0x437/0x610 [ 1158.442069][T20798] ? __pfx_sock_write_iter+0x10/0x10 [ 1158.442103][T20798] ? bpf_lsm_file_permission+0x9/0x10 [ 1158.442123][T20798] ? security_file_permission+0x76/0x210 [ 1158.442147][T20798] ? rw_verify_area+0xce/0x6d0 [ 1158.442176][T20798] vfs_write+0x6ac/0x1070 [ 1158.442194][T20798] ? __pfx_sock_write_iter+0x10/0x10 [ 1158.442220][T20798] ? __pfx_vfs_write+0x10/0x10 [ 1158.442235][T20798] ? find_held_lock+0x2b/0x80 [ 1158.442275][T20798] ksys_write+0x1f8/0x250 [ 1158.442292][T20798] ? __pfx_ksys_write+0x10/0x10 [ 1158.442318][T20798] do_syscall_64+0x106/0xf80 [ 1158.442333][T20798] ? clear_bhb_loop+0x40/0x90 [ 1158.442355][T20798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.442373][T20798] RIP: 0033:0x7f54cab9bf79 [ 1158.442387][T20798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.442403][T20798] RSP: 002b:00007f54cba09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1158.442420][T20798] RAX: ffffffffffffffda RBX: 00007f54cae15fa0 RCX: 00007f54cab9bf79 [ 1158.442432][T20798] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 1158.442442][T20798] RBP: 00007f54cba09090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.442452][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.442462][T20798] R13: 00007f54cae16038 R14: 00007f54cae15fa0 R15: 00007fff88107498 [ 1158.442486][T20798] [ 1159.002050][T19300] usb 8-1: Using ep0 maxpacket: 32 [ 1159.052613][T19300] usb 8-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1159.066736][T19300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.461093][ T5868] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1159.749798][T14997] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1159.811503][T11959] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1159.914768][T19300] usb 8-1: Product: syz [ 1159.918956][T19300] usb 8-1: Manufacturer: syz [ 1159.923571][T19300] usb 8-1: SerialNumber: syz [ 1159.936773][T19300] usb 8-1: config 0 descriptor?? [ 1159.954750][T19300] usb 8-1: selecting invalid altsetting 1 [ 1159.960804][T19300] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 1159.968034][T19300] usb 8-1: unable to init card! (ret=-5) [ 1159.974422][T19300] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1159.982374][T11959] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1160.061182][T14997] usb 5-1: Using ep0 maxpacket: 32 [ 1160.068611][T14997] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 1160.079023][T11959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.096236][T11959] usb 2-1: config 0 descriptor?? [ 1160.111356][ T5868] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.123769][T14997] usb 5-1: config 0 has no interface number 0 [ 1160.129858][T14997] usb 5-1: config 0 interface 182 has no altsetting 0 [ 1160.136994][ T5868] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1160.148514][ T5868] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1160.253723][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1160.253754][ T30] audit: type=1400 audit(2000000414.800:6712): avc: denied { watch_mount watch_reads } for pid=20817 comm="syz.6.3731" path="/378" dev="tmpfs" ino=2016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1160.499478][ T5868] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1160.510339][T14997] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1160.534507][T19300] usb 8-1: USB disconnect, device number 34 [ 1160.544326][T20816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3730'. [ 1160.554517][T14997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.562773][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.570803][T14997] usb 5-1: Product: syz [ 1160.576414][T14997] usb 5-1: Manufacturer: syz [ 1160.581117][T14997] usb 5-1: SerialNumber: syz [ 1160.656273][ T30] audit: type=1400 audit(2000000415.120:6713): avc: denied { create } for pid=20815 comm="syz.1.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1160.677161][ T30] audit: type=1400 audit(2000000415.120:6714): avc: denied { setopt } for pid=20815 comm="syz.1.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1160.686458][T14997] usb 5-1: config 0 descriptor?? [ 1160.703722][T20811] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1160.706215][ T30] audit: type=1400 audit(2000000415.120:6715): avc: denied { bind } for pid=20815 comm="syz.1.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1160.722280][ T5868] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.748989][T14997] hub 5-1:0.182: bad descriptor, ignoring hub [ 1160.772413][T14997] hub 5-1:0.182: probe with driver hub failed with error -5 [ 1161.220727][T11959] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 1161.286642][T14997] kaweth 5-1:0.182: Firmware present in device. [ 1161.324571][ T5868] usb 3-1: USB disconnect, device number 121 [ 1161.457718][T14997] kaweth 5-1:0.182: Statistics collection: 0 [ 1161.464059][T14997] kaweth 5-1:0.182: Multicast filter limit: 0 [ 1161.472015][T14997] kaweth 5-1:0.182: MTU: 0 [ 1161.476666][T14997] kaweth 5-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1162.268121][T20839] netlink: 'syz.2.3736': attribute type 83 has an invalid length. [ 1162.611928][T19300] usb 2-1: USB disconnect, device number 21 [ 1162.702570][T20845] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3738'. [ 1162.711816][T20845] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3738'. [ 1163.136232][T14997] kaweth 5-1:0.182: kaweth interface created at eth9 [ 1163.191214][T14997] usb 5-1: USB disconnect, device number 16 [ 1163.573404][T20852] wireguard0: entered promiscuous mode [ 1163.583189][T20852] wireguard0: entered allmulticast mode [ 1163.876270][T20859] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3742'. [ 1163.885333][T20859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3742'. [ 1164.491563][T20880] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1164.715067][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3749'. [ 1164.779162][ T7141] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1165.141088][ T7141] usb 8-1: Using ep0 maxpacket: 32 [ 1165.154320][ T7141] usb 8-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1165.177044][ T7141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.197844][ T7141] usb 8-1: Product: syz [ 1165.202424][ T7141] usb 8-1: Manufacturer: syz [ 1165.207259][ T7141] usb 8-1: SerialNumber: syz [ 1165.238149][ T7141] usb 8-1: config 0 descriptor?? [ 1165.495488][T20898] netlink: 'syz.6.3752': attribute type 40 has an invalid length. [ 1165.850858][ T7141] usb 8-1: selecting invalid altsetting 1 [ 1166.057136][T20902] netlink: 'syz.1.3753': attribute type 83 has an invalid length. [ 1166.226091][T20905] loop7: detected capacity change from 0 to 1 [ 1166.744782][ T7141] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 1166.751311][ T7141] usb 8-1: unable to init card! (ret=-5) [ 1166.757281][ T7141] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1167.335846][T19300] usb 8-1: USB disconnect, device number 35 [ 1167.468717][T20912] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3755'. [ 1167.478793][T20912] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3755'. [ 1168.835605][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1169.969912][ T7140] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1170.181154][ T7140] usb 7-1: Using ep0 maxpacket: 32 [ 1170.188760][ T7140] usb 7-1: config 0 has an invalid interface number: 172 but max is 0 [ 1170.201082][ T7140] usb 7-1: config 0 has no interface number 0 [ 1170.207205][ T7140] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=c2.a1 [ 1170.242740][ T7140] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.254090][ T7140] usb 7-1: config 0 descriptor?? [ 1170.262696][ T7140] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1170.457428][T20956] netlink: 'syz.2.3767': attribute type 40 has an invalid length. [ 1170.637617][ T7140] gspca_sn9c2028: read1 error -71 [ 1170.699410][T20957] netlink: 'syz.1.3768': attribute type 83 has an invalid length. [ 1170.714595][ T7140] gspca_sn9c2028: read1 error -71 [ 1170.752086][ T7140] gspca_sn9c2028: read1 error -71 [ 1170.796207][ T7140] sn9c2028 7-1:0.172: probe with driver sn9c2028 failed with error -71 [ 1170.924041][T20962] loop7: detected capacity change from 0 to 1 [ 1170.950112][ T7140] usb 7-1: USB disconnect, device number 70 [ 1171.619890][T20970] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1172.054933][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3772'. [ 1172.551371][T20977] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1173.091977][T21003] netlink: 'syz.4.3781': attribute type 40 has an invalid length. [ 1173.631091][T19300] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1173.801282][T19300] usb 3-1: Using ep0 maxpacket: 8 [ 1173.808708][T21013] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1173.862541][T19300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1173.890907][T19300] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1173.915287][T19300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.969950][T19300] usb 3-1: config 0 descriptor?? [ 1174.540703][T19300] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1174.785020][T19300] usb 3-1: USB disconnect, device number 122 [ 1174.951086][ T7140] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1175.226870][ T7140] usb 8-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1175.238795][ T7140] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.251152][ T7140] usb 8-1: Product: syz [ 1175.262523][ T7140] usb 8-1: Manufacturer: syz [ 1175.267087][ T7140] usb 8-1: SerialNumber: syz [ 1175.279720][ T7140] usb 8-1: config 0 descriptor?? [ 1175.294928][T17751] Bluetooth: hci3: urb ffff88802b34a700 submission failed (2) [ 1175.451527][ T7140] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1175.771070][ T7140] usb 2-1: Using ep0 maxpacket: 32 [ 1175.785004][ T7140] usb 2-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1175.794318][ T7140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.802815][ T7140] usb 2-1: Product: syz [ 1175.807213][ T7140] usb 2-1: Manufacturer: syz [ 1175.814430][ T7140] usb 2-1: SerialNumber: syz [ 1175.908595][ T7140] usb 2-1: config 0 descriptor?? [ 1175.923048][ T7140] usb 2-1: selecting invalid altsetting 1 [ 1175.929143][ T7140] snd-usb-caiaq 2-1:0.0: can't set alt interface. [ 1175.937298][ T7140] usb 2-1: unable to init card! (ret=-5) [ 1175.944555][ T7140] snd-usb-caiaq 2-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1176.031067][ T5882] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1176.124539][T19300] usb 2-1: USB disconnect, device number 22 [ 1176.191156][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 1176.204324][ T5882] usb 7-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1176.213843][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.222380][ T5882] usb 7-1: Product: syz [ 1176.226911][ T5882] usb 7-1: Manufacturer: syz [ 1176.231929][ T5882] usb 7-1: SerialNumber: syz [ 1176.240495][ T5882] usb 7-1: config 0 descriptor?? [ 1176.253239][ T5882] usb 7-1: selecting invalid altsetting 1 [ 1176.259253][ T5882] snd-usb-caiaq 7-1:0.0: can't set alt interface. [ 1176.266996][ T5882] usb 7-1: unable to init card! (ret=-5) [ 1176.276500][ T5882] snd-usb-caiaq 7-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1176.520467][T21045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1176.524904][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.530163][T21045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1176.549124][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.385980][ T5882] usb 7-1: USB disconnect, device number 71 [ 1177.659795][T19300] usb 8-1: USB disconnect, device number 36 [ 1177.871810][T21056] netlink: 'syz.1.3796': attribute type 40 has an invalid length. [ 1178.630679][ T7140] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1178.991079][ T30] audit: type=1400 audit(2000000433.570:6716): avc: denied { accept } for pid=21059 comm="syz.4.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1179.020927][ T7140] usb 8-1: Using ep0 maxpacket: 8 [ 1179.071084][ T30] audit: type=1400 audit(2000000433.620:6717): avc: denied { shutdown } for pid=21059 comm="syz.4.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1179.111290][ T30] audit: type=1400 audit(2000000433.620:6718): avc: denied { read } for pid=21059 comm="syz.4.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1179.168285][ T7140] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.179356][ T7140] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1179.201544][ T7140] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.232612][ T7140] usb 8-1: config 0 descriptor?? [ 1179.406670][T21079] random: crng reseeded on system resumption [ 1179.417052][ T30] audit: type=1400 audit(2000000433.990:6719): avc: denied { read write } for pid=21076 comm="syz.1.3804" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1179.582654][ T30] audit: type=1400 audit(2000000433.990:6720): avc: denied { ioctl open } for pid=21076 comm="syz.1.3804" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1179.771557][ T7140] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1179.817433][ T7140] usb 8-1: USB disconnect, device number 37 [ 1180.351142][ T5882] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1180.522225][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.636303][ T5882] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1180.813247][ T5882] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1180.822584][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.830596][ T5882] usb 5-1: Product: syz [ 1180.841781][ T5882] usb 5-1: Manufacturer: syz [ 1180.848390][ T5882] usb 5-1: SerialNumber: syz [ 1180.868466][ T5882] usb 5-1: config 0 descriptor?? [ 1181.091091][ T5882] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1181.291049][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 1182.097033][ T5882] usb 8-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1182.111090][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.121557][ T5882] usb 8-1: Product: syz [ 1182.128205][ T5882] usb 8-1: Manufacturer: syz [ 1182.141355][ T5882] usb 8-1: SerialNumber: syz [ 1182.157556][ T5882] usb 8-1: config 0 descriptor?? [ 1182.175913][ T5882] usb 8-1: selecting invalid altsetting 1 [ 1182.188787][ T5882] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 1182.201058][ T5882] usb 8-1: unable to init card! (ret=-5) [ 1182.210270][ T5882] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1182.301720][T21111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1182.387792][ T7140] usb 8-1: USB disconnect, device number 38 [ 1182.962446][ T5882] usb 5-1: USB disconnect, device number 17 [ 1183.191214][ T30] audit: type=1400 audit(2000000437.680:6721): avc: denied { write } for pid=21121 comm="syz.6.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1183.402410][ T7140] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1183.700060][ T7140] usb 3-1: Using ep0 maxpacket: 32 [ 1183.772300][T21129] netlink: 'syz.4.3818': attribute type 83 has an invalid length. [ 1183.952741][T21131] loop7: detected capacity change from 0 to 1 [ 1184.412065][ T7140] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 1184.420420][ T7140] usb 3-1: config 0 has no interface number 0 [ 1184.427143][ T7140] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=c2.a1 [ 1184.436360][ T7140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.446576][ T7140] usb 3-1: config 0 descriptor?? [ 1184.470272][ T7140] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1184.687144][ T7140] gspca_sn9c2028: read1 error -71 [ 1184.695680][ T7140] gspca_sn9c2028: read1 error -71 [ 1184.727556][ T7140] gspca_sn9c2028: read1 error -71 [ 1184.743034][ T7140] sn9c2028 3-1:0.172: probe with driver sn9c2028 failed with error -71 [ 1184.770213][ T7140] usb 3-1: USB disconnect, device number 123 [ 1185.001307][T21142] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1185.010453][T21142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1186.271606][ T30] audit: type=1400 audit(2000000440.850:6722): avc: denied { setattr } for pid=21150 comm="syz.2.3824" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1186.974409][ T30] audit: type=1400 audit(2000000441.560:6723): avc: denied { read } for pid=21157 comm="syz.7.3826" lport=45486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1187.182826][T21173] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1188.181638][T21184] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3833'. [ 1188.216920][T21184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3833'. [ 1189.739870][T14997] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1189.798575][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1189.916385][T14997] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1190.129742][T14997] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1190.158329][T14997] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1190.182631][T14997] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1190.210762][T14997] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1190.227401][T14997] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1190.237987][T14997] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1190.256531][T14997] usb 8-1: Product: syz [ 1190.266336][T14997] usb 8-1: Manufacturer: syz [ 1190.445539][T14997] cdc_wdm 8-1:1.0: skipping garbage [ 1190.450744][T14997] cdc_wdm 8-1:1.0: skipping garbage [ 1190.538333][T21208] netlink: 'syz.1.3841': attribute type 40 has an invalid length. [ 1190.934507][T14997] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1190.941104][T14997] cdc_wdm 8-1:1.0: Unknown control protocol [ 1190.983952][T14997] usb 8-1: USB disconnect, device number 39 [ 1191.431079][ T7140] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1191.438796][ T7141] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1191.603577][ T7140] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.619432][ T7141] usb 5-1: Using ep0 maxpacket: 16 [ 1191.714709][ T7141] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1191.728233][ T7140] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.737884][ T7141] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1192.151124][ T7141] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1192.166033][ T7140] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1192.181039][ T7141] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1192.187683][ T7140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1192.198957][ T7141] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1192.210026][ T7140] usb 3-1: SerialNumber: syz [ 1192.221956][ T7141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.235530][ T7141] usb 5-1: Product: syz [ 1192.282059][ T7141] usb 5-1: Manufacturer: syz [ 1192.297173][ T7141] usb 5-1: SerialNumber: syz [ 1192.319350][ T7141] usb 5-1: config 0 descriptor?? [ 1192.469917][T21225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1192.505027][T21225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1192.547654][ T7141] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54 [ 1192.574219][ T5162] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.590659][ T5162] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.617099][ T5162] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.631634][ T5162] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.668268][ T7243] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.690479][ T5162] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.710559][ T5162] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.729091][ T5162] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1192.750548][T14997] usb 5-1: USB disconnect, device number 18 [ 1193.643000][ T7140] usb 3-1: 0:2 : does not exist [ 1193.917233][T21243] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3851'. [ 1193.940525][T21243] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3851'. [ 1194.097971][ T7140] usb 3-1: USB disconnect, device number 124 [ 1194.445496][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1194.591057][ T5882] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1194.751039][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 1194.769069][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.803136][ T5882] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1194.831130][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.864399][ T5882] usb 7-1: config 0 descriptor?? [ 1195.289016][ T5882] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1195.308416][ T5882] usb 7-1: USB disconnect, device number 72 [ 1195.420739][ T30] audit: type=1400 audit(2000000450.000:6724): avc: denied { write } for pid=21270 comm="syz.2.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1195.541943][T19300] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1195.742653][T19300] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1195.777936][T19300] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1195.808700][T19300] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1195.835222][T19300] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1195.870270][T19300] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1195.886035][T19300] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1195.903713][T19300] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1195.912699][T19300] usb 2-1: Product: syz [ 1195.946857][T19300] usb 2-1: Manufacturer: syz [ 1195.972814][T19300] cdc_wdm 2-1:1.0: skipping garbage [ 1195.978044][T19300] cdc_wdm 2-1:1.0: skipping garbage [ 1196.128023][T19300] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1196.134892][T19300] cdc_wdm 2-1:1.0: Unknown control protocol [ 1196.204028][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1196.210656][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1196.216933][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1196.223532][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1196.229856][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1196.236451][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1196.242737][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1196.249323][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1196.255521][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1196.262092][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1196.262291][ T7140] usb 2-1: USB disconnect, device number 23 [ 1196.268151][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1196.660958][T21293] netlink: 'syz.4.3865': attribute type 40 has an invalid length. [ 1197.924463][T21309] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3870'. [ 1198.001273][ T7140] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1198.414542][ T7140] usb 5-1: Using ep0 maxpacket: 32 [ 1198.473420][ T7140] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1198.482533][ T7140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.491270][ T7140] usb 5-1: Product: syz [ 1198.500153][ T7140] usb 5-1: Manufacturer: syz [ 1198.508914][ T7140] usb 5-1: SerialNumber: syz [ 1198.550744][ T7140] usb 5-1: config 0 descriptor?? [ 1198.598163][ T7140] usb 5-1: selecting invalid altsetting 1 [ 1198.628526][ T7140] snd-usb-caiaq 5-1:0.0: can't set alt interface. [ 1198.651123][ T7140] usb 5-1: unable to init card! (ret=-5) [ 1198.667199][ T7140] snd-usb-caiaq 5-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1198.932781][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3874'. [ 1198.989149][ T7140] usb 5-1: USB disconnect, device number 19 [ 1199.691904][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3877'. [ 1201.111355][T21349] netlink: 'syz.7.3882': attribute type 40 has an invalid length. [ 1201.462079][T19300] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1201.724844][T19300] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1201.734644][T19300] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1201.745285][T19300] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1201.758812][T19300] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1201.801969][T19300] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1201.835953][T19300] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1201.836059][T21354] FAULT_INJECTION: forcing a failure. [ 1201.836059][T21354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.851016][T19300] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1201.881483][T19300] usb 7-1: Product: syz [ 1201.919000][T19300] usb 7-1: Manufacturer: syz [ 1201.923126][T21354] CPU: 0 UID: 0 PID: 21354 Comm: syz.7.3885 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.923151][T21354] Tainted: [L]=SOFTLOCKUP [ 1201.923156][T21354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1201.923166][T21354] Call Trace: [ 1201.923172][T21354] [ 1201.923178][T21354] dump_stack_lvl+0x100/0x190 [ 1201.923205][T21354] should_fail_ex.cold+0x5/0xa [ 1201.923226][T21354] _copy_from_user+0x2e/0xd0 [ 1201.923251][T21354] video_usercopy+0xe6a/0x1660 [ 1201.923274][T21354] ? __pfx___video_do_ioctl+0x10/0x10 [ 1201.923297][T21354] ? __pfx_video_usercopy+0x10/0x10 [ 1201.923331][T21354] v4l2_ioctl+0x1bd/0x250 [ 1201.923352][T21354] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1201.923375][T21354] __x64_sys_ioctl+0x18e/0x210 [ 1201.923401][T21354] do_syscall_64+0x106/0xf80 [ 1201.923415][T21354] ? clear_bhb_loop+0x40/0x90 [ 1201.923433][T21354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.923448][T21354] RIP: 0033:0x7f5a7879bf79 [ 1201.923466][T21354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.923481][T21354] RSP: 002b:00007f5a79719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.923496][T21354] RAX: ffffffffffffffda RBX: 00007f5a78a15fa0 RCX: 00007f5a7879bf79 [ 1201.923506][T21354] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000004 [ 1201.923516][T21354] RBP: 00007f5a79719090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.923525][T21354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.923534][T21354] R13: 00007f5a78a16038 R14: 00007f5a78a15fa0 R15: 00007fffb42acc88 [ 1201.923555][T21354] [ 1202.140178][ T30] audit: type=1400 audit(2000000456.720:6725): avc: denied { setattr } for pid=21351 comm="syz.1.3884" name="secretmem" dev="secretmem" ino=84661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1202.256966][T19300] cdc_wdm 7-1:1.0: skipping garbage [ 1202.309462][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 1202.326130][T19300] cdc_wdm 7-1:1.0: skipping garbage [ 1202.493695][T19300] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1202.506168][T19300] cdc_wdm 7-1:1.0: Unknown control protocol [ 1202.653283][T19300] usb 7-1: USB disconnect, device number 73 [ 1203.534424][T21385] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3893'. [ 1203.543735][T21385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3893'. [ 1203.771064][T11959] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1203.925177][T11959] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1203.979148][T11959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.008621][T11959] usb 2-1: Product: syz [ 1204.029688][T11959] usb 2-1: Manufacturer: syz [ 1204.037208][T11959] usb 2-1: SerialNumber: syz [ 1204.233269][T11959] usb 2-1: config 0 descriptor?? [ 1205.367112][T21397] netlink: 'syz.4.3896': attribute type 40 has an invalid length. [ 1206.018070][T11959] usb 2-1: USB disconnect, device number 24 [ 1206.585555][T21420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3902'. [ 1207.811092][T14997] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1207.992625][T14997] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1208.002571][T14997] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1208.032534][T14997] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1208.059195][T14997] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1208.079154][T14997] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1208.110472][T14997] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1208.130067][T14997] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1208.140322][T14997] usb 8-1: Product: syz [ 1208.150091][T14997] usb 8-1: Manufacturer: syz [ 1208.154787][ T5882] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1208.183423][T14997] cdc_wdm 8-1:1.0: skipping garbage [ 1208.190272][T14997] cdc_wdm 8-1:1.0: skipping garbage [ 1208.198321][T14997] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1208.205406][T14997] cdc_wdm 8-1:1.0: Unknown control protocol [ 1208.321494][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 1208.335814][ T5882] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.349132][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.361075][T11959] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1208.398667][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.405263][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.411515][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.418101][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.424337][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.430910][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.437144][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.443709][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.449940][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.456503][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.462833][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.469413][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.475612][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.482184][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.488397][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.494970][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.501296][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.507878][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.514073][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1208.520635][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1208.530003][T14997] usb 8-1: USB disconnect, device number 40 [ 1208.535931][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1208.552401][ T5882] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.568661][T11959] usb 5-1: config 86 has too many interfaces: 61, using maximum allowed: 32 [ 1208.583673][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.597561][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1208.610668][ T5882] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.614502][T11959] usb 5-1: config 86 has an invalid descriptor of length 217, skipping remainder of the config [ 1208.636215][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.648819][ T5882] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.648828][T11959] usb 5-1: config 86 has 0 interfaces, different from the descriptor's value: 61 [ 1208.648862][T11959] usb 5-1: New USB device found, idVendor=1163, idProduct=01e0, bcdDevice=b8.92 [ 1208.715975][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.726004][T11959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.735259][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1208.759255][ T5882] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.769518][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.784185][ T5882] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.798419][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.809901][ T5882] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1208.837284][ T5882] usb 2-1: string descriptor 0 read error: -22 [ 1208.849200][ T5882] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1208.881081][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.925105][ T5882] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1209.129920][T21433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.166096][T21433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.251186][ T7139] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1209.411141][ T7139] usb 7-1: Using ep0 maxpacket: 8 [ 1209.419490][ T7139] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1209.430582][ T7139] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1209.443819][ T7139] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.466499][ T7139] usb 7-1: config 0 descriptor?? [ 1209.911185][ T7139] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1209.963827][ T7139] usb 7-1: USB disconnect, device number 74 [ 1210.071046][ T7140] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1210.223576][ T7140] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1210.235188][ T7140] usb 3-1: config 0 has no interface number 0 [ 1210.243257][ T7140] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1210.252415][ T7140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.260425][ T7140] usb 3-1: Product: syz [ 1210.264636][ T7140] usb 3-1: Manufacturer: syz [ 1210.269239][ T7140] usb 3-1: SerialNumber: syz [ 1210.275735][ T7140] usb 3-1: config 0 descriptor?? [ 1210.489630][ T7140] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1210.675797][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3914'. [ 1211.007765][T21466] binder: 21464:21466 ioctl 4018620d 0 returned -22 [ 1211.388268][ T7139] usb 2-1: USB disconnect, device number 25 [ 1211.845775][T11959] usb 5-1: string descriptor 0 read error: -71 [ 1211.872223][T11959] usb 5-1: USB disconnect, device number 20 [ 1212.175974][T21479] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3918'. [ 1212.362727][T21479] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3918'. [ 1212.703089][T21488] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3921'. [ 1212.712212][T21488] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3921'. [ 1212.896759][ T7139] usb 3-1: USB disconnect, device number 125 [ 1213.371574][T21493] netlink: 'syz.2.3922': attribute type 83 has an invalid length. [ 1213.579324][T21493] loop7: detected capacity change from 0 to 1 [ 1214.081319][T21502] netlink: 'syz.7.3923': attribute type 40 has an invalid length. [ 1214.511289][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3925'. [ 1216.381108][T19300] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1216.521722][T21508] binder: 21506:21508 ioctl 4018620d 0 returned -22 [ 1216.711616][T21512] netlink: 'syz.7.3926': attribute type 83 has an invalid length. [ 1217.677228][T21521] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1217.951966][T21523] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1217.961119][T21523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1219.840938][T19472] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1219.981079][ T29] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1220.025674][T19472] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1220.139028][ T29] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1220.189173][T19472] usb 8-1: config 0 has no interface number 0 [ 1220.336165][T19472] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1220.346711][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.361169][T19472] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.363093][ T29] usb 7-1: config 0 descriptor?? [ 1220.407608][T19472] usb 8-1: Product: syz [ 1220.417891][T19472] usb 8-1: Manufacturer: syz [ 1220.434977][T19472] usb 8-1: SerialNumber: syz [ 1220.453720][T19472] usb 8-1: config 0 descriptor?? [ 1220.502786][T14997] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1220.598131][ T29] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1220.661110][T14997] usb 5-1: Using ep0 maxpacket: 32 [ 1220.669705][T14997] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1220.679684][T14997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.679865][T19472] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1220.713653][T14997] usb 5-1: Product: syz [ 1220.717945][T14997] usb 5-1: Manufacturer: syz [ 1220.724976][T14997] usb 5-1: SerialNumber: syz [ 1220.745597][T14997] usb 5-1: config 0 descriptor?? [ 1220.755123][T14997] usb 5-1: selecting invalid altsetting 1 [ 1220.760882][T14997] snd-usb-caiaq 5-1:0.0: can't set alt interface. [ 1220.771668][T14997] usb 5-1: unable to init card! (ret=-5) [ 1220.779595][T14997] snd-usb-caiaq 5-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1220.807759][T21539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.819024][T21539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.778444][T21556] can0: slcan on ttyS3. [ 1221.839065][ T29] [drm:udl_init] *ERROR* Selecting channel failed [ 1221.899737][ T30] audit: type=1400 audit(2000000476.390:6726): avc: denied { ioctl } for pid=21552 comm="syz.1.3939" path="socket:[85773]" dev="sockfs" ino=85773 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1222.129411][ T5882] usb 5-1: USB disconnect, device number 21 [ 1222.141357][T14997] usb 8-1: USB disconnect, device number 41 [ 1222.148649][ T29] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1222.185255][ T29] [drm] Initialized udl on minor 2 [ 1222.209061][ T29] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1222.251271][ T29] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1222.265257][T21552] can0 (unregistered): slcan off ttyS3. [ 1222.271810][T19300] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1222.353554][ T29] usb 7-1: USB disconnect, device number 75 [ 1222.360221][T19300] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1222.436151][T19472] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1222.695935][T19472] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1222.761182][T21577] netlink: 'syz.1.3944': attribute type 40 has an invalid length. [ 1223.142821][T19472] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1223.155472][T19472] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1223.173974][T19472] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1223.190379][T19472] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1223.217837][T19472] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1223.230099][T19472] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1223.248574][T19472] usb 3-1: Product: syz [ 1223.255913][T19472] usb 3-1: Manufacturer: syz [ 1223.280124][T19472] cdc_wdm 3-1:1.0: skipping garbage [ 1223.286503][T19472] cdc_wdm 3-1:1.0: skipping garbage [ 1223.292496][T21586] FAULT_INJECTION: forcing a failure. [ 1223.292496][T21586] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.318585][T19472] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1223.331947][T19472] cdc_wdm 3-1:1.0: Unknown control protocol [ 1223.347308][T21586] CPU: 0 UID: 0 PID: 21586 Comm: syz.7.3945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1223.347336][T21586] Tainted: [L]=SOFTLOCKUP [ 1223.347342][T21586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1223.347352][T21586] Call Trace: [ 1223.347358][T21586] [ 1223.347365][T21586] dump_stack_lvl+0x100/0x190 [ 1223.347395][T21586] should_fail_ex.cold+0x5/0xa [ 1223.347417][T21586] should_failslab+0xc2/0x120 [ 1223.347437][T21586] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1223.347454][T21586] ? do_getname+0x35/0x390 [ 1223.347478][T21586] ? strncpy_from_user+0x19d/0x2d0 [ 1223.347507][T21586] do_getname+0x35/0x390 [ 1223.347532][T21586] __x64_sys_symlinkat+0x8b/0xe0 [ 1223.347556][T21586] do_syscall_64+0x106/0xf80 [ 1223.347570][T21586] ? clear_bhb_loop+0x40/0x90 [ 1223.347591][T21586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.347608][T21586] RIP: 0033:0x7f5a7879bf79 [ 1223.347622][T21586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.347638][T21586] RSP: 002b:00007f5a796d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1223.347655][T21586] RAX: ffffffffffffffda RBX: 00007f5a78a16180 RCX: 00007f5a7879bf79 [ 1223.347667][T21586] RDX: 0000200000000140 RSI: ffffffffffffffff RDI: 0000200000000480 [ 1223.347677][T21586] RBP: 00007f5a796d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.347688][T21586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.347698][T21586] R13: 00007f5a78a16218 R14: 00007f5a78a16180 R15: 00007fffb42acc88 [ 1223.347722][T21586] [ 1223.914871][ C1] wdm_int_callback: 20 callbacks suppressed [ 1223.914893][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1223.927343][ C1] wdm_int_callback: 20 callbacks suppressed [ 1223.927359][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1223.939613][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1223.946209][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1223.950200][T19472] usb 3-1: USB disconnect, device number 126 [ 1223.952269][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1224.397593][T21613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1224.427972][T21613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1225.834777][ T30] audit: type=1400 audit(2000000480.420:6727): avc: denied { watch } for pid=21631 comm="syz.2.3953" path="/205/file1" dev="tmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1226.031154][T14997] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1226.110783][T21638] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1226.185305][T14997] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1226.309214][ T7139] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1226.315285][T14997] usb 7-1: config 0 has no interface number 0 [ 1226.568948][T14997] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1226.581124][T14997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.601542][T14997] usb 7-1: Product: syz [ 1226.605777][T14997] usb 7-1: Manufacturer: syz [ 1226.610482][T14997] usb 7-1: SerialNumber: syz [ 1226.611996][ T7139] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1226.630886][ T7139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.640591][ T7139] usb 3-1: Product: syz [ 1226.644507][T14997] usb 7-1: config 0 descriptor?? [ 1226.645013][ T7139] usb 3-1: Manufacturer: syz [ 1226.654897][ T7139] usb 3-1: SerialNumber: syz [ 1226.664263][ T7139] usb 3-1: config 0 descriptor?? [ 1226.674146][ T7139] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1226.801324][ T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1226.857487][T14997] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1226.884573][ T30] audit: type=1400 audit(2000000481.470:6728): avc: denied { append } for pid=21648 comm="syz.4.3959" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1226.961066][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 1226.969656][ T29] usb 2-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1226.981724][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.991494][ T29] usb 2-1: Product: syz [ 1226.997627][ T29] usb 2-1: Manufacturer: syz [ 1227.004474][ T29] usb 2-1: SerialNumber: syz [ 1227.010936][ T29] usb 2-1: config 0 descriptor?? [ 1227.025194][ T29] usb 2-1: selecting invalid altsetting 1 [ 1227.030924][ T29] snd-usb-caiaq 2-1:0.0: can't set alt interface. [ 1227.037574][ T29] usb 2-1: unable to init card! (ret=-5) [ 1227.043761][ T29] snd-usb-caiaq 2-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1227.263614][ T29] usb 2-1: USB disconnect, device number 27 [ 1227.316567][ T7139] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1227.331157][ T7139] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1227.345070][ T7139] usb 3-1: USB disconnect, device number 127 [ 1227.941945][ T7140] usb 7-1: USB disconnect, device number 76 [ 1228.081286][ T7139] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1228.301238][ T7140] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1228.443786][ T7139] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1228.458921][ T7139] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1228.469560][ T7139] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1228.482788][ T7139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1228.494151][ T7139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1228.513126][ T7139] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1228.523402][ T7139] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1228.531650][ T7139] usb 2-1: Product: syz [ 1228.535877][ T7139] usb 2-1: Manufacturer: syz [ 1228.555845][ T7139] cdc_wdm 2-1:1.0: skipping garbage [ 1228.562004][ T7139] cdc_wdm 2-1:1.0: skipping garbage [ 1228.572095][ T7139] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1228.578003][ T7139] cdc_wdm 2-1:1.0: Unknown control protocol [ 1228.601060][ T7140] usb 3-1: Using ep0 maxpacket: 8 [ 1228.617134][ T7140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1228.633936][ T7140] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1228.644263][ T7140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.662805][ T7140] usb 3-1: config 0 descriptor?? [ 1228.701652][T19472] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1228.802097][T21688] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3969'. [ 1228.811394][T21688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3969'. [ 1228.992886][T19472] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1229.000927][T19472] usb 7-1: config 0 has no interface number 0 [ 1229.003206][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.013571][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.020238][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.026827][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.033185][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.039755][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.046037][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.052622][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.058891][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.065475][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.071785][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.078369][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.084635][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.091224][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.097455][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.104038][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.110277][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.116859][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.123070][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1229.129640][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1229.137835][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1229.146559][ T5882] usb 2-1: USB disconnect, device number 28 [ 1229.157905][ T7140] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1229.202272][T19472] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1229.224728][T19472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.238295][ T7140] usb 3-1: USB disconnect, device number 2 [ 1229.262475][T19472] usb 7-1: Product: syz [ 1229.266660][T19472] usb 7-1: Manufacturer: syz [ 1229.273910][T19472] usb 7-1: SerialNumber: syz [ 1229.288274][T19472] usb 7-1: config 0 descriptor?? [ 1229.671234][T19472] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1230.106307][T21705] loop4: detected capacity change from 0 to 7 [ 1230.112996][T21705] buffer_io_error: 6 callbacks suppressed [ 1230.113009][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.126722][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.134669][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.144096][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.155073][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.181104][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.189372][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.266063][T21705] ldm_validate_partition_table(): Disk read failed. [ 1230.302412][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.311750][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.321085][T21705] Buffer I/O error on dev loop4, logical block 0, async page read [ 1230.333414][T21705] Dev loop4: unable to read RDB block 0 [ 1230.341063][T21705] loop4: unable to read partition table [ 1230.348599][T21705] loop4: partition table beyond EOD, truncated [ 1230.354915][T21705] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 1230.451134][T19472] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1230.621942][T19472] usb 8-1: Using ep0 maxpacket: 8 [ 1230.699020][T19472] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1230.775328][T19472] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1230.786271][T19472] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.810452][T19472] usb 8-1: config 0 descriptor?? [ 1231.063660][T19472] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1231.371825][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1231.396927][T19472] usb 7-1: USB disconnect, device number 77 [ 1232.158332][T21725] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1232.167714][T21725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1233.441184][ T30] audit: type=1400 audit(2000000488.020:6729): avc: denied { associate } for pid=21742 comm="syz.1.3986" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1233.530157][T11959] usb 8-1: USB disconnect, device number 42 [ 1233.578404][T21751] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3987'. [ 1233.744194][T19472] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1233.913237][T19472] usb 3-1: Using ep0 maxpacket: 8 [ 1233.930413][T19472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1233.991668][T19472] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1234.000790][T19472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.033740][T19472] usb 3-1: config 0 descriptor?? [ 1234.051044][T11959] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1234.203106][T11959] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1234.212694][T11959] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1234.354706][T11959] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1234.388031][T11959] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1234.401106][T11959] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1234.447909][T11959] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1234.459410][T11959] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1234.469060][T11959] usb 8-1: Product: syz [ 1234.474399][T11959] usb 8-1: Manufacturer: syz [ 1234.530657][T19472] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1234.559812][T11959] cdc_wdm 8-1:1.0: skipping garbage [ 1234.570474][T19472] usb 3-1: USB disconnect, device number 3 [ 1234.582870][T11959] cdc_wdm 8-1:1.0: skipping garbage [ 1234.616379][T11959] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1234.625523][T11959] cdc_wdm 8-1:1.0: Unknown control protocol [ 1234.783844][ C0] wdm_int_callback: 13 callbacks suppressed [ 1234.783861][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.796312][ C0] wdm_int_callback: 13 callbacks suppressed [ 1234.796331][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.808780][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.815351][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.821617][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.828272][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.834492][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.841073][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.847398][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.853967][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.860178][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.866744][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.872950][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.879510][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.885835][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.892418][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.898685][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.905265][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1234.911541][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1234.918108][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1235.002105][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1235.002111][ T5882] usb 8-1: USB disconnect, device number 43 [ 1235.853216][T21781] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3995'. [ 1235.862417][T21781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3995'. [ 1236.310823][ T30] audit: type=1400 audit(2000000490.890:6730): avc: denied { read } for pid=21787 comm="syz.2.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1236.471224][T21796] netlink: 'syz.6.3997': attribute type 40 has an invalid length. [ 1237.056579][T21799] netlink: 'syz.1.4000': attribute type 83 has an invalid length. [ 1237.487182][T21797] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1238.033290][ T30] audit: type=1400 audit(2000000492.410:6731): avc: denied { create } for pid=21791 comm="syz.4.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1238.216760][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.229072][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.634867][T21797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.639944][T21791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.644684][T14997] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1239.239580][ T30] audit: type=1400 audit(2000000493.820:6732): avc: denied { mount } for pid=21807 comm="syz.6.4002" name="/" dev="autofs" ino=86722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1239.292085][ T30] audit: type=1400 audit(2000000493.850:6733): avc: denied { read } for pid=21807 comm="syz.6.4002" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1239.362864][T21811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1239.371862][T14997] usb 8-1: Using ep0 maxpacket: 8 [ 1239.373171][T14997] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1239.385404][T14997] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1239.422781][T14997] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1239.434388][T14997] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1239.480062][T14997] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.493163][ T30] audit: type=1400 audit(2000000493.850:6734): avc: denied { mounton } for pid=21807 comm="syz.6.4002" path="/430/file0/file0" dev="autofs" ino=86723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1239.527959][T14997] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1239.562293][T14997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.683548][ T30] audit: type=1400 audit(2000000493.850:6735): avc: denied { mount } for pid=21807 comm="syz.6.4002" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1239.733823][T21794] loop7: detected capacity change from 0 to 1 [ 1239.769280][ T30] audit: type=1400 audit(2000000493.850:6736): avc: denied { ioctl } for pid=21807 comm="syz.6.4002" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1239.819879][T14997] usb 8-1: GET_CAPABILITIES returned 0 [ 1239.844634][T14997] usbtmc 8-1:16.0: can't read capabilities [ 1239.913600][ T30] audit: type=1400 audit(2000000493.930:6737): avc: denied { unmount } for pid=13314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1239.956566][ T30] audit: type=1400 audit(2000000493.930:6738): avc: denied { unmount } for pid=13314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1240.153786][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.162893][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.171933][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.180962][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.190010][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.212501][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.221622][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.230652][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.239678][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.248704][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.258632][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.267712][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.276760][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.285785][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.294823][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.304785][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1240.337370][ T30] audit: type=1400 audit(2000000494.920:6739): avc: denied { ioctl } for pid=21805 comm="syz.7.4001" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1240.365845][ T7139] usb 8-1: USB disconnect, device number 44 [ 1240.941168][ T7139] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1241.101326][ T7139] usb 2-1: Using ep0 maxpacket: 8 [ 1241.110918][ T7139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.140215][ T7139] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1241.174032][ T7139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.209566][ T7139] usb 2-1: config 0 descriptor?? [ 1241.846229][ T7139] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1241.887962][ T7139] usb 2-1: USB disconnect, device number 29 [ 1241.894996][T11959] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1242.411037][T11959] usb 8-1: Using ep0 maxpacket: 32 [ 1242.425192][T11959] usb 8-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1242.440735][T11959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.452159][T11959] usb 8-1: Product: syz [ 1242.456328][T11959] usb 8-1: Manufacturer: syz [ 1242.460918][T11959] usb 8-1: SerialNumber: syz [ 1242.471597][T11959] usb 8-1: config 0 descriptor?? [ 1242.482284][T11959] usb 8-1: selecting invalid altsetting 1 [ 1242.488020][T11959] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 1242.495204][T11959] usb 8-1: unable to init card! (ret=-5) [ 1242.515604][T11959] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1242.818801][ T29] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1242.855029][T11959] usb 8-1: USB disconnect, device number 45 [ 1242.862338][ T30] audit: type=1400 audit(2000000497.440:6740): avc: denied { watch } for pid=21840 comm="syz.2.4013" path="/216" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1242.951163][T14997] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1242.981135][ T29] usb 5-1: device descriptor read/64, error -71 [ 1243.153530][T14997] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1243.154426][T21847] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1243.161726][T14997] usb 2-1: config 0 has no interface number 0 [ 1243.170678][T21847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1243.218624][T14997] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1243.231173][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1243.280075][T14997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.426165][T14997] usb 2-1: Product: syz [ 1243.430336][T14997] usb 2-1: Manufacturer: syz [ 1243.441435][ T29] usb 5-1: device descriptor read/64, error -71 [ 1243.456910][T14997] usb 2-1: SerialNumber: syz [ 1243.477166][T14997] usb 2-1: config 0 descriptor?? [ 1243.574441][ T29] usb usb5-port1: attempt power cycle [ 1243.723290][T14997] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1243.933691][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1243.961713][ T29] usb 5-1: device descriptor read/8, error -71 [ 1244.201028][ T29] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1244.221477][ T29] usb 5-1: device descriptor read/8, error -71 [ 1244.331188][ T29] usb usb5-port1: unable to enumerate USB device [ 1244.856919][T21869] netlink: 'syz.2.4021': attribute type 40 has an invalid length. [ 1245.021467][ T29] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1245.181134][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 1245.187645][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.198752][ T29] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1245.207856][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.218449][ T29] usb 8-1: config 0 descriptor?? [ 1245.552623][T11959] usb 2-1: USB disconnect, device number 30 [ 1245.693335][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1245.788391][ T29] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1245.928897][ T29] usb 8-1: USB disconnect, device number 46 [ 1246.201959][T21879] netlink: 'syz.1.4024': attribute type 40 has an invalid length. [ 1247.237861][T21890] FAULT_INJECTION: forcing a failure. [ 1247.237861][T21890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.311562][ T5868] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1247.364490][ T30] audit: type=1326 audit(2000000501.880:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1247.696101][ T30] audit: type=1326 audit(2000000501.890:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1247.707009][T21890] CPU: 1 UID: 0 PID: 21890 Comm: syz.4.4029 Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.707035][T21890] Tainted: [L]=SOFTLOCKUP [ 1247.707041][T21890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1247.707050][T21890] Call Trace: [ 1247.707056][T21890] [ 1247.707062][T21890] dump_stack_lvl+0x100/0x190 [ 1247.707090][T21890] should_fail_ex.cold+0x5/0xa [ 1247.707110][T21890] _copy_from_iter+0x1f4/0x1690 [ 1247.707129][T21890] ? __alloc_skb+0x220/0x410 [ 1247.707145][T21890] ? __alloc_skb+0x35d/0x410 [ 1247.707160][T21890] ? __pfx__copy_from_iter+0x10/0x10 [ 1247.707185][T21890] netlink_sendmsg+0x808/0xda0 [ 1247.707208][T21890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.707226][T21890] ? __might_fault+0x70/0x140 [ 1247.707258][T21890] ____sys_sendmsg+0xa54/0xc30 [ 1247.707282][T21890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.707320][T21890] ___sys_sendmsg+0x190/0x1e0 [ 1247.707343][T21890] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.707390][T21890] __sys_sendmsg+0x170/0x220 [ 1247.707409][T21890] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.707433][T21890] ? rcu_is_watching+0x12/0xc0 [ 1247.707452][T21890] do_syscall_64+0x106/0xf80 [ 1247.707466][T21890] ? clear_bhb_loop+0x40/0x90 [ 1247.707484][T21890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.707499][T21890] RIP: 0033:0x7f48bf59bf79 [ 1247.707512][T21890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.707528][T21890] RSP: 002b:00007f48c0400028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.707544][T21890] RAX: ffffffffffffffda RBX: 00007f48bf815fa0 RCX: 00007f48bf59bf79 [ 1247.707554][T21890] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1247.707567][T21890] RBP: 00007f48c0400090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.707576][T21890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.707585][T21890] R13: 00007f48bf816038 R14: 00007f48bf815fa0 R15: 00007ffc41308b18 [ 1247.707608][T21890] [ 1247.951952][ T30] audit: type=1326 audit(2000000501.890:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1247.975587][ T30] audit: type=1326 audit(2000000501.890:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1247.999799][ T30] audit: type=1326 audit(2000000501.890:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1248.041521][ T5868] usb 8-1: Using ep0 maxpacket: 32 [ 1248.120071][ T30] audit: type=1326 audit(2000000501.890:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1248.144552][ T30] audit: type=1326 audit(2000000501.890:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1248.181560][ T30] audit: type=1326 audit(2000000501.890:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1248.192623][T21897] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1248.213037][ T5868] usb 8-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1248.213339][ T30] audit: type=1326 audit(2000000501.890:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1248.251070][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.252138][ T30] audit: type=1326 audit(2000000501.890:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d459bf79 code=0x7ffc0000 [ 1248.291028][ T5868] usb 8-1: Product: syz [ 1248.295206][ T5868] usb 8-1: Manufacturer: syz [ 1248.304619][ T5868] usb 8-1: SerialNumber: syz [ 1248.332432][ T5868] usb 8-1: config 0 descriptor?? [ 1248.347486][ T5868] usb 8-1: selecting invalid altsetting 1 [ 1248.364397][ T5868] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 1248.373619][ T5868] usb 8-1: unable to init card! (ret=-5) [ 1248.382842][ T5868] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1248.751912][ T7139] usb 8-1: USB disconnect, device number 47 [ 1249.251082][ T7139] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1249.309115][T21910] netlink: 'syz.4.4034': attribute type 40 has an invalid length. [ 1249.689851][T21906] syz_tun: entered allmulticast mode [ 1249.705521][T21906] dvmrp6: entered allmulticast mode [ 1250.128446][ T7139] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1250.138990][ T7139] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1250.171959][ T7139] usb 2-1: can't read configurations, error -71 [ 1250.261610][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4037'. [ 1250.451109][ T29] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1250.646663][ T29] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1250.654946][ T29] usb 8-1: config 0 has no interface number 0 [ 1250.664271][ T29] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1250.674408][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.682887][ T29] usb 8-1: Product: syz [ 1250.687416][ T29] usb 8-1: Manufacturer: syz [ 1250.693288][ T29] usb 8-1: SerialNumber: syz [ 1250.733570][ T29] usb 8-1: config 0 descriptor?? [ 1250.946997][ T29] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1251.224670][T21932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1251.452003][ T29] usb 8-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1251.460984][ T29] usb 8-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1251.600407][T21937] kAFS: unable to lookup cell 'Þ({^ú@' [ 1252.709902][T11959] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1252.883361][T11959] usb 5-1: Using ep0 maxpacket: 32 [ 1252.899446][T11959] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1252.911633][T11959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.959239][T11959] usb 5-1: Product: syz [ 1252.972782][T11959] usb 5-1: Manufacturer: syz [ 1252.982439][T11959] usb 5-1: SerialNumber: syz [ 1252.995550][T11959] usb 5-1: config 0 descriptor?? [ 1253.007429][T11959] usb 5-1: selecting invalid altsetting 1 [ 1253.016007][T11959] snd-usb-caiaq 5-1:0.0: can't set alt interface. [ 1253.026694][T11959] usb 5-1: unable to init card! (ret=-5) [ 1253.235029][T11959] snd-usb-caiaq 5-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1253.335017][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4048'. [ 1253.345742][T14997] usb 5-1: USB disconnect, device number 26 [ 1253.928674][ T5882] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1254.238578][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1254.246705][ T5882] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1254.256054][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.264716][ T5882] usb 2-1: Product: syz [ 1254.269144][ T5882] usb 2-1: Manufacturer: syz [ 1254.273820][ T5882] usb 2-1: SerialNumber: syz [ 1254.300026][ T5882] usb 2-1: config 0 descriptor?? [ 1254.966571][ T5882] airspy 2-1:0.0: Board ID: 00 [ 1254.990776][ T5882] airspy 2-1:0.0: Firmware version: [ 1255.178933][T21994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1255.205485][T21996] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4057'. [ 1255.214653][T21996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4057'. [ 1255.301652][T21994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1255.312823][T21994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1255.320367][T21994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1255.327652][T21994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1255.342834][T17751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1255.353794][T17751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1255.361117][T17751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1255.386200][ T5882] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 1255.461463][T17751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1255.481343][T17751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1255.496333][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1255.496346][ T30] audit: type=1400 audit(2000000509.791:6759): avc: denied { mounton } for pid=21993 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1255.514047][ T5882] airspy 2-1:0.0: Registered as swradio24 [ 1255.535132][ T5882] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1255.832468][ T5882] usb 2-1: USB disconnect, device number 33 [ 1256.041407][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4059'. [ 1256.734345][T21993] chnl_net:caif_netlink_parms(): no params data found [ 1256.823997][T21993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.831511][T21993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.839443][T21993] bridge_slave_0: entered allmulticast mode [ 1256.847466][T21993] bridge_slave_0: entered promiscuous mode [ 1256.860153][T21993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.867651][T21993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.875770][T21993] bridge_slave_1: entered allmulticast mode [ 1256.884914][T21993] bridge_slave_1: entered promiscuous mode [ 1256.924628][T21993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.942303][T21993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.985180][T21993] team0: Port device team_slave_0 added [ 1256.998760][T21993] team0: Port device team_slave_1 added [ 1257.044375][T21993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.052891][T21993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.079759][T21993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.096887][T21993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.104099][T21993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.130249][T22023] comedi comedi3: das16m1: I/O port conflict (0x20,16) [ 1257.137796][T22023] binder: 22022:22023 ioctl c00c620f 2000000000c0 returned -22 [ 1257.145955][T21993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.270361][T22026] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4064'. [ 1257.279548][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4064'. [ 1257.504166][T21993] hsr_slave_0: entered promiscuous mode [ 1257.514439][T21993] hsr_slave_1: entered promiscuous mode [ 1257.681213][T21994] Bluetooth: hci3: command tx timeout [ 1258.168526][T21993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1258.282787][T21993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1258.292578][T21993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1258.305203][T21993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1258.406184][T22045] netlink: 'syz.4.4067': attribute type 40 has an invalid length. [ 1258.968240][T21993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.984752][T21993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.996810][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.003879][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.020244][T18341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.027372][T18341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.055351][T21993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1259.066091][T21993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1259.199313][T19300] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1259.401945][T19300] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1259.493748][T19300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.522958][T19300] usb 3-1: Product: syz [ 1259.527664][T19300] usb 3-1: Manufacturer: syz [ 1259.537983][T19300] usb 3-1: SerialNumber: syz [ 1259.553472][T19300] usb 3-1: config 0 descriptor?? [ 1259.572119][T19300] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1259.691965][T19472] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1259.982831][T21994] Bluetooth: hci3: command tx timeout [ 1260.100640][T21993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.129379][T19472] usb 5-1: Using ep0 maxpacket: 32 [ 1260.189519][T22055] kernel read not supported for file /eth0 (pid: 22055 comm: syz.2.4070) [ 1260.305830][ T30] audit: type=1800 audit(2000000514.291:6760): pid=22055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4070" name="eth0" dev="mqueue" ino=88530 res=0 errno=0 [ 1260.334546][T22055] 9p: Bad value for 'wfdno' [ 1260.350242][T19300] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1260.360150][T19300] sq905c 3-1:0.0: Reading version command failed [ 1260.363701][T19472] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 1260.366852][T19300] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1260.368483][T19300] usb 3-1: USB disconnect, device number 4 [ 1260.380893][ T30] audit: type=1400 audit(2000000514.328:6761): avc: denied { audit_read } for pid=22053 comm="syz.2.4070" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.425788][T19472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.438310][T19472] usb 5-1: Product: syz [ 1260.443081][T19472] usb 5-1: Manufacturer: syz [ 1260.447804][T19472] usb 5-1: SerialNumber: syz [ 1260.455063][ T30] audit: type=1400 audit(2000000514.328:6762): avc: denied { nlmsg_write } for pid=22053 comm="syz.2.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1260.476850][T19472] usb 5-1: config 0 descriptor?? [ 1260.485830][T19472] usb 5-1: selecting invalid altsetting 1 [ 1260.491615][T19472] snd-usb-caiaq 5-1:0.0: can't set alt interface. [ 1260.500692][T19472] usb 5-1: unable to init card! (ret=-5) [ 1260.507028][T19472] snd-usb-caiaq 5-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 1260.691900][T21993] veth0_vlan: entered promiscuous mode [ 1260.694667][ T30] audit: type=1400 audit(2000000514.646:6763): avc: denied { watch watch_reads } for pid=22084 comm="syz.7.4076" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1260.726763][T21993] veth1_vlan: entered promiscuous mode [ 1260.778890][T21993] veth0_macvtap: entered promiscuous mode [ 1260.808241][T21993] veth1_macvtap: entered promiscuous mode [ 1260.831617][T21993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.899277][T22088] fuse: Bad value for 'rootmode' [ 1261.005985][T19472] usb 5-1: USB disconnect, device number 27 [ 1261.018162][T21993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.045146][T14272] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.112088][T22092] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4077'. [ 1261.121595][T22088] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4077'. [ 1261.163086][T14272] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.186321][T14272] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.292458][T14272] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.764890][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1261.804252][ T6810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.835116][ T6810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.915434][ T6810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.928325][ T6810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.140271][T22111] netlink: 'syz.4.4082': attribute type 40 has an invalid length. [ 1262.730448][T21994] Bluetooth: hci3: command tx timeout [ 1263.085074][T22116] IPVS: Unknown mcast interface: veth0_to_bond [ 1263.514155][T22122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4086'. [ 1264.940384][T21994] Bluetooth: hci3: command tx timeout [ 1265.309835][T22158] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1265.328127][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4093'. [ 1265.552384][T22162] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1266.077135][T22172] sd 0:0:1:0: device reset [ 1266.082164][ T30] audit: type=1400 audit(2000000519.679:6764): avc: denied { listen } for pid=22166 comm="syz.1.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1266.106748][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 1267.560424][T22182] netlink: 'syz.1.4102': attribute type 83 has an invalid length. [ 1267.640583][T22182] loop7: detected capacity change from 0 to 1 [ 1267.984108][ T30] audit: type=1400 audit(2000000521.475:6765): avc: denied { read open } for pid=22188 comm="syz.8.4104" path="/" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1268.344353][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4106'. [ 1268.612356][T22203] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1268.864207][T22202] FAULT_INJECTION: forcing a failure. [ 1268.864207][T22202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.877319][T22202] CPU: 0 UID: 0 PID: 22202 Comm: syz.1.4110 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.877337][T22202] Tainted: [L]=SOFTLOCKUP [ 1268.877341][T22202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1268.877348][T22202] Call Trace: [ 1268.877352][T22202] [ 1268.877356][T22202] dump_stack_lvl+0x100/0x190 [ 1268.877378][T22202] should_fail_ex.cold+0x5/0xa [ 1268.877392][T22202] _copy_from_user+0x2e/0xd0 [ 1268.877411][T22202] kstrtouint_from_user+0xd6/0x1d0 [ 1268.877426][T22202] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1268.877440][T22202] ? __lock_acquire+0x4a5/0x2630 [ 1268.877457][T22202] ? lock_acquire+0x17c/0x330 [ 1268.877475][T22202] proc_fail_nth_write+0x83/0x220 [ 1268.877490][T22202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1268.877509][T22202] vfs_write+0x2aa/0x1070 [ 1268.877521][T22202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1268.877537][T22202] ? __pfx_vfs_write+0x10/0x10 [ 1268.877548][T22202] ? __fget_files+0x215/0x3d0 [ 1268.877564][T22202] ? __fget_files+0x21f/0x3d0 [ 1268.877580][T22202] ksys_write+0x12a/0x250 [ 1268.877591][T22202] ? __pfx_ksys_write+0x10/0x10 [ 1268.877601][T22202] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1268.877617][T22202] ? syscall_user_dispatch+0x76/0x130 [ 1268.877636][T22202] do_syscall_64+0x106/0xf80 [ 1268.877646][T22202] ? clear_bhb_loop+0x40/0x90 [ 1268.877660][T22202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.877672][T22202] RIP: 0033:0x7f53d455c84e [ 1268.877681][T22202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1268.877692][T22202] RSP: 002b:00007f53d5423fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1268.877704][T22202] RAX: ffffffffffffffda RBX: 00007f53d54246c0 RCX: 00007f53d455c84e [ 1268.877711][T22202] RDX: 0000000000000001 RSI: 00007f53d54240a0 RDI: 0000000000000005 [ 1268.877717][T22202] RBP: 00007f53d5424090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.877724][T22202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.877731][T22202] R13: 00007f53d4816038 R14: 00007f53d4815fa0 R15: 00007ffc24f53428 [ 1268.877745][T22202] [ 1269.146062][ T30] audit: type=1400 audit(2000000522.522:6766): avc: denied { create } for pid=22164 comm="syz.7.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1269.792339][ T30] audit: type=1326 audit(2000000522.793:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1269.947402][ T30] audit: type=1326 audit(2000000522.793:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1269.973859][T22217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22217 comm=syz.8.4113 [ 1269.987715][ T30] audit: type=1326 audit(2000000522.793:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1270.180721][ T30] audit: type=1326 audit(2000000522.793:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1270.180765][ T30] audit: type=1326 audit(2000000522.793:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1270.180801][ T30] audit: type=1326 audit(2000000522.793:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1270.180823][ T30] audit: type=1326 audit(2000000522.812:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.2.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4519bf79 code=0x7ffc0000 [ 1270.531504][T22222] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1270.633073][T22224] xt_connbytes: Forcing CT accounting to be enabled [ 1271.635191][T22241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4119'. [ 1271.780087][T22241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4119'. [ 1272.125493][T22253] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1272.327152][ T7140] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1272.530262][ T7140] usb 3-1: Using ep0 maxpacket: 32 [ 1272.551941][ T7140] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1272.575702][ T7140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1272.605173][ T7140] usb 3-1: Product: syz [ 1272.622158][ T7140] usb 3-1: Manufacturer: syz [ 1272.641925][ T7140] usb 3-1: SerialNumber: syz [ 1272.654599][ T7140] usb 3-1: config 0 descriptor?? [ 1273.230200][T22248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.302979][T22248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.399509][ T7140] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1273.428295][ T7140] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1273.515321][ T7140] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1273.536263][ T7140] usb 3-1: USB disconnect, device number 5 [ 1274.988739][T22284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1275.085353][ T5882] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1275.210359][T22288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4132'. [ 1275.257918][ T5882] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1275.265936][ T5882] usb 3-1: config 0 has no interface number 0 [ 1275.278229][ T5882] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1275.287284][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.297557][ T5882] usb 3-1: Product: syz [ 1275.301936][ T5882] usb 3-1: Manufacturer: syz [ 1275.306526][ T5882] usb 3-1: SerialNumber: syz [ 1275.321017][ T5882] usb 3-1: config 0 descriptor?? [ 1275.385480][T22293] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1275.902899][ T5882] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1276.745344][T22299] netlink: 'syz.1.4135': attribute type 40 has an invalid length. [ 1276.875134][T22302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1277.068207][T22305] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4137'. [ 1277.078101][T22305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4137'. [ 1277.488843][T22311] netlink: 'syz.7.4138': attribute type 40 has an invalid length. [ 1278.381537][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1278.381554][ T30] audit: type=1400 audit(2000000531.203:6793): avc: denied { connect } for pid=22322 comm="syz.8.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1278.417956][ T30] audit: type=1400 audit(2000000531.231:6794): avc: denied { write } for pid=22322 comm="syz.8.4142" path="socket:[89844]" dev="sockfs" ino=89844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1278.555539][ T30] audit: type=1400 audit(2000000531.324:6795): avc: denied { getopt } for pid=22322 comm="syz.8.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1278.959645][T22333] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1280.602743][T22358] Device name cannot be null; rc = [-22] [ 1281.814031][T22378] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4156'. [ 1281.831721][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4157'. [ 1282.127378][T22379] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1282.155393][T22378] veth0_macvtap: Device is already in use. [ 1282.380489][T22388] netlink: 'syz.4.4161': attribute type 83 has an invalid length. [ 1283.737880][ T7140] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1283.883772][ T7140] usb 2-1: device descriptor read/64, error -71 [ 1284.142728][ T7140] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1284.289877][ T7140] usb 2-1: device descriptor read/64, error -71 [ 1284.407692][ T7140] usb usb2-port1: attempt power cycle [ 1284.554632][ T30] audit: type=1400 audit(2000000536.974:6796): avc: denied { ioctl } for pid=22409 comm="syz.4.4167" path="socket:[90332]" dev="sockfs" ino=90332 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1284.786640][ T7140] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1284.819167][ T7140] usb 2-1: device descriptor read/8, error -71 [ 1285.113133][ T7140] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1285.139676][ T7140] usb 2-1: device descriptor read/8, error -71 [ 1285.273677][ T7140] usb usb2-port1: unable to enumerate USB device [ 1285.642911][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4170'. [ 1286.508880][T22431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1289.359081][T22464] netlink: 'syz.7.4180': attribute type 13 has an invalid length. [ 1289.385762][T22464] netlink: 'syz.7.4180': attribute type 17 has an invalid length. [ 1289.695410][T22464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1290.961001][T22451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.186475][T22359] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1291.378226][T22359] usb 5-1: Using ep0 maxpacket: 8 [ 1291.425535][T22359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1291.449947][T22359] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1291.460691][T22359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.500883][T22359] usb 5-1: config 0 descriptor?? [ 1292.286330][T22359] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1292.313719][T22359] usb 5-1: USB disconnect, device number 28 [ 1294.723194][T22529] random: crng reseeded on system resumption [ 1294.968862][T22536] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 1294.978120][T22536] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4198'. [ 1295.714550][T22543] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1296.746407][ T30] audit: type=1400 audit(2000000548.377:6797): avc: denied { bind } for pid=22544 comm="syz.4.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1296.809309][T22557] input: syz1 as /devices/virtual/input/input57 [ 1296.815609][T22557] input: failed to attach handler leds to device input57, error: -6 [ 1297.369488][T22568] netlink: 'syz.4.4208': attribute type 1 has an invalid length. [ 1297.479199][T22568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1297.716302][T22568] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4208'. [ 1297.751867][T22568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4208'. [ 1298.404610][ T30] audit: type=1400 audit(2000000549.929:6798): avc: denied { mounton } for pid=22582 comm="syz.4.4211" path="/235/file0" dev="tmpfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1298.459269][T22585] FAULT_INJECTION: forcing a failure. [ 1298.459269][T22585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.473505][T22585] CPU: 0 UID: 0 PID: 22585 Comm: syz.4.4211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.473534][T22585] Tainted: [L]=SOFTLOCKUP [ 1298.473540][T22585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1298.473551][T22585] Call Trace: [ 1298.473556][T22585] [ 1298.473563][T22585] dump_stack_lvl+0x100/0x190 [ 1298.473596][T22585] should_fail_ex.cold+0x5/0xa [ 1298.473618][T22585] _copy_from_iter+0x1f4/0x1690 [ 1298.473639][T22585] ? policy_nodemask+0xed/0x4f0 [ 1298.473659][T22585] ? __pfx__copy_from_iter+0x10/0x10 [ 1298.473677][T22585] ? alloc_pages_mpol+0x25a/0x550 [ 1298.473698][T22585] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1298.473723][T22585] copy_page_from_iter+0xde/0x180 [ 1298.473744][T22585] anon_pipe_write+0xae4/0x1d40 [ 1298.473773][T22585] ? __pfx_anon_pipe_write+0x10/0x10 [ 1298.473790][T22585] ? _kstrtoull+0x13c/0x1f0 [ 1298.473808][T22585] ? __pfx__kstrtoull+0x10/0x10 [ 1298.473837][T22585] fifo_pipe_write+0x28/0x550 [ 1298.473859][T22585] do_iter_readv_writev+0x6ee/0x920 [ 1298.473887][T22585] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1298.473912][T22585] ? avc_policy_seqno+0x9/0x20 [ 1298.473927][T22585] ? selinux_file_permission+0x8f/0x6d0 [ 1298.473952][T22585] ? bpf_lsm_file_permission+0x9/0x10 [ 1298.473972][T22585] ? security_file_permission+0x76/0x210 [ 1298.473995][T22585] ? rw_verify_area+0xce/0x6d0 [ 1298.474022][T22585] vfs_writev+0x360/0xe10 [ 1298.474044][T22585] ? __pfx_vfs_writev+0x10/0x10 [ 1298.474061][T22585] ? find_held_lock+0x2b/0x80 [ 1298.474094][T22585] ? __fget_files+0x21f/0x3d0 [ 1298.474119][T22585] ? do_writev+0x28a/0x340 [ 1298.474133][T22585] do_writev+0x28a/0x340 [ 1298.474149][T22585] ? __pfx_do_writev+0x10/0x10 [ 1298.474165][T22585] ? do_user_addr_fault+0x8d6/0x12f0 [ 1298.474186][T22585] do_syscall_64+0x106/0xf80 [ 1298.474201][T22585] ? clear_bhb_loop+0x40/0x90 [ 1298.474222][T22585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.474239][T22585] RIP: 0033:0x7f48bf59bf79 [ 1298.474259][T22585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.474276][T22585] RSP: 002b:00007f48c03b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1298.474294][T22585] RAX: ffffffffffffffda RBX: 00007f48bf816180 RCX: 00007f48bf59bf79 [ 1298.474306][T22585] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 1298.474316][T22585] RBP: 00007f48c03b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.474326][T22585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1298.474336][T22585] R13: 00007f48bf816218 R14: 00007f48bf816180 R15: 00007ffc41308b18 [ 1298.474360][T22585] [ 1300.231134][T22597] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4214'. [ 1300.240103][T22597] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4214'. [ 1300.550296][T11959] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1300.710642][T11959] usb 5-1: Using ep0 maxpacket: 16 [ 1300.717268][T11959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.728385][T11959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.738362][T11959] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1300.747574][T11959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.757155][T11959] usb 5-1: config 0 descriptor?? [ 1301.209688][T11959] holtek_mouse 0003:04D9:A081.0019: unknown main item tag 0x2 [ 1301.220131][T11959] holtek_mouse 0003:04D9:A081.0019: unknown main item tag 0x5 [ 1301.247219][T11959] holtek_mouse 0003:04D9:A081.0019: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.4-1/input0 [ 1301.430406][ T30] audit: type=1326 audit(2000000552.764:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.4.4216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48bf59bf79 code=0x0 [ 1301.934413][T22625] lo speed is unknown, defaulting to 1000 [ 1301.940671][T22625] lo speed is unknown, defaulting to 1000 [ 1301.958220][T22625] lo speed is unknown, defaulting to 1000 [ 1302.002377][T22625] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 1302.107855][T22626] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1302.213886][T22625] lo speed is unknown, defaulting to 1000 [ 1302.220357][T22625] lo speed is unknown, defaulting to 1000 [ 1302.226767][T22625] lo speed is unknown, defaulting to 1000 [ 1302.240647][T22625] lo speed is unknown, defaulting to 1000 [ 1302.275624][T22625] lo speed is unknown, defaulting to 1000 [ 1302.282171][T22625] lo speed is unknown, defaulting to 1000 [ 1302.288633][T22625] lo speed is unknown, defaulting to 1000 [ 1302.341742][ T30] audit: type=1400 audit(2000000553.606:6800): avc: denied { getopt } for pid=22627 comm="syz.1.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1302.745230][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.751606][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.512544][ T7139] usb 5-1: USB disconnect, device number 29 [ 1303.870281][T22651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=22651 comm=syz.8.4229 [ 1307.115684][T22670] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4232'. [ 1307.897933][T22677] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4235'. [ 1310.331432][ T30] audit: type=1400 audit(2000000561.051:6801): avc: denied { unmount } for pid=21993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1310.526401][T22359] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1310.728012][T22705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1310.845389][T22359] usb 5-1: Using ep0 maxpacket: 8 [ 1310.898156][T22359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1310.919245][T22359] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1310.938432][T22359] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1310.948756][T22359] usb 5-1: Product: syz [ 1310.950343][T22705] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1310.954791][T22359] usb 5-1: Manufacturer: syz [ 1310.988605][T22359] usb 5-1: SerialNumber: syz [ 1311.435898][T22359] usb 5-1: palm_os_3_probe - error -71 getting connection information [ 1311.447526][T22359] visor 5-1:1.0: probe with driver visor failed with error -71 [ 1311.474593][T22359] usb 5-1: USB disconnect, device number 30 [ 1311.664856][T17751] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1311.675352][T17751] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1311.683638][T17751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1311.804848][T17751] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1311.815126][T17751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1312.152287][T22720] Failed to initialize the IGMP autojoin socket (err -2) [ 1312.646397][T22720] chnl_net:caif_netlink_parms(): no params data found [ 1313.559375][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 1314.065565][T22720] smc: adding net device wg2 with user defined pnetid S [ 1314.287733][T21994] Bluetooth: hci5: command tx timeout [ 1314.350402][T22720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.376497][T22720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.383764][T22720] bridge_slave_0: entered allmulticast mode [ 1314.414142][T22720] bridge_slave_0: entered promiscuous mode [ 1314.683501][T22720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.690675][T22720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.698451][T22720] bridge_slave_1: entered allmulticast mode [ 1314.788891][T22720] bridge_slave_1: entered promiscuous mode [ 1315.057674][ T5868] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1315.146598][T22720] team0: Port device team_slave_0 added [ 1315.231427][ T5868] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1315.247096][ T5868] usb 2-1: config 0 has no interface number 0 [ 1315.259483][T22720] team0: Port device team_slave_1 added [ 1315.270740][ T5868] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1315.302209][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.342206][ T5868] usb 2-1: Product: syz [ 1315.367101][ T5868] usb 2-1: Manufacturer: syz [ 1315.378982][T22720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.385948][T22720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.413561][ T5868] usb 2-1: SerialNumber: syz [ 1315.433783][ T5868] usb 2-1: config 0 descriptor?? [ 1315.468914][T22720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.485483][T17751] Bluetooth: hci3: command 0x0406 tx timeout [ 1315.499467][T22720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.515202][T22720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.590346][T22720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.665422][ T5868] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1316.419150][T22720] hsr_slave_0: entered promiscuous mode [ 1316.434836][T22720] hsr_slave_1: entered promiscuous mode [ 1316.445402][T22720] debugfs: 'hsr0' already exists in 'hsr' [ 1316.452152][T22720] Cannot create hsr debugfs directory [ 1316.522922][T17751] Bluetooth: hci5: command tx timeout [ 1317.805605][ T6808] ------------[ cut here ]------------ [ 1317.811526][ T6808] time_after(jiffies, timeout) [ 1317.811540][ T6808] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#0: kworker/u8:9/6808 [ 1317.826768][ T6808] Modules linked in: [ 1317.830969][ T6808] CPU: 0 UID: 0 PID: 6808 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.842155][ T6808] Tainted: [L]=SOFTLOCKUP [ 1317.846469][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1317.856668][ T6808] Workqueue: iou_exit io_ring_exit_work [ 1317.862269][ T6808] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 1317.867993][ T6808] Code: 8e e8 a7 2d 3d 01 48 8b 05 c0 d7 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 4e de d1 00 4d 85 ed 79 12 e8 64 e3 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 52 e3 d1 00 48 8b 74 24 38 [ 1317.887924][ T6808] RSP: 0018:ffffc9001de77ab0 EFLAGS: 00010293 [ 1317.894167][ T6808] RAX: 0000000000000000 RBX: ffff888037acc778 RCX: ffffffff81353ad2 [ 1317.902203][ T6808] RDX: ffff888055cda480 RSI: ffffffff81353adc RDI: ffff888055cda480 [ 1317.910150][ T6808] RBP: ffffc9001de77c40 R08: 0000000000000007 R09: 0000000000000000 [ 1317.918120][ T6808] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff888037acc000 [ 1317.926100][ T6808] R13: fffffffffffffffb R14: dffffc0000000000 R15: 0000000000000000 [ 1317.934203][ T6808] FS: 0000000000000000(0000) GS:ffff8881243a8000(0000) knlGS:0000000000000000 [ 1317.943113][ T6808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1317.949761][ T6808] CR2: 00007f3f7dd424a2 CR3: 0000000037b28000 CR4: 00000000003526f0 [ 1317.957788][ T6808] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1317.965944][ T6808] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1317.973891][ T6808] Call Trace: [ 1317.977172][ T6808] [ 1317.980083][ T6808] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1317.985524][ T6808] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.991345][ T6808] ? debug_object_deactivate+0x2e4/0x3b0 [ 1317.996965][ T6808] ? process_one_work+0x80b/0x1840 [ 1318.002135][ T6808] ? rcu_is_watching+0x12/0xc0 [ 1318.006881][ T6808] process_one_work+0x9c2/0x1840 [ 1318.011858][ T6808] ? __pfx_process_one_work+0x10/0x10 [ 1318.017251][ T6808] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1318.022756][ T6808] worker_thread+0x5da/0xe40 [ 1318.027368][ T6808] ? kthread+0x13a/0x450 [ 1318.031679][ T6808] ? __pfx_worker_thread+0x10/0x10 [ 1318.036777][ T6808] kthread+0x370/0x450 [ 1318.040839][ T6808] ? __pfx_kthread+0x10/0x10 [ 1318.045409][ T6808] ret_from_fork+0x754/0xd80 [ 1318.049979][ T6808] ? __pfx_ret_from_fork+0x10/0x10 [ 1318.055125][ T6808] ? __switch_to+0x7b4/0x10c0 [ 1318.059878][ T6808] ? __pfx_kthread+0x10/0x10 [ 1318.064549][ T6808] ret_from_fork_asm+0x1a/0x30 [ 1318.069297][ T6808] [ 1318.072319][ T6808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1318.079581][ T6808] CPU: 0 UID: 0 PID: 6808 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.090573][ T6808] Tainted: [L]=SOFTLOCKUP [ 1318.094889][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1318.104941][ T6808] Workqueue: iou_exit io_ring_exit_work [ 1318.110471][ T6808] Call Trace: [ 1318.113723][ T6808] [ 1318.116630][ T6808] dump_stack_lvl+0x100/0x190 [ 1318.121288][ T6808] vpanic+0x20d/0x630 [ 1318.125260][ T6808] panic+0xd1/0xd1 [ 1318.128953][ T6808] ? __pfx_panic+0x10/0x10 [ 1318.133347][ T6808] ? check_panic_on_warn+0x1f/0x90 [ 1318.138437][ T6808] check_panic_on_warn.cold+0x19/0x34 [ 1318.143785][ T6808] ? io_ring_exit_work+0x42d/0xcdb [ 1318.148885][ T6808] __warn.cold+0x191/0x2f8 [ 1318.153305][ T6808] __report_bug+0x296/0x3d0 [ 1318.157803][ T6808] ? io_ring_exit_work+0x42d/0xcdb [ 1318.162910][ T6808] ? __pfx___report_bug+0x10/0x10 [ 1318.167924][ T6808] ? irqentry_exit+0x180/0x670 [ 1318.172671][ T6808] ? lockdep_hardirqs_on+0x78/0x100 [ 1318.177865][ T6808] ? irqentry_exit+0x180/0x670 [ 1318.182613][ T6808] ? io_ring_exit_work+0x42d/0xcdb [ 1318.187716][ T6808] ? io_ring_exit_work+0x42d/0xcdb [ 1318.192817][ T6808] report_bug+0xb2/0x220 [ 1318.197047][ T6808] ? io_ring_exit_work+0x42d/0xcdb [ 1318.202146][ T6808] handle_bug+0x166/0x2a0 [ 1318.206461][ T6808] exc_invalid_op+0x17/0x50 [ 1318.210950][ T6808] asm_exc_invalid_op+0x1a/0x20 [ 1318.215783][ T6808] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 1318.221492][ T6808] Code: 8e e8 a7 2d 3d 01 48 8b 05 c0 d7 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 4e de d1 00 4d 85 ed 79 12 e8 64 e3 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 52 e3 d1 00 48 8b 74 24 38 [ 1318.241081][ T6808] RSP: 0018:ffffc9001de77ab0 EFLAGS: 00010293 [ 1318.247131][ T6808] RAX: 0000000000000000 RBX: ffff888037acc778 RCX: ffffffff81353ad2 [ 1318.255084][ T6808] RDX: ffff888055cda480 RSI: ffffffff81353adc RDI: ffff888055cda480 [ 1318.263039][ T6808] RBP: ffffc9001de77c40 R08: 0000000000000007 R09: 0000000000000000 [ 1318.270993][ T6808] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff888037acc000 [ 1318.278945][ T6808] R13: fffffffffffffffb R14: dffffc0000000000 R15: 0000000000000000 [ 1318.286910][ T6808] ? io_ring_exit_work+0x422/0xcdb [ 1318.292012][ T6808] ? io_ring_exit_work+0x42c/0xcdb [ 1318.297118][ T6808] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1318.302569][ T6808] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1318.308365][ T6808] ? debug_object_deactivate+0x2e4/0x3b0 [ 1318.313993][ T6808] ? process_one_work+0x80b/0x1840 [ 1318.319093][ T6808] ? rcu_is_watching+0x12/0xc0 [ 1318.323844][ T6808] process_one_work+0x9c2/0x1840 [ 1318.328776][ T6808] ? __pfx_process_one_work+0x10/0x10 [ 1318.334143][ T6808] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1318.339591][ T6808] worker_thread+0x5da/0xe40 [ 1318.344181][ T6808] ? kthread+0x13a/0x450 [ 1318.348410][ T6808] ? __pfx_worker_thread+0x10/0x10 [ 1318.353510][ T6808] kthread+0x370/0x450 [ 1318.357566][ T6808] ? __pfx_kthread+0x10/0x10 [ 1318.362143][ T6808] ret_from_fork+0x754/0xd80 [ 1318.366738][ T6808] ? __pfx_ret_from_fork+0x10/0x10 [ 1318.371841][ T6808] ? __switch_to+0x7b4/0x10c0 [ 1318.376504][ T6808] ? __pfx_kthread+0x10/0x10 [ 1318.381083][ T6808] ret_from_fork_asm+0x1a/0x30 [ 1318.385841][ T6808] [ 1318.389120][ T6808] Kernel Offset: disabled [ 1318.393447][ T6808] Rebooting in 86400 seconds..