last executing test programs: 15m25.425279593s ago: executing program 0 (id=233): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = syz_io_uring_setup(0x73de, &(0x7f0000000480)={0x0, 0xadd9, 0x400, 0x9, 0x201}, &(0x7f0000000580), &(0x7f0000000440)) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0xee00) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000f4ffffff02"], 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f00000030c0)=[{0x9, 0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/248, 0xf8}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/152, 0x98}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000003140)=""/237, 0xed}, {&(0x7f0000002580)=""/148, 0x94}], &(0x7f0000002700)=[0x4]}, {0x7, 0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002740)=""/132, 0x84}, {&(0x7f0000002800)=""/18, 0x12}, {&(0x7f0000002840)=""/131, 0x83}, {&(0x7f0000002900)=""/128, 0x80}, {&(0x7f0000002980)=""/187, 0xbb}, {&(0x7f0000002a40)=""/244, 0xf4}, {&(0x7f0000002b40)=""/105, 0x69}], &(0x7f0000002c40)=[0xc, 0x5]}, {0x3, 0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/39, 0x27}, {&(0x7f0000002cc0)=""/54, 0x36}, {&(0x7f0000002d00)=""/127, 0x7f}], &(0x7f0000002dc0)=[0x6]}, {0x5, 0x1, 0x0, &(0x7f0000003000)=[{&(0x7f0000002e00)=""/61, 0x3d}, {&(0x7f0000002e40)=""/2, 0x2}, {&(0x7f0000002e80)=""/10, 0xa}, {&(0x7f0000002ec0)=""/178, 0xb2}, {&(0x7f0000002f80)=""/91, 0x5b}], &(0x7f0000003080)=[0x8000000000000000, 0x7]}], 0x4) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)='Y') ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 15m25.261488413s ago: executing program 0 (id=235): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r1 = accept4$unix(r0, 0x0, &(0x7f0000000040), 0x80000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = msgget(0x2, 0x100) msgsnd(r3, &(0x7f0000000100)={0x2, "8c9e379196807ff955af7cd6e594f00086cc72196d5d78865d461bf86048c1085862159f402cb8ae761423a850e91b9bc7464d608e42b3a56935daed83a981db8580b7ca2fc599edf21946cb49abf0895a4886848c4f6d7026fce524a53eb0e79dffed16e08a8b8b20c6c3573eddfe776a6c0076dcff92197a9e9792fea4639776a79fc27ca35da093b21dc689502ab0f848993bd4256c365be00a499e862ad75d3bdfa74c6fc3ee36b7abad8da477b582d86939c473d978412c86b61b4e0784dce80f8ce90fd7598d8080e230b33cc1cb"}, 0xd9, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0xffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) (async) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f00000000c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x6}, 0xc) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x6, 0x8}, 0xc) r9 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0xffffe000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x1, 0xfe, &(0x7f00000003c0)=""/254, 0x0, 0x79, '\x00', 0x0, @fallback=0x32, r6, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0xaa55, 0x1}, 0x10, 0x0, r7, 0x7, &(0x7f0000000600)=[r8, r8, r10], &(0x7f0000000780)=[{0x4, 0x102, 0xa, 0x7}, {0x5, 0x3, 0x9}, {0x20000005, 0x3, 0x6, 0xc}, {0x3, 0x2, 0x8, 0x9}, {0x2, 0x1, 0x5, 0x2}, {0x4, 0x4, 0x0, 0x9}, {0x1, 0x4, 0x10, 0x2}], 0x10, 0x8}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000005c0)={'hsr0\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xff, 0x5, 0xa, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x7800, 0x8000, 0x9, 0xffff}}) recvfrom$packet(r7, &(0x7f0000000080)=""/43, 0x2b, 0x0, &(0x7f00000002c0)={0x11, 0xd, r11, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) (async) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, 0x0, 0xfe33) 15m25.140517723s ago: executing program 0 (id=236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 15m24.136619959s ago: executing program 0 (id=239): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfc, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x1c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') splice(r2, 0x0, r0, 0x0, 0x10000008ebc, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0) 15m20.593877927s ago: executing program 0 (id=257): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40089}, 0x8004) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) mkdir(0x0, 0x0) 15m18.974093108s ago: executing program 0 (id=261): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x749981, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000110029bd7000fcdbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="001c0000000000"], 0x34}}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4008084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00004b1000/0x3000)=nil, 0x3000}, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 15m18.691192188s ago: executing program 32 (id=261): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x749981, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000110029bd7000fcdbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="001c0000000000"], 0x34}}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4008084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00004b1000/0x3000)=nil, 0x3000}, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 12m42.840755242s ago: executing program 4 (id=827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c0043"], 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200028bd7000fbdbdf25140000000500e400000000000600b5002001000018001300e018b0922d8930e0e2860500e400010000000600ed002f0300000a00060008021100000100"/82], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 12m42.709052693s ago: executing program 4 (id=828): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="b40300001b0001002bbd7000fddbdf25ac1e0101000000000000000000000000ff0200000000000000000000000000014e2100054e210002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000004a030000000000000900000000000000080000000000000000a10700000000007f000000000000000500000000000000ce2c000000000000010000000000000003000000000000000000000000008001070000000000000000100000b66b6e0000010103000000009900000000000000ba0003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090030000402a393d4641a0fa49f6de84ac7fde40259f7557613100f04a58f2a1e3a3d7415651e14b4dcf9623afdc460a814a2acde2f593bbcc03fd2f6f70b211aa38a07de30d42e259ebfcf3cb48ed119788a6c7b6e789f9f80b06f7ac462d1dd81ebc872d119bd3f3ffa8316fa25bbb0ebd3cbe5b850000c10002007874732d6165732d6e656f6e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8030000f6b526cf38bdca7b9165dc7669ec157f28c2d1a45ac1eb499726ddb3fb78380cb8e028c9dd013b5405d42dd68ff1f8f3d9b314d01614e61c36a792c07e1b9f701f7590f773029f696410e7f1d30024f73831382f20ba472734343b63a9b1d6f647a4f9fe5097e2792549f5351663c00f6a97fe75eab316c99b000000050019003300000014000e00fc020000000000000000c55fd2c5b0aaf5a6fb00000000000014000d00ff0100000000000000000000000000014101120061656769733132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a807000000020000d06671cf31bd31c155a2df8cd17f4cdb2f3394c3aede35ca6c3a1b9866766a38cccc64d4532aded669fef618e0bbcfff6631bc13ee58e7de77d96ed982f466dcc8f03941e9fc5c3056199e295e062dade46134d72b2028de77ff43814a6b385fa374ea70f2933df8732ab12cca006fbbe32169f54fdb8f8e836e68b223b39b5bbe57f8f260a8d81e12000a1303d0cb737f5ed5c422ff37d75446a926bda0cefce1aee0bc0a741fa78fb5fb4c683d2bdc0b4f0e4a6dfc784650f50c0b463eecd30c960ed99a6ebc04fa7614d4f03477878d59f7af91fbf62c1c93dd900a79f55b06333916a9c3dd53ccd3226868c947ec21ba946c9dd26cb9cd83db000000c0df9179f12a5929c0afa93b1b7943e5e9c503610a601993709c6b8aee23d38df6054d83fe676380acb206c8aa94a6bca187e42464a331aa90c313cc37fd4944255a85b5056903d1d5e06bcfe2f48010fbb009c635e67d2d6e71292adaef328ff8e928ce6dab226c5cbc8e9a325a38d7b31cef60f894b9a896908749cd4c387a9ebcaed7b97175ac1a83beefc12b43624c90886708122112c507cb24249dd03a5ca4103b074d7f0892df3d32e142e86f0969fdcb3706d2db09969d54ad48"], 0x3b4}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x178}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r3}, {}, 0xfffffffc, 0x80000001}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 12m38.916907286s ago: executing program 4 (id=841): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0x6, 0x1ff0000000000000}) r6 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x400502) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000280)={r0, 0x1, 0x0, "ea0aa02128626b674fc3c3fc0e972f7ec2bfda4e25737d6b80cecc3581f61610c5c0b037d3e955e73a957a0190119b320944696de316704b73a9c87b7df7d504e58ccc2fc0a75f20853445e080ce11066153bf08a7b8e1697b010563fe6e61e6a044872fb3675378010c558f3806442b872492465f37e104b908596b70ef6abdc805328446f7c7c4b9b25ba5b64b656d2e5c7643e8816b0aea6abb7455e02933e434f1cb9223e0941bbcbe52621925c805bc4898f2e26c4877417a5c3f76617a9aea197ff489dd64c4"}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, 0x0, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r9, 0x0, 0x0) write$sndseq(r9, 0x0, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r10 = accept4(r7, 0x0, 0x0, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0xc0) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 12m37.110367217s ago: executing program 4 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = eventfd(0x0) io_setup(0x25dc, &(0x7f0000000040)=0x0) io_submit(r2, 0x35, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f0000000140)="20004075f40d00004b", 0x9, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x1000d, 0x0, 0x3, r1}]) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)='+\fER', 0x4) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000580)=""/174, 0xff56) 12m36.957085627s ago: executing program 4 (id=852): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000000)) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 12m36.422130801s ago: executing program 4 (id=854): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804", @ANYBLOB, @ANYRESDEC], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000005c9e5ff582b", "00001000", "f8694276f328ac2f"}, 0x28) sendmmsg$inet6(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x50}}], 0x2, 0x40) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r2, 0x8b24, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804", @ANYBLOB, @ANYRESDEC], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000005c9e5ff582b", "00001000", "f8694276f328ac2f"}, 0x28) (async) sendmmsg$inet6(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x50}}], 0x2, 0x40) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async) ioctl(r2, 0x8b24, &(0x7f0000000040)) (async) 12m35.76259134s ago: executing program 33 (id=854): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804", @ANYBLOB, @ANYRESDEC], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000005c9e5ff582b", "00001000", "f8694276f328ac2f"}, 0x28) sendmmsg$inet6(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x50}}], 0x2, 0x40) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r2, 0x8b24, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804", @ANYBLOB, @ANYRESDEC], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000005c9e5ff582b", "00001000", "f8694276f328ac2f"}, 0x28) (async) sendmmsg$inet6(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x50}}], 0x2, 0x40) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async) ioctl(r2, 0x8b24, &(0x7f0000000040)) (async) 2m3.478498143s ago: executing program 1 (id=3785): syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000400)={0x1e7, 0x2, 0x5}) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000010c0), 0x8080, 0x0) 2m3.476176565s ago: executing program 1 (id=3786): socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000600)=0x8, 0x5) 2m2.239051036s ago: executing program 1 (id=3791): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x43063026, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x2}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000001b80)=0xfffffff9) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x0, '\x00', @p_u16=0x0}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xd}, @printk={@x}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e5d795d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x55, 0x2a, 0x59, 0x20, 0x424, 0xc001, 0xaadf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x2, 0x94, 0x28, 0xb0, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x84, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0xc9, &(0x7f0000000440)={@remote, @dev, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x3, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0xa3, 0x0, @gue={{0x2}, "955492dbfcb4ec16cf5adb55fcf4ed7c5bb94ef26c4bf9ee89c6b4f855652d0488b18fd7f93e58892157c239fe460901a4d8188a160408ef416fae3783ec4a3f20d79f6aacc6528c1b35ba36b6e66ee160c870bed296d6f4e33dea244439a41cebf3df199f24040a0b3da12aab0482a9f9bf004bdc861a33428d3c7156ed0c50423eb13659d044ea9af46cb24e96a77f59d207"}}}}}}, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async, rerun: 32) fsopen(&(0x7f0000000000)='befs\x00', 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x2010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x43, &(0x7f00000000c0)=0x6) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) 1m59.704049515s ago: executing program 1 (id=3798): memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff110000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="c6ff0008"], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r4, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r4}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1m57.526495834s ago: executing program 1 (id=3802): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf3, 0x46, 0x7, 0x20, 0x458, 0x7003, 0xd919, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x74, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x37, 0x96, 0xc3}}]}}]}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/169, 0xa9) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f0000000180)=""/144, &(0x7f00000003c0)="912ca9f627451604e11748568df2560de773d6293cad404ec3a3621cae7798b25aedaf5c24978ab197eacf7fbc6e3deb0f3f6fb34bd5494f2c8d3c8521fd7f98111638f7a7295dfddd1bce25a3685be1ff1951032a4842a5f431d5003b544c239dd492eb2c05f27bc4968abc39cdcca10701171c6ab2ee75c0ecd50a91a154d930fd5e12f5c2fc23d6eb80ec4576de7e8614d37f547875901643a5533a5dff94ca5308b66f8d14d24601dc492b47509ed1fd82bded45dd6bccf32809595d4e3602f338e0d8f45a8184452a22c819ac432a0d3de892159f0719f5d5d31a572ec1ec75ad749d98199490456be3b85a96251be4805f6dbbc0df", &(0x7f00000004c0)="98b9bbda4aac2fc0f5f104d23ca2777d768c0697b7e454a4e5603eb069f95759758fc9504e387f818218c903abddd11724cd5498a53aab543a6ada49d389f932b35ab77112fd4af04f1d687394e91dd22220ba5ee2c5d7e4e893eb9c279c19114fed87ec257396980cb10d20d4a8754902ee7fb93a221aae1761f9bc547c475ea4717bb6d722c419ad61a50901ccf7d94a9d99d3c776f1434fae8d6ab2c6f095c73da06a0288411a4426d4ae9daee70430d6f881b8aef975c5f4a464de90f49b00e4ddb71d19293cd9ce7df3d1e6", 0xfffffffd, r8}, 0x38) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r9, 0x110, 0x3) connect$rxrpc(r9, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x70, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002020000202505a1a440000102030109025e0002010920fa090400000102cf9b0d1089b1c2e634fc2466938d0d00000724060001b4690524005c000d240f01090000000700ff017d06241a0300370905810300020500050904010000020dc800000904010102020d0000090582"], &(0x7f0000000840)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x9, 0x7f, 0xf6, 0x20, 0x7}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x429}}]}) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) 1m56.947443096s ago: executing program 1 (id=3806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) (async) r1 = socket(0x25, 0x80000, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket(0x21, 0x4, 0xbff) sendmmsg(r2, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000380)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) personality(0x400000d) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x294bc0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) (async) r4 = syz_io_uring_setup(0x332e, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, 0x0, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000bf584660d06f6b886708fe000073797a30000000000900030073797a31ebff0000"], 0x2c}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xfffffffd}], 0x0, 0x0, 0x0}) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) connect$l2tp6(r9, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 1m56.408399432s ago: executing program 34 (id=3806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) (async) r1 = socket(0x25, 0x80000, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket(0x21, 0x4, 0xbff) sendmmsg(r2, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000380)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) personality(0x400000d) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x294bc0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) (async) r4 = syz_io_uring_setup(0x332e, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, 0x0, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000bf584660d06f6b886708fe000073797a30000000000900030073797a31ebff0000"], 0x2c}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xfffffffd}], 0x0, 0x0, 0x0}) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) connect$l2tp6(r9, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 10.093257597s ago: executing program 7 (id=4261): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = io_uring_setup(0x1a30, &(0x7f0000000180)={0x0, 0xb833, 0x1000, 0x1, 0x154}) r7 = socket(0x2b, 0x1, 0x1) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, 0x0) close_range(r6, r7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r5, 0x24020000) 8.313867895s ago: executing program 7 (id=4267): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$l2tp(0x2, 0x2, 0x73) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0x5, 0xffffffff}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c9203, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x19, 0xfffffffffffffffd, &(0x7f0000000100)=0x2) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) setpriority(0x0, 0x0, 0x8) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 8.206728301s ago: executing program 7 (id=4269): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x358, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1f8, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x8, 0x80, @device_b, 0x0, 0x10001, 0x1}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x16, @random="f5cb85dd486f08bdac8ae96abe0e37dc30bf2e2048ba"}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x10, 0x9, @broadcast, 0xfff, 0x79443404, 0x6}}, @perr={0x84, 0x13b, {0x7a, 0x13, [{{0x0, 0x1}, @device_b, 0xb, @value=@broadcast, 0x33}, {{}, @broadcast, 0x0, @void, 0xc}, {{0x0, 0x1}, @broadcast, 0x800, @value=@device_b, 0x39}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x1a}, {{0x0, 0x1}, @broadcast, 0x800, @value, 0x18}, {{}, @device_b, 0xf, @void, 0x1c}, {{}, @broadcast, 0x0, @void, 0x36}, {{}, @device_a, 0x8, @void, 0x1b}, {{}, @device_b, 0x0, @void, 0x26}, {{}, @device_b, 0x9, @void, 0x1c}, {{0x0, 0x1}, @device_a, 0x200, @value, 0x36}, {{}, @broadcast, 0x8, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x5c77, @value=@broadcast, 0xc}, {{}, @device_a, 0x0, @void, 0x7}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_a, 0xfff, @value=@broadcast, 0x26}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0xb}]}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x7e, 0x8, 0x6, @device_a, 0x40, @value=@device_b, 0x67bc, 0x7, 0x5, [{{}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0xfff}, {{0x0, 0x0, 0x1}, @device_b, 0x98}, {{}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0x20a5}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x12a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @from_mac=@broadcast, {0x2, 0x8}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2, @default, 0x4081, @void, @val={0x1, 0x7, [{0x16, 0x1}, {0x24}, {0x18, 0x1}, {0xb}, {0x1b}, {0x9}, {0xc, 0x1}]}, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0xf, 0x6d, 0xb53, 0x1}}, @void, @val={0x5, 0x63, {0x90, 0x7f, 0x6, "e45bd7a36b3df7f35be418aa5279783c14aca9e90ee7c88afc460dfa61b1ab7c31f1d65768a65ab530abe79f5cc2c019e42b56267b119a50673ccefba694e51ee3fc3cdaa31e826151a2b4152add0ffee0911a8cf05d3b70d231ce8f74917771"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x6, 0x41}}, @val={0x76, 0x6, {0x10, 0x80, 0x0, 0x2}}, [{0xdd, 0x1d, "95f829bf5926973b3396b8b0287be6d93ede7b799c4a56a40ebc804987"}, {0xdd, 0x4b, "d1cc806280203ce137272d4a84875782f7df504ad478d6176cf6812b21cb2950ceae4582cb7dd2fa3d5ab61d7ebd825da7e66d74dbd554d9ef001446a18f650c707030456dfb7105effde1"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@link_id={0x65, 0x12, {@from_mac=@device_b}}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000300)={'syzkaller1\x00', {0x2, 0x4e24, @remote}}) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[]) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 6.254478508s ago: executing program 5 (id=4277): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x7fff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0xa4) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f0000000340)={0x0, 0x1, 0x2000200000a95c, 0xa, 0x6d, 0xfffffffffffffff9, 0x48cd, 0xfffffffffffffffc, 0xffffff15}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635000100000f300fc73766b9800000c00f326635000400000f30660f2f7c009aded21c000f380356960f011d66b9800000c00f326635010000000f3026d6dc08", 0x49}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) pipe2$9p(&(0x7f0000001900), 0x80880) rt_sigprocmask(0x0, &(0x7f00000004c0)={[0xfffffffffffe]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfde4) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r4, 0x1) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x120, 0x5802, 0x294, 0x0, 0x294, 0x258, 0x378, 0x378, 0x258, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0xd0, 0xf0, 0x52020000, {0x0, 0x600}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [0x0, 0x0, 0x0, 0xffffff00], [], 'gre0\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x9, 0x6, 0x6, 0x200, 0x7fff, 0xffffffff, 0x4800000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) sendmsg$inet(r5, 0x0, 0x4000000) syz_init_net_socket$ax25(0x3, 0x3, 0x8) syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x64081) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.054619392s ago: executing program 5 (id=4281): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100006ceb69409c240290ad5e0000000100000000090c00000000003c99fe92d9c00806dd8662874ac51fa8269665e3157d768a24d56b7861ce2dfdbf9df3fac186c4da7d7611a22d3bd8588a93f6646fb61c3ee392a4078295cb1aaffa2a1e4ce35ba29fbb5436b974f644e2e85ae7d02710a49d8ce90bbeb595dee3c229b03da2887d5d778c5134f2f58ef0a9408ad5b9771ab7989b37d0d00aeed60f1260d3671c76276fe07b4b25e604df38cfb4ed02a5d5aa9ea04ef7dbd006f11ee1ab95a9f6cabde91f62724afb84f170aa03310049fda7be0ba39d9645deb67e5f1499ccdd9ce05077bc6c724b3bc126986a9a00aed950db91a4b6c0ab1a1d5e10ba8e770e533e1bd70574913fc41a085aae8450fffe7e0ea07012297173130d8b3f5b1c7282e06084b2b4f49607d36bf72aecf123a9c67667e4be02be5d00d5165e4f8b39e6e23745fd91b2", @ANYRES16], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xfff7, 0x7, {0x801, 0x5d5}, {0xfffa, 0x82}, @period={0x5c, 0x2, 0x4, 0x1, 0x0, {0x4, 0xf, 0x78b, 0x7e}, 0x0, 0x0}}) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) lseek(r5, 0x8000000000000000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r6 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000000), 0x4) 5.231422203s ago: executing program 6 (id=4283): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = fanotify_init(0x200, 0x0) r6 = dup(r4) fanotify_mark(r5, 0x1, 0x48001059, r6, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r8, 0x0, 0xc19) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814) syz_usb_ep_write(r3, 0x5, 0xce, &(0x7f0000000040)="1f50a5eedca419ebc5aaf4f174bcacb5d9a2e12f66dc5aeb28aeb1334395e0287375e64fdf36807bcc6c4a33488ba81cd11ba5b22b96f0768d53fbebec126368ab3c787d52ec45e530fb46e04487f610387805a3dc5ee6e14959441730a11da32f0265cca1e1e6d619f656cbd12446bc5a38df693ef0d1134e68f1af6dc7195fd8aeb16b465d8883cdf011e792194cf0ce5db2ffa4ae8939708c5350ef3ef6093a83c6925502b36e28ed8dabd6b13bbc111475d98daf26f3b574e90a32d12f6f4739b65d86f8f0e510f59d5ba8e3") 5.034988631s ago: executing program 7 (id=4285): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) r1 = eventfd2(0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x3a) (async) sendfile(r8, r7, 0x0, 0x3a) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c884}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x971a2bbfb5f4c835, r1}]) (async) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x971a2bbfb5f4c835, r1}]) setresuid(0x0, 0xee00, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 4.582041567s ago: executing program 3 (id=4287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00'], 0x40, 0x4040800}}], 0x1, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100001040000f9ff1e000000000001b619f6ab47e98b56f30110dd3a129454abfab998395f561ab815249cfc486b28c6330a4538f48a8b890914f1ecdfb9990a6e336f53b5c3c5494ab662eb6cbdf1bb6fa6f3821fee669d30bfcb7a8f1836f4844d11ac074d417c", @ANYRES32=0x0, @ANYBLOB="4100000003090000140003006970766c616e31000000000000000000140012800b0001006970766c616e000004000280"], 0x48}}, 0x4020000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4081) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x6, 0x6, 0xcb18, 0x1080, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x7}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="20170c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 4.473100889s ago: executing program 7 (id=4288): r0 = getpgrp(0xffffffffffffffff) mprotect(&(0x7f0000b22000/0x3000)=nil, 0x3000, 0x100000f) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x5, 0x96, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) fanotify_init(0x200, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003eb0000000203ab"]}, 0x0) syz_usb_control_io(r2, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9a3fd103bf51f195"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000580)=0x5, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) socket$inet6(0xa, 0x80003, 0x6) 4.277062364s ago: executing program 5 (id=4289): open$dir(0x0, 0x480, 0x4) (async) r0 = open$dir(0x0, 0x480, 0x4) open_tree(r0, 0x0, 0x88800) (async) open_tree(r0, 0x0, 0x88800) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000019380)=ANY=[@ANYBLOB="14000000100001000000000000000000070000feff00030a0fdb00000020050900030073797a30000000000900010073797a31000000000400048008000000000000000000000100000100000000001dfcdd719272af8d10e32fe3167524bd00009fbefd118c25c6dcf3a9a49899ba89392eac933a96191e617f"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004091) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000100)={0xa, 0x4e1f, 0xd2, @mcast1, 0x800}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffe9e}, 0x20000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a0f854275ffe2d5b7bf53fd18ad956a85d847add8d3"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 3.753173476s ago: executing program 5 (id=4290): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x7, {0x7, 0x9, "7d916f4199"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000800)={0x1}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0300"], 0x1c}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x7, {0x7, 0x9, "7d916f4199"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000800)={0x1}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0300"], 0x1c}}, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) (async) 3.228478155s ago: executing program 2 (id=4291): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) socket$rxrpc(0x21, 0x2, 0x2) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0xf000000, 0x0, 0x0, 0x0, 0xe11, r1, 0x0, 0xf, 0x4, 0x0, 0x0, r1}]) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) (async) io_setup(0x3, &(0x7f0000000400)) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0xf000000, 0x0, 0x0, 0x0, 0xe11, r1, 0x0, 0xf, 0x4, 0x0, 0x0, r1}]) (async) 3.062516608s ago: executing program 2 (id=4292): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18090000000000043800181200005eee0000000000f2ff00000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) fsopen(0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) getdents64(r2, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 2.765554302s ago: executing program 6 (id=4293): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x20}}, 0x4000840) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) r4 = accept4$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @remote, @default, 0x0, [@null, @bcast, @remote, @rose, @bcast, @default]}, &(0x7f0000000200)=0x40, 0x80800) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000240)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x24db}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x801) setsockopt$rose(r4, 0x104, 0x0, &(0x7f0000000440)=0x1, 0x4) accept(r1, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000500)=0x80) connect$vsock_stream(r7, &(0x7f0000000540)={0x28, 0x0, 0x0, @hyper}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x144, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x6b}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xfd, 0x2a, [@perr={0x84, 0xef, {0x8, 0xf, [{{}, @device_b, 0x81, @void, 0x3}, {{0x0, 0x1}, @device_a, 0x704, @value=@broadcast, 0x3}, {{}, @broadcast, 0x49, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x6}, {{0x0, 0x1}, @device_a, 0xffffffff, @value=@broadcast, 0x3}, {{}, @device_a, 0xfffffff0, @void, 0x14}, {{0x0, 0x1}, @device_a, 0xffff, @value=@device_b, 0x25}, {{}, @device_b, 0x7, @void, 0xd}, {{0x0, 0x1}, @broadcast, 0xfffff870, @value=@broadcast, 0x39}, {{}, @device_a, 0x4, @void, 0x33}, {{}, @broadcast, 0x9, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x20}, {{0x0, 0x1}, @device_b, 0x42, @value=@broadcast, 0x1d}, {{}, @broadcast, 0xba9e, @void, 0x32}, {{}, @broadcast, 0x5, @void, 0x11}]}}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x14, 0xada}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000840)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x1, r10, 0x0, 0x8fca}) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x1, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x1) accept4(r1, &(0x7f0000000a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000a80)=0x80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r7) sendmsg$NL80211_CMD_SET_PMK(r11, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, r12, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7571d14b729b717e69c71d67bbaca8aa"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "c4838f969dc39583418e48376214288e"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "af8e33ee4d71baeffa340d96dc1072c1"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "257de9adf1561fdd86b811b7537db829"}]}, 0x84}, 0x1, 0x0, 0x0, 0x890}, 0x8805) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'vlan1\x00'}) r14 = shmget(0x0, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmat(r14, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmctl$SHM_UNLOCK(r14, 0xc) 2.580326765s ago: executing program 6 (id=4294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1c}}, 0x64000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1100, 0x3, 0x1}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_restrict_self(r4, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x7}, {0xfffe, 0xffff}}}, 0x24}}, 0x8004) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.547632805s ago: executing program 5 (id=4295): syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b113427ea9741b02030109028f000105030003e0500add0904f6040306a400080905"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) 1.97844231s ago: executing program 6 (id=4296): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ef42bf4039261200b56501020301090212000100000000090401"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x60, 0xb8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x3c, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0xd91}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x8, 0xb6}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x40, 0xe7, 0x40, 0xff, 0xee}, 0x18, &(0x7f0000000080)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0xc0, 0x1, 0x5, 0x0, 0x5, [0x3f0f]}, @ptm_cap={0x3}]}, 0x7, [{0x26, &(0x7f00000000c0)=@string={0x26, 0x3, "87a6e01bca1715cc79455de5c65adea461f630c5cea8c7bb274372c547ec1bf521307e9b"}}, {0x93, &(0x7f0000000100)=@string={0x93, 0x3, "d0286b4c11c7797953c30c32e7fa9cb89e2152a86c3824fb876d7fb58ce1d22ecd84ba0669dbfa2acab4c708ce10a9f0f019c4641bef798b87b918ff90f467b38b12f55f6eb6aa50d32a2fd4c212478949d785603b125a18a9c1b60cd5c49d64115b2e494ea94e4b4e43b1117cfc81a43db5f75de24c6b61ea180dfd53f1d7c6528c886ed6a0aa979f67c922a847330372"}}, {0xbd, &(0x7f00000001c0)=@string={0xbd, 0x3, "836ec6093fc195d80fb3011db43c5402f60e619e5ed6954cef2bbf35c5b2832449ae685682a8983b9d999aca8bc418935cfd92df274a77c9d5ea2e45dd48d2d2cef35af8fe8509bdec557c3e2b288ad90f23b6ec45d0dae3d6de036cc829db49d89c803d4df6f5205c9ac2390a19b277b4d31d6d3c49cafaf87ca5ad94751ddf33dceb26915e5888341b1f8faea81da649120e5258e88990161ba96e5a234c1e615dd4f844b442f65bd860e4fe521a973800b6f5e0ff6fcced0813"}}, {0xeb, &(0x7f0000000280)=@string={0xeb, 0x3, "b354511d4f6cf1a0ebe035b7eaf2918281d6e3475cc18b0090d183453760ef061ab81aac846f737f436121cc11d9f28532172ddcfb2b55a36faed8c45e075a25266e2ca2ec10d291f242027566774f5dad111321b6a3808e5b99dc14fde539b64a4e94ffd5a9590f100ae59b88a7e63d1737f4e4d684015b937026fea8ad71216c0056b433b1259e489ecafa915ca11071b4e4ac3df3de5eb55f79efb0b9d203c9cf2c6710c78777cef1ed3925c302ec07c0962b633782f1a648536a77d144922626cb776d976a431c2579f3c050fe5ae6fca13f1d381bf9815abc1eaeb9411a2eeff2291c6ffe5609"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}, {0x32, &(0x7f00000003c0)=@string={0x32, 0x3, "c7ec7cfd1e9f4a252cea6d10b9697e520c5d52e5a6bd307e240927d19207175e5037668d598a028860562ab67e084462"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}]}) 1.79568742s ago: executing program 2 (id=4297): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="8a34b927ede34c12ee808c02c21e529df4da673389248e39bd90592f432af7456eaa4c8a6060cfe0323a0fe7bb6afc3e46b5ebed0d263ab86e63fecba3fe575070", 0x41) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15247423360608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000016c0)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'nq\x00', 0x2, 0xa, 0x5}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r4 = socket(0x9, 0xa, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000fec000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/241) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) sendmmsg(r4, &(0x7f0000000080), 0x0, 0x4800) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000dc0), &(0x7f0000000e00)=0x8) accept4$inet6(r4, 0x0, &(0x7f0000000500), 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r7, 0xc}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001640)={0x0, 0x1b, "17050096895359e8fbb362fd090000000000000000420000000000"}, &(0x7f0000001680)=0x23) 1.739982402s ago: executing program 2 (id=4298): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x87}}, './file0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) 1.398220914s ago: executing program 7 (id=4299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000005600050a00000000fddbdf250a0000008b000200256223c3f17fd8d6b41f52c9beb5ba49156e72b6ec6d9fa27f0b2a62eada4ece27b16dc74fa06c4926ff40adb88bcab94006d1f9e84c23345095ed185c12cb0131b3d9653b16ab4ec808580f6aa4f23be37184f11b75cc49c6e29338433dc085c33d886679017d7f22f6452e04317684528686b8ad9f88cc029c9aa03fe31dd18c07668f12075f00"], 0xa0}, 0x1, 0x0, 0x0, 0x884}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) write$P9_RSTAT(r2, &(0x7f00000000c0)={0xa0, 0x7d, 0x5, {0x0, 0xe1, 0xff, 0x3, {0x20, 0x1, 0x5}, 0x4000000, 0x3, 0x6, 0x5, 0x2, ']$', 0x2, '${', 0x62, '\a\x86!\xdc#]\x1e\xcfU\xf7\xae\x04\xfc\xa7\xc2h\xd0\xa7\xb6\xe3\x01\xf4\xbb\xa67\x00&]\x91\xf0\xad\xb2\xef?\xfd\x8fN\xe0\xe1\x91Dn\xe5x\xfd4\xe6\xf1j\xc89G%e9\xb0\xfbr\xde\r!g,\xd4?\xd8\x17\x8f\xbfgw\xfdx%j\xc7^y\xb3\xf8s\x11\x94\xaa\xbc\xab\xeb\x11(\a\xae\xe7Px\xd2,W\xa7'}}, 0xa0) syz_usb_control_io(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="170a29bd7000fedb000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xffffffff, 0x7fffffff, 0x84e1, 0x2f, 0x2007, 0x7, 0x5, 0xffe, 0x20000001, 0x1, 0x8500, 0x1003, 0x4, 0xffff, 0x10002, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0xf, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x4, 0x4, 0x8049]}) r5 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x29, 0xce, 0x0, &(0x7f0000000380)) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 1.313727846s ago: executing program 3 (id=4300): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000003c0), &(0x7f0000000640)=0x0, &(0x7f0000000680)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0xba01}, 0x8040) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file1\x00'}) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r5, 0x0) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffd) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (rerun: 32) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r6, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00012cbd7000fddbdf0057ba1908dfab24dc850c0475aafb7d603f5a10745d6ee17c0110554c54f6f0cae44be81874ac6c03391b637ed2d7680492d8b20a16dfac46e30b2c9f02771e21c314b843c9c612bdceee8c6af20629791ce466f3bccc7b11fdfca7d15d6db15e53ecd479159789b6c8"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca307000000be52163448412ba8", 0x10}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7", 0x7b}, {&(0x7f0000000480)="cc4b0fa1a0b8e2434e2ad29eae80c1042af3a6aeafe2a176af3861c0ea4c4ddd57ca2de0e64ac5045b71f0a51316966b91bc882be3b73d8ea10821891274cf53318543dece71a831f78f15caf6f1ca7e60e825b8ffeaedba3140609cc0a0e73d5184df3c1e6074d3891397da69e2e681f83a10e155650f7bd7e7fe1d48d1cda41957048279", 0x85}], 0x5, 0x0, 0x0, 0x81}], 0x1, 0x4040800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/231, 0xe7}], 0x2}, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) getuid() 1.205176843s ago: executing program 3 (id=4301): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x244, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x208, 0x2, [@TCA_BPF_ACT={0x124, 0x1, [@m_gact={0x120, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0xd9, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c995030329bc7513206fbbbaff80269acd40d48bee53c5d29ae26ac4f4be644348ff30d97b9cb02360266994fa3a862b1418bc3eaede1bb9463c1926a947cf619ae9e30d95e4fafecf091aba5ad491096d09ff089a4344e72ae7c5fcb84862d7cba26dd8f3a4c326a5596ea8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc8, 0x1, [@m_tunnel_key={0x78, 0x5, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}]}, {0xd, 0x6, "67a638128ad3f52f2e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x4c, 0xc05, 0x0, 0x0, {{0xd}, {0x4}, {0x19, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.118308014s ago: executing program 3 (id=4302): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="996e26044d4c0700540812800800010068737245334be8b37ea3bcf39c12c656f5f516d09fead22c66a22c2d6645c1daeaba234df36277b6181944ce32905582daac1ac71d0d2f9afeddab4c4e799c"], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.111644453s ago: executing program 3 (id=4303): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) fcntl$getflags(0xffffffffffffffff, 0x1) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0xfffffe04, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$snddsp(&(0x7f0000744000/0x2000)=nil, 0x2000, 0x4, 0x1050, 0xffffffffffffffff, 0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000040), 0x70000000000, 0x400) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 835.387389ms ago: executing program 3 (id=4304): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_usb_connect$cdc_ncm(0x3, 0xa7, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0xbd, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ff"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x800, 0xe2, 0x21}, {0x6, 0x24, 0x1a, 0x7, 0x33}, [@mdlm_detail={0x38, 0x24, 0x13, 0x6, "5d609c2b82d42f440054436feadb99418243e835fa96b2c0f13ffc7cc1a8d36adb2304064bb383dff5ea053a89dd5abf554db290"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x7b, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x0, 0x9}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x4, 0x4, 0x8, 0x8, 0xe}, 0x60, &(0x7f0000000200)={0x5, 0xf, 0x60, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf, 0x80, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x3c, "cc76baf46558b37178cff1eb20e83f2e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x7, 0x4, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0xf2, 0x3, 0xe, 0x0, 0x10, [0x30, 0x0, 0xff60cf]}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x3, 0xf007, 0x6, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x1, 0x57, 0x5, 0x2}]}, 0x4, [{0xda, &(0x7f00000009c0)=ANY=[@ANYBLOB="da03137164d5fb17c9dd6fe36803bf727854fedeebb08e55dfdee7931e2ff72ce2bd30b4caf995eddff5971f7c806b96f207990897daf2913d3446941d7a0855fd9f486ab5162a321d1772426e5747f33bdcabae79a234771df9c86ac94e6caeb68a79cf4bb45f9f1bf27862bca5753f2381d0e455f255ebf5fb6928293bd44c8ae53229f6b6e40b2df1a9c8010c9e107154a79af3fffc6e2c92b4a1c7616635f0a04a1fbd05f37c63f59f3131bad420ca90067254f51fd06578f4594cb9d43c5899970e91b38cdb2809033b7c9a9e38de0a4abca822fb926f532a84ffffffff0000"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x44b}}, {0xd0, &(0x7f0000000380)=@string={0xd0, 0x3, "adb3771b7e87a1be67d532b949980ba8cdab1a4b5f67b421581ae2e48b2327d40dad58a4e582881731071df1d8463a906124f48371746562be509c20e69788a24772adaf752be5b00727996330c79794b48c56b403f2395927edcaa776bca8f4dea1e68bce2a2006c9e0db4d7ca13edf22d1d5c486ff5236b264fecaea9bd91f1a44d41747b41b10dba24974b0244f5d5e23b611850dbfd518352f0106a01970ff06a829c9305868b3f5fb02d796a4a8d6751a0462d3a06d370effc3296bbaa7195443788538f823936b872c480d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x40, 0x23, 0xd2, {0xd2, 0x33, "73d49023a6259dc97f0f504745fa518974c3083f80e0cb36157ca077102a061e015528ae5a8d35925867e747b4916ccb15f0f2566e3ff1f7bdb4d374db57715af777bef2cdbf970e8fbb5565d94548f1ebbbde9f2a9ca5b04f77e49fefe01d060c333f7773d695972d56515b7905550ba8340a58be4bd01a646fa6514637d3e534f07122ea32dcc7c8b7b5b043f7cded8d636e359eb62370433f9ab80a4ad22af7259bae2f0b99a6006bc8a1903ce2a3f17aa52a6c0a3dc9eea3bd93785403477234e56f93e61312751904fbf0cab1f6"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0x14, 0x92, "0ae5c42985298222d6517ab5bca904854388d2de74a5f808fc9b63299e3236e1818b50b9479d735053abf76335d73abe1b74c4bf5e7655cf1b53ad8b3d7a01adecfb5175d0a74ff23473d0d3179de53cbcbbbfc8b78fe3400d80b2156cdbc417870bfd47abc67739cff76911a9f34441cf65b34330932f25582e7584cad2489a9cde117029e1afdf79410dcb67915266fb9c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0xbdd, 0x9, 0x1, 0x1, 0x5, 0x8, 0x3, 0x0, 0x2, 0x3, 0x3, 0x5}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x8001}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) 710.246636ms ago: executing program 6 (id=4305): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfe1e, 0x0, 0x1, 0xb5}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xffff3759, 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x2d0842, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r4, 0x0) 646.597522ms ago: executing program 5 (id=4306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xdb, &(0x7f0000000380)=""/219, 0x41000}, 0x94) io_setup(0x81, &(0x7f0000001440)=0x0) r3 = syz_io_uring_setup(0x465a, &(0x7f00000000c0)={0x0, 0x4, 0x13090, 0x10005, 0x800002}, &(0x7f0000000400), &(0x7f0000000080)) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 154.214208ms ago: executing program 2 (id=4307): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x652f8c3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21c858df}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47aa9446}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a2e20f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6657f94b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d40a831}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d7fd9ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000020}, 0x80) (async, rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) (rerun: 32) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x40000) (async, rerun: 64) write$char_usb(0xffffffffffffffff, &(0x7f0000000480)="e4b0d81fae977050222856e27a6944695f74c46d5f8cb3884f989f244eaea3d9d0be549a143032fe3cd790cceb50147d24134c5223d6992d3cbf9794d69a4e3ecac9cc474fc8eeba382250016399ec280f63c8457b963bccd4d0b5d3d2c6caa6eb99331e40c8e1aaf9805f4578ae", 0x6e) (async, rerun: 64) r5 = socket$kcm(0x29, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b40)={'ip6_vti0\x00', &(0x7f0000001ac0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x0, 0x5, 0x2, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x20, 0x7800, 0x2, 0x8}}) sendmsg$inet(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000500)="27012495", 0x4}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="caafd1f5a16c814595a59d305afb804fe1e0a0bb1bb27fbd319bb66c0805368ecec0b138445bd2d270642e99f0eff2b843649c599403d116f31bf70a640d2b61a549ca59827e15a38a7338f1729fd843f228dffb1e4c5e78fa8e5ad8e8f7ea9734ef509f3d5809b777bb3fabc5dda5860063038620413f35d792054b1229c5fa7b67283370d49d199869d69fef7d3414d1c3297e951c80cdb0c071776593010fd82be5bacc9524a496e8dd6a2097d0889d42ad961f05e4f33f8819", 0xbb}, {&(0x7f0000001600)="c6f9fe59ad17aa63ac837d0e33c8b78a5b90f0df7cd488050db34cb5cf110ba6335e2fd69de5388d0cbaa5df53104f839c618d7b2dcd75394b4981dfb129384c83f41f421b203710568438f9b62e8b72a70540ef76ed01b55d4ede0fd8283f30c8970278426aad62fdf69f876db208d3b4f2f66b171def63e3197ded0851d9286a9b28d7a8c4561afd693ad1b2d45c9d7b32a8924c865af99edbd88ce0e9af9de3a1bc5d47acd91a33f7ba4eba716520a36162245d0e89ab259a0b013a1c8648f9d297fe643b47592decdaa051e5b057861c1b88aea48fadaca910a05cd01c47c5716492e5", 0xe5}, {&(0x7f0000001700)="756862ee6d4cccbdd710d5adcc993f9c2ea4b66062fc16d3d0e3dc419f1636bcd93c8852891443af97e49e65", 0x2c}, {&(0x7f0000001740)="9c5b22fc216ad8fc7d0c3e8ef32c58a837deee50ab380201e03a3e48c78324db3f6e3b16c2dbd30bbffcdeca2eb28906ccf0f6f528ef27bf1b615bdc7f0ed03da1ff27aa3198207d58ed1e9593dfa010a35155879a256de85f3c0ad3dae4035a086215edeff00769e1e05b8953b885352d9279723a286abbd2ed12af838bd15ffe962130abd19abba15945e17a88edf2dc3f348176bd3ae42fedc4815c19625f59d8659270bbc2769baf7122145da2695c7d96fe3a9a2a0b79013c363458f93e186f2107d1aab6f2dcb92c66e6e13022a45036", 0xd3}, {&(0x7f0000001840)="ce70f48bb79a438e03cfdba570f7bdc75543b6550cff264c09f24854a65ff60b28d9bc5ad047e0c7bf5876f2b1ce8e9d9c3d09a9124bc6991d1671b6f38bd3c159563091de01b872c27529048eafc1229e9503ef136a2e8150baffe40423f32cfb6bdb489a2078c5d28eebc02f7f0fd0980c861560b58a96b833ea257c35def950aad9e8defd126767a61d569e0a56ac3013", 0x92}, {&(0x7f0000001900)="e170c01c9166c307f54100408a05436dd7b7202dbe80771358236460b63fc60c54caa4c2e2b583cf1ae6da5c0d62a79935586789a2502b1d43599ffd6badc7ef3dc4c7c7c55d4f77ec0022c4962b8ea5dd39324d064d75fa83078b745376142914dff9ae143c81a9f3baa5", 0x6b}, {&(0x7f0000001980)="0e61beb26d3c2ac17f29c3fd32426c53964714e1ef681e02d35fbfb12e2c75e718b8305d34d6b418e35fa79a129171d38ef2cfac1b0e188662cc5120744ef3c425c59af96b28cbc21ac694e8a3dda11ba2f571e73af0eeea91677d1c0eee5b6c13c5c036c7c0ece8a49a6486f042", 0x6e}], 0x9, &(0x7f0000001b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x15bd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x80, 0x0, 0x7, {[@end, @generic={0x86, 0x8, "b7f5cdb71777"}, @timestamp={0x44, 0x18, 0x3a, 0x0, 0x0, [0x0, 0x2, 0x200, 0xb48, 0xffff0001]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x8, "2c14f8782cf4"}, @timestamp_prespec={0x44, 0x1c, 0x46, 0x3, 0x1, [{@rand_addr=0x64010100, 0x2}, {@remote, 0x7}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x78, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0xd9e}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xe2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x100}, 0x4) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) write$char_usb(r7, &(0x7f0000001cc0)="ccf6cc80e747220486625cce11badef67c0ce057aa91774f2d221bcfcc895e120cfa03b0319ed97f4f937c9f968392b008659adaa41b13990c8a3d5987922f687f671e9291e9e45fcf19c37de8f2ab1f0b9a0c28850c4cdc8e5062930f307a78982f2162c34f46e84843d042b04387395a3f7ea4c4394955dc6bf50aac116e5566f23e0ad156ca3673ffda05eba72c32e924b617941f9c24a420d6b995a9329b2442032ad5390eb03e19b855504d45bc35426923676975e71e2868090d9ff3193a5372e8", 0xc4) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000001dc0)={{r5}, "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"}) (async, rerun: 32) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002dc0), 0x180c3, 0x0) (rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080801}, 0x20000051) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002f80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002fc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x38, r12, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}}, 0x40) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000003100), r9) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000003300)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000032c0)={&(0x7f0000003140)={0x15c, r14, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendto$inet6(r8, &(0x7f0000003340)="948f92f5338721b8ffc4690ac0d0925320de6f63f8564f0ba4f65bed9145c3512eb40827a38b4b52b3ae7ca5201a926e5ba14844bdfb5fee87dee252", 0x3c, 0x20044804, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000003380)={0x0, 0xb}, &(0x7f00000033c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000003400)={r15, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000034c0), 0x3) 60.344385ms ago: executing program 2 (id=4308): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80001, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$inet_mreqn(r2, 0x88, 0x66, 0x0, &(0x7f0000000d00)) getsockopt$bt_hci(r1, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,{`b,\xfe\x1d\x1e\xd02\x04\xd3\xca\x80R\xf8@\xcd\xca\xfa\x9aI\b\x00VR\xf3\xde\xcfJ R\x1e\x86\x9b\xae\xfcD\xf3\x85\xf5\xc4\xe0\xab\xab%\xe2\xc7\xf2\x14\xd9\x1f?N\x00\x00\x80wr\xa7\xc3,=\x86\xd9\x7f\x9c@\xacP\xc8<\x7f\x1e\xeb\xe5Kz\x83\xfe\x94x\x16\xf3i\xdd\x05\xca\x86\xff\xab\x89\x8e\xfc\x90H0sE\x970\xa4\x85yq\b\xa3\r\xc4\x19\x1f\xaf=\xec\xa14\xc8C\xa8\x9c\xa5\x8c]Zu/\xae\xdei\xef*5\xe0\x14a\\J.v\t\x80g\xd2.\xe5\'\'\xf4\x1c;Y\x97\xdf>\xaf\xbd\x14\xe0\a'}, 0x30) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r3) (async) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={0x0}) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="619d", 0x2}], 0x1}}], 0x2, 0xc040) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42}}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002680)='uH', 0x2}], 0x1}}], 0x1, 0x20000880) 0s ago: executing program 6 (id=4309): r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'gre0\x00'}}, 0x1e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x8910, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x84, 0x12, "bb40af0000800000000400"}) r5 = dup(r3) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}}, 0x1e) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x4a, 0x34, 0x556, 0x3, 0xfffffffffffffc01, 0x7, 0x40, 0xb453, 0x1, 0x0, 0x100000000, 0x9, 0xa8d6, 0xfffffffffffffffa, 0xf68b, 0xfffffffffffffffa], 0x1000, 0x100}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800100b, r6, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r8, 0x0, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "e0e5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) fsopen(&(0x7f0000000000)='omfs\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'gre0\x00'}}, 0x1e) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) (async) ioctl$TCSETS(r4, 0x8910, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x84, 0x12, "bb40af0000800000000400"}) (async) dup(r3) (async) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}}, 0x1e) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x4a, 0x34, 0x556, 0x3, 0xfffffffffffffc01, 0x7, 0x40, 0xb453, 0x1, 0x0, 0x100000000, 0x9, 0xa8d6, 0xfffffffffffffffa, 0xf68b, 0xfffffffffffffffa], 0x1000, 0x100}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r7, 0x1, 0x4800100b, r6, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) (async) sendfile(r6, r8, 0x0, 0x4) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "e0e5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) (async) kernel console output (not intermixed with test programs): address 0x3B, changing to 0xB [ 939.735641][T21422] veth1_vlan: entered promiscuous mode [ 939.746293][T19816] usb 6-1: config 6 interface 131 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 939.759862][T19816] usb 6-1: config 6 interface 131 altsetting 2 has an endpoint descriptor with address 0x48, changing to 0x8 [ 939.772020][T19816] usb 6-1: config 6 interface 131 altsetting 2 endpoint 0x8 has an invalid bInterval 252, changing to 11 [ 939.777934][T21422] veth0_macvtap: entered promiscuous mode [ 939.789083][T19816] usb 6-1: config 6 interface 131 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 939.793264][T21422] veth1_macvtap: entered promiscuous mode [ 939.807996][T19816] usb 6-1: config 6 interface 131 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 939.822830][T19816] usb 6-1: config 6 interface 131 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 939.833633][ T976] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 939.834957][T21422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.841495][T19816] usb 6-1: config 6 interface 131 altsetting 2 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 939.853824][T21422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.862177][T19816] usb 6-1: config 6 interface 182 has no altsetting 0 [ 939.876055][T19816] usb 6-1: config 6 interface 206 has no altsetting 0 [ 939.877143][ T6137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.884387][T16060] Bluetooth: hci0: command tx timeout [ 939.897669][ T976] usb 4-1: device descriptor read/8, error -71 [ 939.907157][T19816] usb 6-1: config 6 interface 214 has no altsetting 0 [ 939.908246][ T6137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.919477][T19816] usb 6-1: config 6 interface 131 has no altsetting 0 [ 939.924236][ T6137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.938675][ T1307] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.000453][T19816] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=ab.ed [ 940.020570][T19816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.028548][T19816] usb 6-1: Product: 肬 [ 940.042393][T19816] usb 6-1: Manufacturer: à°„ [ 940.047153][T19816] usb 6-1: SerialNumber: syz [ 940.055803][ T6253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.069033][ T6253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.123464][ T6253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.133071][ T6253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.144230][ T976] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 940.170521][ T976] usb 4-1: device descriptor read/8, error -71 [ 941.014129][ T976] usb usb4-port1: unable to enumerate USB device [ 941.072947][T17513] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 941.074348][T19816] smsc95xx v2.0.0 [ 941.085570][T19816] smsc95xx 6-1:6.2 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 941.096394][T19816] smsc95xx 6-1:6.2: probe with driver smsc95xx failed with error -22 [ 941.119568][T19816] smsc95xx v2.0.0 [ 941.123626][T19816] smsc95xx 6-1:6.182 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 941.134569][T19816] smsc95xx 6-1:6.182: probe with driver smsc95xx failed with error -22 [ 941.146584][T19816] smsc95xx v2.0.0 [ 941.150693][T19816] smsc95xx 6-1:6.206 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 941.161169][T19816] smsc95xx 6-1:6.206: probe with driver smsc95xx failed with error -22 [ 941.185277][T19816] smsc95xx v2.0.0 [ 941.189501][T19816] smsc95xx 6-1:6.214 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 941.201999][T19816] smsc95xx 6-1:6.214: probe with driver smsc95xx failed with error -22 [ 941.215169][T19816] smsc95xx v2.0.0 [ 941.218824][T19816] smsc95xx 6-1:6.131 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 941.230456][T19816] smsc95xx 6-1:6.131: probe with driver smsc95xx failed with error -22 [ 941.246901][T19816] usb 6-1: USB disconnect, device number 50 [ 941.260762][T17513] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 941.271103][T17513] usb 3-1: config 7 has no interface number 0 [ 941.277172][T17513] usb 3-1: config 7 interface 192 has no altsetting 0 [ 941.286243][T17513] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 941.295982][T17513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.304601][T17513] usb 3-1: Product: syz [ 941.308858][T17513] usb 3-1: Manufacturer: syz [ 941.313965][T17513] usb 3-1: SerialNumber: syz [ 941.490586][T21558] overlayfs: failed to clone upperpath [ 941.537157][T17513] usb 3-1: USB disconnect, device number 111 [ 941.939399][T19816] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 941.959571][T16060] Bluetooth: hci0: command tx timeout [ 942.089369][T19816] usb 6-1: Using ep0 maxpacket: 32 [ 942.131891][T19816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.142756][T19816] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA [ 942.154518][T19816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 942.165658][T19816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 942.175767][T19816] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.218379][T19816] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 942.232317][T19816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.241217][T19816] usb 6-1: Product: syz [ 942.245383][T19816] usb 6-1: Manufacturer: syz [ 942.245442][T21584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21584 comm=syz.2.3836 [ 942.250325][T19816] usb 6-1: SerialNumber: syz [ 942.276240][T19816] usb 6-1: config 0 descriptor?? [ 942.297670][T19816] ati_remote 6-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 942.514379][T19816] usb 6-1: USB disconnect, device number 51 [ 942.599454][T17513] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 943.211242][T17513] usb 3-1: Using ep0 maxpacket: 16 [ 943.220023][T17513] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 943.229839][T17513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.249685][T17513] usb 3-1: Product: syz [ 943.253854][T17513] usb 3-1: Manufacturer: syz [ 943.258440][T17513] usb 3-1: SerialNumber: syz [ 943.280381][T17513] usb 3-1: config 0 descriptor?? [ 943.287951][T17513] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 943.356974][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 943.356992][ T30] audit: type=1400 audit(943.334:2381): avc: denied { bind } for pid=21608 comm="syz.3.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 944.009200][T17513] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 944.105165][T21617] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3844'. [ 944.142784][T21617] lo speed is unknown, defaulting to 1000 [ 944.490611][T21621] NFSD: Failed to start, no listeners configured. [ 944.713507][T21626] NFSD: Failed to start, no listeners configured. [ 945.443270][T21644] FAULT_INJECTION: forcing a failure. [ 945.443270][T21644] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 945.500217][T21644] CPU: 1 UID: 0 PID: 21644 Comm: syz.5.3848 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.500246][T21644] Tainted: [L]=SOFTLOCKUP [ 945.500253][T21644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.500263][T21644] Call Trace: [ 945.500268][T21644] [ 945.500276][T21644] dump_stack_lvl+0x16c/0x1f0 [ 945.500302][T21644] should_fail_ex+0x512/0x640 [ 945.500332][T21644] _copy_from_user+0x2e/0xd0 [ 945.500359][T21644] get_bitmap+0xdf/0x1a0 [ 945.500381][T21644] get_nodes+0x1df/0x210 [ 945.500400][T21644] ? __pfx_get_nodes+0x10/0x10 [ 945.500412][T21644] ? __fget_files+0x20e/0x3c0 [ 945.500432][T21644] kernel_set_mempolicy+0x129/0x1e0 [ 945.500447][T21644] ? ksys_write+0x1ac/0x250 [ 945.500460][T21644] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 945.500479][T21644] do_syscall_64+0xcd/0xf80 [ 945.500495][T21644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.500508][T21644] RIP: 0033:0x7f2fae18f749 [ 945.500517][T21644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.500528][T21644] RSP: 002b:00007f2faf0a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 945.500540][T21644] RAX: ffffffffffffffda RBX: 00007f2fae3e6180 RCX: 00007f2fae18f749 [ 945.500547][T21644] RDX: 0000000000000005 RSI: 0000200000000600 RDI: 0000000000000001 [ 945.500553][T21644] RBP: 00007f2faf0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 945.500560][T21644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.500567][T21644] R13: 00007f2fae3e6218 R14: 00007f2fae3e6180 R15: 00007ffe4db4c528 [ 945.500581][T21644] [ 946.216348][T21605] usb 3-1: USB disconnect, device number 112 [ 947.156080][T21678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3856'. [ 947.171176][T21678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3856'. [ 947.369429][T21605] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 947.939427][ T30] audit: type=1400 audit(947.474:2382): avc: denied { create } for pid=21680 comm="syz.3.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 947.981083][T21605] usb 6-1: config 0 has an invalid interface number: 227 but max is 0 [ 948.003525][T21605] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.018245][ T30] audit: type=1400 audit(947.514:2383): avc: denied { sys_admin } for pid=21680 comm="syz.3.3858" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 948.063707][T21605] usb 6-1: config 0 has no interface number 0 [ 948.088680][T21605] usb 6-1: config 0 interface 227 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 948.443908][T21696] delete_channel: no stack [ 948.448342][T21605] usb 6-1: config 0 interface 227 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 948.467217][T21605] usb 6-1: config 0 interface 227 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 948.512210][T21605] usb 6-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=49.d0 [ 948.521367][T21605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.529619][T21605] usb 6-1: Product: syz [ 948.533785][T21605] usb 6-1: Manufacturer: syz [ 948.626543][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3863'. [ 948.629416][T21605] usb 6-1: SerialNumber: syz [ 948.639987][T21702] SQUASHFS error: Failed to read block 0x0: -5 [ 948.654699][T21605] usb 6-1: config 0 descriptor?? [ 949.162932][T21709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 949.410511][T21605] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 949.445093][T21605] usb 6-1: USB disconnect, device number 52 [ 949.929227][ T30] audit: type=1400 audit(949.904:2384): avc: denied { setopt } for pid=21726 comm="syz.3.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 949.980426][ T30] audit: type=1400 audit(949.964:2385): avc: denied { read } for pid=21729 comm="syz.7.3872" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 950.035119][T21731] exFAT-fs (loop7): unable to read boot sector [ 950.049372][T21731] exFAT-fs (loop7): failed to read boot sector [ 950.055972][T21738] FAULT_INJECTION: forcing a failure. [ 950.055972][T21738] name failslab, interval 1, probability 0, space 0, times 0 [ 950.075415][T21731] exFAT-fs (loop7): failed to recognize exfat type [ 950.145015][T21738] CPU: 0 UID: 0 PID: 21738 Comm: syz.2.3868 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.145047][T21738] Tainted: [L]=SOFTLOCKUP [ 950.145054][T21738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 950.145065][T21738] Call Trace: [ 950.145072][T21738] [ 950.145080][T21738] dump_stack_lvl+0x16c/0x1f0 [ 950.145109][T21738] should_fail_ex+0x512/0x640 [ 950.145138][T21738] ? kmem_cache_alloc_noprof+0x62/0x770 [ 950.145162][T21738] should_failslab+0xc2/0x120 [ 950.145187][T21738] kmem_cache_alloc_noprof+0x83/0x770 [ 950.145207][T21738] ? mpol_new+0x11b/0x2d0 [ 950.145233][T21738] ? mpol_new+0x11b/0x2d0 [ 950.145253][T21738] mpol_new+0x11b/0x2d0 [ 950.145275][T21738] do_set_mempolicy+0x83/0x480 [ 950.145300][T21738] ? __pfx_do_set_mempolicy+0x10/0x10 [ 950.145322][T21738] ? __fget_files+0x20e/0x3c0 [ 950.145355][T21738] kernel_set_mempolicy+0x1c4/0x1e0 [ 950.145379][T21738] ? ksys_write+0x1ac/0x250 [ 950.145403][T21738] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 950.145436][T21738] do_syscall_64+0xcd/0xf80 [ 950.145462][T21738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.145482][T21738] RIP: 0033:0x7eff6198f749 [ 950.145497][T21738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.145514][T21738] RSP: 002b:00007eff62851038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 950.145533][T21738] RAX: ffffffffffffffda RBX: 00007eff61be6180 RCX: 00007eff6198f749 [ 950.145546][T21738] RDX: 0000000000000005 RSI: 0000200000000600 RDI: 0000000000000001 [ 950.145557][T21738] RBP: 00007eff62851090 R08: 0000000000000000 R09: 0000000000000000 [ 950.145567][T21738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.145578][T21738] R13: 00007eff61be6218 R14: 00007eff61be6180 R15: 00007ffda7275de8 [ 950.145604][T21738] [ 950.963008][ T30] audit: type=1400 audit(950.944:2386): avc: denied { listen } for pid=21761 comm="syz.3.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 950.995350][ T30] audit: type=1400 audit(950.964:2387): avc: denied { accept } for pid=21761 comm="syz.3.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 952.259451][ T6335] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 952.440905][ T6335] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 952.452303][ T6335] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 952.469154][ T6335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 54370, setting to 8 [ 952.488538][ T6335] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 952.510517][ T6335] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 952.520250][T21605] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 952.544309][ T6335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.559241][ T6335] usb 3-1: config 0 descriptor?? [ 952.568923][T21774] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 952.578958][ T6335] metro_usb 3-1:0.0: Metrologic USB to Serial converter detected [ 952.595551][ T6335] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 952.690665][T21605] usb 4-1: config 6 has an invalid interface number: 130 but max is 0 [ 952.702418][T21605] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 952.719510][T21605] usb 4-1: config 6 has no interface number 0 [ 952.729144][T21605] usb 4-1: config 6 interface 130 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 952.751768][T21605] usb 4-1: config 6 interface 130 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.770851][T21605] usb 4-1: config 6 interface 130 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 952.817020][T21605] usb 4-1: config 6 interface 130 has no altsetting 0 [ 952.831204][T21605] usb 4-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=bc.83 [ 952.840477][T21605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.855042][T21605] usb 4-1: Product: syz [ 952.867803][T21605] usb 4-1: Manufacturer: syz [ 952.878147][T21605] usb 4-1: SerialNumber: syz [ 953.025508][T21551] usb 3-1: USB disconnect, device number 113 [ 953.048024][T21551] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 953.062470][T21551] metro_usb 3-1:0.0: device disconnected [ 953.484733][T21806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21806 comm=syz.6.3888 [ 954.623630][T21810] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 954.697743][ T30] audit: type=1400 audit(954.664:2388): avc: denied { getopt } for pid=21807 comm="syz.2.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 954.742082][ T30] audit: type=1400 audit(954.664:2389): avc: denied { write } for pid=21807 comm="syz.2.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 955.340653][T21605] HFC-S_USB 4-1:6.130: probe with driver HFC-S_USB failed with error -5 [ 955.376830][T21605] usb 4-1: USB disconnect, device number 46 [ 956.921414][T21846] lo speed is unknown, defaulting to 1000 [ 957.808575][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a556800: rx timeout, send abort [ 957.817137][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a556800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 957.833813][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a556c00: rx timeout, send abort [ 958.075506][T21854] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3901'. [ 958.092847][ T30] audit: type=1400 audit(958.074:2390): avc: denied { write } for pid=21862 comm="syz.2.3903" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 958.093597][T21860] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3901'. [ 958.116444][ T30] audit: type=1400 audit(958.104:2391): avc: denied { open } for pid=21862 comm="syz.2.3903" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 958.385588][T21870] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3904'. [ 958.854316][T21875] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3906'. [ 958.866454][T21872] CIFS mount error: No usable UNC path provided in device string! [ 958.866454][T21872] [ 958.876580][T21872] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 958.908451][T21874] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3906'. [ 958.925108][T21872] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3903'. [ 958.935590][T21875] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3906'. [ 959.180002][T21878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.187922][T21878] batadv_slave_0: entered promiscuous mode [ 959.237834][T21878] batadv_slave_0: entered allmulticast mode [ 959.411736][T21888] netlink: 'syz.5.3910': attribute type 21 has an invalid length. [ 959.484471][T21888] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3910'. [ 959.493963][ T30] audit: type=1326 audit(959.464:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fae18f749 code=0x6fff0000 [ 959.819829][T21888] netlink: 'syz.5.3910': attribute type 4 has an invalid length. [ 959.842694][T21888] netlink: 'syz.5.3910': attribute type 5 has an invalid length. [ 959.860982][T21888] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3910'. [ 960.884692][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a394800: rx timeout, send abort [ 960.893117][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a394800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 960.907489][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a394c00: rx timeout, send abort [ 961.086216][T21924] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 961.212199][T21935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 961.222867][T21935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 961.240646][T21935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 961.248876][T21935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 961.256277][T21935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 961.332564][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 961.358648][T21930] lo speed is unknown, defaulting to 1000 [ 961.402703][T21938] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.803023][T21938] bridge_slave_1 (unregistering): left allmulticast mode [ 961.833537][T21938] bridge_slave_1 (unregistering): left promiscuous mode [ 961.843640][T21938] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.789558][T17699] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 962.802662][T21956] lo speed is unknown, defaulting to 1000 [ 962.936881][T21930] chnl_net:caif_netlink_parms(): no params data found [ 962.971179][T17699] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 962.979715][T17699] usb 3-1: config 0 has no interface number 0 [ 963.004182][T17699] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 963.029110][T17699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.055517][T17699] usb 3-1: Product: syz [ 963.065651][T17699] usb 3-1: Manufacturer: syz [ 963.066820][ T30] audit: type=1400 audit(963.044:2393): avc: denied { getattr } for pid=21961 comm="syz.5.3928" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 963.077432][T17699] usb 3-1: SerialNumber: syz [ 963.102975][T21962] overlayfs: failed to resolve '/ng': -2 [ 963.104574][T17699] usb 3-1: config 0 descriptor?? [ 963.146598][T17699] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 963.158400][T17699] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 963.193967][ T30] audit: type=1400 audit(963.084:2394): avc: denied { mounton } for pid=21961 comm="syz.5.3928" path="/82/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 963.293960][ T30] audit: type=1400 audit(963.174:2395): avc: denied { unmount } for pid=19810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 963.295148][T21966] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3930'. [ 963.324587][T16060] Bluetooth: hci5: command tx timeout [ 963.531782][T21930] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.554769][T21930] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.569866][T21930] bridge_slave_0: entered allmulticast mode [ 963.593221][T21930] bridge_slave_0: entered promiscuous mode [ 963.641350][T21958] lo speed is unknown, defaulting to 1000 [ 963.664731][T21930] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.719195][T21930] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.730909][T21930] bridge_slave_1: entered allmulticast mode [ 963.744560][T21930] bridge_slave_1: entered promiscuous mode [ 963.861045][T21930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.991602][T21930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.087518][T21930] team0: Port device team_slave_0 added [ 964.094454][T12484] team0: left allmulticast mode [ 964.100548][T12484] team_slave_0: left allmulticast mode [ 964.106044][T12484] team_slave_1: left allmulticast mode [ 964.112009][T12484] team0: left promiscuous mode [ 964.116806][T12484] team_slave_0: left promiscuous mode [ 964.124954][T12484] team_slave_1: left promiscuous mode [ 964.135440][T12484] bridge0: port 4(team0) entered disabled state [ 964.151667][T12484] dummy0: left allmulticast mode [ 964.157912][T12484] dummy0: left promiscuous mode [ 964.164140][T12484] bridge0: port 3(dummy0) entered disabled state [ 964.177341][T12484] bridge_slave_1: left allmulticast mode [ 964.183109][T12484] bridge_slave_1: left promiscuous mode [ 964.188780][T12484] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.203298][T12484] bridge_slave_0: left allmulticast mode [ 964.209821][T12484] bridge_slave_0: left promiscuous mode [ 964.215629][T12484] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.554793][T12484] bond3 (unregistering): (slave erspan1): Releasing active interface [ 964.575705][T12484] erspan1 (unregistering): left promiscuous mode [ 964.753319][T21997] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3939'. [ 964.764568][T21997] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3939'. [ 964.858744][T12484] team0: Port device bridge3 removed [ 964.921601][ T8258] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 964.933908][T12484] bond1 (unregistering): Released all slaves [ 965.025653][T12484] bond2 (unregistering): (slave veth4): Releasing active interface [ 965.034583][T12484] bond2 (unregistering): Released all slaves [ 965.069508][ T8258] usb 6-1: device descriptor read/64, error -71 [ 965.131164][T12484] bond3 (unregistering): Released all slaves [ 965.263315][T12484] bond4 (unregistering): Released all slaves [ 965.274278][T21930] team0: Port device team_slave_1 added [ 965.296029][T21930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.303704][T21930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.346053][T21930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.359008][T12484] : left promiscuous mode [ 965.377601][T21930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.385201][ T8258] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 965.399924][T16060] Bluetooth: hci5: command tx timeout [ 965.406236][T21930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.464821][T19816] usb 3-1: USB disconnect, device number 114 [ 965.506541][T21930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.539951][ T8258] usb 6-1: device descriptor read/64, error -71 [ 965.655834][ T8258] usb usb6-port1: attempt power cycle [ 965.993094][T21930] hsr_slave_0: entered promiscuous mode [ 965.999415][ T8258] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 966.013758][T21930] hsr_slave_1: entered promiscuous mode [ 966.023986][T22004] ubi: mtd0 is already attached to ubi31 [ 966.031576][ T8258] usb 6-1: device descriptor read/8, error -71 [ 966.044925][T21930] debugfs: 'hsr0' already exists in 'hsr' [ 966.061004][T21930] Cannot create hsr debugfs directory [ 966.289386][ T8258] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 966.310621][ T8258] usb 6-1: device descriptor read/8, error -71 [ 966.346159][T12484] hsr_slave_0: left promiscuous mode [ 966.360804][T12484] hsr_slave_1: left promiscuous mode [ 966.366829][T12484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.390983][T12484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.398823][T12484] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 966.407109][T12484] batman_adv: batadv0: Removing interface: virt_wifi0 [ 966.419937][ T8258] usb usb6-port1: unable to enumerate USB device [ 967.073070][T12484] team0 (unregistering): Port device team_slave_1 removed [ 967.360245][T12484] team0 (unregistering): Port device team_slave_0 removed [ 967.479968][T21935] Bluetooth: hci5: command tx timeout [ 967.632465][ T30] audit: type=1326 audit(967.614:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 967.657730][ T30] audit: type=1326 audit(967.614:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 967.712436][ T30] audit: type=1326 audit(967.644:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 967.735856][ T30] audit: type=1326 audit(967.664:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febc858f783 code=0x7ffc0000 [ 967.760653][ T30] audit: type=1326 audit(967.664:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febc858f783 code=0x7ffc0000 [ 967.795888][ T30] audit: type=1326 audit(967.664:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.132982][T22026] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 968.141888][T22026] ref_ctr increment failed for inode: 0x1dc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880212d8000 [ 968.154045][T22026] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 968.163218][T22026] ref_ctr decrement failed for inode: 0x1dc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880212d8000 [ 968.174230][T22026] uprobe: syz.5.3948:22026 failed to unregister, leaking uprobe [ 968.186409][ T30] audit: type=1326 audit(967.664:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.264913][T22020] overlayfs: statfs failed on './file0' [ 968.283426][ T30] audit: type=1326 audit(967.664:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.310802][ T30] audit: type=1326 audit(967.664:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.334335][ T30] audit: type=1326 audit(967.664:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.376988][ T30] audit: type=1326 audit(967.664:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.402517][ T30] audit: type=1326 audit(967.664:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.437635][T22033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3949'. [ 968.454567][ T30] audit: type=1326 audit(967.664:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.482736][ T30] audit: type=1326 audit(967.664:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.538404][ T30] audit: type=1326 audit(967.664:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.652647][ T30] audit: type=1326 audit(967.664:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.678012][ T30] audit: type=1326 audit(967.664:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22022 comm="syz.3.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc858f749 code=0x7ffc0000 [ 968.698582][T22044] befs: (nbd2): unable to read superblock [ 968.955406][T21935] Bluetooth: hci1: command 0x0405 tx timeout [ 969.106684][T12484] IPVS: stop unused estimator thread 0... [ 969.514136][T21930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 969.560650][T16060] Bluetooth: hci5: command tx timeout [ 969.566604][T21930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 970.042674][T21930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 970.190822][T21930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 970.608094][T21930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.698221][T21930] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.721367][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.728448][ T6025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.767120][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.774292][T12481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.783087][T22101] SELinux: syz.5.3961 (22101) set checkreqprot to 1. This is no longer supported. [ 971.871293][T22113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3964'. [ 971.980651][T22124] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3966'. [ 971.981023][T22125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22125 comm=syz.7.3965 [ 972.049054][T22127] netlink: 'syz.7.3965': attribute type 1 has an invalid length. [ 972.131525][T21930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.710182][T21930] veth0_vlan: entered promiscuous mode [ 972.727967][T21930] veth1_vlan: entered promiscuous mode [ 972.817656][T21930] veth0_macvtap: entered promiscuous mode [ 972.852259][T21930] veth1_macvtap: entered promiscuous mode [ 972.929775][T22145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.982513][T22145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.989417][T21930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.183779][T21930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.218601][T12481] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.228811][T12481] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.253116][T12481] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.269656][T12481] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.419464][T12481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.436091][T12481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.522995][T12481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.660313][T12481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.512439][T21605] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 974.580977][T22155] Bluetooth: MGMT ver 1.23 [ 974.679395][T21605] usb 4-1: Using ep0 maxpacket: 16 [ 974.691614][T21605] usb 4-1: unable to get BOS descriptor or descriptor too short [ 974.841094][T21605] usb 4-1: config 9 has an invalid interface number: 129 but max is 0 [ 974.849284][T21605] usb 4-1: config 9 has no interface number 0 [ 974.856399][T21605] usb 4-1: config 9 interface 129 has no altsetting 0 [ 974.865846][T21605] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 974.875428][T21605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.883682][T21605] usb 4-1: Product: syz [ 974.887839][T21605] usb 4-1: Manufacturer: syz [ 974.892708][T21605] usb 4-1: SerialNumber: syz [ 974.950153][ T976] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 975.162778][ T976] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 975.173637][ T976] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 975.182072][ T976] usb 7-1: Product: syz [ 975.186603][ T976] usb 7-1: Manufacturer: syz [ 975.270440][ T976] usb 7-1: SerialNumber: syz [ 975.277079][ T976] usb 7-1: config 0 descriptor?? [ 975.284257][ T976] ch341 7-1:0.0: ch341-uart converter detected [ 975.520801][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075987800: rx timeout, send abort [ 975.529259][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075987800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 975.543710][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075987c00: rx timeout, send abort [ 975.979574][T22174] netlink: 6604 bytes leftover after parsing attributes in process `syz.2.3975'. [ 976.011663][T22174] openvswitch: netlink: Flow key attr not present in new flow. [ 976.271378][T21605] usb 4-1: bad CDC descriptors [ 976.316351][T21605] usb 4-1: USB disconnect, device number 47 [ 976.601268][ T976] usb 7-1: failed to send control message: -110 [ 976.607592][ T976] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 976.634316][ T117] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 976.827608][ T117] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.871154][ T117] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.901489][ T117] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 976.929824][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 976.948073][ T117] usb 3-1: SerialNumber: syz [ 976.979413][T22185] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 976.985944][T22185] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 976.995550][T22185] vhci_hcd vhci_hcd.0: Device attached [ 978.035716][T22185] vhci_hcd vhci_hcd.0: port 0 already used [ 978.160500][T22187] vhci_hcd: connection closed [ 978.160800][ T2070] vhci_hcd vhci_hcd.5: stop threads [ 978.170972][ T2070] vhci_hcd vhci_hcd.5: release socket [ 978.182941][ T2070] vhci_hcd vhci_hcd.5: disconnect device [ 978.239552][ T10] usb 44-1: enqueue for inactive port 0 [ 978.671750][T22120] Set syz1 is full, maxelem 65536 reached [ 978.730233][ T10] usb usb44-port1: attempt power cycle [ 978.920718][T22200] lo speed is unknown, defaulting to 1000 [ 979.161703][ T117] usb 3-1: cannot find UAC_HEADER [ 979.211413][ T117] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 979.248299][ T117] usb 3-1: USB disconnect, device number 115 [ 979.300456][ T10] usb usb44-port1: unable to enumerate USB device [ 979.862080][ T10] usb 7-1: USB disconnect, device number 5 [ 979.917064][ T10] ch341 7-1:0.0: device disconnected [ 980.349379][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 980.571221][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 980.670097][ T10] usb 7-1: config 0 has an invalid interface number: 24 but max is 0 [ 980.680368][ T10] usb 7-1: config 0 has no interface number 0 [ 980.696953][ T10] usb 7-1: config 0 interface 24 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.712167][ T10] usb 7-1: config 0 interface 24 has no altsetting 0 [ 981.118352][ T10] usb 7-1: New USB device found, idVendor=00db, idProduct=dce6, bcdDevice=d9.01 [ 981.158342][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.274155][ T10] usb 7-1: Product: syz [ 981.278755][ T10] usb 7-1: Manufacturer: syz [ 981.283617][ T10] usb 7-1: SerialNumber: syz [ 981.293779][ T10] usb 7-1: config 0 descriptor?? [ 981.553214][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 981.573613][T22238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3986'. [ 981.596821][T22221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.657493][T22221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.723971][ T9] usb 7-1: USB disconnect, device number 6 [ 981.730193][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 981.744595][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 981.777944][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.791456][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.802918][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 981.813204][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 981.815144][T22243] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3992'. [ 981.825250][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 981.845669][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.858993][ T10] usb 3-1: config 0 descriptor?? [ 981.875423][T16060] Bluetooth: hci3: urb ffff888028ff8700 submission failed (90) [ 982.081622][ T9] usb 3-1: USB disconnect, device number 116 [ 982.261510][T22256] comedi comedi3: dt2801: I/O port conflict (0x4f23,2) [ 982.270886][T22256] comedi comedi3: dt2801: I/O port conflict (0x4f23,2) [ 982.282949][T22256] comedi comedi3: dt2801: I/O port conflict (0x4f23,2) [ 982.296881][T22256] comedi comedi3: dt2801: I/O port conflict (0x4f23,2) [ 982.969684][T19816] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 983.077522][T22272] qrtr: Invalid version 0 [ 983.528145][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 983.682236][T19816] usb 3-1: Using ep0 maxpacket: 32 [ 983.865581][T19816] usb 3-1: too many configurations: 134, using maximum allowed: 8 [ 983.877720][T19816] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 983.894173][T21935] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 983.894485][T22246] Bluetooth: hci6: command 0x1003 tx timeout [ 983.900772][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 983.912094][T19816] usb 3-1: can't read configurations, error -61 [ 983.919697][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 983.953261][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 983.962052][ T9] usb 6-1: config 179 has no interface number 0 [ 983.968993][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 983.981216][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 983.994182][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 984.006037][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 984.016865][ T9] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 984.038277][ T9] usb 6-1: config 179 interface 65 has no altsetting 0 [ 984.050219][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 984.059971][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.060269][T19816] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 984.078571][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input65 [ 984.091448][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.105522][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.105910][T22276] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.115666][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 984.122779][T22276] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.142621][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.171526][ T10] usb 4-1: config 0 descriptor?? [ 984.213100][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.226321][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.235510][T19816] usb 3-1: Using ep0 maxpacket: 32 [ 984.241923][T19816] usb 3-1: too many configurations: 134, using maximum allowed: 8 [ 984.251334][T19816] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 984.258895][T19816] usb 3-1: can't read configurations, error -61 [ 984.267575][T19816] usb usb3-port1: attempt power cycle [ 984.402601][ T6719] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.419907][ T6719] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.432528][ T117] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 984.589958][ T10] hid_parser_main: 1 callbacks suppressed [ 984.589977][ T10] cm6533_jd 0003:0D8C:0022.0044: unknown main item tag 0x0 [ 984.606371][ T10] cm6533_jd 0003:0D8C:0022.0044: item fetching failed at offset 4/5 [ 984.622179][ T10] cm6533_jd 0003:0D8C:0022.0044: parse failed [ 984.628678][ T10] cm6533_jd 0003:0D8C:0022.0044: probe with driver cm6533_jd failed with error -22 [ 984.679481][T21935] Bluetooth: hci5: command 0x0405 tx timeout [ 984.725298][T22263] siw: device registration error -23 [ 984.738157][ T6719] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.755168][ T6719] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.793991][T19816] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 984.820066][ T117] usb 7-1: Using ep0 maxpacket: 32 [ 984.826892][T19816] usb 3-1: Using ep0 maxpacket: 32 [ 984.833014][ T117] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 984.844993][T19816] usb 3-1: too many configurations: 134, using maximum allowed: 8 [ 984.857284][ T117] usb 7-1: config 0 has no interface number 0 [ 984.865428][T19816] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 984.873463][T19816] usb 3-1: can't read configurations, error -61 [ 984.881116][ T117] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 984.890777][ T117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.904060][ T117] usb 7-1: Product: syz [ 984.909270][ T117] usb 7-1: Manufacturer: syz [ 984.913950][ T117] usb 7-1: SerialNumber: syz [ 984.921416][ T117] usb 7-1: config 0 descriptor?? [ 984.929102][ T117] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 985.019476][T19816] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 985.040285][T19816] usb 3-1: Using ep0 maxpacket: 32 [ 985.046865][T19816] usb 3-1: too many configurations: 134, using maximum allowed: 8 [ 985.068479][T19816] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 985.076715][T19816] usb 3-1: can't read configurations, error -61 [ 985.084196][T19816] usb usb3-port1: unable to enumerate USB device [ 985.131540][ T117] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 985.144767][ T117] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 985.663107][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 985.663121][ T30] audit: type=1400 audit(985.644:2455): avc: denied { append } for pid=22304 comm="syz.2.4006" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 985.782518][ T10] usb 6-1: USB disconnect, device number 57 [ 985.788482][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 985.896949][ T117] usb 4-1: USB disconnect, device number 48 [ 986.160676][ T30] audit: type=1400 audit(986.144:2456): avc: denied { write } for pid=22317 comm="syz.5.4009" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 986.234194][ T117] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 986.246676][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4010'. [ 986.316593][ T30] audit: type=1400 audit(986.294:2457): avc: denied { ioctl } for pid=22325 comm="syz.5.4011" path="socket:[82627]" dev="sockfs" ino=82627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 986.370106][ T117] usb 4-1: device descriptor read/64, error -71 [ 986.639793][ T117] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 986.742735][T22329] netlink: 'syz.7.4012': attribute type 1 has an invalid length. [ 986.756314][T22334] fuse: Bad value for 'rootmode' [ 986.758430][ T30] audit: type=1400 audit(986.734:2458): avc: denied { listen } for pid=22331 comm="syz.2.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 986.789431][ T117] usb 4-1: device descriptor read/64, error -71 [ 986.793240][ T30] audit: type=1400 audit(986.764:2459): avc: denied { accept } for pid=22331 comm="syz.2.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 986.833124][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4012'. [ 986.850911][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4012'. [ 986.899558][T22341] netlink: 'syz.5.4015': attribute type 30 has an invalid length. [ 986.919281][ T117] usb usb4-port1: attempt power cycle [ 986.925588][T22342] netlink: 'syz.5.4015': attribute type 30 has an invalid length. [ 987.034104][T22343] 9pnet_virtio: no channels available for device syz [ 987.049379][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 987.305321][ T117] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 987.346602][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 987.368197][ T976] usb 7-1: USB disconnect, device number 7 [ 987.383438][ T117] usb 4-1: device descriptor read/8, error -71 [ 987.443746][ T976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 987.571750][ T976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 987.649466][ T117] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 987.663513][ T976] quatech2 7-1:0.51: device disconnected [ 987.684942][ T117] usb 4-1: device descriptor read/8, error -71 [ 987.700430][ T30] audit: type=1400 audit(987.684:2460): avc: denied { ioctl } for pid=22346 comm="syz.6.4017" path="socket:[83275]" dev="sockfs" ino=83275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 987.928342][ T117] usb usb4-port1: unable to enumerate USB device [ 987.941646][ T30] audit: type=1326 audit(987.854:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22352 comm="syz.5.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fae18f749 code=0x7ffc0000 [ 987.974828][ T30] audit: type=1326 audit(987.854:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22352 comm="syz.5.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fae18f749 code=0x7ffc0000 [ 987.998884][ T30] audit: type=1326 audit(987.854:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22352 comm="syz.5.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fae18f749 code=0x7ffc0000 [ 987.999493][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 988.050204][ T10] usb 3-1: config 14 has an invalid interface number: 248 but max is 3 [ 988.059467][ T30] audit: type=1326 audit(987.854:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22352 comm="syz.5.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fae18f749 code=0x7ffc0000 [ 988.082850][ T10] usb 3-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 988.102813][ T10] usb 3-1: config 14 has an invalid interface number: 150 but max is 3 [ 988.112903][ T10] usb 3-1: config 14 has an invalid interface number: 39 but max is 3 [ 988.136412][ T10] usb 3-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 988.148446][ T10] usb 3-1: config 14 has an invalid interface number: 150 but max is 3 [ 988.151025][T22367] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4022'. [ 988.158379][ T10] usb 3-1: config 14 has 3 interfaces, different from the descriptor's value: 4 [ 988.175452][ T10] usb 3-1: config 14 has no interface number 0 [ 988.182337][ T10] usb 3-1: config 14 has no interface number 1 [ 988.183899][T22367] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4022'. [ 988.188770][ T10] usb 3-1: config 14 has no interface number 2 [ 988.226194][ T10] usb 3-1: config 14 interface 248 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 988.245770][ T10] usb 3-1: config 14 interface 248 altsetting 0 endpoint 0x7 has invalid maxpacket 2039, setting to 1024 [ 988.258589][ T10] usb 3-1: config 14 interface 248 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 988.269954][ T10] usb 3-1: config 14 interface 248 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 988.281816][ T10] usb 3-1: config 14 interface 248 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 988.300918][ T10] usb 3-1: config 14 interface 248 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 988.311934][ T10] usb 3-1: config 14 interface 248 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 988.324744][ T10] usb 3-1: config 14 interface 248 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 988.336065][ T10] usb 3-1: config 14 interface 248 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 988.347472][ T10] usb 3-1: config 14 interface 248 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 988.358782][ T10] usb 3-1: config 14 interface 150 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 988.371335][ T10] usb 3-1: config 14 interface 150 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 988.382857][ T10] usb 3-1: config 14 interface 150 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 988.393970][ T10] usb 3-1: config 14 interface 150 altsetting 3 bulk endpoint 0xF has invalid maxpacket 1023 [ 988.404353][ T10] usb 3-1: config 14 interface 150 altsetting 3 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 988.416297][ T10] usb 3-1: config 14 interface 150 altsetting 3 has a duplicate endpoint with address 0x89, skipping [ 988.428748][ T10] usb 3-1: config 14 interface 150 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 988.439824][ T10] usb 3-1: config 14 interface 150 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 988.451193][ T10] usb 3-1: config 14 interface 150 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 988.479792][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 988.490624][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 988.499426][ T976] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 988.516097][ T10] usb 3-1: config 14 interface 39 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 988.528556][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 988.539568][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 988.550512][ T10] usb 3-1: config 14 interface 39 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 988.561703][ T10] usb 3-1: config 14 interface 39 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 988.574918][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 988.592420][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 988.605512][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 988.616401][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 988.627881][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 988.644705][ T10] usb 3-1: config 14 interface 39 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 988.655593][ T10] usb 3-1: config 14 interface 39 altsetting 4 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 988.659427][ T976] usb 7-1: Using ep0 maxpacket: 16 [ 988.666609][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x1, skipping [ 988.685066][ T976] usb 7-1: config index 0 descriptor too short (expected 22052, got 36) [ 988.696218][ T976] usb 7-1: config 110 has too many interfaces: 139, using maximum allowed: 32 [ 988.708571][ T976] usb 7-1: config 110 has an invalid descriptor of length 175, skipping remainder of the config [ 988.720987][ T976] usb 7-1: config 110 has 0 interfaces, different from the descriptor's value: 139 [ 988.726197][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x6, skipping [ 988.731354][ T976] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 988.750964][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x7, skipping [ 988.764446][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.780955][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x1, skipping [ 988.806335][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x9, skipping [ 988.820409][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x7, skipping [ 988.834730][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0xB, skipping [ 988.845710][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x1, skipping [ 988.857880][ T10] usb 3-1: config 14 interface 150 altsetting 39 has a duplicate endpoint with address 0x7, skipping [ 988.882212][ T10] usb 3-1: config 14 interface 150 has no altsetting 0 [ 988.889266][ T10] usb 3-1: config 14 interface 150 has no altsetting 1 [ 988.896680][ T10] usb 3-1: config 14 interface 39 has no altsetting 0 [ 988.905526][ T10] usb 3-1: New USB device found, idVendor=1410, idProduct=1450, bcdDevice=6b.df [ 988.915254][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.924438][ T10] usb 3-1: Product:   [ 988.928602][ T10] usb 3-1: Manufacturer: 뺌葥몆춹뻕ì¨á¤ç½¢ä¤Šä”°ä’‰è°—뭄ⶄʄ媱씨⠩૲ä·ê  ä¹·â¤ë“¼ï€¦ê¼´ä›€ê°Ÿï¹‰ã’Œì£ç‚„ꀶ騂堉啣î¬Å¸ä·€éžºê‡‹ã‹½é¸¸äŒ¹ë¶¥ë”¼ä¦² [ 988.982057][ T10] usb 3-1: SerialNumber: 䂞Ｚ힥༭맀闤ì°î¿·áŒ«à¥¨à©¶áŽºá˜†îŸ¡á€Žã°–á¡êƒ¸ï¿¢î­›ê¡‚皥攕辀ᱣè©ï’—ஃ櫀露䜾å£â Žâ¥«á¹™ã›è«·è’±î¨ì¶¸ë—„⿆㩪顎픾ת᭻شⲪ಩朜씳ï¤é®‰Ë‡í†³á·žìªµã•ï€ºí—«æˆ·â„ªç´–┳潉ꂸ쇑쾒〺쪖펋䴮⠃è¨è˜µé›Æ€ì—䦶몗嗸æ¿å·¿èµ–툆킔發悼쫘᫒䴯ç˜á³æ“”å•ï­™â­¼ã¥žæ°›è¢‰åŸ¯í½ë£œî£Œïžœï•„ [ 989.179443][T22332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 989.187522][T22332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 989.197436][ T976] usb 7-1: string descriptor 0 read error: -71 [ 989.221993][ T976] usb 7-1: USB disconnect, device number 8 [ 989.299240][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 989.502438][T22332] uprobe: syz.2.4014:22332 failed to unregister, leaking uprobe [ 989.761977][ T10] option 3-1:14.248: GSM modem (1-port) converter detected [ 989.776430][ T10] option 3-1:14.150: GSM modem (1-port) converter detected [ 989.788507][ T10] option 3-1:14.39: GSM modem (1-port) converter detected [ 989.799768][ T10] usb 3-1: USB disconnect, device number 121 [ 989.812060][ T10] option 3-1:14.248: device disconnected [ 989.820495][ T10] option 3-1:14.150: device disconnected [ 989.827925][ T10] option 3-1:14.39: device disconnected [ 990.161222][T22402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.481771][T22414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4032'. [ 990.490907][T22414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4032'. [ 990.500920][ T976] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 990.807722][ T976] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 990.821584][ T976] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 990.862163][ T976] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 990.884411][ T976] usb 4-1: config 220 has no interface number 2 [ 990.918097][ T976] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 990.951964][ T976] usb 4-1: config 220 interface 0 has no altsetting 0 [ 991.059378][ T976] usb 4-1: config 220 interface 76 has no altsetting 0 [ 991.066326][ T976] usb 4-1: config 220 interface 1 has no altsetting 0 [ 991.123292][ T976] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 991.133052][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.150469][ T976] usb 4-1: Product: syz [ 991.162109][ T976] usb 4-1: Manufacturer: syz [ 991.166907][ T976] usb 4-1: SerialNumber: syz [ 991.594776][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 991.594793][ T30] audit: type=1400 audit(991.574:2522): avc: denied { ioctl } for pid=22401 comm="syz.3.4031" path="socket:[83341]" dev="sockfs" ino=83341 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 991.712391][ T976] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 991.749334][ T976] uvcvideo 4-1:220.0: No valid video chain found. [ 991.763089][ T976] usb 4-1: selecting invalid altsetting 0 [ 991.791253][ T976] usb 4-1: selecting invalid altsetting 0 [ 991.797000][ T976] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 991.841856][ T976] usb 4-1: USB disconnect, device number 53 [ 991.883311][T22437] cgroup: Invalid name [ 992.240374][T17699] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 992.249449][T19816] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 992.320435][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a0ff800: rx timeout, send abort [ 992.328708][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a0ff800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 992.375982][T22450] netlink: 'syz.6.4044': attribute type 1 has an invalid length. [ 992.391418][T22450] erspan1: entered allmulticast mode [ 992.401745][T17699] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 992.412408][T19816] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 992.419400][T17699] usb 6-1: config 0 has no interface number 0 [ 992.422956][T19816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.427568][T17699] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2821, bcdDevice=41.cd [ 992.436181][T19816] usb 3-1: Product: syz [ 992.445234][T17699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.447220][T17699] usb 6-1: config 0 descriptor?? [ 992.466312][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.478844][T19816] usb 3-1: Manufacturer: syz [ 992.483594][T19816] usb 3-1: SerialNumber: syz [ 992.529407][ T976] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 992.680860][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 992.690085][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.709404][T22442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.717962][T22442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.728998][ T976] pwc: Logitech ViewPort AV 100 webcam detected. [ 992.792783][T17699] usb 6-1: string descriptor 0 read error: -71 [ 992.810301][T19816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 992.819621][T17699] usb 6-1: USB disconnect, device number 58 [ 992.825483][T19816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 992.839731][ T117] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 992.848798][T19816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 992.855951][T22460] fuse: Unknown parameter '' [ 992.864229][T19816] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 992.877775][T19816] usb 3-1: USB disconnect, device number 122 [ 993.010304][ T117] usb 7-1: not running at top speed; connect to a high speed hub [ 993.019263][ T117] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 993.027450][ T117] usb 7-1: config 95 has no interface number 0 [ 993.035275][ T117] usb 7-1: config 95 interface 1 has no altsetting 0 [ 993.048888][ T117] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 993.058988][ T117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.068542][ T117] usb 7-1: Product: syz [ 993.072983][ T117] usb 7-1: Manufacturer: syz [ 993.077597][ T117] usb 7-1: SerialNumber: syz [ 993.258585][T22472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.269770][T22472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.358796][ T30] audit: type=1400 audit(993.334:2523): avc: denied { getopt } for pid=22454 comm="syz.6.4046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 993.913470][ T976] pwc: send_video_command error -71 [ 993.918723][ T976] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 993.957198][ T976] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 994.125753][ T976] usb 4-1: USB disconnect, device number 54 [ 994.469235][ T117] usb 7-1: USB disconnect, device number 9 [ 994.636688][ T976] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 994.854236][ T976] usb 4-1: device descriptor read/64, error -71 [ 995.110151][ T976] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 995.751078][T12494] Bluetooth: (null): Invalid header checksum [ 995.766621][T12494] Bluetooth: (null): Invalid header checksum [ 995.780128][ T976] usb 4-1: device descriptor read/64, error -71 [ 995.791045][T12494] Bluetooth: (null): Invalid header checksum [ 995.840011][T22510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4058'. [ 995.848879][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4058'. [ 995.862147][T22510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4058'. [ 995.871255][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 995.889750][ T976] usb usb4-port1: attempt power cycle [ 995.909712][T12495] Bluetooth: (null): Invalid header checksum [ 996.154792][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.186748][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 996.206026][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.453310][ T10] usb 7-1: config 0 descriptor?? [ 996.499481][ T976] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 996.505960][ T10] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 996.572436][ T976] usb 4-1: device descriptor read/8, error -71 [ 996.632092][ T5886] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 996.826108][ T5886] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 996.879655][ T976] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 996.884865][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.903200][ T976] usb 4-1: device descriptor read/8, error -71 [ 996.932322][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 996.944776][ T5886] usb 6-1: config 0 descriptor?? [ 996.954404][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 996.975992][ T10] pwc: recv_control_msg error -71 req 04 val 1700 [ 996.991750][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 996.998714][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 997.006033][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 997.013082][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 997.020335][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 997.026932][ T976] usb usb4-port1: unable to enumerate USB device [ 997.082951][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 997.091731][ T10] pwc: recv_control_msg error -71 req 02 val 2200 [ 997.230186][ T5886] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 997.296025][ T10] pwc: recv_control_msg error -71 req 06 val 0600 [ 997.398816][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 997.416717][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 997.443352][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 997.452608][T22545] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4065'. [ 997.472897][ T5886] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 997.481881][ T5886] [drm] Initialized udl on minor 2 [ 997.487430][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 997.505605][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 997.512672][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 997.522443][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 997.536343][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 997.634549][ T5886] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 997.801226][ T10] pwc: Registered as video103. [ 997.806929][ T5886] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 997.816833][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input66 [ 997.843078][T17699] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 997.853906][T17699] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 997.862225][ T5886] usb 6-1: USB disconnect, device number 59 [ 997.870541][ T10] usb 7-1: USB disconnect, device number 10 [ 998.224233][ T30] audit: type=1400 audit(998.204:2524): avc: denied { append } for pid=22567 comm="syz.7.4070" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 998.645747][T22585] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4074'. [ 999.123175][T22597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 999.949667][T17699] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 999.989736][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1000.157013][T17699] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1000.171950][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1000.177915][T17699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.220939][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.239777][T17699] usb 7-1: Product: syz [ 1000.269468][T17699] usb 7-1: Manufacturer: syz [ 1000.274931][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.286923][T17699] usb 7-1: SerialNumber: syz [ 1000.297368][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1000.320585][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1000.332135][T17699] usb 7-1: config 0 descriptor?? [ 1000.337659][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.438004][ T10] usb 4-1: config 0 descriptor?? [ 1000.741513][T22636] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4086'. [ 1000.938113][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1000.948858][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1000.970343][ T5886] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1001.248612][ T10] usb 4-1: USB disconnect, device number 59 [ 1001.411187][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.421411][ T5886] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1001.431520][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.443807][ T5886] usb 3-1: config 0 descriptor?? [ 1001.451085][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 1001.589378][ T117] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1001.661163][T17699] usb 7-1: non-Atmel transceiver xxxxac01 [ 1001.673392][ T5886] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1001.681161][ T5886] pwc: recv_control_msg error -71 req 02 val 2700 [ 1001.689799][ T5886] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1001.696631][ T5886] pwc: recv_control_msg error -71 req 04 val 1000 [ 1001.703991][ T5886] pwc: recv_control_msg error -71 req 04 val 1300 [ 1001.711283][ T5886] pwc: recv_control_msg error -71 req 04 val 1400 [ 1001.718091][ T5886] pwc: recv_control_msg error -71 req 02 val 2000 [ 1001.734030][ T5886] pwc: recv_control_msg error -71 req 02 val 2100 [ 1001.742679][ T117] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1001.751019][ T5886] pwc: recv_control_msg error -71 req 04 val 1500 [ 1001.758554][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 1001.758954][ T117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.765781][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 1001.782622][ T117] usb 6-1: Product: syz [ 1001.786983][ T117] usb 6-1: Manufacturer: syz [ 1001.791415][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 1001.792455][ T117] usb 6-1: SerialNumber: syz [ 1001.801992][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 1001.810360][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 1001.811991][ T117] usb 6-1: config 0 descriptor?? [ 1001.817510][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 1001.829064][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 1001.836200][ T117] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1001.850545][ T5886] pwc: Registered as video103. [ 1001.860722][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input67 [ 1001.872854][T17699] usb 7-1: Firmware version (0.0) predates our first public release. [ 1001.890993][T17699] usb 7-1: Please update to version 0.2 or newer [ 1001.900479][ T5886] usb 3-1: USB disconnect, device number 123 [ 1001.908455][T17699] usb 7-1: atusb_probe: initialization failed, error = -19 [ 1001.927647][T17699] usb 7-1: USB disconnect, device number 11 [ 1002.032224][ T117] gspca_sunplus: reg_r err -71 [ 1002.039069][ T117] usb 6-1: USB disconnect, device number 60 [ 1002.889441][T17699] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1003.059555][T17699] usb 3-1: Using ep0 maxpacket: 8 [ 1003.069731][T17699] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 1003.081154][T17699] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1003.094509][T17699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1003.101620][T17699] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 1003.111270][T17699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.122989][T17699] usb 3-1: config 0 descriptor?? [ 1003.519396][ T117] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1003.543018][T19816] usb 3-1: USB disconnect, device number 124 [ 1003.669362][ T117] usb 7-1: Using ep0 maxpacket: 32 [ 1003.676613][ T117] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.688679][ T117] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1003.703127][ T117] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1003.739713][ T117] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice= 0.00 [ 1003.748750][ T117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.907282][ T117] usb 7-1: config 0 descriptor?? [ 1004.801843][ T117] usbhid 7-1:0.0: can't add hid device: -71 [ 1004.809240][ T117] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1004.826707][ T117] usb 7-1: USB disconnect, device number 12 [ 1005.196752][T22717] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1007.989386][ T976] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1008.149595][T19816] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1008.181191][ T976] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 1008.191215][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.224462][ T976] usb 7-1: config 0 descriptor?? [ 1008.257446][ T976] ldusb 7-1:0.0: Interrupt in endpoint not found [ 1008.328650][T19816] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1008.343228][T19816] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1008.362565][T19816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1008.384100][T19816] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1008.394803][T19816] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1008.403329][T19816] usb 3-1: Product: syz [ 1008.407999][T19816] usb 3-1: Manufacturer: syz [ 1008.412761][T19816] usb 3-1: SerialNumber: syz [ 1008.434652][T19816] usb 3-1: config 0 descriptor?? [ 1008.571364][T19816] usb 3-1: selecting invalid altsetting 0 [ 1008.881575][T19816] usb 7-1: USB disconnect, device number 13 [ 1008.909239][ T9] usb 3-1: USB disconnect, device number 125 [ 1009.197152][T22795] syzkaller0: entered promiscuous mode [ 1009.202803][T22795] syzkaller0: entered allmulticast mode [ 1009.379365][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1009.620678][ T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1009.628784][ T9] usb 6-1: config 1 has no interface number 0 [ 1009.635129][ T9] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1009.647289][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1009.657375][ T9] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.670924][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1009.680572][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.688580][ T9] usb 6-1: Product: syz [ 1009.692784][ T9] usb 6-1: Manufacturer: syz [ 1009.697366][ T9] usb 6-1: SerialNumber: syz [ 1009.704702][T22793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1009.729378][T19816] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1009.879460][T19816] usb 7-1: Using ep0 maxpacket: 32 [ 1009.885983][T19816] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1009.894246][T19816] usb 7-1: config 0 has no interface number 0 [ 1009.900463][T19816] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1009.912342][T19816] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1009.921751][T19816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.926017][T22793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.930285][T19816] usb 7-1: Product: syz [ 1009.942873][T22793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.951425][T22793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.959947][T19816] usb 7-1: Manufacturer: syz [ 1009.964540][T19816] usb 7-1: SerialNumber: syz [ 1009.971594][T22793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.980140][T19816] usb 7-1: config 0 descriptor?? [ 1009.986046][T22804] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1009.994058][T22793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.004209][T22793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.012980][T22793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.021757][T22793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.032247][T22793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.042701][T22793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.055692][T22792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1010.065989][ T9] usb 6-1: Incompatible driver and firmware versions [ 1010.207636][T22804] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1010.268598][ T9] usb 6-1: USB disconnect, device number 61 [ 1010.937094][T22818] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4130'. [ 1011.112119][T19816] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1011.123480][T19816] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1011.128813][T22825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.142928][T22825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.161305][T19816] asix 7-1:0.188: probe with driver asix failed with error -71 [ 1011.186518][T19816] usb 7-1: USB disconnect, device number 14 [ 1011.197186][T22825] random: crng reseeded on system resumption [ 1011.207247][ T30] audit: type=1400 audit(1011.184:2525): avc: denied { listen } for pid=22822 comm="syz.7.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1011.412992][T22839] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4133'. [ 1012.628753][T22848] openvswitch: netlink: Key type 115 is out of range max 32 [ 1012.654603][T22855] openvswitch: netlink: Key type 115 is out of range max 32 [ 1013.189810][T22864] lo speed is unknown, defaulting to 1000 [ 1013.414144][T22864] IPVS: You probably need to specify IP address on multicast interface. [ 1013.422863][T22864] IPVS: Error connecting to the multicast addr [ 1013.546846][T22869] netlink: 'syz.5.4139': attribute type 9 has an invalid length. [ 1013.669358][T19816] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1013.831627][T19816] usb 3-1: Using ep0 maxpacket: 8 [ 1013.840521][T19816] usb 3-1: config 162 has an invalid interface number: 166 but max is 0 [ 1013.849708][T19816] usb 3-1: config 162 has no interface number 0 [ 1013.856239][T19816] usb 3-1: config 162 interface 166 has no altsetting 0 [ 1013.875170][T19816] usb 3-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 1013.884569][T19816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.892696][T19816] usb 3-1: Product: syz [ 1013.904824][T22879] NFSD: Failed to start, no listeners configured. [ 1013.911646][T19816] usb 3-1: Manufacturer: syz [ 1013.921982][T19816] usb 3-1: SerialNumber: syz [ 1013.977738][T22874] team0 (unregistering): Port device team_slave_0 removed [ 1014.002076][T22874] team0 (unregistering): Port device team_slave_1 removed [ 1014.169751][T19816] appledisplay 3-1:162.166: Could not find int-in endpoint [ 1014.199087][T19816] usbhid 3-1:162.166: couldn't find an input interrupt endpoint [ 1014.234842][T19816] usb 3-1: USB disconnect, device number 126 [ 1014.271591][ T30] audit: type=1400 audit(1014.254:2526): avc: denied { listen } for pid=22889 comm="syz.3.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1014.497134][T22896] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4146'. [ 1014.538297][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4144'. [ 1015.381548][T22912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'. [ 1015.393914][T22912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1555 sclass=netlink_route_socket pid=22912 comm=syz.2.4147 [ 1015.449958][T22909] lo speed is unknown, defaulting to 1000 [ 1015.833727][T22926] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4152'. [ 1015.852772][T21551] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1016.029419][T21551] usb 6-1: Using ep0 maxpacket: 8 [ 1016.046247][T21551] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.139677][T21551] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1016.207113][T21551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.269707][T21551] usb 6-1: config 0 descriptor?? [ 1016.304523][T21551] uvcvideo 6-1:0.0: Found UVC 0.00 device (2833:0201) [ 1016.334484][T21551] uvcvideo 6-1:0.0: No valid video chain found. [ 1016.525909][ T9] usb 6-1: USB disconnect, device number 62 [ 1017.412481][T22946] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1017.445252][T22948] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4156'. [ 1017.455937][T22948] kvm: apic: phys broadcast and lowest prio [ 1017.733316][T22952] overlayfs: failed lookup in lower (newroot/185, name='bus', err=-40): overlapping layers [ 1017.791113][T22952] overlayfs: failed lookup in lower (newroot/185, name='file0', err=-40): overlapping layers [ 1017.883363][T22955] overlayfs: failed to resolve './file1': -2 [ 1018.486042][ T9] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1018.509447][T18900] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1018.652425][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 1018.666148][ T9] usb 3-1: config 8 has an invalid interface number: 253 but max is 0 [ 1018.676117][ T9] usb 3-1: config 8 has no interface number 0 [ 1018.683888][T18900] usb 4-1: Using ep0 maxpacket: 32 [ 1018.692806][T18900] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1018.701740][ T9] usb 3-1: config 8 interface 253 has no altsetting 0 [ 1018.708595][T18900] usb 4-1: config 0 has no interface number 0 [ 1018.715450][T18900] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1018.732526][ T9] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=26.63 [ 1018.742131][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.750250][T18900] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1018.769398][ T9] usb 3-1: Product: syz [ 1018.779494][ T9] usb 3-1: Manufacturer: syz [ 1018.789393][T18900] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1018.809444][ T9] usb 3-1: SerialNumber: syz [ 1018.816379][T18900] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1018.830335][T18900] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1018.852943][T18900] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1018.862610][T18900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.877325][T18900] usb 4-1: Product: syz [ 1018.881769][T18900] usb 4-1: Manufacturer: syz [ 1018.959383][T18900] usb 4-1: SerialNumber: syz [ 1018.966434][T18900] usb 4-1: config 0 descriptor?? [ 1018.974694][T22975] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1018.987151][T18900] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input68 [ 1018.998684][ T5173] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 1019.034400][ T9] ushc 3-1:8.253: probe with driver ushc failed with error -71 [ 1019.057544][ T9] usb 3-1: USB disconnect, device number 127 [ 1019.185453][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.196007][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.210472][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.222417][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.258761][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.268282][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.286008][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.301876][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.324721][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.337614][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.381025][ T10] usb 4-1: USB disconnect, device number 60 [ 1019.381161][ C1] bcm5974 4-1:0.119: trackpad urb failed: -19 [ 1019.638988][T22997] NFSD: Failed to start, no listeners configured. [ 1019.678905][T23003] nullb0: [CUMANA/ADFS] p1 [ADFS] p1 [ 1019.684401][T23003] nullb0: partition table partially beyond EOD, truncated [ 1019.692289][T23003] nullb0: p1 size 4218939122 extends beyond EOD, truncated [ 1020.616627][T23012] input: 0 as /devices/virtual/input/input69 [ 1022.031728][T23015] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1022.180993][ T30] audit: type=1400 audit(1022.164:2527): avc: denied { append } for pid=23006 comm="syz.5.4172" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1023.100635][T23022] kthread_run failed with err -4 [ 1023.383924][T23041] netlink: 666 bytes leftover after parsing attributes in process `syz.7.4181'. [ 1023.437924][T23035] NFSD: Failed to start, no listeners configured. [ 1023.831186][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1023.849376][T19816] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1024.016031][T19816] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1024.035320][T19816] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1024.046464][T19816] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1024.055654][T19816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.073962][T23046] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1024.085813][T19816] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1024.418302][ T976] usb 7-1: USB disconnect, device number 15 [ 1025.207231][ T30] audit: type=1400 audit(1025.184:2528): avc: denied { relabelfrom } for pid=23066 comm="syz.3.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1025.228797][ T30] audit: type=1400 audit(1025.214:2529): avc: denied { relabelto } for pid=23066 comm="syz.3.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1025.297839][ T30] audit: type=1400 audit(1025.214:2530): avc: denied { map } for pid=23066 comm="syz.3.4185" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1025.569373][ T976] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1025.739588][ T976] usb 7-1: Using ep0 maxpacket: 8 [ 1025.747123][ T976] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1025.768694][ T976] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1025.790718][ T976] usb 7-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.40 [ 1025.802392][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.811748][ T976] usb 7-1: Product: syz [ 1025.814890][T23074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13903 sclass=netlink_route_socket pid=23074 comm=syz.5.4187 [ 1025.817689][ T30] audit: type=1326 audit(1025.794:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23071 comm="syz.2.4188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff6198f749 code=0x0 [ 1025.852043][ T976] usb 7-1: Manufacturer: syz [ 1025.857081][ T976] usb 7-1: SerialNumber: syz [ 1026.077343][T23078] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1026.149539][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1026.276768][ T976] usbhid 7-1:1.0: can't add hid device: -71 [ 1026.293685][ T976] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1026.305977][ T976] usb 7-1: USB disconnect, device number 16 [ 1026.321290][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1026.332889][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1026.342353][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.450996][ T10] usb 6-1: config 0 descriptor?? [ 1026.483785][T23093] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4192'. [ 1027.179973][ T10] aquacomputer_d5next 0003:0C70:F014.0046: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.5-1/input0 [ 1027.701809][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1027.720913][T23117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.729654][T23117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.738833][ T30] audit: type=1400 audit(1027.714:2532): avc: denied { write } for pid=23073 comm="syz.5.4187" name="file0" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1027.762899][ T30] audit: type=1400 audit(1027.744:2533): avc: denied { open } for pid=23073 comm="syz.5.4187" path="/157/file0" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1027.849366][ T976] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1027.869510][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1027.880321][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.919331][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1027.932382][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1027.948085][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.951743][ T30] audit: type=1400 audit(1027.934:2534): avc: denied { connect } for pid=23120 comm="syz.7.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1027.960837][ T10] usb 7-1: config 0 descriptor?? [ 1027.977716][ T30] audit: type=1400 audit(1027.964:2535): avc: denied { read } for pid=23120 comm="syz.7.4202" laddr=172.20.20.10 lport=42637 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1028.019411][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 1028.026064][ T976] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1028.035834][ T976] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1028.044663][ T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1028.054448][ T976] usb 4-1: config 1 has no interface number 0 [ 1028.060859][ T976] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1028.072025][ T976] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1028.085180][ T976] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1028.099440][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.114178][ T976] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1028.322967][ T976] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1028.390557][ T10] microsoft 0003:045E:07DA.0047: ignoring exceeding usage max [ 1028.414142][ T10] HID 045e:07da: Invalid code 65582 type 1 [ 1028.420521][ T10] HID 045e:07da: Invalid code 65583 type 1 [ 1028.426462][ T10] HID 045e:07da: Invalid code 65584 type 1 [ 1028.432612][ T10] HID 045e:07da: Invalid code 65585 type 1 [ 1028.438532][ T10] HID 045e:07da: Invalid code 65586 type 1 [ 1028.445804][ T10] HID 045e:07da: Invalid code 65587 type 1 [ 1028.456580][ T10] HID 045e:07da: Invalid code 65588 type 1 [ 1028.464179][ T10] HID 045e:07da: Invalid code 65589 type 1 [ 1028.470281][ T10] HID 045e:07da: Invalid code 65590 type 1 [ 1028.476141][ T10] HID 045e:07da: Invalid code 65591 type 1 [ 1028.495347][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0047/input/input70 [ 1028.573092][ T10] microsoft 0003:045E:07DA.0047: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1028.737647][T23130] NFSD: Failed to start, no listeners configured. [ 1028.809217][ T10] usb 7-1: USB disconnect, device number 17 [ 1028.841859][ T976] usb 6-1: USB disconnect, device number 63 [ 1029.386937][T23151] xt_recent: Unsupported userspace flags (000000b1) [ 1029.399594][ T976] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1029.410543][T23151] fuse: Bad value for 'fd' [ 1029.426615][T23151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1029.439500][T23151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1029.795847][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4209'. [ 1030.089428][ T10] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1030.291182][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1030.303297][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.313511][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1030.322783][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.333561][ T10] usb 6-1: config 0 descriptor?? [ 1030.672469][ T9] usb 4-1: USB disconnect, device number 61 [ 1030.704041][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1030.722478][T23158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.732858][T23158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.774211][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1030.784817][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1030.801221][ T10] usb 6-1: USB disconnect, device number 64 [ 1030.863051][ T30] audit: type=1400 audit(1030.844:2536): avc: denied { getopt } for pid=23170 comm="syz.5.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1030.938900][ T30] audit: type=1400 audit(1030.914:2537): avc: denied { name_connect } for pid=23172 comm="syz.5.4215" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1031.955577][ T10] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1032.071380][ T30] audit: type=1400 audit(1032.054:2538): avc: denied { read } for pid=23190 comm="syz.6.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1032.260571][T23204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4222'. [ 1032.269643][T23204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4222'. [ 1032.357848][ T10] usb 6-1: device descriptor read/64, error -71 [ 1032.609480][ T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1032.947380][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1032.955389][ T10] usb 6-1: device descriptor read/64, error -71 [ 1033.063255][ T30] audit: type=1400 audit(1033.024:2539): avc: denied { link } for pid=23211 comm="syz.2.4224" name="#4e" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1033.093182][ T10] usb usb6-port1: attempt power cycle [ 1033.139965][ T30] audit: type=1400 audit(1033.124:2540): avc: denied { append } for pid=23219 comm="syz.7.4227" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1033.262521][ T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1033.271640][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.281283][ T9] usb 7-1: Product: syz [ 1033.285458][ T9] usb 7-1: Manufacturer: syz [ 1033.290078][ T9] usb 7-1: SerialNumber: syz [ 1033.295878][ T9] usb 7-1: config 0 descriptor?? [ 1033.302129][ T9] hso 7-1:0.0: Not our interface [ 1033.307283][ T9] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1033.459356][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1033.480397][ T10] usb 6-1: device descriptor read/8, error -71 [ 1033.729513][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1033.829953][ T10] usb 6-1: device descriptor read/8, error -71 [ 1033.940335][ T10] usb usb6-port1: unable to enumerate USB device [ 1034.305737][T23243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.526994][T23252] overlayfs: failed to resolve './file1': -2 [ 1034.649958][T23253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4235'. [ 1034.757465][T23251] SELinux: failed to load policy [ 1034.916335][T23256] comedi comedi3: dt2801: I/O port conflict (0x4f23,2) [ 1035.396396][ T9] usb 7-1: USB disconnect, device number 18 [ 1035.469356][ T6335] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1035.705774][T23271] kAFS: unable to lookup cell '' [ 1035.741561][ T6335] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1035.765911][ T6335] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.869456][ T6335] usb 4-1: config 220 has no interface number 2 [ 1035.875760][ T6335] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1035.919565][ T6335] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1035.929742][ T6335] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1035.947262][ T6335] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1035.961744][ T6335] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1035.974805][ T6335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.994637][ T6335] usb 4-1: Product: syz [ 1036.000918][ T6335] usb 4-1: Manufacturer: syz [ 1036.009499][ T6335] usb 4-1: SerialNumber: syz [ 1036.249468][T21551] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1036.359633][T23271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4239'. [ 1036.398816][ T6335] usb 4-1: selecting invalid altsetting 0 [ 1036.404912][ T30] audit: type=1400 audit(1036.334:2541): avc: denied { bind } for pid=23266 comm="syz.5.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1036.437614][ T6335] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1036.449394][ T6335] uvcvideo 4-1:220.0: No valid video chain found. [ 1036.459526][ T30] audit: type=1400 audit(1036.344:2542): avc: denied { nlmsg_read } for pid=23266 comm="syz.5.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1036.491974][ T6335] usb 4-1: selecting invalid altsetting 0 [ 1036.502181][ T6335] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1036.542613][ T6335] usb 4-1: USB disconnect, device number 62 [ 1036.649365][T21551] usb 7-1: Using ep0 maxpacket: 32 [ 1036.675129][T23283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1036.684139][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1036.703172][T23283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1036.712262][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1036.761660][T12482] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.773227][T12482] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.782275][T21551] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1036.790714][T21551] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1036.799808][T12482] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.850138][T12482] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.864683][T21551] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1036.874203][T21551] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1036.907921][T21551] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1037.059628][T21551] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1037.094367][T21551] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1037.122024][T21551] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.159037][T21551] usb 7-1: config 0 descriptor?? [ 1037.389730][T21551] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1037.495002][T21551] usb 7-1: USB disconnect, device number 19 [ 1037.515060][T21551] usblp0: removed [ 1038.139509][T21551] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1038.195492][T23302] loop6: detected capacity change from 0 to 524287487 [ 1038.213735][T23302] buffer_io_error: 6 callbacks suppressed [ 1038.213750][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.241144][T23301] NFSD: Failed to start, no listeners configured. [ 1038.269441][T21551] usb 7-1: device descriptor read/64, error -71 [ 1038.372884][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.460213][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.488215][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.516287][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.527646][T21551] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1038.614752][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.659352][T21551] usb 7-1: device descriptor read/64, error -71 [ 1038.671981][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.698917][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.717032][T23302] ldm_validate_partition_table(): Disk read failed. [ 1038.738480][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.792808][T21551] usb usb7-port1: attempt power cycle [ 1038.836332][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.888844][T23302] Dev loop6: unable to read RDB block 0 [ 1038.897970][T23302] loop6: unable to read partition table [ 1038.952766][T23302] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1039.189559][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1039.328799][T23335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4257'. [ 1039.350845][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.375249][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1039.405585][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1039.471144][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.480953][ T10] usb 3-1: Product: syz [ 1039.485824][ T10] usb 3-1: Manufacturer: syz [ 1039.496493][ T10] usb 3-1: SerialNumber: syz [ 1039.680372][ T30] audit: type=1400 audit(1039.664:2543): avc: denied { read open } for pid=23344 comm="syz.3.4260" path="/" dev="configfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1039.716190][ T30] audit: type=1400 audit(1039.664:2544): avc: denied { read open } for pid=23344 comm="syz.3.4260" path="/" dev="configfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1039.725401][T23329] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1040.361598][ T30] audit: type=1400 audit(1040.344:2545): avc: denied { mounton } for pid=23362 comm="syz.5.4263" path="/proc/609/task" dev="proc" ino=88139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1040.434448][ T30] audit: type=1400 audit(1040.364:2546): avc: denied { mount } for pid=23362 comm="syz.5.4263" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1040.551418][T23363] VFS: Mount too revealing [ 1040.590726][T23329] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4255'. [ 1040.617007][ T10] cdc_ncm 3-1:1.0: bind() failure [ 1040.627503][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1040.634762][ T10] cdc_ncm 3-1:1.1: bind() failure [ 1041.119912][ T30] audit: type=1400 audit(1040.684:2547): avc: denied { getopt } for pid=23362 comm="syz.5.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1041.142552][ T10] usb 3-1: USB disconnect, device number 2 [ 1041.522663][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4268'. [ 1041.559159][T23379] syzkaller1: entered promiscuous mode [ 1041.566034][T23379] syzkaller1: entered allmulticast mode [ 1041.609891][T23372] syzkaller1: left promiscuous mode [ 1041.619353][ T6335] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1041.684703][T23372] syzkaller1: left allmulticast mode [ 1041.819608][ T9] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1041.851126][ T6335] usb 6-1: config index 0 descriptor too short (expected 2360, got 56) [ 1041.873263][ T6335] usb 6-1: config 130 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.911814][ T6335] usb 6-1: config 130 has 0 interfaces, different from the descriptor's value: 5 [ 1041.941042][ T6335] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1041.950455][ T30] audit: type=1400 audit(1041.924:2548): avc: denied { map } for pid=23388 comm="syz.3.4270" path="socket:[88248]" dev="sockfs" ino=88248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1042.002735][T23390] befs: (nbd7): No write support. Marking filesystem read-only [ 1042.059618][ T6335] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1042.081293][ T9] usb 7-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.096236][ T6335] usb 6-1: Manufacturer: syz [ 1042.132593][ T9] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1042.147589][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.193046][ T9] usb 7-1: Product: syz [ 1042.197232][ T9] usb 7-1: Manufacturer: syz [ 1042.212387][ T9] usb 7-1: SerialNumber: syz [ 1042.248935][ T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1042.266052][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1042.307607][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1042.334061][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1042.361084][ T9] dvb_usb_umt_010 7-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1042.460276][ T9] usb 7-1: USB disconnect, device number 23 [ 1042.972697][T19481] usb 6-1: USB disconnect, device number 69 [ 1042.985389][ T30] audit: type=1400 audit(1042.964:2549): avc: denied { read } for pid=23397 comm="syz.2.4272" path="socket:[87388]" dev="sockfs" ino=87388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1043.169055][ T30] audit: type=1400 audit(1043.144:2550): avc: denied { setopt } for pid=23403 comm="syz.6.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1043.227086][ T30] audit: type=1400 audit(1043.174:2551): avc: denied { map } for pid=23403 comm="syz.6.4274" path="/proc/sys/net/ipv4/vs/sync_ports" dev="proc" ino=88280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 1043.480336][ T30] audit: type=1400 audit(1043.174:2552): avc: denied { execute } for pid=23403 comm="syz.6.4274" path="/proc/sys/net/ipv4/vs/sync_ports" dev="proc" ino=88280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 1043.936903][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557fbc00: rx timeout, send abort [ 1043.945263][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880557fbc00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 1043.959826][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030f31c00: rx timeout, send abort [ 1044.089471][ T5886] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1044.239409][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 1044.246043][ T5886] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1044.254430][ T5886] usb 6-1: config 179 has no interface number 0 [ 1044.260911][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1044.272228][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1044.284391][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1044.296125][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1044.307649][ T5886] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1044.321255][ T5886] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1044.332569][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.343669][T23423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1044.554853][T23429] macvlan2: entered promiscuous mode [ 1044.566581][ T5886] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input71 [ 1044.590340][T23429] macvlan3: entered promiscuous mode [ 1044.791628][T23423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.807847][T23423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.909419][T19481] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1044.960383][T19816] usb 6-1: USB disconnect, device number 70 [ 1044.960395][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1045.072118][T19481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1045.099511][T19481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.110189][T19481] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1045.119217][T19481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.152800][T19481] usb 3-1: config 0 descriptor?? [ 1045.198115][T23443] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 1045.273058][T23448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4287'. [ 1045.328645][ T5886] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1045.500818][ T5886] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1045.510381][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.525959][ T5886] usb 7-1: config 0 descriptor?? [ 1045.531013][T19816] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1045.576562][ T5886] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1045.679327][T19481] isku 0003:1E7D:319C.0048: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 1045.706037][T19816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.717154][T19816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.729430][T19816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1045.742554][T19816] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1045.754853][T19816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.781555][T19816] usb 4-1: config 0 descriptor?? [ 1045.883175][T23431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.894169][T23431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.936009][T19481] isku 0003:1E7D:319C.0048: couldn't init struct isku_device [ 1045.943676][T19481] isku 0003:1E7D:319C.0048: couldn't install keyboard [ 1045.984216][T19481] isku 0003:1E7D:319C.0048: probe with driver isku failed with error -71 [ 1046.055817][T19481] usb 3-1: USB disconnect, device number 3 [ 1046.265997][T19816] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1046.319363][T21551] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1046.417200][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1046.417216][ T30] audit: type=1400 audit(1046.394:2556): avc: denied { name_bind 0x1000000 } for pid=23428 comm="syz.6.4283" path="socket:[87816]" dev="sockfs" ino=87816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1046.469464][T21551] usb 6-1: Using ep0 maxpacket: 8 [ 1046.477662][T21551] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1046.488560][T21551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.491222][ T5886] usb 7-1: USB disconnect, device number 24 [ 1046.506470][T21551] usb 6-1: config 0 descriptor?? [ 1046.839144][T23468] binder: 23464:23468 ioctl c0306201 0 returned -14 [ 1046.918938][T21551] wacom 0003:056A:0094.004A: unknown main item tag 0x4 [ 1046.926666][T21551] wacom 0003:056A:0094.004A: Using device in hidraw-only mode [ 1046.938068][T21551] wacom 0003:056A:0094.004A: hidraw1: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 1047.166623][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4290'. [ 1047.182691][T23457] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1047.193835][T23457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.207754][T23457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.251458][T21551] usb 6-1: USB disconnect, device number 71 [ 1047.734173][T23478] bridge0: port 3(gretap0) entered blocking state [ 1047.740749][T23478] bridge0: port 3(gretap0) entered disabled state [ 1047.747338][T23478] gretap0: entered allmulticast mode [ 1047.753525][T23478] gretap0: entered promiscuous mode [ 1047.758955][T23478] bridge0: port 3(gretap0) entered blocking state [ 1047.765418][T23478] bridge0: port 3(gretap0) entered forwarding state [ 1048.019449][T21551] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1048.040104][T19481] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1048.042519][T23486] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1048.180849][T21551] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1048.189001][T21551] usb 6-1: not running at top speed; connect to a high speed hub [ 1048.198043][T21551] usb 6-1: config 5 has an invalid descriptor of length 224, skipping remainder of the config [ 1048.208790][T21551] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1048.217863][T19481] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1048.226280][T19481] usb 7-1: config 0 has no interface number 0 [ 1048.234356][T19481] usb 7-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 1048.244035][T19481] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.252225][T19481] usb 7-1: Product: syz [ 1048.252352][T21551] usb 6-1: New USB device found, idVendor=13b1, idProduct=7e42, bcdDevice=74.a9 [ 1048.265584][T19481] usb 7-1: Manufacturer: syz [ 1048.270495][T19481] usb 7-1: SerialNumber: syz [ 1048.275896][T21551] usb 6-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1048.284799][T19481] usb 7-1: config 0 descriptor?? [ 1048.290423][T21551] usb 6-1: Product: syz [ 1048.294622][T21551] usb 6-1: Manufacturer: syz [ 1048.300309][T19481] xsens_mt 7-1:0.1: xsens_mt converter detected [ 1048.308238][T21551] usb 6-1: SerialNumber: syz [ 1048.314326][T19481] usb 7-1: xsens_mt converter now attached to ttyUSB0 [ 1048.400702][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1048.511185][T23484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.531360][T23484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.534538][T21551] usb 6-1: USB disconnect, device number 72 [ 1048.549194][T19481] usb 7-1: USB disconnect, device number 25 [ 1048.562532][T19481] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 1048.571219][ T9] usb 3-1: config 0 has no interfaces? [ 1048.571436][T19481] xsens_mt 7-1:0.1: device disconnected [ 1048.584126][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1048.595729][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1048.604917][ T9] usb 3-1: Product: syz [ 1048.611798][ T9] usb 3-1: Manufacturer: syz [ 1048.616401][ T9] usb 3-1: SerialNumber: syz [ 1048.623790][ T9] usb 3-1: config 0 descriptor?? [ 1048.685193][ T30] audit: type=1400 audit(1048.664:2557): avc: denied { validate_trans } for pid=23500 comm="syz.3.4303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1048.711627][ T117] usb 4-1: USB disconnect, device number 63 [ 1048.819155][T23501] lo speed is unknown, defaulting to 1000 [ 1048.866942][T21551] usb 3-1: USB disconnect, device number 4 [ 1049.239393][T21551] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1049.650007][T21551] usb 4-1: Using ep0 maxpacket: 8 [ 1049.668861][T21551] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.681773][T21551] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1049.715836][T21551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.807291][T21551] hub 4-1:32.0: bad descriptor, ignoring hub [ 1049.813363][T21551] hub 4-1:32.0: probe with driver hub failed with error -5 [ 1050.009721][ T30] audit: type=1400 audit(1049.994:2558): avc: denied { watch watch_reads } for pid=23523 comm="syz.6.4309" path="pipe:[80400]" dev="pipefs" ino=80400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1050.035128][T23524] [ 1050.037457][T23524] ====================================================== [ 1050.044441][T23524] WARNING: possible circular locking dependency detected [ 1050.051427][T23524] syzkaller #0 Tainted: G L [ 1050.057370][T23524] ------------------------------------------------------ [ 1050.064354][T23524] syz.6.4309/23524 is trying to acquire lock: [ 1050.070386][T23524] ffff88802036dd58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1050.078883][T23524] [ 1050.078883][T23524] but task is already holding lock: [ 1050.086222][T23524] ffff88807a328468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1050.094453][T23524] [ 1050.094453][T23524] which lock already depends on the new lock. [ 1050.094453][T23524] [ 1050.104826][T23524] [ 1050.104826][T23524] the existing dependency chain (in reverse order) is: [ 1050.113818][T23524] [ 1050.113818][T23524] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 1050.121166][T23524] __mutex_lock+0x1aa/0x1ca0 [ 1050.126256][T23524] anon_pipe_write+0x15d/0x1bd0 [ 1050.131607][T23524] __kernel_write_iter+0x720/0xb10 [ 1050.137214][T23524] __kernel_write+0xf5/0x140 [ 1050.142296][T23524] autofs_notify_daemon+0x4db/0xd60 [ 1050.147993][T23524] autofs_wait+0x10f3/0x1ac0 [ 1050.153083][T23524] autofs_mount_wait+0x132/0x3c0 [ 1050.158529][T23524] autofs_d_automount+0x4b2/0x960 [ 1050.164045][T23524] __traverse_mounts+0x1b9/0x830 [ 1050.169482][T23524] step_into_slowpath+0x772/0xf50 [ 1050.174998][T23524] path_lookupat+0x627/0xc40 [ 1050.180083][T23524] filename_lookup+0x224/0x5f0 [ 1050.185339][T23524] user_path_at+0x3a/0x60 [ 1050.190160][T23524] __x64_sys_mount+0x1fb/0x310 [ 1050.195413][T23524] do_syscall_64+0xcd/0xf80 [ 1050.200410][T23524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.206792][T23524] [ 1050.206792][T23524] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1050.214486][T23524] __mutex_lock+0x1aa/0x1ca0 [ 1050.219568][T23524] autofs_notify_daemon+0x4a6/0xd60 [ 1050.225258][T23524] autofs_wait+0x10f3/0x1ac0 [ 1050.230342][T23524] autofs_mount_wait+0x132/0x3c0 [ 1050.235769][T23524] autofs_d_automount+0x4b2/0x960 [ 1050.241286][T23524] __traverse_mounts+0x1b9/0x830 [ 1050.246725][T23524] step_into_slowpath+0x772/0xf50 [ 1050.252255][T23524] path_lookupat+0x627/0xc40 [ 1050.257338][T23524] filename_lookup+0x224/0x5f0 [ 1050.262593][T23524] kern_path+0x35/0x50 [ 1050.267153][T23524] lookup_bdev+0xd8/0x280 [ 1050.271977][T23524] resume_store+0x1d6/0x490 [ 1050.276975][T23524] kobj_attr_store+0x58/0x80 [ 1050.282059][T23524] sysfs_kf_write+0xf2/0x150 [ 1050.287153][T23524] kernfs_fop_write_iter+0x3af/0x570 [ 1050.292942][T23524] vfs_write+0x7d3/0x11d0 [ 1050.297764][T23524] ksys_write+0x12a/0x250 [ 1050.302586][T23524] do_syscall_64+0xcd/0xf80 [ 1050.307583][T23524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.313968][T23524] [ 1050.313968][T23524] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1050.321154][T23524] __mutex_lock+0x1aa/0x1ca0 [ 1050.326237][T23524] kernfs_seq_start+0x4f/0x2a0 [ 1050.331496][T23524] seq_read_iter+0x2c1/0x12d0 [ 1050.336665][T23524] kernfs_fop_read_iter+0x46c/0x610 [ 1050.342358][T23524] copy_splice_read+0x618/0xc20 [ 1050.347701][T23524] do_splice_read+0x285/0x370 [ 1050.352870][T23524] splice_direct_to_actor+0x2a1/0xa30 [ 1050.358747][T23524] do_splice_direct+0x174/0x240 [ 1050.364093][T23524] do_sendfile+0xb06/0xe50 [ 1050.368999][T23524] __x64_sys_sendfile64+0x1d8/0x220 [ 1050.374693][T23524] do_syscall_64+0xcd/0xf80 [ 1050.379697][T23524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.386085][T23524] [ 1050.386085][T23524] -> #0 (&p->lock){+.+.}-{4:4}: [ 1050.393096][T23524] __lock_acquire+0x1669/0x2890 [ 1050.398443][T23524] lock_acquire+0x179/0x330 [ 1050.403440][T23524] __mutex_lock+0x1aa/0x1ca0 [ 1050.408526][T23524] seq_read_iter+0xe1/0x12d0 [ 1050.413610][T23524] kernfs_fop_read_iter+0x46c/0x610 [ 1050.419307][T23524] copy_splice_read+0x618/0xc20 [ 1050.424658][T23524] do_splice_read+0x285/0x370 [ 1050.429827][T23524] splice_file_to_pipe+0x109/0x120 [ 1050.435435][T23524] do_sendfile+0x400/0xe50 [ 1050.440342][T23524] __x64_sys_sendfile64+0x1d8/0x220 [ 1050.446033][T23524] do_syscall_64+0xcd/0xf80 [ 1050.451037][T23524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.457419][T23524] [ 1050.457419][T23524] other info that might help us debug this: [ 1050.457419][T23524] [ 1050.467611][T23524] Chain exists of: [ 1050.467611][T23524] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 1050.467611][T23524] [ 1050.479827][T23524] Possible unsafe locking scenario: [ 1050.479827][T23524] [ 1050.487246][T23524] CPU0 CPU1 [ 1050.492578][T23524] ---- ---- [ 1050.497909][T23524] lock(&pipe->mutex); [ 1050.502038][T23524] lock(&sbi->pipe_mutex); [ 1050.509028][T23524] lock(&pipe->mutex); [ 1050.515670][T23524] lock(&p->lock); [ 1050.519445][T23524] [ 1050.519445][T23524] *** DEADLOCK *** [ 1050.519445][T23524] [ 1050.527553][T23524] 1 lock held by syz.6.4309/23524: [ 1050.532627][T23524] #0: ffff88807a328468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1050.541297][T23524] [ 1050.541297][T23524] stack backtrace: [ 1050.547158][T23524] CPU: 1 UID: 0 PID: 23524 Comm: syz.6.4309 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.547175][T23524] Tainted: [L]=SOFTLOCKUP [ 1050.547179][T23524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1050.547186][T23524] Call Trace: [ 1050.547190][T23524] [ 1050.547195][T23524] dump_stack_lvl+0x116/0x1f0 [ 1050.547213][T23524] print_circular_bug+0x275/0x340 [ 1050.547227][T23524] check_noncircular+0x146/0x160 [ 1050.547241][T23524] __lock_acquire+0x1669/0x2890 [ 1050.547255][T23524] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 1050.547268][T23524] lock_acquire+0x179/0x330 [ 1050.547280][T23524] ? seq_read_iter+0xe1/0x12d0 [ 1050.547295][T23524] ? __pfx___might_resched+0x10/0x10 [ 1050.547307][T23524] __mutex_lock+0x1aa/0x1ca0 [ 1050.547325][T23524] ? seq_read_iter+0xe1/0x12d0 [ 1050.547338][T23524] ? do_splice_read+0x285/0x370 [ 1050.547354][T23524] ? do_sendfile+0x400/0xe50 [ 1050.547366][T23524] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1050.547382][T23524] ? do_syscall_64+0xcd/0xf80 [ 1050.547396][T23524] ? seq_read_iter+0xe1/0x12d0 [ 1050.547411][T23524] ? __pfx___mutex_lock+0x10/0x10 [ 1050.547428][T23524] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 1050.547440][T23524] ? seq_read_iter+0xe1/0x12d0 [ 1050.547453][T23524] seq_read_iter+0xe1/0x12d0 [ 1050.547468][T23524] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1050.547481][T23524] kernfs_fop_read_iter+0x46c/0x610 [ 1050.547501][T23524] copy_splice_read+0x618/0xc20 [ 1050.547517][T23524] ? __pfx_try_to_wake_up+0x10/0x10 [ 1050.547534][T23524] ? __pfx_copy_splice_read+0x10/0x10 [ 1050.547551][T23524] ? __fget_files+0x204/0x3c0 [ 1050.547567][T23524] ? __pfx_copy_splice_read+0x10/0x10 [ 1050.547582][T23524] do_splice_read+0x285/0x370 [ 1050.547597][T23524] splice_file_to_pipe+0x109/0x120 [ 1050.547614][T23524] do_sendfile+0x400/0xe50 [ 1050.547628][T23524] ? __pfx_do_sendfile+0x10/0x10 [ 1050.547641][T23524] ? __pfx___seccomp_filter+0x10/0x10 [ 1050.547659][T23524] __x64_sys_sendfile64+0x1d8/0x220 [ 1050.547675][T23524] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1050.547692][T23524] ? __secure_computing+0x28e/0x3b0 [ 1050.547709][T23524] do_syscall_64+0xcd/0xf80 [ 1050.547723][T23524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.547734][T23524] RIP: 0033:0x7f6e1f18f749 [ 1050.547744][T23524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.547755][T23524] RSP: 002b:00007f6e200ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1050.547765][T23524] RAX: ffffffffffffffda RBX: 00007f6e1f3e5fa0 RCX: 00007f6e1f18f749 [ 1050.547773][T23524] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 1050.547779][T23524] RBP: 00007f6e1f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1050.547786][T23524] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1050.547792][T23524] R13: 00007f6e1f3e6038 R14: 00007f6e1f3e5fa0 R15: 00007ffd80e1a838 [ 1050.547802][T23524] [ 1050.989506][ T9] usb 4-1: reset high-speed USB device number 64 using dummy_hcd [ 1051.351960][T23506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.360403][T23506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.979578][ T6335] usb 4-1: USB disconnect, device number 64 [ 1053.880615][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.890518][T12483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.942790][T12483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.002454][T12483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.042789][T12483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.112375][T12483] bridge_slave_1: left allmulticast mode [ 1054.118113][T12483] bridge_slave_1: left promiscuous mode [ 1054.124028][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.131989][T12483] bridge_slave_0: left allmulticast mode [ 1054.137603][T12483] bridge_slave_0: left promiscuous mode [ 1054.143795][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.290418][T12483] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1054.363547][T12483] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1054.459061][T12483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.468629][T12483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.478213][T12483] bond0 (unregistering): Released all slaves [ 1054.486127][T12483] bond1 (unregistering): Released all slaves [ 1054.545404][T12483] tipc: Left network mode [ 1054.679470][T12483] hsr_slave_0: left promiscuous mode [ 1054.684987][T12483] hsr_slave_1: left promiscuous mode [ 1054.699164][T12483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.709833][T12483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.721951][T12483] veth1_macvtap: left promiscuous mode [ 1054.727428][T12483] veth0_macvtap: left promiscuous mode [ 1054.733123][T12483] veth1_vlan: left promiscuous mode [ 1054.738449][T12483] veth0_vlan: left promiscuous mode [ 1054.834200][T12483] team0 (unregistering): Port device team_slave_1 removed [ 1054.855813][T12483] team0 (unregistering): Port device team_slave_0 removed [ 1055.122509][T12483] IPVS: stop unused estimator thread 0... [ 1055.959956][T21935] Bluetooth: hci0: command 0x0406 tx timeout