last executing test programs: 13m34.360564292s ago: executing program 32 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x15966) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x20040044) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x1e) poll(0x0, 0x0, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x20000, {r7}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x42, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000043000000", 0x30) socket$key(0xf, 0x3, 0x2) 9m17.455484731s ago: executing program 33 (id=1260): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40200, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1d, 0x805, 0x2) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x700, 0x20, 0x2, 0x7fff, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0xd1, [@broadcast, @remote, @loopback, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x800}, {@loopback, 0x2}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdd, [@remote]}]}}}}}) mknodat$null(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xc000, 0x103) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 8m59.055522006s ago: executing program 34 (id=1301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff2c, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) socket(0x10, 0x800, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0), 0x1}, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 8m21.720094137s ago: executing program 35 (id=1368): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b70200000000e4ff8500000084000000b70000000201000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_io_uring_setup(0x1127, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x8400000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000000)={&(0x7f0000001000)}, 0x1) socket(0x10, 0x3, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES16=r8, @ANYBLOB="050027bd7000fedbdf2506000028a20c07d8af0ee8deb19248faf2ce0008000300", @ANYRES8=r6, @ANYBLOB="0800050006", @ANYRESDEC=r2, @ANYBLOB="5c861d8a1bfd60b507d85b4e42fb9b20ed3b9d1d3abf45e47470ab7c4628831c1e6dcca51ffd97f25a27e84b0b70c34ce54f1a0ce45b5ea61ac54d8306a0f1cd6a53c7863132edd981c97b3b2da57ce8a89e7cb9414e56428fb72686c862f9b558f6436890bf2a7ae474f2df28a2cd8ea392a7e2bdb0b8c345636dd00f46f3bffd24eec27d9eb1a8adf54766979681d581441b844517a009b9709f2c"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() 8m13.068456453s ago: executing program 36 (id=1380): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}}}}}}, 0x0) 8m7.289527276s ago: executing program 37 (id=1391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000140)={'vlan1\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000100)=0x80000001, 0x4) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) socket(0x26, 0x5, 0x0) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)='Y') ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) fcntl$getflags(0xffffffffffffffff, 0x401) 7m34.817065082s ago: executing program 38 (id=1450): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000080)={'bond0\x00', @random="e700"}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000180)='%\x00\x00\x00\x00\r\xcc:', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/101}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 6m45.555454105s ago: executing program 39 (id=1565): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x30, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x8800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x3c}, 0xa, @in=@empty, 0x3504, 0x8, 0x3, 0x0, 0xfffffffc, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x7, 0x4) 6m40.665944008s ago: executing program 40 (id=1576): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000500)={0x0, @reserved}) fcntl$getown(0xffffffffffffffff, 0x9) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086"], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 6m32.637961564s ago: executing program 41 (id=1588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 6m14.802091601s ago: executing program 42 (id=1623): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008a3f6e16f000000100005800a0001006c986cfbcf10a1fb1557be4ce978d8512e393331000000"], 0xa4}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xb504}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x400) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r9, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f00000003c0)={0x50, 0x0, r10, {0x7, 0x2b, 0x0, 0x3018894, 0x800, 0x0, 0x6, 0x7}}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) io_submit(0x0, 0x0, &(0x7f0000004540)) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000980)={@id={0x2, 0x0, @b}, 0x10, 0x0, '\x00', @d}) syz_emit_ethernet(0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500b8145569000000889078000000000000000000000001004d907842090000000000009cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab750000d8d760c853d36fb7cd232e8103ff26281e19"], 0x0) 5m21.413254948s ago: executing program 1 (id=1793): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8044) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000180)=ANY=[@ANYBLOB="a26d8e4b", @ANYRES16=0x0, @ANYBLOB="020729bd7000fbdbdf25030000000500050005000000"], 0x1c}}, 0x24008000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xfff, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="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", 0xfe}, {&(0x7f0000000540)="a83b594ee305d893d0513b6772b9941ad4237b855d5ed719b871bb684f1365b694b2ae63d73984fe7057786d58c61382ea36e95496a9730b76712c188b42489b955778ec3c99", 0x46}, {&(0x7f00000005c0)="85c9224c4287fed1e22c380c18a409f80352ce76d316d02d34b97e98cc73e819f3007d22795603c3d2070e753d3c13770f9e290da0ebb89c8727e34d8a39fd86ac919e7738256d7e6a0b8392964f3f0fd3b3b3688a30e383e88f5f2ce1fd57be85f31c20ab85b573d0e0009202db41f5ebd660", 0x73}, {&(0x7f0000000640)="34397c48100aa1378a475765dde4c26b3d012587731118aac043c48c126eaac36b9346d613e6b7cb988325f7765edb221a3a47834293d9c9a4000cf5f0b7f9e9196e0219e4b427ad61571504630ae31836161b304c72a29f53a3542e820e33305773668896529e0c218687ad3827b4fd16d2ae6c3a86c65aeee6464c47f5dfa0ed2903fa83cfe639996662f44dbeb71ab8", 0x91}, {&(0x7f0000000700)="b03c30382ce7e12363514ad10553e9ab2177c34bc76eebba41ed092b72a4cc99495a5dcb94e32b567e65e24e07920eb82b39c625fb8be3905edf09f3bfa5e75938491192897c60d69e638700383a9b1abbbc673eefa263f4f6ee2b3f3da0b752fe40725d310e13b6ad18bb73863399b07f5193a6505d21d83a7da95913c52eb2b87760afaea5112605d2ee0633baf5d5e5eb066b171fe145c03384c43d", 0x9d}, {&(0x7f00000007c0)="2be1e17e0f37de93f016917b330838506556977cb8730eaea3e8469eb2fba4d8dd2e", 0x22}, {&(0x7f0000000800)="da2267ac48fa991b55b3870999f462a3bad7fe1ab209144c3ab22c55c8e788aceb378de9d6e8f1a92bc01bbcc4a5b62bf03edb222d358a", 0x37}], 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x60}}], 0x2, 0x0) fanotify_init(0x40, 0x1) 5m19.108131065s ago: executing program 1 (id=1799): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x12, 0x2, ')V'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c464a030703010800000000000003000300040000003e03000038000000d600000097700000fe0320000103"], 0x58) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a78000000060a010400000000000000000a0004050900010073797a310000000000000480480001800a000100696e6e6572000000380002800800044000000017140005800c0001007061796c6f616400040002800800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d0000000000050026"], 0x64}}, 0x0) (async) dup(r4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="20150700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m15.73687757s ago: executing program 1 (id=1808): syz_open_dev$I2C(0x0, 0x0, 0x149000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x7738, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 5m13.565767694s ago: executing program 1 (id=1812): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) chdir(&(0x7f00000000c0)='./bus\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB]}, 0x14e) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000019080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5m12.94753127s ago: executing program 1 (id=1814): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 5m11.588194824s ago: executing program 1 (id=1818): madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mlock(&(0x7f0000064000/0x1000)=nil, 0x1000) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$loop(0x0, 0x8, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa5a9b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x8040) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=0x80) tkill(0xffffffffffffffff, 0x2a) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) munlockall() 5m9.134806797s ago: executing program 0 (id=1824): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5b03, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) syz_usb_disconnect(r0) 5m5.828292703s ago: executing program 0 (id=1830): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000001}, 0x8) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000056ab00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a0f4bdf7ffffffffffffff00"}}) 5m4.704167905s ago: executing program 0 (id=1832): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x648, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x578, 0x2e0, 0x2e0, 0x578, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {0x40}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x2fd3], 0x7, 0x10, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, @remote]}}, @common=@inet=@esp={{0x30}, {[0x4d2, 0x4d2]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x3) 5m2.579533458s ago: executing program 0 (id=1837): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) (async) r6 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r6, &(0x7f00000003c0)=[{0x20, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xfe}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @quote}], 0x38) (async) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100) (async) r7 = socket$caif_seqpacket(0x25, 0x5, 0x1) syz_usb_connect(0x3, 0x58, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xa2, 0x32, 0x9f, 0x20, 0x12d1, 0x9c20, 0xe5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x78, 0x5, 0x10, 0x5e, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xff, 0x2, 0x76, 0x7, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x90}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0xf828, 0x2}, {0x6, 0x24, 0x1a, 0xfff, 0xa}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xd6}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0xa48c, 0x6, 0xa5}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r8, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) (async) connect$caif(r7, &(0x7f0000000040)=@dbg={0x25, 0x9, 0xff}, 0x18) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) 4m59.548434523s ago: executing program 0 (id=1846): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 4m57.941991984s ago: executing program 0 (id=1850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r2) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) 4m55.735571264s ago: executing program 43 (id=1818): madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mlock(&(0x7f0000064000/0x1000)=nil, 0x1000) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$loop(0x0, 0x8, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa5a9b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x8040) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=0x80) tkill(0xffffffffffffffff, 0x2a) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) munlockall() 4m54.830608278s ago: executing program 3 (id=1858): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000380)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x5}) syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) r4 = fsmount(r1, 0x0, 0x1) r5 = epoll_create(0x1be) fcntl$notify(r5, 0x402, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x1, @remote, 0xb}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @loopback}], 0x5c) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffeef, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c01000010000700000000000000000000000000000000000000ffffac1414aae00000020000000000000000000000004e2000004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000ac32024a00000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000025bd7000000000000a000200340000000000f5156f1f1700000000002cbd70002cbd700025bd700026bd7000160b0000"], 0x10c}}, 0x0) r9 = openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) write$binfmt_format(r9, &(0x7f0000000100)='-1\x00', 0x2) close_range(r9, 0xffffffffffffffff, 0x0) 4m53.456165249s ago: executing program 3 (id=1862): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r2 = fanotify_init(0x0, 0x0) dup(r2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7) 4m51.201791311s ago: executing program 3 (id=1866): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r4 = dup(0xffffffffffffffff) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4606ff78a002efff000000000002003e00cd000002cb030000000000004000000000000000ea02000000000000000001000500380006"], 0x78) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, "bf0475", 0x5, 0x7}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@hyper}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) 4m47.733335061s ago: executing program 3 (id=1875): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r3 = fanotify_init(0x0, 0x0) dup(r3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) 4m46.149948273s ago: executing program 3 (id=1880): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 4m42.486690379s ago: executing program 44 (id=1850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r2) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) 4m42.483286198s ago: executing program 3 (id=1885): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e, 0x80000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(0x0, 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r8, r9, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r10, 0x0, 0x0, 0xc, 0x0, 0x34, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) 4m30.425161499s ago: executing program 7 (id=1911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x0, @multicast}, 0x10) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000180)={0x9, 0x5, 0x1, 0x5}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff1ab2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb7, 0x200, {0x6, 0x32, 0x8, 0xb, 0x0, 0x1001, 0x0, @in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x78}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}}}, 0x30) read(r6, &(0x7f0000000800)=""/217, 0xd9) unshare(0x20000400) r8 = syz_open_dev$sndpcmc(&(0x7f0000001300), 0xfc63, 0x20841) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, 0xfffffffffffffffc) preadv(r7, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/72, 0x48}], 0x1, 0x4, 0x6) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000280)={0x1, 0x5}, 0x8) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r9, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) 4m29.476141451s ago: executing program 7 (id=1914): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2000000000000072, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2f0000000005000000000000", @ANYRES32, @ANYBLOB="4bcf3df83d3b62c3462bf00697c0f4c76189be79e7f360edb699f1e6ed124d3ea84c456d7e76324680adaa3c7da2166e60758c11708c8f5c4b3e3c452b5fd689ec0c913895eaffacbed81be2a49551c3dbcaae72ee9badf8a9a3759ccca6972e0e1ca16c24d75a1ac94b632b691d12fa1ad6b92ade03a8b00557fb6e289c75cee6b64b460a4d131b5a02a2f80d480a9ab66230c958f9a0b0079b4b0c484a922452d5e4643c7351cad6d77cc1b6dbd4a409baa828aa70ac978e75f37459ed9e9475a15dbdb8537a7b5e6cdc4234a7af8a593332a0ae7e76e120c99e3a5804", @ANYRES64=0x0], 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002380)="c744240000000080c744240200000000c7442406000000000f011424b9a90900000f320f32c744240005000000c744240200000100c7442406000000000f01142448b802000000000000000f23d80f21f835400000a00f23f866b806018ec067430f01c248b800180000000000000f23d80f21f835800000100f23f82e0f1c440a0966b89a008ee0", 0x88}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000004a000100d0703a9f000f00000a0080", @ANYRESHEX], 0x30}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r10 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r10, r10, 0x0, 0x7f03) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmmsg$alg(r2, &(0x7f0000005740)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="2870e96c", 0x4}], 0x1, 0x0, 0x0, 0x4040081}, {0x0, 0x0, 0x0}], 0x2, 0x40800) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102000000052406000105240000000d23622119000000000000000006241a0000120905810300020000000904fd0000020d00000904010102020d", @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRESOCT=r0], 0x0) 4m27.407647803s ago: executing program 45 (id=1885): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e, 0x80000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(0x0, 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r8, r9, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r10, 0x0, 0x0, 0xc, 0x0, 0x34, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) 4m27.026154301s ago: executing program 7 (id=1922): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) 4m26.772373405s ago: executing program 7 (id=1924): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000380)=[{{0x3, 0x1}, {0x2, 0x0, 0x1}}, {{0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x2}}, {{0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x3, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x50) read$FUSE(r3, &(0x7f0000006100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x482143, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080), 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socketpair(0x25, 0xa, 0x1009, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) socket(0x1e, 0x4, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000280)='net/dev_snmp6\x00') r7 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=""/268, 0x10c}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4m25.993152846s ago: executing program 7 (id=1927): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 4m24.70321817s ago: executing program 8 (id=1932): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000001}, 0x8) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a0f4bdf7ffffffffffffff00"}}) 4m23.730210982s ago: executing program 8 (id=1935): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xf4e54000) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x4) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="40b6b43a1986c1630d3100005f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xda, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000cc000000000001907864010100ac1414aa0b009078032c00004c000000000000000089000000000000ac1414aad4fb6629826bbb4d5e000000ff00000000000005054eb8a600129606053d0006ff00800000b61af93a93831300ac141400ffffffff7f000001e0000002865000000000071212054b06efffffffb883fc5843e178fe000cdf61168c24db88ad078c070a2189ea43a2149b84060bf7d11634eea26b75af00f802a20948fd7406000e1afd922c6bad0f24d6430eaa440c5600fffffffe00000000000000"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x73, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x6, 0x0, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7412, 0x4, 0xfff7, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x7}, @obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xb0, 0x6, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x40, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xfd, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x1, 0x10}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x7, 0x20, 0x6}, 0xaa, &(0x7f0000000240)={0x5, 0xf, 0xaa, 0x5, [@generic={0x82, 0x10, 0xb, "d9ec10cd471ab5e84860c9fe81dca46a01229abd7173f8a767db8b615cc0df020de6bce50a2c51ac2e93a74db5fe378c9587c4ffa0feffba03ac6f708858d0d72e7ec688e9f4ae61e73965aceb1c96c92a1e9e6475780361038682e0a6fa07b0c500e35c6ea4103c154767267e8e58e0e0cb472494d4c6fd26b8b68b1a71a2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x7, 0x3, 0x7f, 0x44}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x10, 0x6, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x7f, 0x9a, 0x7}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44a}}, {0xe, &(0x7f0000000340)=@string={0xe, 0x3, "b96b6f00795d9a6ddba5661f"}}]}) r2 = syz_clone(0x2000000, &(0x7f00000003c0)="355179aba375c5d2a16253652a88701fa71d3dab600e979434e06aaafc8258038e982b7b9b033b15d273715b62f2c40e7d9c3e0f203f8b41ac4f1a66af35fd7313b0480d6152ddbfeb7f7f8c76e5059ab1a101cff1032475f6ee53466d8c587a5fc282ebe312d6a757a2bcb84fc9d7cc8c7e101a84a105f12e3089254ebeb61a29ee2da7934569d801be1e44354b9a7397434dd1ed2bb794d9715d71e6ab9579c3f5f8bde1", 0xa5, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="57cc7475844e070967c97fcef2bbf4b8b99d9ce91f7332f4b6ebd6ea79b92b6086d8abd87a8931b222a4acd82e51883a046fb900c6cf2cdf57879af02a34e99d7743a56c841bcfff8dc8deb322981e8c2091131f68f7467ea709a50c0a07bf12dd122d95671872c807a15a5b2862837c78bccc6fe621a89d37bed4faec91a6365508747c3d715f3a485955dbeba36a6b03c4034a7a7b4c1d619141aea80c0e018ced5d189f107307e973e675bfeb3a3eed8d33993574bf45ce98337ea53af326bf3368614beed468e3dbbc8261eef0f9938c") setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640), 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000600)=0x4) 4m23.618998135s ago: executing program 7 (id=1936): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r0}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x100000000, 0x5, 0xfffffffffffffff7}, {0x0, 0xe, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$read(0x0, 0x0, 0x11) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x9, 0x800c, 0x95, 0x6}, &(0x7f0000000600)=0x10) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000011e67392c7aa365b2991a94e8b0c023080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xad, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4048048) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 4m22.534035861s ago: executing program 8 (id=1939): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4bf8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040885}, 0x10) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x501040, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getrule={0x14, 0x22, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x808a0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800000, &(0x7f0000000380)={'trans=virtio,', {[{@aname={'aname', 0x3d, ']}^.*\''}}, {@version_9p2000}, {@noextend}, {@loose}, {@cache_none}, {@msize={'msize', 0x3d, 0xc8ac}}], [{@smackfshat={'smackfshat', 0x3d, '\\,'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x66, 0x36, 0x6f, 0x64, 0x34, 0x36], 0x2d, [0x62, 0x0, 0x38, 0x64], 0x2d, [0x37, 0x31, 0x37, 0x66], 0x2d, [0x37, 0x66, 0x31, 0x35], 0x2d, [0x39, 0x35, 0x64, 0x34, 0x65, 0x35, 0x63, 0x65]}}}]}}) read$hidraw(r2, &(0x7f0000000440)=""/168, 0xa8) llistxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/136, 0x88) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000600)=0x5a, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x387}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4b0b}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x3d7ed0c8, 0x94, &(0x7f0000000740)=""/148, 0x41000, 0x5, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000800)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xc, 0x7, 0x80000000}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000880)=[{0x3, 0x5, 0xc, 0x7}, {0x4, 0x2, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r2, 0x6, 0x1, 0x10001, &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@cgroup, r2, 0xd, 0x2001, r3, @value=r2, @void, @void, @void, r5}, 0x20) write$P9_RWRITE(r2, &(0x7f0000000b00)={0xb, 0x77, 0x1, 0x10}, 0xb) r6 = open(&(0x7f0000000b40)='./file0\x00', 0x8840, 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$llc(r4, &(0x7f0000000b80)={0x1a, 0x30f, 0x40, 0x3, 0x9, 0x4}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000bc0)={@id={0x2, 0x0, @a}}) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000c40)=0x9) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000c80)=0x6) fanotify_init(0x12, 0x8000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @loopback, @local}, &(0x7f0000000d00)=0xc) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000d40)={'wpan4\x00'}) socket$alg(0x26, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000d80)={[0xf]}, 0x8, 0x80800) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000dc0)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="250821b4fa9c"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xe4}, 0x4081) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000f40)={0x1, 'team_slave_1\x00', {}, 0x7}) 4m21.3574275s ago: executing program 8 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',v}rsi4n=9p2000,\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a79"], 0x70}}, 0x20000800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f000001ff00)=[{{0x0, 0x0, &(0x7f000001b3c0)=[{&(0x7f0000019140)=""/188, 0xbc}, {&(0x7f0000019280)=""/123, 0x7b}, {&(0x7f0000019300)=""/4096, 0x1000}, {&(0x7f000001a300)=""/141, 0x8d}, {&(0x7f0000020080)=""/4108, 0x100c}], 0x5}, 0x4}, {{&(0x7f000001b440)=@ethernet, 0x80, &(0x7f000001e600)=[{&(0x7f000001b4c0)=""/4086, 0xff6}, {&(0x7f000001c4c0)=""/186, 0xba}, {&(0x7f00000190c0)=""/47, 0x2f}, {&(0x7f000001c580)=""/4086, 0xff6}, {&(0x7f000001d580)=""/4096, 0x1000}, {&(0x7f0000019200)=""/12, 0xc}, {&(0x7f000001e580)=""/9, 0x9}, {&(0x7f000001e5c0)=""/55, 0x37}], 0x8, &(0x7f000001e880)=""/116, 0x74}, 0x5}, {{0x0, 0x0, 0xfffffffffffffffe, 0x0, &(0x7f000001fb00)=""/40, 0x28}, 0x5}, {{&(0x7f000001fb40)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f000001fe00)=[{&(0x7f000001fbc0)=""/62, 0x3e}, {&(0x7f000001fc00)=""/101, 0x65}, {&(0x7f000001fc80)=""/193, 0xc1}, {&(0x7f000001fd80)=""/70, 0x46}], 0x4, &(0x7f000001fe40)=""/183, 0xb7}, 0x3ff}], 0x4, 0x40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x2a, 0x3, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) recvmmsg$unix(r2, &(0x7f000001af40)=[{{&(0x7f000001a3c0)=@abs, 0x6e, &(0x7f000001a500)=[{&(0x7f000001a440)=""/192, 0xc0}], 0x1, &(0x7f000001a540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000001a5c0), 0x6e, &(0x7f000001a940)=[{&(0x7f000001a640)=""/189, 0xbd}, {&(0x7f00000210c0)=""/4096, 0x1000}, {&(0x7f00000220c0)=""/4096, 0x1000}, {&(0x7f000001a700)=""/75, 0x4b}, {&(0x7f000001a780)=""/194, 0xc2}, {&(0x7f000001a880)=""/188, 0xbc}], 0x6}}, {{&(0x7f000001a9c0)=@abs, 0x6e, &(0x7f000001aac0)=[{&(0x7f000001aa40)=""/56, 0x38}, {&(0x7f000001aa80)=""/59, 0x3b}], 0x2, &(0x7f000001ab00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f000001acc0)=[{&(0x7f000001ab40)=""/17, 0x11}, {&(0x7f000001ab80)=""/232, 0xe8}, {&(0x7f000001ac80)=""/59, 0x3b}], 0x3, &(0x7f000001ad00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f000001ae00)=@abs, 0x6e, &(0x7f000001aec0)=[{&(0x7f000001ae80)=""/10, 0xa}], 0x1, &(0x7f000001af00)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x12000, &(0x7f000001b080)) execve(&(0x7f0000019240)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4m19.879738936s ago: executing program 8 (id=1945): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 4m18.551293715s ago: executing program 8 (id=1947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20010004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff7f, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002004010300008000000000000200fe04000000001b0001000c000c40002708000100ac1414bb000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010008b215f4e36505c10687be00000000f6021200a9ad35b275b0f69d7e69f5104c6c51987c7193cf4b00000000212527570acdb42e98d2ceea7a8211def75097edc0ee1905a1bd899e987d69a2429cbba60ef5b8ccff05bce1b17ab2e51b063254cd25d41488bd1d78a42bfd0ba773df9156b8ff718a3ea82295055e63251e947649f1fa84ba6738e7140b543600"/154], 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m8.448556509s ago: executing program 46 (id=1936): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r0}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x100000000, 0x5, 0xfffffffffffffff7}, {0x0, 0xe, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) modify_ldt$read(0x0, 0x0, 0x11) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x9, 0x800c, 0x95, 0x6}, &(0x7f0000000600)=0x10) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000011e67392c7aa365b2991a94e8b0c023080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xad, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4048048) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 4m2.862722085s ago: executing program 47 (id=1947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20010004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffffffffff7f, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002004010300008000000000000200fe04000000001b0001000c000c40002708000100ac1414bb000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x80) syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010008b215f4e36505c10687be00000000f6021200a9ad35b275b0f69d7e69f5104c6c51987c7193cf4b00000000212527570acdb42e98d2ceea7a8211def75097edc0ee1905a1bd899e987d69a2429cbba60ef5b8ccff05bce1b17ab2e51b063254cd25d41488bd1d78a42bfd0ba773df9156b8ff718a3ea82295055e63251e947649f1fa84ba6738e7140b543600"/154], 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, 0x0, &(0x7f0000ff4000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15.157341502s ago: executing program 5 (id=2556): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0702, 0x0) close(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/184, 0xb8}], 0x1, 0x6, 0x9) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) mprotect(&(0x7f0000dcd000/0x2000)=nil, 0x2000, 0x1) io_uring_enter(0xffffffffffffffff, 0x1da4, 0x6933, 0x7e, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) io_setup(0x1, &(0x7f00000012c0)=0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) 10.161407803s ago: executing program 6 (id=2569): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b0800034000000008"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x1011, &(0x7f0000000b80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb00114242"], 0x0) 9.981790109s ago: executing program 6 (id=2572): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x3000000, 0x0, 0x0, 0x14, "3eccd8fd00040000001f001000000004410400"}) syz_open_pts(r1, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x80, 0x4, 0x6, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0xc, 0x0, 0x0, @multicast1, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x3, [{@local, 0x100}]}]}}}}}) r4 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x1155) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000275812ca790ffbd005a103b3e17e08380060005004e20000004000600d508f4574316dfb679f112e05f42cfa2"], 0x40}}, 0x40800) 7.945865435s ago: executing program 9 (id=2577): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x60800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, r0, 0x1}) getpeername$llc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xee00, &(0x7f0000000100)) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x200300, 0x0) fchdir(r2) (async) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x7050c0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000001c0)={0x0, 0x1, {0x23, 0x24, 0xd, 0xb, 0x8, 0x101, 0x3, 0x82}}) (async) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="94", 0x1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDCTL_TMR_SELECT(r4, 0x40045408) (async) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000280)={0x0, 0x3}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000002c0)=0x2) (async) read$sequencer(0xffffffffffffffff, &(0x7f0000000300)=""/20, 0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040084}, 0x80) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) (async) rename(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)='./file0\x00') (async) connect$bt_l2cap(r1, &(0x7f0000002580)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x81, 0x1}, 0xe) (async) syz_open_dev$swradio(&(0x7f00000025c0), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000002600)={0x9, 0x1, 0x0, "42f6646132bf0b0fa4c698f9e243db2cc3d3d8d2f65d7d8269b8db54383aeae8", 0x32315241}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000002640)={0x6, 0x10000, "5ebe97cd5f86b0d3a3489b1596de7d1e4448d1399f79df49", {0x0, 0x18}}) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x30, r1, 0x8000000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000026c0), 0x10000, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000002700)) (async) connect$l2tp6(r1, &(0x7f0000002740)={0xa, 0x0, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x88, 0x1}, 0x20) (async) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002780), 0x86403, 0x0) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f00000027c0)=0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008805}, 0x20000000) 7.818041855s ago: executing program 9 (id=2578): socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f0000000440)={0x0, 0x6f8, 0x1}) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) 7.420717472s ago: executing program 4 (id=2580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r3 = syz_open_dev$vivid(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x2, 0x0, 0x0, 0x0, 0xffff, 0x5, 0x2, 0x101, 0x9, 0x5, 0x1, 0x1, 0x4, 0xd400, 0x9, 0x1e, {0x5, 0x3}, 0xf8, 0xf8}}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'ipvlan0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x81, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) unshare(0x4000280) (fail_nth: 4) 6.790861059s ago: executing program 9 (id=2581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) 6.649701172s ago: executing program 9 (id=2582): memfd_secret(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x121400, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}]}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x47, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000040000b708000051d4818a1800004195020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085050000030000009500002200000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.188050622s ago: executing program 4 (id=2583): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1, 0x8001, 0xfffffffc) 5.735609821s ago: executing program 5 (id=2585): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000d0000000000000028855c6e", @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0xf5) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='ext4_es_remove_extent\x00'}, 0x18) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r3, 0x0, 0xd, &(0x7f00000000c0)='sched_switch\x00'}, 0x30) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x2, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.521475216s ago: executing program 9 (id=2586): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000003d80)=0x26, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x22000) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000200)={0xa30000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) r6 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) poll(&(0x7f0000000040)=[{r7, 0x2040}], 0x1, 0x100) syz_usb_disconnect(r6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_dgram(r1, 0x0, 0x80) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) 5.520766712s ago: executing program 6 (id=2587): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "74b4b6f812818157", "fe0f232318769ac69f4d79a23999d0d2", "4110d24f", "9fee0dd3cddeb064"}, 0x28) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) syz_emit_ethernet(0x66, &(0x7f0000000f80)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005800000000006c9078000000eaffffffff0320880b0000fffc00000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.513074432s ago: executing program 4 (id=2588): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x1, 0x30bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20006085}, 0x400c0) 5.21658735s ago: executing program 4 (id=2590): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x7, 0x5, 0x7}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)={0x101042, 0xa1, 0xf}, 0x18) mkdirat(r2, &(0x7f0000000280)='./file2\x00', 0x100) mknodat(r2, &(0x7f0000000080)='./file1\x00', 0x8000, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x180) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x1}}, './file2\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000180)={0x4000, r3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{0x6, 0xf, 0x0, 0x7fff8000}, {0xffff, 0x4, 0x6}]}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe00009050202000202000009058202100000"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = open(0x0, 0x280140, 0x11e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, 0x0, &(0x7f00000191c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.101615859s ago: executing program 5 (id=2591): socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f0000000440)={0x0, 0x6f8, 0x1}) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) 4.807689681s ago: executing program 5 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000090b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.685694001s ago: executing program 5 (id=2595): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x5) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r1}, 0x4, 0x8, 0x2}) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000000c0)=[0x7, 0x5, 0x41, 0x7, 0x104, 0x3f7, 0xf]) r2 = io_uring_setup(0x5cfd, &(0x7f0000000100)={0x0, 0xb84f, 0x400, 0x3, 0x11c, 0x0, r0}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000003c0)={&(0x7f0000001000)={[{&(0x7f0000000180)="34b3f50d4ef88d03e0e07e8fce896d0bc3e561337faa53e1ad0b3df2eae440ed48155fdecc862b7d1ed578257ef7f88c7fbbd9b14585d4a6913f0a22ab767c375616d797c273ebf2d70e0adcce04aec940fd832688d2bab252548cad240416f8bb099de7315d16b545c1c5097a353e0c77bde9d80962150474dcd4bc3f4a756293d672e19f8eb4dd3bffa8298889b0a7402045d2c1a409e0aaeb4a34960b0477eec990a7c6e17aeeadb605480d792d316d88c7bf9a4035bb8fd5643387978a800ffeb3aa70e6691c426e420185e420ab6d73df139da5bdfe2f3f03ce4155d6c25501e3925527064d01489c3e34e76326c3a7df54d7ff996ad18b", 0xfa, 0x1}, {&(0x7f0000000280)="957f1c9dcc86c2123dfd4d068bccb63ac5d7a185e13ca407f88a9d6d0264bbfa7f9608c8cd7d5b79927e6d3bf0167ef234bee6f63065b2694348b9f852671b261a956e36c6774a448424ce0eb9c8a488f1cb1b80fd4a8a6a86423c16fba917f66ae08f0e5783a4ee0435fc9c42bb2cdd6b32d29051df445cfbec5f7a68e276a30421a5962d4028", 0x87}, {&(0x7f0000000340)="110951557f10c040da6d0935504a382701500cfb676781303c9fb981a64750ef015699429337b50a3be7dd5d3a549dc384338b0033147950d0134c6233b95a9e1d9fe86d834b470190c6c269230e532a01d55de3f4c1c9323aed7562325626ef3ca4e0ba635198a6340a68167adce20367e197759095", 0x76}]}, 0x3, 0x2}, 0x1) write$selinux_user(r0, &(0x7f0000000400)={'system_u:object_r:setrans_initrc_exec_t:s0', 0x20, 'user_u\x00'}, 0x32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000440)=0x5) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000480)={0x2, r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x5, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x2, 0xfffffff7}}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000005c0)={0x1, 0x0, 0x7, r5, 0x3}, 0xc) sendmsg$netlink(r3, &(0x7f0000000b40)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)=[{&(0x7f0000000640)={0x288, 0x35, 0x400, 0x70bd26, 0x25dfdbfe, "", [@generic="07e3aef6cff833e17f492d2957d436b2dc3ef2d91c08692a5297bfac5f12d36577f1de3a76223922706ddac31d490d379f8b256482cc06a1", @generic="8c6c45bff219810aaadcfda22ab4e7f8b275fb32ecb3390927c7046db8732598a30b8ee561e77cbc440daa6e6071950a95c7285279090b254a981a29ef67ce7438a25e3c1a85e54eba01dc75b8798d37a395119e75ff08863429a95952155b18a8c3ff079c2d6f287a13bc72eedf820dbcdfa1840e7fbf826f404291e6e1795ceb9570c3ed81f1f894017c007d84deaae9c564072bbba9afd06c3eeb71c2fae32d0290bb43d09e7d4b6be3e0d848ec394dfaadd8a7c2c77cbe", @generic="7e1fd5a8fe9290a5df4b88eb958c6bf2a55059f8d7edaf3ebb6d572ee61dd0483f", @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@mcast1}, @generic="cf75b69bf9b1c3b1457bfdfb56c423a4825314ee5d5a99d3448003a06bee0f7281008efc0c825c3d8f5ed4ddd2000da9a8c1e4b0e9a84fe590301703a94e72d777314a40984e7862599e48748b06d6012bbc187eb7deebc41c0be71ec6f166f3b5d5d8ea094b451c24a59f2d611cac5dc1de00bf70d69c947a639b941a374e7a33bf2afe23dc791da4d3500a5c7c1788e67fedaca4b6de07d10719130c94d458097d2b63ef1c6e85b90f321870ad78836cc3fe9df60d4c33d8d892b68a790b0e4451b532823955ccbf05ff74cc31805162978a4f3444c216e1a4ba2e0dd462c026949db103dd", @nested={0x6c, 0x58, 0x0, 0x1, [@nested={0x4, 0x3a}, @nested={0x4, 0xd2}, @nested={0x4, 0xcf}, @generic="4b0ac4a37bd684fe2cf895d617db21047d6ee89e69579b46d6261f56d1403413660a335f5608be52493bd2ff961b62c5e641bfac39812dfce63183d7431da5103f569cd0c18297fc73b0c5480526b5566911299ed7edc0b6", @nested={0x4, 0x12b}]}]}, 0x288}, {&(0x7f0000000900)={0xb4, 0x26, 0x2, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x78, 0x0, 0x0, @fd}, @typed={0x4, 0x2c, 0x0, 0x0, @binary}, @nested={0x96, 0x1d, 0x0, 0x1, [@nested={0x4, 0x10b}, @generic="9fd524b60850bcce", @generic="47d3c27162acb38e0d42390e5db404448622e64c15ee4dbfabbb05609f85cf08d004f2cb6bf3b2af997b3aa4070e9671f63b41dc7046e58493feccf0e5986d2f9e7ce1d0a81ee796c27e2f38a7a720c7c97a069c54a3d3d5f62766bcbb6c8d690475095cfceba0cefd0d0610fba16b95f1512f9e489c39f9ea2d930a0b97", @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, 0xb4}, {&(0x7f00000009c0)={0x114, 0x2e, 0x4, 0x70bd2c, 0x25dfdbff, "", [@nested={0xf7, 0x84, 0x0, 0x1, [@nested={0x4, 0x137}, @generic="e75ed86db2d4ab260ac540cf3cde362b5e1e1173de0f3988e8346a67181f6996e4b3c3912663dfe74dc37c47fc8d26c14573af8a903602969c22561a08e4e106749947cd4d5298dd1eed7a349a0dfbefddc53cbbd54b9f36f3e0ea46563cd61ff57d0e0a8818021c6378e4761e73971931b154426e4a89f1cb567c542ad5", @typed={0x8, 0x4d, 0x0, 0x0, @u32=0xfffffff9}, @generic="bd026c84a91371b763fa6a93d9699acba78fdfcf637830019b55a59aea59fcbdc83a97e250b389e80235351fcf5bdabde95a6a7459a193e1106537073a57961a7486284d714f1673b236cc1cb55867febe124cfb83da89b2f649fff24f533b814493bc04a29dc88ba0"]}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x1}]}, 0x114}], 0x3, 0x0, 0x0, 0x80}, 0x24040004) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x9c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a9ec4db3939d2048342c26c727a970cc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "2606fffed2baad00f70f535ab6b77d8c"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="53d1bf02be76"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "6be3b134d1e03ff268932ebe75d9bec1"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eeac5f3e949a95e32d970c5f467c387"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x164, 0x9, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x47a}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0x90, 0xd, 0x1, 0x0, "2a526d6995af21c4e18ea7dcb0575eab06689751853485ec389b9f47cc1f0c45de16fccd8e50c4787b452167d457f9e45b46b2a94915b2e6d5657187f9f2ec7ab03512b3e20124cbea11f046aa01784767a5143d4e9943de645139f059762226c7fa472b2fc5a520b1cbbe4bbcb94ec1aa425b7c57e4b33c389c733b6d834793ebcd8881617f268e415fff09"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0x83, 0xd, 0x1, 0x0, "56299e5e762f6f01414b4d169dc4e72bdefc122515aeddf0f183af4c96b3b50e11039c46ac9c9ef1fb99c795a343ef44b81f835e65b5f7a63c703c6e8bc19d927800b227eb12ed6df828e809e3e2567a51c05ee555c8e1489ce1356e10f5742db6968d430d04717453cc344b6ab63589ede2891e4ef72b31f729feb6e99317"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = dup2(r2, r4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002040)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x0, 0x120, 0x240, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000002000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0x441, 0x884, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="396b32955006", 0x3, 0x10, [0x1, 0x27, 0x5, 0x3d, 0xf, 0x1d, 0x30, 0x2d, 0x35, 0x7, 0x19, 0x36, 0xf, 0x1a, 0x3, 0x5], 0x0, 0x10000, 0x7}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x2, 0x440, 0x1}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xffffffff, 0xff000000, 0xff000000, 0xff], 0x4e21, 0x4e20, 0x4e24, 0x4e20, 0xb, 0x99, 0x6, 0x5}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff000000, 'veth1_to_bridge\x00', 'vlan0\x00', {0xff}, {}, 0x8, 0x6, 0x63}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xf16, 0x2]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x1, 0x4, 0x2, 0x1, 0x1], 0x5, 0x1}, {0x4, [0x3, 0x2, 0x2, 0x4, 0x6], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000024c0)={0x0}, &(0x7f0000002500)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000002540)={0xc, 0x2, 0x6, 0x1000, r9}, 0x10) fstat(r1, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, r12) ioctl$TIOCGSID(r8, 0x5429, &(0x7f00000026c0)=0x0) sched_setattr(r13, &(0x7f0000002700)={0x38, 0x0, 0x10000000, 0xe9b6, 0x3327, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0xd054}, 0x0) mount$fuse(0x0, &(0x7f0000002740)='./file0\x00', &(0x7f0000002780), 0x0, &(0x7f0000002800)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x39, 0x63, 0x77, 0x0, 0x64, 0x34, 0x37], 0x2d, [0x63, 0x32, 0x65, 0x61], 0x2d, [0x31, 0x31, 0x32, 0x66], 0x2d, [0x62, 0x4, 0x64, 0x61], 0x2d, [0x62, 0x65, 0x62, 0x34, 0x64, 0x30, 0x30, 0x30]}}}]}}) 3.628861032s ago: executing program 6 (id=2596): r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'sit0\x00'}, 0x18) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0xa00, 0xa) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0xb}, {0x6}, {0x8, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000240)=@hopopts={0x3b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @local}]}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', r3, 0x8, 0x7, 0x7ff, 0xfffffff4, {{0x1e, 0x4, 0x2, 0x20, 0x78, 0x6, 0x0, 0xc, 0x2f, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x23, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @empty, @local, @broadcast, @empty, @loopback]}, @timestamp={0x44, 0x14, 0x5c, 0x0, 0x0, [0x6, 0x7fff, 0x5, 0x4]}, @noop, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0x5, [{@remote, 0x3}, {@broadcast, 0xd}, {@remote, 0x7}, {@empty, 0x8ba6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff7f}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffed, 0x1}, {0x1, 0xffff}, {0x8, 0xfff2}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = gettid() read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$getownex(r1, 0x10, &(0x7f0000002740)={0x0, 0x0}) getresgid(&(0x7f0000002780)=0x0, &(0x7f00000027c0), &(0x7f0000002800)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002840)={0x0}, &(0x7f0000002880)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000028c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000029c0)=0xe8) getgroups(0x1, &(0x7f0000002a00)=[0x0]) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000004140)={'\x00', 0x4, 0x1, 0x40, 0x2, 0x2, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000041c0)={0x0, 0x0}, &(0x7f0000004200)=0xc) r14 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000004240)='/proc/asound/card3/oss_mixer\x00', 0x80000, 0x0) sendmmsg$unix(r2, &(0x7f0000004300)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)="2b8eff44b1d2f7e89afec9a02cf5ee0ee416c252e5638383600b76762d9e0cec6025336b3e3925b4d6b082da7a5ad67a05cce7aa988d4924eede24c1b018d90200402f754a8e61f33929ff228bebc751e2f8ebe6a8996ea02401d6afbe87c81ed91970c7a28ca2af7af435133d072b3b36b50f4bc929c0737a82ee8c4d05e97f79bba6791539", 0x86}, {&(0x7f00000005c0)="7e4d99750c5de881e53253ef9114eba49b683eeac805ece9d6c73c133be9359fa3064d542422378d2ae06fe38ea571ebf2baaf2102de34103b9abf186b3ad7f1ea08e2a278c8c65db6469bc08c5670bbf8f405757ab30528e958cbe5211de8fb0abf3036a44e9c7e74928174afa174a8d16b1755dd946baed77022a89832bab156fc62bdae6b", 0x86}, {&(0x7f0000000680)="480ebc661426e6e483574199c189ae572bcf0596b0675d1bd21e2e2f72200e91f326d90bf60d93c20c609de393", 0x2d}], 0x3, &(0x7f0000002a40)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x78, 0x800}}, {{&(0x7f0000002ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002b40)="f4207485873e5d23d19e112984e1244fd1c21e26f0147b9cb0a7171afb3b66d6c60df15f20159d7e878cd2fa56fe464a4daa99a852059aa32334465432daadd94ee0cfbb3004710b16b99ffc0ba1fd7e374f13f3393710491dcf2584ca10698acb2a80962b079d34fe6b0b61fb3d403d1ec6da9a2967a89fd7c9dd2b37e25b2bcd0b41025e0ef41c982a3689896408cf79ef4da05d5978bebd01bc72b007695259ebd5cc4faf2da2f3dadf8c57786f572b8d1d50f43bee33fd59135011c95377d1eea3ea556d1eef9cad1d86ead34f40", 0xd0}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000002c80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002d00)="6675e6a823827c1b9eafb540e68ada159e871936a529ad6e2e7533649daba97bb6277463169b2a01be39dcfcf289cd0d2598fe3261d94a1a3fb6f56c3f1e72f301a77dd5eec5878871413bf4fd34335786e869b2138cdc8b8e2c17e8ccfba00a8f957c8f4787752c040abf1576bea625678f1bf81457200b54dc005b2818ade7fe5eabf446cd7b46056a83613f8fa9ee148fe883335c2259f5d32c9adaa2854a581519fd697335", 0xa7}, {&(0x7f0000002dc0)="8177224bedb627a5bf52370ec0d5d98f1feaa1222877e44c11afd745", 0x1c}], 0x2}}, {{&(0x7f0000002e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002ec0)="0646372411085f74217bbaf5d7077e85fa419380d6367d3b3d0bdc2d04fc1bc9dabe8cedd96134fae53fda477d641bfbbee98ac7f50b8b1b1edcd87269a0b16d3ea7a5915e1b99433e4f25615b9d5a692a754062fb34d09a45344f53762f00e2719a415aaac7879650bd7c45dd9101efd5527716b0d0d88fe0a13fde", 0x7c}, {&(0x7f0000002f40)="b16422dc4f991714f7a7551bbcfc3c05257ebc65a9c6cb952b041a03cda5aa46ca153443f79b0d78e786b50b0d8ff3d0b36cf7fb978fef74f5efbdcc09e44c02d2d865da6086daf6", 0x48}, {&(0x7f0000002fc0)="3b88cd00458d3b275e74877bd42a28d14a02da7e4b95a1188d1920c925063b98f98a4757dda5ff14e9fb0aacf3a164e33db6757abb2d70", 0x37}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="fd35abeb84d6d699267f84d212273c3fa834489b26016d2af0ffa63a8b255eb53391beb1103ed4d2b63d2c1c0b12af4cc3c96eff849b9a03b4d9a9695b4ef581a063f9831a0ca73f5a800794706ff0833da6f86e4ff94f3d5a8a804ee916a2b974834b7524760b181c067bea8436169de78b1f6bcc291d82008028ca44e2eb1d0e7dec58ccc157cf79c0ebb2b95c3c73ad3e13207c39fd255738142ec98a8f59d26970760fc5d4d1cde3363ec2b3bcf14f7b08efa8dc9bb89976ab", 0xbb}], 0x5, &(0x7f0000004280)=[@cred={{0x1c, 0x1, 0x2, {r12, r13}}}, @rights={{0x34, 0x1, 0x1, [r0, r14, r0, r1, r1, r2, r0, r0, r0]}}], 0x58, 0x4000050}}], 0x4, 0x4001) openat$nci(0xffffffffffffff9c, &(0x7f0000004400), 0x2, 0x0) r15 = memfd_secret(0x80000) ioctl$SG_BLKTRACESTOP(r15, 0x1275, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r16, &(0x7f0000004600)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000045c0)={&(0x7f00000044c0)={0xc4, r17, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x30}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffff80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x630}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x810) recvmmsg$unix(r15, &(0x7f0000006f00)=[{{&(0x7f0000004640), 0x6e, &(0x7f00000069c0)=[{&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/52, 0x34}, {&(0x7f0000005700)=""/126, 0x7e}, {&(0x7f0000005780)=""/125, 0x7d}, {&(0x7f0000005800)=""/27, 0x1b}, {&(0x7f0000005840)=""/33, 0x21}, {&(0x7f0000005880)=""/38, 0x26}, {&(0x7f00000058c0)=""/216, 0xd8}, {&(0x7f00000059c0)=""/4096, 0x1000}], 0x9, &(0x7f0000006a80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50}}, {{&(0x7f0000006b00)=@abs, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006b80)=""/97, 0x61}, {&(0x7f0000006c00)=""/66, 0x42}, {&(0x7f0000006c80)=""/142, 0x8e}, {&(0x7f0000006d40)=""/125, 0x7d}], 0x4, &(0x7f0000006e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x2, 0x100, &(0x7f0000006f80)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_XRUN(r18, 0x4148, 0x0) 3.603645333s ago: executing program 2 (id=2597): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000820004000000000000000c00d7ac377d58ab000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) (async, rerun: 64) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) (async) listen(r7, 0x0) (async, rerun: 32) open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x20) (async, rerun: 32) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b23, &(0x7f0000000040)) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64) r10 = accept(r6, 0x0, 0x0) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r10, 0x0, 0x1) (async, rerun: 64) recvfrom(r8, &(0x7f0000000180)=""/60, 0x3c, 0x0, 0x0, 0x0) (rerun: 64) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) (async) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) (rerun: 64) 3.297247223s ago: executing program 6 (id=2598): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1, 0x8001, 0xfffffffc) 3.097541997s ago: executing program 6 (id=2599): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x4, 0x581a82) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x8010, r5, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, 0x0) 3.097233767s ago: executing program 2 (id=2600): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r2 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3.017414011s ago: executing program 2 (id=2601): ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x3, {0x20, 0x4, 0x1200000000000000, 0x7ebe, 0x7}}) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x8000}, 0x4) (async) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x81800) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x6c, @empty, 0x4e22, 0x1, 'dh\x00', 0xa, 0xfff, 0x80}, 0x2c) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0xd246, 0x28f, 0x9c33, 0x4, 0x15, 0x7, 0xfffc}, 0xc) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000140)={{0x0, 0x3, 0x857, 0x9, 0x30, 0x7, 0xb742, 0xffffffff, 0x5, 0xffffff91, 0x1, 0x9, 0x3, 0xfffffffffffffffa, 0x7}}) (async, rerun: 64) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001380), 0x200881, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000013c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc00}}, './file0\x00'}) r5 = accept4$inet6(r4, &(0x7f0000001400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001440)=0x1c, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001500)={'gretap0\x00', &(0x7f0000001480)={'syztnl0\x00', 0x0, 0x1, 0xf027, 0x100, 0x400, {{0x15, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x5, 0x0, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x94, 0x8, "d74b7173135e"}, @rr={0x7, 0x7, 0xf4, [@empty]}, @timestamp={0x44, 0x20, 0x1a, 0x0, 0x4, [0x8, 0xa6, 0x5, 0x6, 0x4a, 0xe, 0x100]}, @timestamp={0x44, 0x10, 0x1b, 0x0, 0x6, [0xe7, 0x3, 0x2]}]}}}}}) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001540)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001580)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e22, 0x35, 0x4e22, 0xc, 0x2, 0x20, 0x0, 0x0, r6, r7}, {0x10001, 0xd8e3, 0x6, 0x7fffffffffffffff, 0x9, 0x1, 0x0, 0x3}, {0x5, 0x4e, 0x8, 0x7}, 0xfff, 0x6e6bbb, 0x2, 0x0, 0x2, 0x1}, {{@in6=@private1, 0x4d4}, 0xa, @in=@multicast2, 0x3501, 0x5, 0x1, 0x81, 0x4, 0x2, 0x4}}, 0xe8) openat$vmci(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) (async) r8 = syz_open_procfs$userns(0x0, &(0x7f00000016c0)) setns(r8, 0x4000000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x48090) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r4) (rerun: 32) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) (async) r10 = semget(0x0, 0x0, 0xa) semctl$GETPID(r10, 0x3, 0xb, &(0x7f0000001980)=""/170) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1000001, 0x11, r0, 0xa30c000) (async) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001a80)={0x2b, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x3, 'wrr\x00', 0x20, 0x5, 0x5d}, 0x2c) ioctl$SIOCAX25GETINFOOLD(r11, 0x89e9, &(0x7f0000001ac0)) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000001b00)) (async, rerun: 32) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) (async, rerun: 32) getdents64(r11, &(0x7f0000001b80)=""/5, 0x5) 2.912428438s ago: executing program 2 (id=2602): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r2 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x401, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r4], 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000013c0)={r6, r3, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44040) unshare(0x6a040000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) capset(&(0x7f0000000180)={0x19980330, r6}, &(0x7f0000000300)={0x4, 0x6, 0x100, 0x6, 0x3}) 2.096714956s ago: executing program 9 (id=2603): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfff]}, 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2240, 0xb}, 0x18) linkat(r3, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1800) dup(r2) unshare(0x22020600) syz_usb_connect(0x6, 0xce9, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x84, 0x52, 0x2e, 0x10, 0x547, 0x2235, 0x2259, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd7, 0x4, 0x3, 0x8, 0x50, 0x3, [{{0x9, 0x4, 0xc0, 0x8, 0x7, 0x19, 0x7, 0x1d, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}, [@feature_unit={0x13, 0x24, 0x6, 0x4, 0x2, 0x6, [0x4, 0x2, 0x3, 0x5, 0x6, 0x3], 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x4, 0x6, 0xe}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x3, 0x9, 0x7f, 0x8, 0x9}]}], [{{0x9, 0x5, 0x0, 0x15, 0x200, 0x1, 0x1, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xc, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x69, 0x83, 0x72}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x9, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0x4}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x7, 0xe, 0x56, [@generic={0xcf, 0x23, "3d83e9e0e0e6fc4f3ac3dd604be6e52dc6655e141692679443605ffb60964c29859ac489f095fa0c43ee79e776b26e1ffd22bb5e1c72a7e9a228b5eb718e41afe8049edb3c849edd383f0d18a725d428252bfaa84c88d516b86d2a345306fc92f08de42ff26405e40ce5f2b0c3698453d2844ca245bac83ae2d9d1b4963c2247535daab5913b9945886e6c19699d74fc811c2e14b1f0f939ef12d16f2ba9b7bf20cb141da785839aa30f5b4618b340a4561d4835ea40f8b89bcc01a78959ea183971c32629e9916a0d82aa3560"}, @generic={0xcb, 0xa9c57572d6cbf025, "95c732f71c2ef4b782dd7cc119c30117ab624bd7c42ce1be66af70f50a6e03a24437290cc3b56f36bc44f06dc25643112396454f67338c7409ed798b31590432ee1f54eaa788fe26c2663c0e027e27a25851547f6799051f18869145982efd75333ee4546b2d3b5a8c6739e89bbb1d1edc9a4b64d4d0f13ba75b11cc51e3625001c40c5c761a9f0609a62cf78e531653a87e1f4391e6218f4c926d79105ea646ca5c52c2b8ecf3cfa68747690f66714ce755c1e02bc9365000dcbb26c22a64ef64d0845a8baf6d7320"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x9, 0x0, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x200}, @generic={0x5b, 0x3b, "690c3dc7473d45d32a2b7664eef8a388cd2c2c7d6be8fcec70ae49083986ea1258aa2534b8e1a1eeb2e0430abbb812d5af5c2352e207f983e3ca31bf1030ec2dbf21e7e21f7c8dc6ae46fbab003d309a436d8eaf38433f2927"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x0, 0x80, 0x4, [@generic={0x8b, 0x1, "edeed3f35ced672ce50f1362a3f0e2822699bbf314d4e896dbc56996b131d46a8115a6448ccbc58ebf8e3f6309e0b5a7df428ba42a6006a07303adbd9a99c71598f533bac69139e60b330046c2a1014dce2a4d2370f965ec0b97cf5c7899ecd887e9c493a0fe1c2e50bc059d19f73284015e46be01e1518addaffc3d9a3d4b2f757fb9d06042e0bc1a"}, @uac_iso={0x7, 0x25, 0x1, 0x3}]}}]}}, {{0x9, 0x4, 0x14, 0x3, 0x5, 0xc, 0x53, 0x7, 0x25, [], [{{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x3, 0x91, 0x81, [@generic={0xad, 0x32, "05625b71323a08460fd2e6624f02df960af826796ea4d6e7f36bd7799bb253b18938756537f4a7556db2628be8bbcf1e7a3d5129fcd671838fbf7d3a8f7afba90ffa09b7de542111491bd5bf19d4c3ed8c60d2bbfd4100aae9a1290af21434fb1b5c02f00edc878db107657f6024d83a9fd1bbc5ecc20ddce4e2652a77912de4314ddf3ca45d82163f2f485e5a87496b68935fce52d3fa124b0384119c30674f483360bc8509e965d0b65b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x4, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x100}]}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x8, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x6b, 0x6, 0x6, [@generic={0x67, 0x4, "3be751cba74fb95c0fcb8600de8b6e3e56bcf75965af3c0b013ec0f7541038395221c1b0c1825f14e940a8ffce1562b43ba12349eb1eed732b172963830708c53f5f174bd0e70679c7807852258cc08fb849b07508caf1788d1a820f6658e79b2fb8326aad"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x5, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x3ff}]}}]}}, {{0x9, 0x4, 0x1a, 0x10, 0x9, 0x83, 0x81, 0x28, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "17bebf49"}, {0x5, 0x24, 0x0, 0x57}, {0xd, 0x24, 0xf, 0x1, 0xffffffa4, 0x7, 0x3, 0xfc}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0xf2, 0x24, 0x13, 0xde, "c84d82df5c7b083207fb02681d3410e3204a3af59829daaba83c560b1cb7613e3584c064b871c1a308b57b185f44477e30ecaa1b915df3cec65aaf816a745b68d182a7e4af17c9d7b3f7f48ed158118816b4c39888267fc8b29cf96d40bae6b485fd3273ee34969ff39076b6bd6529cc3f35860581f288c4920a7010c5ef51ca7c8682da0e86b7f8457ea9a5a547128a8961c91684d8a9a12d7afa1884c9e83c1bf76bc41a2cf7dec086d90e4c30d3bcc77d45fbe8391cc0e68da606d62f65be9976008dae26424181a530f8129766fd9994420cae197f0e087c8df47721752f88c863fea18afe180b97a1b7b96c"}]}], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x6, 0x7, 0xf4, [@generic={0x9e, 0x31, "fc842491af699acdcf30f3f48da208510e6bb50a11e2c89d40175bb292bfe69f5ce718f1115e28f5a3abbb567507b1bd355a10db5dc3b9b6ae7b6bdb912c4d3d8a336fc8f277f776041a98a70ca5c2013c00d6b81683f78d81a9270cb15bd5b68f82babb977d7efeb40d7a5d8232ef719106bfb38018a342aa62e7b1018bfee697c44f2eb7c65ae05de0466a5b75a74f3d419c010c243482c057e3e1"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x8, 0xf8, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1c, 0x3, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xe, 0xdd, 0x81, [@generic={0x88, 0xc, "1342e3dadca18ce55cfaab06963e9f541f7b0f36788f68b8fb82dc8d7f5b5c566aebac4b2aa49c81770f949288ddfc67a87a14cc56cfdcaea71a80a4deae2c99053ba1cfee795f94392a7cc757e0b89a65da826153da03a9390a6541361c396f00435ec44cf8965ef854f88e6fdd0b03effa8d79dbc824ad1ebe50838433e295af8d27e2afbb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x0, 0x3, 0x6, [@generic={0x5, 0x3, "3a3288"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x80}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0xa, 0x81, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xc, 0x5, 0x2}}, {{0x9, 0x5, 0x94247b5766f8e75e, 0x0, 0x3ff, 0x7, 0x3, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xfd, 0x2, 0x3, [@generic={0x97, 0xe, "f01b1a05ec9c2528d5782187f254bcec429b41194fcaff3f2c126513cb5751339176a018fa4f7cd0c1bd160477809ed926c0034a5cfe7544127540af1cd7e8ab35a04bea86f0f43be7cff8a6d4b8b816d82e107f2b739510f0dd9daf6491dff27842b121e48ae5dc3c8653c968f1787fbe1ef23ae879f268d7a4fc47e0371a8c99c0a05a247070a85a841c373e6028b9807729db21"}, @generic={0xc5, 0x20, "4a325c2f561d49e4ec2a91385e0150665a878ad0ca6fc628c4bc73ce2d39304ed55b9f43af944038909ab22827bfd7eebc23d1ea7d8f1a0c04a18a1233fdf127bef3a171c8adf6a0a68b34344f5d70fd0d9e5fa664f491a9169de17a1b81842ce30c343d7f6088c31250aee153dd3b94bae02897ae200f3f1dba999e2e2bfd5bc252a6476e1839bbf92ec7245655fcaddb1b317d2ac2aedfda5650c826107556cf3c049804b0ad36276577b9e2731cf3cd973dde6da71726616f72670e18bfd235e1f0"}]}}]}}, {{0x9, 0x4, 0x51, 0x4, 0x9, 0xff, 0x6, 0x78, 0xe, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1c, 0x8001, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@acm={0x4, 0x24, 0x2, 0xb}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x9, 0x55, 0x6, 0x0, 0xe}, @dmm={0x7, 0x24, 0x14, 0x3, 0x7ff}, @mdlm_detail={0x63, 0x24, 0x13, 0x1, "919b0f7ad1986be3933a975ab460bbf6b9a561c6cf5a51448ec93243faa778b569024999b1dc2b327a747d3bb4ce2d8504202f21724c9a766fea470acf303f90406cbf2de124fb73e52afdd458343202db603dd6ae19593db1b12962c94427"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}], [{{0x9, 0x5, 0x2, 0xc, 0x40, 0x6, 0x7, 0x54, [@generic={0xe1, 0x26, "d97b47c1cee7c6887f17ed72f52aee13d1cd04718dd3530945dd445d3c1d722c32a4ea44a939bcb0f276213c67dd2cabb631ccb66dfcb33dfd8aacf2ad4341df17061a4c9afee0f083ae253fd0d4b08b51fbe78ab02f31a600e418f4a2e0a8eac98ca5d9fa292479abb684207bbac1d8e73041eb99e88d5e951102b6809bab12162f2439b1136a53b0f33966fbfcea3ba6ff7042fcb23e507ef6cdebdd26042b809b6ae268b70043aeea04f5e6f1744509d8f9bf4436d8516495a2bbcb065ea8ca0855785b364365fc52be5cf16c8b38c4f566c6400ef675286ca212ff1021"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x9, 0x7f, 0x9, [@generic={0xd3, 0x21, "39d5aa4a7c0391a1be56eff5b3d1978af5f83bde4f54f10bfadb9b49f9337c2b6f466ffc1275813ca9c5895293135cacb7527c82285811870811951b8a15d620f8275bee054758878e7c703b52e50dd73bafff3720ec98160a776c11971624ccc898713bf98f567456cf9ab22aacfab86d9547d17f2ce9cd68530069b5244b37ff421bc2a8862b6bc6f211d23e59b2704612fc41b163e55d06d6bc470f1584ccfe6a89f3421c57ef39c1fad65878157303c77a144656e7892088cffa6a94ef79e9989f21bfe6e6499438a2a272810ae15e"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x16, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xadec}, @generic={0xe4, 0x1, "c70b2848d935b8da79c40d7bf182d1bd11e5b29042288a9a7064f4247ecbf004ab64104da8e34091f0d24be588285258d5baa0aacf0501d6baf757ce95c9434d29dbecc7a555eb8314b4f59ec32f172492e2c2051d483a1509a3f81fd2dd4e7f57cb73e683013e9c6e5633751d88bef2bc94c7fa140a31366c9247eb3d40a66e9b346eaca60a18ed8af3b1513695ab67f033b90d9127b82e99c5b4fda56a6d0c36bf3797238b867c31733f987d72319967d1a24af86f003b552ed806472db023766782f4a74ed2c7ab321e4cb230d14f3f78edc1a290c65ed61f9e09b1bc0fb560e3"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x6, 0x5, 0x10, [@generic={0x77, 0x31, "c4127c3f70b7acaf356c88a4b878b3819e2a1fa0bad304f119ef74cf11f5d49e4c87c998c9e84958210c5134da02bf6ee51fb16aeabf661bb3c17bd6ca8a480752f29b580f312d79df4547decb9943b79a09bd1a9ea9eedaa27e6b169ddc9ea067426e9234133e8ecef0c30193753870d59552f91b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x2, 0xbf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5d}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x7, 0x46, 0x3}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x0, 0x0, 0x69, [@generic={0x1d, 0x0, "8ac50ee9797c1f627a6f314e0b6b1b111cd98ef58e52fb4dff7c87"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x2, 0x4, 0x3}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x5, 0x9, 0x37, 0x40, 0x9}, 0x19, &(0x7f0000001040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "6840086570b2f001f39068914979c10c"}]}, 0x1, [{0x8a, &(0x7f0000001080)=@string={0x8a, 0x3, "4b85602abd61bcc8d692990971732489aa5fff5d9e41aef34a2f4d007d9891b7ce796b5ac979716bbc8ed47f1e67181f2b6dafc6f45ad169eeaa10ea351939a0969fc47400b235eb44e7418c086861b39c2988c2ecb79f95a48f3bbe59d5651f3cb1e570dbf0c4d4ef3ef9f402b9e2c6a56d80675b154d62663dc1f340cd076daa75cdcd2c8eeed9"}}]}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) 1.888976721s ago: executing program 2 (id=2604): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf43, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1000, 0x0}, {0x5, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x6, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40005, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) preadv(r3, &(0x7f0000003480)=[{&(0x7f0000001fc0)=""/213, 0xd5}], 0x1, 0x59, 0x9c3e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) fsmount(0xffffffffffffffff, 0x1, 0x4) dup3(r4, r4, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.702551039s ago: executing program 2 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001240), 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029730000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000240)={0x0, 0x31, 0x3, "f806bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x40) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r7) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x8000) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 1.525492426s ago: executing program 5 (id=2606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff000000a5b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 186.2035ms ago: executing program 4 (id=2607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000001c0)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x81, 0x7, 0x7}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) socket$can_j1939(0x1d, 0x2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2608): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) statx(0xffffffffffffffff, 0x0, 0x800, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000a40)=""/240, 0xf0}, {&(0x7f0000000400)=""/54, 0x36}], 0x3, &(0x7f0000000b40)=""/235, 0xeb}, 0x1}], 0x1, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vivid(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x2, 0x0, 0x0, 0x0, 0xffff, 0x5, 0x2, 0x101, 0x9, 0x5, 0x1, 0x1, 0x4, 0xd400, 0x9, 0x1e, {0x5, 0x3}, 0xf8, 0xf8}}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f00000000c0)={[0x7]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'ipvlan0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x81, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) kernel console output (not intermixed with test programs): p: entered promiscuous mode [ 829.113450][T12870] hsr_slave_0: left promiscuous mode [ 829.131672][T12870] hsr_slave_1: left promiscuous mode [ 829.140939][T12870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.156899][T12870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.178355][T12870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.186123][T12870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.194405][T12870] batman_adv: batadv0: Removing interface: dummy0 [ 829.258230][T12870] veth1_macvtap: left promiscuous mode [ 829.270163][T12870] veth0_macvtap: left promiscuous mode [ 829.277049][T12870] veth1_vlan: left promiscuous mode [ 829.282458][T12870] veth0_vlan: left promiscuous mode [ 830.028987][T12870] team0 (unregistering): Port device team_slave_1 removed [ 830.073675][T12870] team0 (unregistering): Port device team_slave_0 removed [ 831.136858][T15126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.160941][T15126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.238169][T12261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.265684][T12261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.300555][T12261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.321490][T12261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.348523][T15361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.472697][T15361] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.586392][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.593578][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.730632][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.737832][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.220645][T15459] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 832.251820][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.253573][ T30] audit: type=1400 audit(1768833228.036:867): avc: denied { lock } for pid=15692 comm="syz.2.2017" path="socket:[54709]" dev="sockfs" ino=54709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 832.266218][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.311339][T15459] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 832.343166][T15459] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 832.371650][T15459] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 832.466742][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.499912][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.714179][T15459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.751562][T15459] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.762357][T11614] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 832.787018][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.794168][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.844643][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.851852][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.935572][T11614] usb 6-1: Using ep0 maxpacket: 32 [ 832.945239][T15361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.954712][T11614] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 832.977867][T11614] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.044591][T11614] usb 6-1: config 0 has no interface number 0 [ 833.073444][T11614] usb 6-1: config 0 interface 184 altsetting 0 endpoint 0x9 has invalid maxpacket 7331, setting to 64 [ 833.511290][T11614] usb 6-1: config 0 interface 184 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 833.534336][T11614] usb 6-1: config 0 interface 184 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 833.602656][T11614] usb 6-1: config 0 interface 184 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 833.692069][T11614] usb 6-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=64.bd [ 833.722587][T11614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.742003][T11614] usb 6-1: Product: syz [ 833.753841][T11614] usb 6-1: Manufacturer: syz [ 833.764961][T11614] usb 6-1: SerialNumber: syz [ 833.793376][T11614] usb 6-1: config 0 descriptor?? [ 833.806609][T15708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 833.820683][T11614] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 834.011352][T15749] udevd[15749]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.041755][T15747] sp0: Synchronizing with TNC [ 834.060472][ T30] audit: type=1400 audit(1768833229.846:868): avc: denied { map } for pid=15705 comm="syz.5.2018" path="socket:[54952]" dev="sockfs" ino=54952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 834.084936][T15459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.103065][T12703] usb 6-1: USB disconnect, device number 24 [ 834.182315][T15361] veth0_vlan: entered promiscuous mode [ 834.268246][T15361] veth1_vlan: entered promiscuous mode [ 834.360687][T15361] veth0_macvtap: entered promiscuous mode [ 834.378846][T15361] veth1_macvtap: entered promiscuous mode [ 834.460187][T15361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.481985][T15361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.505365][ T3909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.526703][ T30] audit: type=1400 audit(1768833230.316:869): avc: denied { bind } for pid=15767 comm="syz.6.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 834.565845][ T3909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.600804][ T30] audit: type=1400 audit(1768833230.316:870): avc: denied { read } for pid=15767 comm="syz.6.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 834.671635][ T30] audit: type=1400 audit(1768833230.436:871): avc: denied { bind } for pid=15767 comm="syz.6.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.693452][T15768] netlink: 'syz.6.2023': attribute type 1 has an invalid length. [ 834.701451][T15768] netlink: 'syz.6.2023': attribute type 2 has an invalid length. [ 834.709256][T15768] netlink: 'syz.6.2023': attribute type 1 has an invalid length. [ 834.717034][T15768] netlink: 'syz.6.2023': attribute type 3 has an invalid length. [ 834.724759][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2023'. [ 834.773497][ T3909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.802621][ T3909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.030040][ T3909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.074326][ T3909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.138830][ T30] audit: type=1400 audit(1768833230.896:872): avc: denied { node_bind } for pid=15777 comm="syz.6.2025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 835.294852][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.314443][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.335547][T15459] veth0_vlan: entered promiscuous mode [ 835.383477][T15459] veth1_vlan: entered promiscuous mode [ 835.467368][ T3909] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 835.490967][T15459] veth0_macvtap: entered promiscuous mode [ 835.599716][T15459] veth1_macvtap: entered promiscuous mode [ 835.640975][T15459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.124424][T11504] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 836.222460][T15459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.275007][ T150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.403504][T11504] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 836.419853][ T150] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.560897][T11504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.588237][ T150] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.606364][T11504] usb 7-1: Product: syz [ 836.644490][T11504] usb 7-1: Manufacturer: syz [ 837.086216][ T150] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.108397][T11504] usb 7-1: SerialNumber: syz [ 837.121836][T11504] usb 7-1: config 0 descriptor?? [ 837.305321][T15796] [U]  [ 837.396868][T11504] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 837.431913][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.455748][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.579907][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.764113][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.930247][T15817] netlink: 'syz.9.1972': attribute type 2 has an invalid length. [ 837.970652][T15817] kAFS: unable to lookup cell '(,c¾ûL' [ 838.285881][T12703] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 838.470281][T12703] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 838.494622][T12703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.520089][T12703] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 838.547012][T12703] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 838.567527][T12703] usb 6-1: Manufacturer: syz [ 838.582685][T12703] usb 6-1: config 0 descriptor?? [ 838.877113][T12703] rc_core: IR keymap rc-hauppauge not found [ 838.891891][T12703] Registered IR keymap rc-empty [ 838.899236][ T30] audit: type=1400 audit(1768833234.676:873): avc: denied { write } for pid=15783 comm="syz.6.2026" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 838.937804][T11504] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 838.951389][T12703] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 838.998413][T11504] usb 7-1: USB disconnect, device number 20 [ 839.009053][T12703] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 839.286026][T14437] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 839.402652][ T30] audit: type=1400 audit(1768833235.186:874): avc: denied { write } for pid=15815 comm="syz.5.2032" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 839.438853][T14437] usb 10-1: Using ep0 maxpacket: 16 [ 839.448572][T14437] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 839.491764][T14437] usb 10-1: config 0 has no interface number 0 [ 839.501974][T14437] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.574968][ T30] audit: type=1400 audit(1768833235.186:875): avc: denied { open } for pid=15815 comm="syz.5.2032" path="/28/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 839.603428][T14437] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 839.658462][T14437] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 839.694416][T14437] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 839.730228][T14437] usb 10-1: Product: syz [ 839.743636][T14437] usb 10-1: SerialNumber: syz [ 839.771971][T14437] usb 10-1: config 0 descriptor?? [ 839.816637][T14437] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 839.840131][T14437] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input22 [ 840.271595][T15870] team0: No ports can be present during mode change [ 840.347776][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 840.364146][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 841.086875][T15895] netlink: 'syz.2.2045': attribute type 1 has an invalid length. [ 841.099272][T15895] Device name cannot be null; rc = [-22] [ 841.132609][T12703] usb 6-1: USB disconnect, device number 25 [ 841.465791][ T791] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 841.836826][T15905] sp0: Synchronizing with TNC [ 841.848828][ T791] usb 7-1: config 0 has an invalid interface number: 17 but max is 0 [ 841.868069][ T791] usb 7-1: config 0 has no interface number 0 [ 841.874610][ T791] usb 7-1: config 0 interface 17 has no altsetting 0 [ 841.891958][ T791] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 841.908662][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.925797][ T791] usb 7-1: Product: syz [ 841.934473][ T791] usb 7-1: Manufacturer: syz [ 841.949042][ T791] usb 7-1: SerialNumber: syz [ 841.972311][T11504] usb 10-1: USB disconnect, device number 8 [ 841.993125][ T791] usb 7-1: config 0 descriptor?? [ 842.022973][T11504] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 842.038476][ T791] esd_usb 7-1:0.17: sending version message failed [ 842.068915][ T791] esd_usb 7-1:0.17: probe with driver esd_usb failed with error -22 [ 842.090581][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'. [ 842.255703][T15901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.265642][T15901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.277042][ T791] usb 7-1: USB disconnect, device number 21 [ 842.669315][T15934] loop6: detected capacity change from 0 to 3664 [ 842.688809][T15934] buffer_io_error: 7 callbacks suppressed [ 842.688825][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.733096][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.757575][T15936] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 842.765896][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.778113][T15936] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 842.815689][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.916035][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 842.941783][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.006929][T15936] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 843.179147][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.368976][T15950] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.2052'. [ 843.661179][ T30] audit: type=1400 audit(1768833239.436:876): avc: denied { write } for pid=15941 comm="syz.4.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 843.696604][T15936] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 843.717384][T15951] overlayfs: missing 'lowerdir' [ 843.871695][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 844.102350][T15934] ldm_validate_partition_table(): Disk read failed. [ 844.116907][T15936] I/O error, dev loop6, sector 3040 op 0x1:(WRITE) flags 0x8800 phys_seg 79 prio class 2 [ 844.119621][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 844.145829][T15934] Buffer I/O error on dev loop6, logical block 0, async page read [ 844.153712][T15934] Dev loop6: unable to read RDB block 0 [ 844.166574][T15934] loop6: unable to read partition table [ 844.173791][T15934] loop_reread_partitions: partition scan of loop6 (3„ ¾‚”˜) failed (rc=-5) [ 844.309256][ T30] audit: type=1400 audit(1768833240.096:877): avc: denied { read append } for pid=15957 comm="syz.4.2057" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 844.365201][ T30] audit: type=1400 audit(1768833240.126:878): avc: denied { open } for pid=15957 comm="syz.4.2057" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 844.430787][ T30] audit: type=1400 audit(1768833240.126:879): avc: denied { read write } for pid=15957 comm="syz.4.2057" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 844.522241][ T30] audit: type=1400 audit(1768833240.126:880): avc: denied { open } for pid=15957 comm="syz.4.2057" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 844.550790][T15971] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2056'. [ 844.816013][T12703] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 844.987975][T12703] usb 7-1: Using ep0 maxpacket: 8 [ 845.005115][T12703] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 845.024710][T12703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.068498][T12703] usb 7-1: Product: syz [ 845.087249][T12703] usb 7-1: Manufacturer: syz [ 845.205936][T12703] usb 7-1: SerialNumber: syz [ 845.230924][T12703] usb 7-1: config 0 descriptor?? [ 845.457220][T12703] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 845.482228][T12703] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 845.578421][T12703] usb 7-1: USB disconnect, device number 22 [ 845.750790][T16003] sp0: Synchronizing with TNC [ 845.906771][T12703] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 846.083025][T12703] usb 7-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 846.128746][T12703] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 846.156799][T12703] usb 7-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 846.178607][T12703] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.188401][T12703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 846.197162][T12703] usb 7-1: SerialNumber: syz [ 847.295631][T12703] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -22 [ 847.344162][T12703] usb 7-1: USB disconnect, device number 23 [ 847.776669][T16043] Illegal XDP return value 4294967274 on prog (id 520) dev N/A, expect packet loss! [ 847.875397][T16043] Cannot find add_set index 0 as target [ 848.353157][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 848.391979][T16051] overlayfs: failed to clone upperpath [ 848.847978][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 849.015886][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 849.035443][ T10] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 849.056842][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.060698][T16068] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 849.075403][ T10] usb 7-1: Product: syz [ 849.082990][ T10] usb 7-1: Manufacturer: syz [ 849.099717][ T10] usb 7-1: SerialNumber: syz [ 849.121446][ T10] usb 7-1: config 0 descriptor?? [ 849.192176][T16068] macsec1: entered allmulticast mode [ 849.224644][T16068] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 849.367795][ T10] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 024 [ 849.755148][ T10] usb 7-1: USB disconnect, device number 24 [ 849.993180][ T30] audit: type=1400 audit(1768833245.776:881): avc: denied { mount } for pid=16104 comm="syz.9.2078" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 850.237815][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2079'. [ 850.283752][T16112] netlink: 'syz.5.2079': attribute type 23 has an invalid length. [ 850.311817][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2079'. [ 850.681715][ T30] audit: type=1400 audit(1768833246.466:882): avc: denied { unmount } for pid=15459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 850.884913][ T30] audit: type=1400 audit(1768833246.666:883): avc: denied { map } for pid=16125 comm="syz.6.2084" path="socket:[56196]" dev="sockfs" ino=56196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 850.986579][T16132] tmpfs: Bad value for 'mpol' [ 851.175060][ T30] audit: type=1400 audit(1768833246.666:884): avc: denied { accept } for pid=16125 comm="syz.6.2084" path="socket:[56196]" dev="sockfs" ino=56196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 851.265796][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 851.303397][ T30] audit: type=1400 audit(1768833246.776:885): avc: denied { getopt } for pid=16125 comm="syz.6.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 851.465783][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 851.526019][ T10] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 851.535358][ T10] usb 5-1: config 252 has an invalid descriptor of length 225, skipping remainder of the config [ 851.562881][ T10] usb 5-1: config 252 has no interface number 0 [ 851.585236][ T10] usb 5-1: too many endpoints for config 252 interface 15 altsetting 0: 75, using maximum allowed: 30 [ 851.606683][ T10] usb 5-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 851.634901][T16157] 9pnet_virtio: no channels available for device syz [ 851.665852][ T5846] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 851.687412][ T30] audit: type=1400 audit(1768833247.366:886): avc: denied { shutdown } for pid=16153 comm="syz.2.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 851.750448][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 851.786955][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.795588][ T5846] usb 7-1: device descriptor read/64, error -71 [ 851.801346][ T10] usb 5-1: Product: syz [ 851.812590][ T10] usb 5-1: Manufacturer: syz [ 851.822206][ T10] usb 5-1: SerialNumber: syz [ 852.035614][ T5846] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 852.056538][ T791] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 852.067587][ T10] hub 5-1:252.15: bad descriptor, ignoring hub [ 852.073792][ T10] hub 5-1:252.15: probe with driver hub failed with error -5 [ 852.131159][T12264] usb 5-1: Failed to submit usb control message: -71 [ 852.140229][ T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 852.165134][T12264] usb 5-1: unable to send the bmi data to the device: -71 [ 852.166279][ T5846] usb 7-1: device descriptor read/64, error -71 [ 852.196450][ T10] usb 5-1: USB disconnect, device number 36 [ 852.209135][T12264] usb 5-1: unable to get target info from device [ 852.230473][T12264] usb 5-1: could not get target info (-71) [ 852.245937][T12264] usb 5-1: could not probe fw (-71) [ 852.256467][ T791] usb 6-1: Using ep0 maxpacket: 8 [ 852.295874][ T5846] usb usb7-port1: attempt power cycle [ 852.312191][ T791] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 852.344899][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.363104][ T791] usb 6-1: Product: syz [ 852.375737][ T791] usb 6-1: Manufacturer: syz [ 852.380513][ T791] usb 6-1: SerialNumber: syz [ 852.392806][ T791] usb 6-1: config 0 descriptor?? [ 852.423478][ T791] gspca_main: se401-2.14.0 probing 047d:5003 [ 852.494044][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2094'. [ 852.503185][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2094'. [ 852.657263][ T5846] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 852.846345][ T5846] usb 7-1: device descriptor read/8, error -71 [ 853.102042][ T791] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 853.135637][ T5846] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 853.142862][ T791] usb 6-1: USB disconnect, device number 26 [ 853.187002][ T5846] usb 7-1: device descriptor read/8, error -71 [ 853.346024][ T5846] usb usb7-port1: unable to enumerate USB device [ 853.735609][ T5846] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 854.025604][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 854.237263][ T5846] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 854.252380][ T5846] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 854.296398][ T5846] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 854.394362][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.416859][T16209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 854.424204][T16209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 854.435329][ T5846] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 855.075946][ T5846] usb 5-1: USB disconnect, device number 37 [ 855.174599][T15750] udevd[15750]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.214985][T16237] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2102'. [ 855.235308][T16236] 9p: Bad value for 'rfdno' [ 855.849274][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 858.064212][T16300] netlink: 'syz.4.2113': attribute type 1 has an invalid length. [ 859.225771][ T791] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 859.320985][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2115'. [ 859.431656][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.483729][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.515266][ T791] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 859.517858][T16334] openvswitch: netlink: IP tunnel dst address not specified [ 859.541426][T16332] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 859.553943][T16334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16334 comm=syz.2.2120 [ 859.567566][T16087] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 859.569623][ T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.585367][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'. [ 859.629384][ T791] usb 6-1: config 0 descriptor?? [ 859.726132][T16087] usb 5-1: Invalid ep0 maxpacket: 32 [ 859.875915][T16087] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 860.045544][T16087] usb 5-1: Invalid ep0 maxpacket: 32 [ 860.059903][T16087] usb usb5-port1: attempt power cycle [ 860.328507][ T791] usbhid 6-1:0.0: can't add hid device: -71 [ 860.334528][ T791] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 860.408827][ T791] usb 6-1: USB disconnect, device number 27 [ 860.428341][T16087] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 860.506206][T16087] usb 5-1: Invalid ep0 maxpacket: 32 [ 860.656163][T16087] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 860.696110][T16087] usb 5-1: Invalid ep0 maxpacket: 32 [ 860.725513][T16087] usb usb5-port1: unable to enumerate USB device [ 862.311516][T16389] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 862.314206][T16381] syzkaller0: entered promiscuous mode [ 862.375124][T16381] syzkaller0: entered allmulticast mode [ 862.583688][T16381] hfs: unable to load iocharset "io#harset" [ 862.745948][T11504] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 863.058698][T11504] usb 5-1: Using ep0 maxpacket: 16 [ 863.182564][T11504] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 863.191341][T11504] usb 5-1: config 0 has no interface number 0 [ 863.200086][T11504] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 863.228687][T11504] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 863.256238][T11504] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 863.265837][T11504] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 863.274202][T11504] usb 5-1: Product: syz [ 863.300202][ T30] audit: type=1326 audit(1768833259.086:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ff58f749 code=0x7ffc0000 [ 863.327905][T11504] usb 5-1: SerialNumber: syz [ 863.335697][ T30] audit: type=1326 audit(1768833259.086:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48ff58f749 code=0x7ffc0000 [ 863.367261][T11504] usb 5-1: config 0 descriptor?? [ 863.440181][T11504] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 863.455953][T11504] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input25 [ 863.498988][ T30] audit: type=1326 audit(1768833259.086:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ff58f749 code=0x7ffc0000 [ 863.596658][ T30] audit: type=1326 audit(1768833259.086:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f48ff58f749 code=0x7ffc0000 [ 863.664365][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 863.706689][ T30] audit: type=1326 audit(1768833259.086:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ff58f749 code=0x7ffc0000 [ 863.790373][ T30] audit: type=1326 audit(1768833259.086:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ff58f749 code=0x7ffc0000 [ 864.080650][ T10] usb 5-1: USB disconnect, device number 42 [ 864.092453][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 865.264557][T16430] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 866.809824][ T30] audit: type=1400 audit(1768833262.596:893): avc: denied { read } for pid=16446 comm="syz.4.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 867.417817][T12272] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 869.019679][ T30] audit: type=1400 audit(1768833264.806:894): avc: denied { relabelfrom } for pid=16455 comm="syz.5.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 869.130261][ T30] audit: type=1400 audit(1768833264.826:895): avc: denied { relabelto } for pid=16455 comm="syz.5.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 869.181049][T16464] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 869.273179][T16477] netlink: 'syz.5.2152': attribute type 1 has an invalid length. [ 869.950332][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.969415][ T30] audit: type=1400 audit(1768833265.756:896): avc: denied { create } for pid=16466 comm="syz.5.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 869.998701][ T30] audit: type=1400 audit(1768833265.776:897): avc: denied { write } for pid=16466 comm="syz.5.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 870.075557][T14437] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 870.172865][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2154'. [ 870.276173][T14437] usb 5-1: Using ep0 maxpacket: 16 [ 870.292075][T16483] bond1: (slave gretap1): making interface the new active one [ 870.295895][T14437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.322509][T16483] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 870.352480][T14437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.359191][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2155'. [ 870.401244][T14437] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 870.438151][T14437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.473174][T16469] macvlan2: entered promiscuous mode [ 870.491076][T16469] macvlan2: entered allmulticast mode [ 870.497514][T14437] usb 5-1: config 0 descriptor?? [ 870.512756][T16469] bond1: entered promiscuous mode [ 870.534762][T16469] gretap1: entered promiscuous mode [ 870.574927][T16469] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 870.605078][T16469] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 870.642385][T16469] bond1: left promiscuous mode [ 870.670182][T16469] gretap1: left promiscuous mode [ 870.958275][T16503] Invalid source name [ 870.962511][T16503] UBIFS error (pid: 16503): cannot open "./file0", error -22 [ 871.757207][ T30] audit: type=1400 audit(1768833266.736:898): avc: denied { mounton } for pid=16465 comm="syz.4.2151" path="/24/file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 871.840341][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 871.849147][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 871.878885][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 871.900558][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 871.924064][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 871.946426][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 871.962484][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 871.997177][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 872.041147][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 872.080819][T14437] macally 0003:060B:0001.0016: unknown main item tag 0x0 [ 872.230833][T14437] macally 0003:060B:0001.0016: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 872.767066][T14437] usb 5-1: USB disconnect, device number 43 [ 872.861169][T16514] fido_id[16514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 873.459120][T16531] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2161'. [ 876.582306][ T30] audit: type=1400 audit(1768833272.366:899): avc: denied { create } for pid=16557 comm="syz.6.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 876.955674][ T10] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 877.144994][T16579] loop3: detected capacity change from 0 to 1 [ 877.157230][ T10] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 877.177291][T16579] Dev loop3: unable to read RDB block 1 [ 877.178423][ T10] usb 10-1: config 0 has no interface number 0 [ 877.188110][T16579] loop3: unable to read partition table [ 877.210227][ T10] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 877.308225][T16579] loop3: partition table beyond EOD, truncated [ 877.499307][T16579] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 877.515190][ T10] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 877.600015][ T10] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 877.612150][ T10] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 877.634499][ T10] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 877.662140][ T10] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 877.695062][ T10] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 877.727478][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.751071][ T10] usb 10-1: config 0 descriptor?? [ 877.781335][T16566] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 877.808319][T16566] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 877.844224][ T10] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 878.046201][ C0] ldusb 10-1:0.55: usb_submit_urb failed (-1) [ 878.053329][T16566] FAULT_INJECTION: forcing a failure. [ 878.053329][T16566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.096952][T16566] CPU: 0 UID: 0 PID: 16566 Comm: syz.9.2167 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.096981][T16566] Tainted: [L]=SOFTLOCKUP [ 878.096987][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.096997][T16566] Call Trace: [ 878.097003][T16566] [ 878.097010][T16566] dump_stack_lvl+0x16c/0x1f0 [ 878.097039][T16566] should_fail_ex+0x512/0x640 [ 878.097059][T16566] _copy_to_user+0x32/0xd0 [ 878.097087][T16566] simple_read_from_buffer+0xcb/0x170 [ 878.097113][T16566] proc_fail_nth_read+0x197/0x240 [ 878.097133][T16566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 878.097153][T16566] ? rw_verify_area+0xcf/0x6c0 [ 878.097173][T16566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 878.097191][T16566] vfs_read+0x1e4/0xcf0 [ 878.097212][T16566] ? __pfx___mutex_lock+0x10/0x10 [ 878.097240][T16566] ? __pfx_vfs_read+0x10/0x10 [ 878.097267][T16566] ? __fget_files+0x20e/0x3c0 [ 878.097298][T16566] ksys_read+0x12a/0x250 [ 878.097318][T16566] ? __pfx_ksys_read+0x10/0x10 [ 878.097346][T16566] do_syscall_64+0xcd/0xf80 [ 878.097369][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.097384][T16566] RIP: 0033:0x7f1f7a18e15c [ 878.097398][T16566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 878.097411][T16566] RSP: 002b:00007f1f7afbb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 878.097427][T16566] RAX: ffffffffffffffda RBX: 00007f1f7a3e5fa0 RCX: 00007f1f7a18e15c [ 878.097438][T16566] RDX: 000000000000000f RSI: 00007f1f7afbb0a0 RDI: 0000000000000005 [ 878.097448][T16566] RBP: 00007f1f7afbb090 R08: 0000000000000000 R09: 0000000000000000 [ 878.097458][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.097467][T16566] R13: 00007f1f7a3e6038 R14: 00007f1f7a3e5fa0 R15: 00007ffda4c765a8 [ 878.097492][T16566] [ 878.422829][T16083] usb 10-1: USB disconnect, device number 9 [ 878.450458][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 878.485335][T16083] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 879.157678][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 879.175834][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 879.195390][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 879.220038][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.250237][T16585] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 879.277436][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.469159][T16612] input: syz0 as /devices/virtual/input/input26 [ 881.262319][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 881.441840][ T791] usb 7-1: USB disconnect, device number 29 [ 881.505929][ T10] usb 10-1: device descriptor read/64, error -71 [ 881.735752][T14437] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 881.765346][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 881.781114][ T30] audit: type=1400 audit(1768833277.566:900): avc: denied { getopt } for pid=16621 comm="syz.4.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 881.905858][ T10] usb 10-1: device descriptor read/64, error -71 [ 881.949336][T14437] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 881.975118][T14437] usb 6-1: config 0 has no interface number 0 [ 882.008515][T14437] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 882.029636][T14437] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 882.040623][T14437] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 882.052498][T14437] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 882.065142][T14437] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 882.085558][T16082] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 882.103504][T14437] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 882.114088][ T10] usb usb10-port1: attempt power cycle [ 882.180531][T14437] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 882.197127][T14437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.234305][T14437] usb 6-1: config 0 descriptor?? [ 882.272506][T16654] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 882.302054][T16082] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 882.367954][T16654] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 882.412444][T16082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.526787][T14437] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 882.553736][T16082] usb 5-1: Product: syz [ 882.581649][T16082] usb 5-1: Manufacturer: syz [ 882.610651][T16082] usb 5-1: SerialNumber: syz [ 882.685936][T14437] usb 6-1: USB disconnect, device number 28 [ 882.706466][T14437] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 882.815617][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 882.838812][ T10] usb 10-1: device descriptor read/8, error -71 [ 883.079018][T16082] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 883.104166][T16082] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 883.120589][T16082] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 883.133406][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 883.143760][T16082] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 883.156064][T16082] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 883.157566][ T10] usb 10-1: device descriptor read/8, error -71 [ 883.175582][T16082] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 883.195262][T16082] usb 5-1: USB disconnect, device number 44 [ 883.288386][ T10] usb usb10-port1: unable to enumerate USB device [ 883.535723][T16082] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 883.719598][T16082] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 883.747004][T16082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.755804][T16082] usb 6-1: Product: syz [ 883.760548][T16082] usb 6-1: Manufacturer: syz [ 883.765235][T16082] usb 6-1: SerialNumber: syz [ 883.837675][T16715] loop3: detected capacity change from 0 to 1 [ 883.844553][T16715] Dev loop3: unable to read RDB block 1 [ 883.854687][T16715] loop3: unable to read partition table [ 883.872782][T16715] loop3: partition table beyond EOD, truncated [ 883.881378][T16715] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 883.961802][T16716] CUSE: unknown device info "" [ 883.966924][T16716] CUSE: unknown device info "`" [ 883.976307][T16716] CUSE: unknown device info "" [ 883.981259][T16716] CUSE: unknown device info "€" [ 883.986895][T16716] CUSE: DEVNAME unspecified [ 884.425883][T16082] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 884.446580][T16082] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 885.052254][T16082] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 885.062026][T16727] input: syz0 as /devices/virtual/input/input27 [ 885.070602][T16082] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 885.086595][T16082] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 885.101047][T16082] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 885.157274][T16082] usb 6-1: USB disconnect, device number 29 [ 885.474807][ T30] audit: type=1326 audit(1768833281.256:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.6.2199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f466598f749 code=0x0 [ 885.535308][T16733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.805638][ T30] audit: type=1400 audit(1768833282.056:902): avc: denied { create } for pid=16734 comm="syz.5.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 886.977219][ T30] audit: type=1400 audit(1768833282.076:903): avc: denied { sys_admin } for pid=16734 comm="syz.5.2200" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 887.000098][ T30] audit: type=1400 audit(1768833282.636:904): avc: denied { lock } for pid=16742 comm="syz.9.2203" path="socket:[58205]" dev="sockfs" ino=58205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 887.202649][T16761] Mount JFS Failure: -5 [ 887.330934][T16768] loop3: detected capacity change from 0 to 1 [ 887.340398][T15449] Dev loop3: unable to read RDB block 1 [ 887.347833][T15449] loop3: unable to read partition table [ 887.357265][T15449] loop3: partition table beyond EOD, truncated [ 887.364198][T16768] Dev loop3: unable to read RDB block 1 [ 887.435766][T16768] loop3: unable to read partition table [ 887.452002][T16768] loop3: partition table beyond EOD, truncated [ 887.528454][T16768] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 889.167536][T16087] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 889.374131][T16087] usb 6-1: Using ep0 maxpacket: 32 [ 889.465433][T16087] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 889.509539][T16087] usb 6-1: config 0 has no interface number 0 [ 889.542918][T16807] overlayfs: overlapping lowerdir path [ 889.568045][T16087] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 889.601417][T16087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.630081][T16087] usb 6-1: Product: syz [ 889.634345][T16087] usb 6-1: Manufacturer: syz [ 889.665518][T16087] usb 6-1: SerialNumber: syz [ 889.681810][T16087] usb 6-1: config 0 descriptor?? [ 889.727689][T16087] smsc95xx v2.0.0 [ 890.391130][T16826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2221'. [ 890.415876][T16826] 9p: Bad value for 'rfdno' [ 890.515122][ T30] audit: type=1400 audit(1768833286.296:905): avc: denied { setopt } for pid=16786 comm="syz.5.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 890.542743][T16087] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 890.591310][T16087] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 890.601175][T16087] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 890.625376][T16087] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 890.672573][T16087] usb 6-1: USB disconnect, device number 30 [ 890.935581][T16082] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 891.345550][T11504] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 891.445777][T16082] usb 7-1: Using ep0 maxpacket: 16 [ 891.464319][T16082] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 891.480970][T16082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.510835][T11504] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 891.525656][T16082] usb 7-1: Product: syz [ 891.530207][T16082] usb 7-1: Manufacturer: syz [ 891.534883][T16082] usb 7-1: SerialNumber: syz [ 891.542338][T11504] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 891.582409][T11504] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 891.621306][T11504] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.662914][T16842] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 891.670901][T16842] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 891.684220][T11504] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 891.781585][T16082] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 891.836697][T16082] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 891.865723][ T30] audit: type=1400 audit(1768833287.656:906): avc: denied { getopt } for pid=16862 comm="syz.5.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 891.907327][T16082] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 891.924503][T16082] usb 7-1: media controller created [ 891.960051][T11504] usb 10-1: USB disconnect, device number 14 [ 891.961609][T16082] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 892.089526][T16082] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 892.179824][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2232'. [ 892.200528][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'. [ 892.215392][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2232'. [ 892.238946][T16877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16877 comm=syz.2.2233 [ 892.263959][ T30] audit: type=1326 audit(1768833288.046:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16870 comm="syz.5.2232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5beb8f749 code=0x0 [ 892.630979][T11504] usb 7-1: USB disconnect, device number 30 [ 892.747786][T16897] loop3: detected capacity change from 0 to 1 [ 892.778052][T16897] Dev loop3: unable to read RDB block 1 [ 892.805687][T16897] loop3: unable to read partition table [ 892.819369][T16897] loop3: partition table beyond EOD, truncated [ 892.836032][T16897] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 893.815709][T11614] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 894.063491][T11614] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 894.079023][T11614] usb 6-1: config 0 has no interface number 0 [ 894.085551][ T791] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 894.092437][T11614] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 894.105790][T11614] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 894.117698][T11614] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 894.133896][T11614] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 894.259637][T11614] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 894.282127][T11614] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 894.330144][ T791] usb 7-1: New USB device found, idVendor=9881, idProduct=5363, bcdDevice=1a.9e [ 894.507425][ T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.744436][T11614] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 894.751457][ T791] usb 7-1: config 0 descriptor?? [ 894.753601][T11614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.786068][T11614] usb 6-1: config 0 descriptor?? [ 894.792391][T16924] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 894.805976][T16924] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 894.839637][T11614] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 895.139164][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2241'. [ 895.205154][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2241'. [ 895.224078][ T791] usb 6-1: USB disconnect, device number 31 [ 895.257709][ T791] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 895.292350][T11614] usb 7-1: USB disconnect, device number 31 [ 895.802548][ T30] audit: type=1400 audit(1768833291.586:908): avc: denied { ioctl } for pid=16959 comm="syz.4.2248" path="socket:[59543]" dev="sockfs" ino=59543 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 895.955548][T11614] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 896.030305][ T30] audit: type=1400 audit(1768833291.816:909): avc: denied { getopt } for pid=16970 comm="syz.4.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 896.158481][T11614] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 896.215662][T11614] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 896.239155][T11614] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.416842][T16988] FAT-fs (nbd4): unable to read boot sector [ 896.858694][T11614] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.908439][T16963] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 896.915899][T16963] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 896.941460][T11614] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 897.194988][T11614] usb 10-1: USB disconnect, device number 15 [ 897.240749][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 897.602630][ T30] audit: type=1400 audit(1768833293.256:910): avc: denied { write } for pid=16965 comm="syz.5.2249" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 898.340805][ T5982] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 898.438607][ T30] audit: type=1400 audit(1768833294.216:911): avc: denied { watch_sb watch_reads } for pid=17008 comm="syz.9.2257" path="/33/file1" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 899.029562][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2260'. [ 899.681655][T17033] Bluetooth: MGMT ver 1.23 [ 901.009184][T17062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.104532][T17066] serio: Serial port ptm0 [ 901.137739][T17067] 9p: Bad value for 'rfdno' [ 902.772927][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 903.072466][T17090] xt_l2tp: unknown flags: 17 [ 903.643070][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2271'. [ 903.654216][T17103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'. [ 904.085560][ T30] audit: type=1400 audit(1768833299.846:912): avc: denied { mount } for pid=17114 comm="syz.6.2275" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 904.117611][T17122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2277'. [ 904.149932][T17126] netlink: 'syz.2.2279': attribute type 1 has an invalid length. [ 904.300422][T17126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 904.340879][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2279'. [ 904.383033][T17134] veth3: entered allmulticast mode [ 904.441065][T17134] bond1: (slave veth3): Enslaving as an active interface with a down link [ 904.450747][T17137] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 904.463489][T17138] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 904.794599][T17138] bond1: (slave batadv1): making interface the new active one [ 904.937524][T17138] batadv1: entered promiscuous mode [ 904.937573][T17147] loop3: detected capacity change from 0 to 1 [ 904.943190][T17138] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 905.013379][T15449] Dev loop3: unable to read RDB block 1 [ 905.100617][T15449] loop3: unable to read partition table [ 905.120281][T15449] loop3: partition table beyond EOD, truncated [ 905.361325][T17147] Dev loop3: unable to read RDB block 1 [ 905.375168][T17147] loop3: unable to read partition table [ 905.387799][T17147] loop3: partition table beyond EOD, truncated [ 905.434608][T17147] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 905.454278][T17152] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 906.007261][ T30] audit: type=1400 audit(1768833301.796:913): avc: denied { setopt } for pid=17164 comm="syz.2.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 906.031016][ T791] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 906.234115][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2289'. [ 906.267059][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.293837][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.352644][ T791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 906.379577][ T791] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.390063][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.408069][ T791] usb 5-1: config 0 descriptor?? [ 906.565623][T11292] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 906.680722][ T791] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 906.747490][T11292] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 906.760093][T11292] usb 6-1: config 0 has no interface number 0 [ 906.788704][T11292] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 906.808189][T11292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.840232][T11292] usb 6-1: Product: syz [ 906.853346][T11614] usb 5-1: USB disconnect, device number 46 [ 906.861191][T11292] usb 6-1: Manufacturer: syz [ 906.878444][T11292] usb 6-1: SerialNumber: syz [ 906.921016][T17194] fido_id[17194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 906.931609][T11292] usb 6-1: config 0 descriptor?? [ 907.191099][T11292] uvcvideo 6-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 907.215367][T11292] uvcvideo 6-1:0.64: No valid video chain found. [ 907.252167][T11292] usb 6-1: USB disconnect, device number 32 [ 907.391128][T17179] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2290'. [ 907.461919][ T30] audit: type=1400 audit(1768833303.246:914): avc: denied { ioctl } for pid=17178 comm="syz.5.2290" path="socket:[60955]" dev="sockfs" ino=60955 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 907.665624][T16082] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 907.837251][T16082] usb 7-1: Using ep0 maxpacket: 8 [ 907.847562][T16082] usb 7-1: too many configurations: 248, using maximum allowed: 8 [ 907.873690][T16082] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 252 [ 907.903027][T16082] usb 7-1: can't read configurations, error -22 [ 908.067375][T16082] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 908.235720][T16082] usb 7-1: Using ep0 maxpacket: 8 [ 908.251568][T16082] usb 7-1: too many configurations: 248, using maximum allowed: 8 [ 908.338331][T16082] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 252 [ 908.577888][T16082] usb 7-1: can't read configurations, error -22 [ 908.593323][T16082] usb usb7-port1: attempt power cycle [ 908.916119][ T30] audit: type=1400 audit(1768833304.686:915): avc: denied { name_bind } for pid=17231 comm="syz.9.2298" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 908.917649][T17233] input: syz0 as /devices/virtual/input/input29 [ 909.438485][T16082] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 909.506249][T16082] usb 7-1: Using ep0 maxpacket: 8 [ 909.515110][T16082] usb 7-1: too many configurations: 248, using maximum allowed: 8 [ 909.543809][T16082] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 252 [ 909.583665][T16082] usb 7-1: can't read configurations, error -22 [ 909.628840][T17248] loop3: detected capacity change from 0 to 1 [ 909.639881][T17248] Dev loop3: unable to read RDB block 1 [ 909.649937][T17248] loop3: unable to read partition table [ 909.669775][T17248] loop3: partition table beyond EOD, truncated [ 909.691976][T17248] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 909.735568][T16082] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 909.777408][T16082] usb 7-1: Using ep0 maxpacket: 8 [ 909.796052][T16082] usb 7-1: too many configurations: 248, using maximum allowed: 8 [ 909.815878][ T5921] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 909.838371][T16082] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 252 [ 909.864481][T16082] usb 7-1: can't read configurations, error -22 [ 909.890797][T16082] usb usb7-port1: unable to enumerate USB device [ 910.020663][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.047886][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 910.073348][ T5921] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 910.098802][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.136603][ T5921] usb 10-1: config 0 descriptor?? [ 910.166920][ T5921] gspca_main: spca501-2.14.0 probing 0000:0000 [ 910.367826][T17242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.456987][T17242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.126591][ T5921] gspca_spca501: reg write: error -110 [ 911.136862][ T5921] spca501 10-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 911.144077][ T5921] spca501 10-1:0.0: probe with driver spca501 failed with error -22 [ 911.203299][T14437] usb 10-1: USB disconnect, device number 16 [ 911.365689][ T5921] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 911.558105][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.588960][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.631059][ T5921] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 911.680732][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.732465][ T5921] usb 7-1: config 0 descriptor?? [ 912.168188][ T5921] hid_parser_main: 1260 callbacks suppressed [ 912.168211][ T5921] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 912.242529][ T5921] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 912.285638][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 912.356141][ T5921] cp2112 0003:10C4:EA90.0018: error requesting version [ 912.441491][T17289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.467322][ T5921] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -32 [ 912.895551][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 912.901677][T17289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.903379][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 912.919192][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 912.927979][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 912.937409][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 912.954344][ T5921] usb 7-1: USB disconnect, device number 36 [ 912.965778][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 912.997483][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 913.026078][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 913.035273][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.057975][ T10] usb 10-1: config 0 descriptor?? [ 913.324495][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 913.550351][ T30] audit: type=1400 audit(1768833309.336:916): avc: denied { read write } for pid=17283 comm="syz.9.2306" name="lp0" dev="devtmpfs" ino=3757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 913.588349][ C0] usblp0: nonzero read bulk status received: -71 [ 913.589904][T16085] usb 10-1: USB disconnect, device number 17 [ 913.640852][ T30] audit: type=1400 audit(1768833309.366:917): avc: denied { open } for pid=17283 comm="syz.9.2306" path="/dev/usb/lp0" dev="devtmpfs" ino=3757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 913.699812][T17323] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 913.803465][T17283] usblp0: removed [ 914.598241][T17310] sp0: Synchronizing with TNC [ 915.472555][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2317'. [ 915.678429][ T30] audit: type=1400 audit(1768833311.466:918): avc: denied { bind } for pid=17374 comm="syz.2.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 915.707294][T17376] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2320'. [ 917.309270][T17395] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 919.700807][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 919.915581][ T30] audit: type=1400 audit(1768833315.526:919): avc: denied { read } for pid=17391 comm="syz.4.2325" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 920.133715][ T30] audit: type=1400 audit(1768833315.526:920): avc: denied { ioctl } for pid=17391 comm="syz.4.2325" path="/65/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 920.257876][ T791] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 920.291713][T17412] loop3: detected capacity change from 0 to 1 [ 920.336596][T17412] Dev loop3: unable to read RDB block 1 [ 920.394080][T17412] loop3: unable to read partition table [ 920.494394][ T791] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 920.505516][ T791] usb 7-1: config 0 has no interface number 0 [ 920.511642][ T791] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 920.536387][T17412] loop3: partition table beyond EOD, truncated [ 920.575320][T17412] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 920.825519][ T791] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 920.842520][ T791] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 920.895406][ T791] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 920.924215][ T791] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 920.961267][ T791] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 921.038863][ T791] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 921.065511][ T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.106835][ T791] usb 7-1: config 0 descriptor?? [ 921.161427][T17404] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 921.187573][T17404] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 921.225818][ T791] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 921.284540][T17425] veth1_macvtap: left promiscuous mode [ 921.290339][T17425] macsec0: entered promiscuous mode [ 921.360227][T17431] 9p: Bad value for 'rfdno' [ 921.368218][T17431] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2330'. [ 921.451896][ T791] usb 7-1: USB disconnect, device number 37 [ 921.460419][ T791] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 921.596149][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 921.665553][T14437] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 921.757662][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 921.784792][ T10] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 921.798512][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.831947][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 921.845641][T14437] usb 6-1: Using ep0 maxpacket: 16 [ 921.860414][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.889548][T14437] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 921.892025][ T10] usb 5-1: config 0 descriptor?? [ 921.927112][ T10] pxrc 5-1:0.0: Could not find endpoint [ 921.941099][T14437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.983779][T14437] usb 6-1: Product: syz [ 921.997885][T14437] usb 6-1: Manufacturer: syz [ 922.002707][T14437] usb 6-1: SerialNumber: syz [ 922.056131][T14437] usb 6-1: config 0 descriptor?? [ 922.074661][T14437] usb-storage 6-1:0.0: USB Mass Storage device detected [ 922.086350][T12264] batadv1: left promiscuous mode [ 922.124129][T14437] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 922.153499][T14437] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 922.153499][T14437] Please send a copy of this message to and [ 923.394689][T14437] usb 6-1: USB disconnect, device number 33 [ 923.583695][T17467] kernel profiling enabled (shift: 63) [ 923.629434][T17467] profiling shift: 63 too large [ 923.644883][T17467] netlink: 'syz.6.2334': attribute type 2 has an invalid length. [ 923.856628][T17467] ‚#{6c: entered promiscuous mode [ 923.994536][T17476] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 924.713012][T14437] usb 5-1: USB disconnect, device number 47 [ 925.716121][T17492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2338'. [ 925.959025][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 926.075871][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 926.579644][T17514] ptrace attach of ""[17517] was attempted by "./syz-executor exec"[17514] [ 926.935874][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 928.168890][ T10] usb 10-1: config 0 has an invalid interface number: 154 but max is 0 [ 928.181098][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.191838][ T10] usb 10-1: config 0 has no interface number 0 [ 928.199424][ T10] usb 10-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 928.291656][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.366802][ T10] usb 10-1: config 0 descriptor?? [ 928.448509][ T10] qmi_wwan 10-1:0.154: bogus CDC Union: master=0, slave=0 [ 928.465567][T16082] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 928.493471][ T10] qmi_wwan 10-1:0.154: probe with driver qmi_wwan failed with error -22 [ 928.728735][T16082] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 928.825784][T17541] xt_TPROXY: Can be used only with -p tcp or -p udp [ 929.143376][T16082] usb 6-1: config 0 has no interface number 0 [ 929.163576][T16082] usb 6-1: config 0 interface 29 has no altsetting 0 [ 929.189932][T16082] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 929.206390][T16082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.206415][T16082] usb 6-1: Product: syz [ 929.206427][T16082] usb 6-1: Manufacturer: syz [ 929.206438][T16082] usb 6-1: SerialNumber: syz [ 929.211025][T16082] usb 6-1: config 0 descriptor?? [ 929.246137][T11292] usb 10-1: USB disconnect, device number 18 [ 929.417842][T17547] loop3: detected capacity change from 0 to 1 [ 929.435662][T16082] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 929.470044][T17548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2349'. [ 929.488157][T17547] Dev loop3: unable to read RDB block 1 [ 929.535681][T17547] loop3: unable to read partition table [ 929.550623][T17547] loop3: partition table beyond EOD, truncated [ 929.595238][T17547] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 929.665681][T16082] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 929.688197][T16082] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 929.711367][T16082] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 929.827290][T16082] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -22 [ 929.993351][T16082] IPVS: starting estimator thread 0... [ 930.131645][T17554] IPVS: using max 77 ests per chain, 184800 per kthread [ 930.465679][T17568] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2352'. [ 930.552478][T17568] openvswitch: netlink: Missing key (keys=40, expected=100) [ 930.785576][T11614] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 930.856622][T11292] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 930.967087][T11614] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 930.979407][T11614] usb 7-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 931.010345][T11614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.016042][T11292] usb 10-1: Using ep0 maxpacket: 16 [ 931.040109][T11292] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 931.050874][T11292] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 931.077023][T11292] usb 10-1: Product: syz [ 931.099831][T11292] usb 10-1: Manufacturer: syz [ 931.122199][T11292] usb 10-1: SerialNumber: syz [ 931.145220][T11292] usb 10-1: config 0 descriptor?? [ 931.202434][T11614] usb 6-1: USB disconnect, device number 34 [ 931.324812][T17580] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 931.391585][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.400987][ T30] audit: type=1400 audit(1768833327.176:921): avc: denied { map } for pid=17578 comm="syz.2.2354" path="socket:[60364]" dev="sockfs" ino=60364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 931.554616][ T30] audit: type=1400 audit(1768833327.176:922): avc: denied { accept } for pid=17578 comm="syz.2.2354" path="socket:[60364]" dev="sockfs" ino=60364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 932.882553][ T30] audit: type=1400 audit(1768833328.666:923): avc: denied { read } for pid=17598 comm="syz.4.2357" path="socket:[61486]" dev="sockfs" ino=61486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 932.883785][T17602] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 932.967325][T17600] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 933.506444][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 933.520021][T16083] usb 10-1: USB disconnect, device number 19 [ 934.495529][T14437] usb 7-1: USB disconnect, device number 38 [ 943.705912][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 962.107602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 992.456137][ T30] audit: type=1400 audit(1768833388.246:924): avc: denied { ioctl } for pid=18148 comm="syz.5.2358" path="socket:[62626]" dev="sockfs" ino=62626 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 993.099147][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.234881][ T30] audit: type=1400 audit(1768833389.016:925): avc: denied { write } for pid=18151 comm="syz.9.2359" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 993.295525][T14437] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 993.476410][T14437] usb 5-1: Using ep0 maxpacket: 8 [ 993.488356][T18174] loop3: detected capacity change from 0 to 1 [ 993.506269][T14437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 993.516351][T18174] Dev loop3: unable to read RDB block 1 [ 993.522794][T18174] loop3: unable to read partition table [ 993.537375][T14437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.547511][T18174] loop3: partition table beyond EOD, truncated [ 993.547543][T18174] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 993.577026][T14437] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 993.606243][T14437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 993.656289][T14437] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 993.670297][T14437] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 993.706022][T14437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.729399][T14437] usb 5-1: config 0 descriptor?? [ 993.757395][T18153] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 994.363362][T18153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.405370][T18153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.428948][ T5826] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 994.439731][T11614] usb 5-1: USB disconnect, device number 48 [ 994.523998][T16083] libceph: connect (1)[c::]:6789 error -101 [ 994.620744][T18200] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2371'. [ 994.635735][ T30] audit: type=1400 audit(1768833390.416:926): avc: denied { ioctl } for pid=18194 comm="syz.5.2371" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 994.831491][T16083] libceph: mon0 (1)[c::]:6789 connect error [ 994.847225][T18195] ceph: No mds server is up or the cluster is laggy [ 995.019807][T18209] ceph: No mds server is up or the cluster is laggy [ 995.464699][T18222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2374'. [ 995.475707][ T791] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 995.676330][ T791] usb 5-1: device descriptor read/64, error -71 [ 996.637850][ T791] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 996.835830][T16085] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 997.252142][ T791] usb 5-1: device descriptor read/64, error -71 [ 997.722322][T16083] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 997.723198][ T791] usb usb5-port1: attempt power cycle [ 997.736259][T16085] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 997.744390][T16085] usb 7-1: config 0 has no interface number 0 [ 997.752701][T16085] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 997.762559][T16085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.777336][T16085] usb 7-1: Product: syz [ 997.784607][T16085] usb 7-1: Manufacturer: syz [ 997.795535][T16085] usb 7-1: SerialNumber: syz [ 997.816176][T16085] usb 7-1: config 0 descriptor?? [ 997.832843][T16085] usb 7-1: selecting invalid altsetting 1 [ 997.852713][T16085] dvb_ttusb_budget: ttusb_init_controller: error [ 997.862673][T16085] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 997.869194][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2381'. [ 997.900914][T16083] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 997.925519][T16083] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 997.944008][T16083] usb 6-1: Product: syz [ 997.964289][T16083] usb 6-1: Manufacturer: syz [ 997.972470][T16085] DVB: Unable to find symbol stv0299_attach() [ 997.989795][T16083] usb 6-1: SerialNumber: syz [ 998.022112][T16083] usb 6-1: config 0 descriptor?? [ 998.031149][T18226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.046269][T16083] ch341 6-1:0.0: ch341-uart converter detected [ 998.066392][T18226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.125749][T16085] DVB: Unable to find symbol tda8083_attach() [ 998.140617][T16085] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 998.155821][ T791] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 998.625940][ T791] usb 5-1: device not accepting address 51, error -71 [ 999.070404][T18235] dlm: no local IP address has been set [ 999.082028][T18255] erspan0: entered promiscuous mode [ 999.099620][T18235] dlm: cannot start dlm midcomms -107 [ 999.179851][ T10] usb 7-1: USB disconnect, device number 39 [ 999.418448][T14437] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 999.767348][T14437] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 999.863205][T14437] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.886204][T14437] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 999.901123][T14437] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.921698][T14437] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.954378][T14437] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 999.976816][T14437] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1000.020182][T14437] usb 10-1: Product: syz [ 1000.083492][T14437] usb 10-1: Manufacturer: syz [ 1000.137277][T14437] cdc_wdm 10-1:1.0: skipping garbage [ 1000.142666][T14437] cdc_wdm 10-1:1.0: skipping garbage [ 1000.230304][T14437] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1000.262866][T14437] cdc_wdm 10-1:1.0: Unknown control protocol [ 1000.345727][T16082] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1000.354044][T16083] ch341-uart ttyUSB0: failed to read break control: -110 [ 1000.377571][T16083] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1000.397820][T18259] cdc_wdm 10-1:1.0: Error submitting int urb - -90 [ 1000.523052][T16082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.649576][T16082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.734933][T16082] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1000.756439][ T10] usb 10-1: USB disconnect, device number 20 [ 1000.791189][T16082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.829945][T16082] usb 5-1: config 0 descriptor?? [ 1000.983376][T16083] usb 6-1: USB disconnect, device number 35 [ 1001.001686][T16083] ch341 6-1:0.0: device disconnected [ 1002.521055][T16082] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 1002.694571][T16082] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 1002.745368][T16082] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 1002.768189][T16082] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 1002.782665][T16082] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 1003.059577][T18318] xt_l2tp: unknown flags: 17 [ 1003.098635][T16082] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1003.143497][T18310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.170677][T18310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.200275][T16082] playstation 0003:054C:0DF2.0019: Invalid byte count transferred, expected 20 got 0 [ 1003.356652][T16082] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense pairing info: -22 [ 1003.382340][T16082] playstation 0003:054C:0DF2.0019: Failed to get MAC address from DualSense [ 1003.707627][T18283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.829698][T16082] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 1003.845889][T18283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.057338][T16082] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -22 [ 1004.079872][T18329] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1004.137585][T18329] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2401'. [ 1004.157339][T18329] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2401'. [ 1004.608848][ T5186] udevd[5186]: worker [18237] terminated by signal 33 (Unknown signal 33) [ 1004.977233][T18346] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2403'. [ 1004.989903][T18345] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2403'. [ 1005.050001][ T5186] udevd[5186]: worker [18237] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 1005.230089][ T5934] usb 5-1: USB disconnect, device number 53 [ 1005.580910][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2398'. [ 1005.855517][T18324] openvswitch: netlink: Flow actions attr not present in new flow. [ 1006.760456][T18395] xt_l2tp: unknown flags: 17 [ 1007.177662][T18393] xt_connbytes: Forcing CT accounting to be enabled [ 1007.519368][ T30] audit: type=1400 audit(1768833403.276:927): avc: denied { map } for pid=18402 comm="syz.5.2413" path="socket:[62081]" dev="sockfs" ino=62081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1007.747352][T18407] kAFS: unparsable volume name [ 1007.982235][ T30] audit: type=1400 audit(1768833403.276:928): avc: denied { read } for pid=18402 comm="syz.5.2413" path="socket:[62081]" dev="sockfs" ino=62081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1008.016238][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2413'. [ 1008.081860][T18408] xt_connbytes: Forcing CT accounting to be enabled [ 1008.436127][ T30] audit: type=1400 audit(1768833404.226:929): avc: denied { bind } for pid=18412 comm="syz.6.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1008.449567][T18413] autofs: Unknown parameter '’œª°@»»»»»' [ 1008.485889][T18414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2414'. [ 1009.138552][T18408] Cannot find set identified by id 0 to match [ 1014.028958][T18489] qnx4: no qnx4 filesystem (no root dir). [ 1014.094707][T18479] [U]  [ 1015.421808][T18501] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2436'. [ 1015.642594][ T30] audit: type=1400 audit(1768833411.426:930): avc: denied { write } for pid=18506 comm="syz.9.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1015.754811][ T30] audit: type=1400 audit(1768833411.536:931): avc: denied { listen } for pid=18506 comm="syz.9.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1015.879386][ T30] audit: type=1400 audit(1768833411.666:932): avc: denied { accept } for pid=18506 comm="syz.9.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1015.920953][T18514] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2437'. [ 1015.999559][T18515] mkiss: ax0: crc mode is auto. [ 1016.027774][ T30] audit: type=1400 audit(1768833411.816:933): avc: denied { search } for pid=18506 comm="syz.9.2437" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1016.268523][ T30] audit: type=1400 audit(1768833412.046:934): avc: denied { read } for pid=18500 comm="syz.2.2438" path="socket:[63138]" dev="sockfs" ino=63138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1016.467524][T18520] comedi comedi3: board detection failed [ 1017.030002][ T30] audit: type=1400 audit(1768833412.816:935): avc: denied { ioctl } for pid=18530 comm="syz.5.2446" path="socket:[63164]" dev="sockfs" ino=63164 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1017.436034][T18543] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2449'. [ 1017.545611][T16085] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1017.673180][T18548] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2449'. [ 1018.034418][T16085] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 1018.044104][T16085] usb 7-1: config 0 has no interface number 0 [ 1018.057899][T16085] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1018.072114][T16085] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1018.084069][T16085] usb 7-1: config 0 interface 106 altsetting 0 bulk endpoint 0xF has invalid maxpacket 16 [ 1018.095855][T16085] usb 7-1: config 0 interface 106 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 1018.131445][T16085] usb 7-1: config 0 interface 106 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1018.143481][T16085] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1018.171808][T16085] usb 7-1: config 0 interface 106 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1018.205516][T16085] usb 7-1: New USB device found, idVendor=0403, idProduct=cff8, bcdDevice=2f.fe [ 1018.251018][T16085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.385584][T16085] usb 7-1: config 0 descriptor?? [ 1018.406182][T18539] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1018.827341][ T30] audit: type=1400 audit(1768833414.616:936): avc: denied { map } for pid=18555 comm="syz.9.2453" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1018.869576][T18560] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2454'. [ 1019.593505][T18589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.605983][T18589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.707058][T11614] usb 7-1: USB disconnect, device number 40 [ 1021.536819][T18624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1022.555710][T11614] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1023.068528][T11614] usb 10-1: Using ep0 maxpacket: 32 [ 1023.096480][T11614] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1023.131377][T11614] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.151663][T11614] usb 10-1: Product: syz [ 1023.170159][T11614] usb 10-1: Manufacturer: syz [ 1023.211613][T11614] usb 10-1: SerialNumber: syz [ 1023.242628][T11614] usb 10-1: config 0 descriptor?? [ 1024.562229][T18639] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2469'. [ 1024.632558][T11614] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1024.693678][T11614] peak_usb 10-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1024.709751][ T30] audit: type=1400 audit(1768833420.496:937): avc: denied { getopt } for pid=18687 comm="syz.6.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1024.847154][T11614] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 1025.038135][T16083] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1025.058073][T11614] usb 10-1: USB disconnect, device number 21 [ 1025.219822][T16083] usb 6-1: Using ep0 maxpacket: 16 [ 1025.241610][T16083] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1025.281345][T16083] usb 6-1: config 0 has no interface number 0 [ 1025.301096][T16083] usb 6-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1025.327879][T16083] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1025.345756][T16083] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1025.355522][T16083] usb 6-1: Product: syz [ 1025.364649][T16083] usb 6-1: SerialNumber: syz [ 1025.396527][T16083] usb 6-1: config 0 descriptor?? [ 1025.424502][T16083] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1025.575682][T11614] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1025.775174][T16085] usb 6-1: USB disconnect, device number 36 [ 1025.785332][T11614] usb 5-1: Using ep0 maxpacket: 32 [ 1025.803788][T11614] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1025.813702][T11614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.822114][T11614] usb 5-1: Product: syz [ 1025.840021][T11614] usb 5-1: Manufacturer: syz [ 1025.844667][T11614] usb 5-1: SerialNumber: syz [ 1025.869570][T11614] usb 5-1: config 0 descriptor?? [ 1026.194246][T11614] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 054 [ 1026.288935][T18730] tipc: Enabling of bearer rejected, media not registered [ 1026.553550][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 1026.613114][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 1026.672996][T18739] netlink: 'syz.5.2489': attribute type 1 has an invalid length. [ 1026.704650][T18739] netlink: 'syz.5.2489': attribute type 2 has an invalid length. [ 1026.755963][ T4028] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.803468][ T4028] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.849130][ T4028] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.960038][ T4028] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.985536][T11614] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1027.166944][T11614] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1027.176806][T11614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.215326][T11614] usb 6-1: config 0 descriptor?? [ 1027.251405][T11614] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1027.345688][T16083] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1027.495499][T16083] usb 10-1: Using ep0 maxpacket: 32 [ 1027.504575][T16083] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1027.514642][T16083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.523054][T16083] usb 10-1: Product: syz [ 1027.527734][T16083] usb 10-1: Manufacturer: syz [ 1027.532581][T16083] usb 10-1: SerialNumber: syz [ 1027.556344][T16083] usb 10-1: config 0 descriptor?? [ 1027.651992][T11614] gspca_sunplus: reg_w_riv err -71 [ 1027.662104][T11614] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1027.691078][T11614] usb 6-1: USB disconnect, device number 37 [ 1028.222477][T16083] peak_usb 10-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1028.240932][T16083] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1028.248756][T16083] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1028.316695][T16083] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 1028.355960][T18708] i2c i2c-1: failure reading data [ 1028.378079][ T5934] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1028.400010][T11292] usb 5-1: USB disconnect, device number 54 [ 1028.465728][T12703] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1028.565668][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 1028.573936][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 99, changing to 10 [ 1028.588630][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.601446][ T5934] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1028.632987][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.654110][T12703] usb 6-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1028.668007][ T5934] usb 7-1: config 0 descriptor?? [ 1028.674981][T12703] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1028.695271][T12703] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice=20.00 [ 1028.712544][T12703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.732793][T12703] usb 6-1: config 0 descriptor?? [ 1028.835515][T11292] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1029.087434][T18777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.097831][T18777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.112495][T11292] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.131225][ T5934] usbhid 7-1:0.0: can't add hid device: -71 [ 1029.137453][ T5934] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1029.160024][T11292] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1029.176315][ T5934] usb 7-1: USB disconnect, device number 41 [ 1029.184429][T11292] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1029.201695][T11292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.213273][T18789] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1029.231860][T11292] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.686949][T18803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.697113][T18803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.775984][ T5934] usb 10-1: USB disconnect, device number 22 [ 1031.522123][T16085] usb 6-1: USB disconnect, device number 38 [ 1032.021165][T18818] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2507'. [ 1032.061805][T18818] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2507'. [ 1032.086367][T18818] netlink: 'syz.5.2507': attribute type 6 has an invalid length. [ 1032.094710][T18818] netlink: 'syz.5.2507': attribute type 5 has an invalid length. [ 1032.102666][T18818] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2507'. [ 1032.243577][ T30] audit: type=1400 audit(1768833428.026:938): avc: denied { setattr } for pid=18817 comm="syz.5.2507" name="[userfaultfd]" dev="anon_inodefs" ino=63704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1032.571339][T11292] usb 5-1: USB disconnect, device number 55 [ 1032.607982][T16086] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1032.755787][T16086] usb 6-1: device descriptor read/64, error -71 [ 1033.057344][T16086] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1033.245714][T16086] usb 6-1: device descriptor read/64, error -71 [ 1033.355943][T16086] usb usb6-port1: attempt power cycle [ 1033.760332][T18850] input: syz0 as /devices/virtual/input/input33 [ 1033.795482][T16086] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1033.898437][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1033.908438][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.908471][ T5826] Tainted: [L]=SOFTLOCKUP [ 1033.908477][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.908490][ T5826] Workqueue: hci4 hci_rx_work [ 1033.908517][ T5826] Call Trace: [ 1033.908524][ T5826] [ 1033.908532][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 1033.908561][ T5826] sysfs_warn_dup+0x7f/0xa0 [ 1033.908585][ T5826] sysfs_create_dir_ns+0x24b/0x2b0 [ 1033.908613][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1033.908632][ T5826] ? find_held_lock+0x2b/0x80 [ 1033.908665][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 1033.908692][ T5826] kobject_add_internal+0x2c4/0x9d0 [ 1033.908725][ T5826] kobject_add+0x16e/0x240 [ 1033.908753][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 1033.908785][ T5826] ? kobject_put+0xaf/0x6f0 [ 1033.908810][ T5826] ? _raw_spin_unlock+0x3e/0x50 [ 1033.908842][ T5826] device_add+0x288/0x1980 [ 1033.908863][ T5826] ? __pfx_dev_set_name+0x10/0x10 [ 1033.908886][ T5826] ? __pfx_device_add+0x10/0x10 [ 1033.908909][ T5826] ? mgmt_send_event_skb+0x2fb/0x460 [ 1033.908938][ T5826] hci_conn_add_sysfs+0x1a8/0x260 [ 1033.908964][ T5826] le_conn_complete_evt+0x11ed/0x1fa0 [ 1033.908993][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1033.909022][ T5826] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1033.909050][ T5826] hci_le_meta_evt+0x357/0x610 [ 1033.909073][ T5826] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1033.909098][ T5826] hci_event_packet+0x685/0x1210 [ 1033.909120][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1033.909143][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 1033.909171][ T5826] ? kcov_remote_start+0x3a9/0x680 [ 1033.909196][ T5826] hci_rx_work+0x2c9/0x1020 [ 1033.909222][ T5826] process_one_work+0x9ba/0x1b20 [ 1033.909257][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 1033.909288][ T5826] ? assign_work+0x1a0/0x250 [ 1033.909312][ T5826] worker_thread+0x6c8/0xf10 [ 1033.909342][ T5826] ? __kthread_parkme+0x19e/0x250 [ 1033.909361][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 1033.909384][ T5826] kthread+0x3c5/0x780 [ 1033.909405][ T5826] ? __pfx_kthread+0x10/0x10 [ 1033.909428][ T5826] ? rcu_is_watching+0x12/0xc0 [ 1033.909445][ T5826] ? __pfx_kthread+0x10/0x10 [ 1033.909467][ T5826] ret_from_fork+0x983/0xb10 [ 1033.909488][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 1033.909511][ T5826] ? __switch_to+0x7af/0x10d0 [ 1033.909534][ T5826] ? __pfx_kthread+0x10/0x10 [ 1033.909556][ T5826] ret_from_fork_asm+0x1a/0x30 [ 1033.909603][ T5826] [ 1033.909720][ T5826] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1034.178088][ T5826] Bluetooth: hci4: failed to register connection device [ 1034.178658][T16086] usb 6-1: device descriptor read/8, error -71 [ 1034.555781][ T5943] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1034.767774][T16086] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1034.831680][ T30] audit: type=1400 audit(1768833430.606:939): avc: denied { execute } for pid=18859 comm="syz.4.2519" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1034.877329][T16086] usb 6-1: device descriptor read/8, error -71 [ 1035.016247][T16086] usb usb6-port1: unable to enumerate USB device [ 1035.116754][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 1035.134906][ T5943] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1035.154365][ T5943] usb 7-1: config 164 has an invalid interface number: 246 but max is 0 [ 1035.175488][ T5943] usb 7-1: config 164 has no interface number 0 [ 1035.185703][ T5943] usb 7-1: config 164 interface 246 has no altsetting 0 [ 1035.196759][ T5943] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice= f.fe [ 1035.206513][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.214524][ T5943] usb 7-1: Product: syz [ 1036.168385][ T5943] usb 7-1: Manufacturer: syz [ 1036.173167][ T5943] usb 7-1: SerialNumber: syz [ 1036.685031][T18879] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2523'. [ 1036.799114][ T30] audit: type=1400 audit(1768833432.586:940): avc: denied { mounton } for pid=18876 comm="syz.4.2524" path="/" dev="ramfs" ino=64777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1037.012625][ T30] audit: type=1400 audit(1768833432.796:941): avc: denied { unmount } for pid=15361 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1037.038076][T18884] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1037.093670][T18884] veth0_macvtap: left promiscuous mode [ 1037.187416][T18884] 9p: Bad value for 'wfdno' [ 1038.160718][ T5943] powermate 7-1:164.246: probe with driver powermate failed with error -5 [ 1038.246036][ T5943] usb 7-1: USB disconnect, device number 42 [ 1038.493682][T18915] FAULT_INJECTION: forcing a failure. [ 1038.493682][T18915] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.506385][T18915] CPU: 1 UID: 0 PID: 18915 Comm: syz.9.2533 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.506412][T18915] Tainted: [L]=SOFTLOCKUP [ 1038.506418][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1038.506428][T18915] Call Trace: [ 1038.506436][T18915] [ 1038.506443][T18915] dump_stack_lvl+0x16c/0x1f0 [ 1038.506471][T18915] should_fail_ex+0x512/0x640 [ 1038.506492][T18915] should_failslab+0xc2/0x120 [ 1038.506515][T18915] kmem_cache_alloc_noprof+0x83/0x770 [ 1038.506534][T18915] ? copy_fs_struct+0x49/0x340 [ 1038.506559][T18915] ? copy_fs_struct+0x49/0x340 [ 1038.506576][T18915] ? lockdep_hardirqs_on+0x7c/0x110 [ 1038.506598][T18915] copy_fs_struct+0x49/0x340 [ 1038.506621][T18915] ksys_unshare+0x356/0xa40 [ 1038.506639][T18915] ? __pfx_ksys_unshare+0x10/0x10 [ 1038.506666][T18915] __x64_sys_unshare+0x31/0x40 [ 1038.506682][T18915] do_syscall_64+0xcd/0xf80 [ 1038.506707][T18915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.506724][T18915] RIP: 0033:0x7f1f7a18f749 [ 1038.506738][T18915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.506754][T18915] RSP: 002b:00007f1f7af79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1038.506770][T18915] RAX: ffffffffffffffda RBX: 00007f1f7a3e6180 RCX: 00007f1f7a18f749 [ 1038.506781][T18915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000280 [ 1038.506791][T18915] RBP: 00007f1f7af79090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.506801][T18915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.506810][T18915] R13: 00007f1f7a3e6218 R14: 00007f1f7a3e6180 R15: 00007ffda4c765a8 [ 1038.506843][T18915] [ 1038.835849][T16082] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1038.987773][T16082] usb 5-1: Using ep0 maxpacket: 32 [ 1038.994951][T16082] usb 5-1: config 0 has an invalid interface number: 73 but max is 0 [ 1039.003306][T16082] usb 5-1: config 0 has no interface number 0 [ 1039.009764][T16082] usb 5-1: config 0 interface 73 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 1039.132458][T16082] usb 5-1: config 0 interface 73 has no altsetting 0 [ 1039.694460][T16082] usb 5-1: New USB device found, idVendor=07d1, idProduct=3c11, bcdDevice= d.6a [ 1039.704111][T16082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.712574][T16082] usb 5-1: Product: syz [ 1039.716915][T16082] usb 5-1: Manufacturer: syz [ 1039.721627][T16082] usb 5-1: SerialNumber: syz [ 1039.746753][T16082] usb 5-1: config 0 descriptor?? [ 1039.816758][T18931] netlink: 'syz.6.2541': attribute type 32 has an invalid length. [ 1039.830250][T18931] tipc: Enabling of bearer rejected, failed to enable media [ 1039.931746][T18935] loop3: detected capacity change from 0 to 1 [ 1039.952464][T18935] Dev loop3: unable to read RDB block 1 [ 1039.974857][T18935] loop3: unable to read partition table [ 1039.985119][T18935] loop3: partition table beyond EOD, truncated [ 1040.001571][T18935] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1040.583288][T18949] ptrace attach of "./syz-executor exec"[13228] was attempted by "./syz-executor exec"[18949] [ 1040.819122][T18956] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1041.851227][T18971] FAULT_INJECTION: forcing a failure. [ 1041.851227][T18971] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.863967][T18971] CPU: 1 UID: 0 PID: 18971 Comm: syz.5.2549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.863995][T18971] Tainted: [L]=SOFTLOCKUP [ 1041.864001][T18971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1041.864011][T18971] Call Trace: [ 1041.864018][T18971] [ 1041.864025][T18971] dump_stack_lvl+0x16c/0x1f0 [ 1041.864055][T18971] should_fail_ex+0x512/0x640 [ 1041.864071][T18971] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1041.864091][T18971] should_failslab+0xc2/0x120 [ 1041.864114][T18971] kmem_cache_alloc_noprof+0x83/0x770 [ 1041.864131][T18971] ? create_new_namespaces+0x30/0xab0 [ 1041.864163][T18971] ? create_new_namespaces+0x30/0xab0 [ 1041.864186][T18971] create_new_namespaces+0x30/0xab0 [ 1041.864211][T18971] ? bpf_lsm_capable+0x9/0x10 [ 1041.864230][T18971] ? security_capable+0x7e/0x260 [ 1041.864254][T18971] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1041.864283][T18971] ksys_unshare+0x45b/0xa40 [ 1041.864300][T18971] ? __pfx_ksys_unshare+0x10/0x10 [ 1041.864317][T18971] ? ksys_write+0x1ac/0x250 [ 1041.864347][T18971] __x64_sys_unshare+0x31/0x40 [ 1041.864363][T18971] do_syscall_64+0xcd/0xf80 [ 1041.864389][T18971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.864407][T18971] RIP: 0033:0x7fd5beb8f749 [ 1041.864420][T18971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.864436][T18971] RSP: 002b:00007fd5bfa81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1041.864452][T18971] RAX: ffffffffffffffda RBX: 00007fd5bede6180 RCX: 00007fd5beb8f749 [ 1041.864463][T18971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000280 [ 1041.864474][T18971] RBP: 00007fd5bfa81090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.864484][T18971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.864494][T18971] R13: 00007fd5bede6218 R14: 00007fd5bede6180 R15: 00007ffdaabab5b8 [ 1041.864519][T18971] [ 1042.810621][T18978] netlink: 'syz.6.2551': attribute type 34 has an invalid length. [ 1042.989888][T16086] usb 5-1: USB disconnect, device number 56 [ 1045.904168][T19004] loop3: detected capacity change from 0 to 1 [ 1045.922767][T19004] Dev loop3: unable to read RDB block 1 [ 1045.941609][T19004] loop3: unable to read partition table [ 1045.958468][T19004] loop3: partition table beyond EOD, truncated [ 1045.973323][T19004] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1046.098757][ T30] audit: type=1400 audit(1768833441.886:942): avc: denied { bind } for pid=19008 comm="syz.4.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1047.252827][T19011] [U]  [ 1048.023209][T19032] FAULT_INJECTION: forcing a failure. [ 1048.023209][T19032] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.036067][T19032] CPU: 1 UID: 0 PID: 19032 Comm: syz.6.2562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.036094][T19032] Tainted: [L]=SOFTLOCKUP [ 1048.036100][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1048.036110][T19032] Call Trace: [ 1048.036117][T19032] [ 1048.036123][T19032] dump_stack_lvl+0x16c/0x1f0 [ 1048.036152][T19032] should_fail_ex+0x512/0x640 [ 1048.036167][T19032] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1048.036188][T19032] should_failslab+0xc2/0x120 [ 1048.036210][T19032] kmem_cache_alloc_noprof+0x83/0x770 [ 1048.036227][T19032] ? rcu_is_watching+0x12/0xc0 [ 1048.036243][T19032] ? copy_utsname+0x1a4/0x680 [ 1048.036265][T19032] ? copy_utsname+0x1a4/0x680 [ 1048.036280][T19032] copy_utsname+0x1a4/0x680 [ 1048.036298][T19032] create_new_namespaces+0x16a/0xab0 [ 1048.036324][T19032] ? bpf_lsm_capable+0x9/0x10 [ 1048.036343][T19032] ? security_capable+0x7e/0x260 [ 1048.036366][T19032] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1048.036394][T19032] ksys_unshare+0x45b/0xa40 [ 1048.036412][T19032] ? __pfx_ksys_unshare+0x10/0x10 [ 1048.036430][T19032] ? rcu_is_watching+0x12/0xc0 [ 1048.036452][T19032] __x64_sys_unshare+0x31/0x40 [ 1048.036468][T19032] do_syscall_64+0xcd/0xf80 [ 1048.036494][T19032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.036511][T19032] RIP: 0033:0x7f466598f749 [ 1048.036524][T19032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.036546][T19032] RSP: 002b:00007f466674f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1048.036563][T19032] RAX: ffffffffffffffda RBX: 00007f4665be6180 RCX: 00007f466598f749 [ 1048.036574][T19032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000280 [ 1048.036584][T19032] RBP: 00007f466674f090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.036594][T19032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.036603][T19032] R13: 00007f4665be6218 R14: 00007f4665be6180 R15: 00007fffca8a3888 [ 1048.036628][T19032] [ 1048.975630][ T30] audit: type=1400 audit(1768833444.426:943): avc: denied { write } for pid=19030 comm="syz.4.2567" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1049.079647][T19033] kthread_run failed with err -4 [ 1049.666616][T19049] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1050.265667][ T5921] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1050.425786][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 1050.450284][ T5921] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1050.481821][ T5921] usb 7-1: config 179 has no interface number 0 [ 1050.517481][ T5921] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1050.578566][ T5921] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1050.707437][ T5921] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1050.732810][ T5921] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1050.774452][ T5921] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1050.803253][ T5921] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1051.004502][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.342817][T19058] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1051.894881][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input36 [ 1052.236924][T19084] FAULT_INJECTION: forcing a failure. [ 1052.236924][T19084] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.249702][T19084] CPU: 1 UID: 0 PID: 19084 Comm: syz.4.2580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.249733][T19084] Tainted: [L]=SOFTLOCKUP [ 1052.249739][T19084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1052.249749][T19084] Call Trace: [ 1052.249755][T19084] [ 1052.249762][T19084] dump_stack_lvl+0x16c/0x1f0 [ 1052.249792][T19084] should_fail_ex+0x512/0x640 [ 1052.249807][T19084] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1052.249827][T19084] should_failslab+0xc2/0x120 [ 1052.249850][T19084] __kmalloc_cache_noprof+0x80/0x800 [ 1052.249868][T19084] ? copy_time_ns+0xf6/0x7f0 [ 1052.249892][T19084] ? copy_time_ns+0xf6/0x7f0 [ 1052.249909][T19084] copy_time_ns+0xf6/0x7f0 [ 1052.249926][T19084] ? copy_cgroup_ns+0x71/0x980 [ 1052.249950][T19084] create_new_namespaces+0x48a/0xab0 [ 1052.249982][T19084] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1052.250010][T19084] ksys_unshare+0x45b/0xa40 [ 1052.250030][T19084] ? __pfx_ksys_unshare+0x10/0x10 [ 1052.250046][T19084] ? ksys_write+0x1ac/0x250 [ 1052.250076][T19084] __x64_sys_unshare+0x31/0x40 [ 1052.250091][T19084] do_syscall_64+0xcd/0xf80 [ 1052.250116][T19084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.250133][T19084] RIP: 0033:0x7f713e18f749 [ 1052.250147][T19084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.250163][T19084] RSP: 002b:00007f713f0a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1052.250181][T19084] RAX: ffffffffffffffda RBX: 00007f713e3e6180 RCX: 00007f713e18f749 [ 1052.250192][T19084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000280 [ 1052.250202][T19084] RBP: 00007f713f0a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.250212][T19084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.250222][T19084] R13: 00007f713e3e6218 R14: 00007f713e3e6180 R15: 00007fffcca19888 [ 1052.250247][T19084] [ 1053.515733][ T5921] usb 7-1: USB disconnect, device number 43 [ 1053.521688][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1053.521728][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1054.273175][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.325759][T12703] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1054.395492][T16087] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1055.458383][T12703] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1055.482950][T12703] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1055.531237][T16087] usb 5-1: Using ep0 maxpacket: 32 [ 1055.542344][T16087] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 1055.551042][T16087] usb 5-1: config 0 has no interface number 0 [ 1055.557359][T16087] usb 5-1: config 0 interface 166 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1055.569046][T12703] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1055.578599][T12703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.601875][T19109] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1055.609260][T19109] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1055.620383][T16087] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 1055.645291][T16087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.682319][T12703] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1055.690403][T16087] usb 5-1: Product: syz [ 1055.697360][T16087] usb 5-1: Manufacturer: syz [ 1055.715008][T16087] usb 5-1: SerialNumber: syz [ 1055.737566][T16087] usb 5-1: config 0 descriptor?? [ 1055.765668][T19113] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1055.804281][T16087] hub 5-1:0.166: bad descriptor, ignoring hub [ 1055.841773][T16087] hub 5-1:0.166: probe with driver hub failed with error -5 [ 1055.880449][T16085] usb 10-1: USB disconnect, device number 23 [ 1056.010112][T19146] input: syz0 as /devices/virtual/input/input37 [ 1056.024758][T19113] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1056.076268][T12703] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1056.098579][T16087] net1080 5-1:0.166 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 2e:af:4b:9e:9d:30 [ 1056.239038][T12703] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1056.257832][T12703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.395534][ T30] audit: type=1400 audit(1768833452.126:944): avc: denied { map } for pid=19154 comm="syz.2.2601" path="socket:[65248]" dev="sockfs" ino=65248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1056.410864][T12703] usb 6-1: Product: syz [ 1056.423093][T12703] usb 6-1: Manufacturer: syz [ 1056.427881][T12703] usb 6-1: SerialNumber: syz [ 1056.445788][T16087] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1057.087478][T19129] fuse: Bad value for 'fd' [ 1057.093892][T12703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1057.131109][T12703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1057.146332][T12703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1057.159097][T12703] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1057.214557][T12703] usb 6-1: USB disconnect, device number 43 [ 1057.255490][T16087] usb 7-1: Using ep0 maxpacket: 8 [ 1057.268094][T16087] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1057.340395][T19176] ufs: You didn't specify the type of your ufs filesystem [ 1057.340395][T19176] [ 1057.340395][T19176] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1057.340395][T19176] [ 1057.340395][T19176] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1057.374359][T16087] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.396116][T19176] ufs: ufstype=old is supported read-only [ 1057.405574][T19176] ufs: ufs_fill_super(): bad magic number [ 1057.431607][T16087] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1057.458056][T16087] pvrusb2: ********** [ 1057.462079][T16087] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1057.495492][T16087] pvrusb2: Important functionality might not be entirely working. [ 1057.503320][T16087] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1057.539907][T16087] pvrusb2: ********** [ 1059.099663][T16082] usb 5-1: USB disconnect, device number 57 [ 1059.130701][T16082] net1080 5-1:0.166 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 1059.298449][T16082] ------------[ cut here ]------------ [ 1059.304382][T16082] WARNING: net/sched/sch_generic.c:1496 at dev_shutdown+0x3c1/0x430, CPU#1: kworker/1:15/16082 [ 1059.314920][T16082] Modules linked in: [ 1059.319354][T16082] CPU: 1 UID: 0 PID: 16082 Comm: kworker/1:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.330690][T16082] Tainted: [L]=SOFTLOCKUP [ 1059.335457][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1059.345668][T16082] Workqueue: usb_hub_wq hub_event [ 1059.350757][T16082] RIP: 0010:dev_shutdown+0x3c1/0x430 [ 1059.356381][T16082] Code: 48 c7 c2 00 43 c7 8c be a3 00 00 00 48 c7 c7 00 48 c7 8c c6 05 f0 60 07 07 01 e8 3a cb 2f f8 e9 8f fd ff ff e8 50 1e 55 f8 90 <0f> 0b 90 e9 5f fe ff ff 4c 89 f7 e8 4f fa be f8 e9 6c fc ff ff 4c [ 1059.376380][T16082] RSP: 0018:ffffc9000575f410 EFLAGS: 00010283 [ 1059.382706][T16082] RAX: 000000000000f197 RBX: ffff88801ff0c4d0 RCX: ffffc9001a6c3000 [ 1059.392622][T16082] RDX: 0000000000100000 RSI: ffffffff8969e140 RDI: ffff88801ff0c5b0 [ 1059.400990][T16082] RBP: ffff88801ff0c000 R08: 0000000000000005 R09: 0000000000000000 [ 1059.409317][T16082] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801ff0c480 [ 1059.417473][T16082] R13: ffffed1003fe1803 R14: ffff88801ff0c4c8 R15: 0000000000000001 [ 1059.425555][T16082] FS: 0000000000000000(0000) GS:ffff8881249f1000(0000) knlGS:0000000000000000 [ 1059.434554][T16082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1059.441225][T16082] CR2: 00007fd5bfaa1f98 CR3: 000000006ab03000 CR4: 00000000003526f0 [ 1059.449354][T16082] Call Trace: [ 1059.452674][T16082] [ 1059.455721][T16082] unregister_netdevice_many_notify+0xb37/0x2590 [ 1059.462096][T16082] ? __lock_acquire+0x436/0x2890 [ 1059.467107][T16082] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1059.473887][T16082] ? __pfx___mutex_lock+0x10/0x10 [ 1059.478983][T16082] ? __netdev_printk+0x1ff/0x480 [ 1059.484017][T16082] unregister_netdevice_queue+0x305/0x3c0 [ 1059.489771][T16082] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1059.496030][T16082] ? rtnl_net_dev_lock+0x28/0x360 [ 1059.501057][T16082] ? rtnl_net_dev_lock+0x146/0x360 [ 1059.506196][T16082] ? rtnl_lock+0x9/0x20 [ 1059.510357][T16082] ? rtnl_net_dev_lock+0x146/0x360 [ 1059.515491][T16082] unregister_netdev+0x1f/0x60 [ 1059.520275][T16082] usbnet_disconnect+0x109/0x510 [ 1059.525253][T16082] usb_unbind_interface+0x1dd/0x9e0 [ 1059.530543][T16082] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 1059.536228][T16082] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1059.541973][T16082] device_remove+0x125/0x170 [ 1059.546719][T16082] device_release_driver_internal+0x44b/0x620 [ 1059.552801][T16082] bus_remove_device+0x22f/0x450 [ 1059.557779][T16082] device_del+0x396/0x9f0 [ 1059.562114][T16082] ? __pfx_device_del+0x10/0x10 [ 1059.567028][T16082] ? kobject_put+0x218/0x6f0 [ 1059.571646][T16082] usb_disable_device+0x355/0x820 [ 1059.576718][T16082] usb_disconnect+0x2e1/0x9e0 [ 1059.581434][T16082] hub_event+0x1d84/0x52f0 [ 1059.585905][T16082] ? __lock_acquire+0x436/0x2890 [ 1059.590894][T16082] ? do_raw_spin_unlock+0x172/0x230 [ 1059.596124][T16082] ? __pfx_hub_event+0x10/0x10 [ 1059.600919][T16082] ? assoc_array_insert+0x2e70/0x3970 [ 1059.606318][T16082] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1059.612135][T16082] ? rcu_is_watching+0x12/0xc0 [ 1059.616979][T16082] process_one_work+0x9ba/0x1b20 [ 1059.621926][T16082] ? __pfx_process_one_work+0x10/0x10 [ 1059.627493][T16082] ? assign_work+0x1a0/0x250 [ 1059.632099][T16082] worker_thread+0x6c8/0xf10 [ 1059.636711][T16082] ? __kthread_parkme+0x19e/0x250 [ 1059.641770][T16082] ? __pfx_worker_thread+0x10/0x10 [ 1059.646898][T16082] kthread+0x3c5/0x780 [ 1059.650983][T16082] ? __pfx_kthread+0x10/0x10 [ 1059.655585][T16082] ? rcu_is_watching+0x12/0xc0 [ 1059.660357][T16082] ? __pfx_kthread+0x10/0x10 [ 1059.664962][T16082] ret_from_fork+0x983/0xb10 [ 1059.669600][T16082] ? __pfx_ret_from_fork+0x10/0x10 [ 1059.674711][T16082] ? rcu_is_watching+0x12/0xc0 [ 1059.679484][T16082] ? __switch_to+0x7af/0x10d0 [ 1059.684173][T16082] ? __pfx_kthread+0x10/0x10 [ 1059.688810][T16082] ret_from_fork_asm+0x1a/0x30 [ 1059.693587][T16082] [ 1059.696637][T16082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1059.703893][T16082] CPU: 1 UID: 0 PID: 16082 Comm: kworker/1:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.714978][T16082] Tainted: [L]=SOFTLOCKUP [ 1059.719275][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1059.729303][T16082] Workqueue: usb_hub_wq hub_event [ 1059.734319][T16082] Call Trace: [ 1059.737572][T16082] [ 1059.740479][T16082] dump_stack_lvl+0x3d/0x1f0 [ 1059.745047][T16082] vpanic+0x640/0x6f0 [ 1059.749004][T16082] ? dev_shutdown+0x3c1/0x430 [ 1059.753678][T16082] panic+0xca/0xd0 [ 1059.757374][T16082] ? __pfx_panic+0x10/0x10 [ 1059.761772][T16082] check_panic_on_warn+0xab/0xb0 [ 1059.766687][T16082] __warn+0x108/0x3c0 [ 1059.770657][T16082] __report_bug+0x2a0/0x520 [ 1059.775134][T16082] ? dev_shutdown+0x3c1/0x430 [ 1059.779788][T16082] ? __pfx___report_bug+0x10/0x10 [ 1059.784800][T16082] ? __mutex_unlock_slowpath+0x2e7/0x790 [ 1059.790413][T16082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1059.796368][T16082] ? __pfx___schedule+0x10/0x10 [ 1059.801195][T16082] ? find_held_lock+0x2b/0x80 [ 1059.805850][T16082] ? dev_shutdown+0x3c1/0x430 [ 1059.810500][T16082] report_bug+0xb2/0x220 [ 1059.814731][T16082] ? dev_shutdown+0x3c1/0x430 [ 1059.819381][T16082] handle_bug+0x127/0x260 [ 1059.823685][T16082] exc_invalid_op+0x17/0x50 [ 1059.828170][T16082] asm_exc_invalid_op+0x1a/0x20 [ 1059.832995][T16082] RIP: 0010:dev_shutdown+0x3c1/0x430 [ 1059.838254][T16082] Code: 48 c7 c2 00 43 c7 8c be a3 00 00 00 48 c7 c7 00 48 c7 8c c6 05 f0 60 07 07 01 e8 3a cb 2f f8 e9 8f fd ff ff e8 50 1e 55 f8 90 <0f> 0b 90 e9 5f fe ff ff 4c 89 f7 e8 4f fa be f8 e9 6c fc ff ff 4c [ 1059.857832][T16082] RSP: 0018:ffffc9000575f410 EFLAGS: 00010283 [ 1059.863874][T16082] RAX: 000000000000f197 RBX: ffff88801ff0c4d0 RCX: ffffc9001a6c3000 [ 1059.871827][T16082] RDX: 0000000000100000 RSI: ffffffff8969e140 RDI: ffff88801ff0c5b0 [ 1059.879770][T16082] RBP: ffff88801ff0c000 R08: 0000000000000005 R09: 0000000000000000 [ 1059.887713][T16082] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801ff0c480 [ 1059.895670][T16082] R13: ffffed1003fe1803 R14: ffff88801ff0c4c8 R15: 0000000000000001 [ 1059.903706][T16082] ? dev_shutdown+0x3c0/0x430 [ 1059.908363][T16082] unregister_netdevice_many_notify+0xb37/0x2590 [ 1059.914672][T16082] ? __lock_acquire+0x436/0x2890 [ 1059.919583][T16082] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1059.926326][T16082] ? __pfx___mutex_lock+0x10/0x10 [ 1059.931347][T16082] ? __netdev_printk+0x1ff/0x480 [ 1059.936267][T16082] unregister_netdevice_queue+0x305/0x3c0 [ 1059.941963][T16082] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1059.948190][T16082] ? rtnl_net_dev_lock+0x28/0x360 [ 1059.953194][T16082] ? rtnl_net_dev_lock+0x146/0x360 [ 1059.958278][T16082] ? rtnl_lock+0x9/0x20 [ 1059.962408][T16082] ? rtnl_net_dev_lock+0x146/0x360 [ 1059.967491][T16082] unregister_netdev+0x1f/0x60 [ 1059.972230][T16082] usbnet_disconnect+0x109/0x510 [ 1059.977146][T16082] usb_unbind_interface+0x1dd/0x9e0 [ 1059.982316][T16082] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 1059.987925][T16082] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1059.993618][T16082] device_remove+0x125/0x170 [ 1059.998181][T16082] device_release_driver_internal+0x44b/0x620 [ 1060.004221][T16082] bus_remove_device+0x22f/0x450 [ 1060.009148][T16082] device_del+0x396/0x9f0 [ 1060.013450][T16082] ? __pfx_device_del+0x10/0x10 [ 1060.018271][T16082] ? kobject_put+0x218/0x6f0 [ 1060.022843][T16082] usb_disable_device+0x355/0x820 [ 1060.027857][T16082] usb_disconnect+0x2e1/0x9e0 [ 1060.032532][T16082] hub_event+0x1d84/0x52f0 [ 1060.036937][T16082] ? __lock_acquire+0x436/0x2890 [ 1060.041858][T16082] ? do_raw_spin_unlock+0x172/0x230 [ 1060.047031][T16082] ? __pfx_hub_event+0x10/0x10 [ 1060.051776][T16082] ? assoc_array_insert+0x2e70/0x3970 [ 1060.057123][T16082] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1060.062906][T16082] ? rcu_is_watching+0x12/0xc0 [ 1060.067647][T16082] process_one_work+0x9ba/0x1b20 [ 1060.072565][T16082] ? __pfx_process_one_work+0x10/0x10 [ 1060.077925][T16082] ? assign_work+0x1a0/0x250 [ 1060.082488][T16082] worker_thread+0x6c8/0xf10 [ 1060.087085][T16082] ? __kthread_parkme+0x19e/0x250 [ 1060.092097][T16082] ? __pfx_worker_thread+0x10/0x10 [ 1060.097197][T16082] kthread+0x3c5/0x780 [ 1060.101253][T16082] ? __pfx_kthread+0x10/0x10 [ 1060.105820][T16082] ? rcu_is_watching+0x12/0xc0 [ 1060.110593][T16082] ? __pfx_kthread+0x10/0x10 [ 1060.115173][T16082] ret_from_fork+0x983/0xb10 [ 1060.119757][T16082] ? __pfx_ret_from_fork+0x10/0x10 [ 1060.124848][T16082] ? rcu_is_watching+0x12/0xc0 [ 1060.129588][T16082] ? __switch_to+0x7af/0x10d0 [ 1060.134241][T16082] ? __pfx_kthread+0x10/0x10 [ 1060.138816][T16082] ret_from_fork_asm+0x1a/0x30 [ 1060.143570][T16082] [ 1060.146935][T16082] Kernel Offset: disabled [ 1060.151236][T16082] Rebooting in 86400 seconds..