last executing test programs: 18m48.135141898s ago: executing program 0 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006400006000000000002140000"], 0x70}}, 0x0) 18m47.822603297s ago: executing program 0 (id=1144): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 18m46.817365528s ago: executing program 0 (id=1145): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x9e8}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000140)="740a059b53162d8be1b7f731d12ab6b985acacca9eabbaf06eee083bce3c43565ea2e486db44dda5810857a4e508a1dc328e9afdff5a39fec3499bb97285abd1a2e1278c91b27bb1137cc36469df1c8e96e2a9152e37bf24a140a47b95dabb35e04f0eb1e9b99da3bf9e312bf6b4f8858b9a38513afc6413ef5dcf", &(0x7f00000000c0)=""/4, 0x4}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0xd) listen(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000960000000800450000200000000000119078"], 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000037c0)=""/4086, 0xff6}], 0x2}, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x137, &(0x7f00000047c0)={@empty, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x4, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv4=@icmp={{0x17, 0x4, 0x1, 0x1, 0x119, 0x66, 0x0, 0xe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x30, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x2}, {@empty, 0x4e}, {@remote, 0x2}, {@private=0xa010100, 0x3}, {@multicast2, 0x1}]}, @lsrr={0x83, 0xf, 0xd4, [@private=0xa010102, @local, @broadcast]}, @timestamp={0x44, 0xc, 0x9d, 0x0, 0x1, [0x80, 0x2]}]}}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6a, 0x5, {0x2d, 0x4, 0x0, 0x21, 0x7, 0x65, 0x81, 0x8, 0x29, 0xe3ca, @local, @empty, {[@ssrr={0x89, 0x17, 0xdb, [@remote, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010100, @local]}, @end, @rr={0x7, 0xf, 0x5b, [@remote, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010102]}, @rr={0x7, 0xf, 0xeb, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast]}, @end, @timestamp_prespec={0x44, 0x24, 0x16, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0x7}, {@broadcast, 0x2}, {@rand_addr=0x64010102, 0x6}]}, @timestamp_prespec={0x44, 0x24, 0xa7, 0x3, 0xb, [{@multicast2, 0x3}, {@remote, 0x3}, {@multicast2, 0x3}, {@loopback, 0x3}]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x2, 0x6, "6ee6432b"}, {0x2, 0x8, "7fbc13ea2fe0"}, {0x6, 0xb, "f6635e88db8a4009bb"}]}, @end]}}, "1f"}}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r7) 18m46.755982333s ago: executing program 0 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) 18m45.852261831s ago: executing program 0 (id=1148): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000004c0)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) 18m45.286632693s ago: executing program 0 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="570033008000de00ffffffffffff08021100000050505050505080000101000000000000640002450006a4b039a74ee532a1bd870921"], 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x0) 18m45.074834231s ago: executing program 32 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="570033008000de00ffffffffffff08021100000050505050505080000101000000000000640002450006a4b039a74ee532a1bd870921"], 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x0) 18m41.872973122s ago: executing program 3 (id=1174): r0 = socket$kcm(0x2, 0xa, 0x2) getpeername(r0, 0x0, 0x0) 18m41.778460881s ago: executing program 3 (id=1176): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x3c}}, 0x800) 18m41.492016453s ago: executing program 3 (id=1178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000004b00)='./file0\x00', &(0x7f0000004b40)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 18m38.608278907s ago: executing program 3 (id=1184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffeeac8699}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44381, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) epoll_create(0xaf2) socketpair(0x5, 0x2, 0x1000, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000080)={0x4}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) io_uring_setup(0x4fee, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r8, 0x4, 0xa800) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x5437, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) flock(r10, 0xd) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 18m37.516832397s ago: executing program 3 (id=1190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85000000710000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) stat(&(0x7f0000004b00)='./file0\x00', &(0x7f0000004b40)) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') 18m37.235451452s ago: executing program 3 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fefffffffbdbdf256700000008000100ffffffff08000300", @ANYRES32=r2, @ANYBLOB="0c0800000050158ee72d0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4804) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="44c33b69eb0b000000dec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$TIOCSLCKTRMIOS(r3, 0x89f2, &(0x7f0000000180)) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x100800, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r9 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x40) r11 = openat(r10, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0x9361, 0x0) 18m36.925386102s ago: executing program 33 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fefffffffbdbdf256700000008000100ffffffff08000300", @ANYRES32=r2, @ANYBLOB="0c0800000050158ee72d0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4804) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="44c33b69eb0b000000dec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$TIOCSLCKTRMIOS(r3, 0x89f2, &(0x7f0000000180)) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x100800, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r9 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x40) r11 = openat(r10, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0x9361, 0x0) 11m24.688116344s ago: executing program 4 (id=3284): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000843550400000000000001090224000100000000090400000103270f249e2e192be881000000092100000001220b00"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x88, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 11m21.244013121s ago: executing program 4 (id=3299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x2, 0x9, 0x3, 0x10001, 0x1, 0x4, 0x10000, 0x5}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe"], 0x0) syz_open_procfs(0x0, 0x0) 11m17.821171613s ago: executing program 2 (id=3308): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x6, 0x1fa, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e8, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x46, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'wg0\x00', {}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 11m17.587219586s ago: executing program 4 (id=3310): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="2cd2a50f60850f20000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25120000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r3 = epoll_create(0x80f04) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x4, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x28008891}, 0xe1292df3fa212b22) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11m16.465540344s ago: executing program 2 (id=3314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x6, @empty, 0xffffffff}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$get_keyring_id(0x0, 0x0, 0x1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socket(0x29, 0x3, 0x0) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r4, 0x100000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000000)=0x84) 11m13.971669558s ago: executing program 2 (id=3319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) (fail_nth: 2) 11m13.636762185s ago: executing program 2 (id=3320): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0x1e1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') llistxattr(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r4}, 0x18) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3, 0x5063}], 0x1, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000213, &(0x7f0000000840)=ANY=[@ANYRES8=r4], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x6, &(0x7f00000003c0)=[{0x7, 0x6, 0x6, 0xadf}, {0xf, 0x3, 0x80, 0x5f48}, {0x0, 0x87, 0x80, 0x6}, {0x100, 0x9, 0x4, 0x3}, {0x8, 0x7, 0x6, 0x101}, {0x10, 0x0, 0x81, 0x1}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) 11m12.936958745s ago: executing program 4 (id=3321): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x64840, 0x4) r1 = socket$pptp(0x18, 0x1, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000380)={'vlan0\x00', 0xfff7}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000000)='\\', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="8ae89b88b90a00925a0df69144000000", @ANYRESDEC=r5, @ANYBLOB="070600000000000000002d0000000a0001007770616e3000000008002f000600000005002e00380000000c0005000203aaaaaaaaaaaa05002b0002000000"], 0x44}}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x3}) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc00000, 0x5e4781789cf1f5be, &(0x7f00003ff000/0xc00000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 11m12.785588353s ago: executing program 2 (id=3322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x0) 11m12.062918525s ago: executing program 4 (id=3325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socket$kcm(0x2, 0x3, 0x2) r1 = syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={0x0}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) read$msr(r1, &(0x7f00000001c0)=""/6, 0x6) lsetxattr$security_ima(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000280), &(0x7f0000000100)=ANY=[@ANYBLOB="52e106"], 0x2, 0x1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000500)=[{&(0x7f00000002c0)="fcf9f0237c46a0b9070c6d995add90a0079a71020b33f607d5a7b809dea7346132ba3fb88fa71ba2e64958735f3c24afc4ec08e056c2d6bb26611e7562efff26ea34e28d703ff9", 0x47}, {&(0x7f0000000340)="96eddb6c257624b9d5f65e0f9219589f6e5645bbc8b48cadc2b628d7bd964b504e9bc8f5ecc693b8650fad0a0a4fd5e14414bb0ab64b21b025205fa5189ed0541427feccc1f5601b61744de4da9d8815d38e744cd21a50688b7b66777c6de605e15f73ce8dddb004444c02a0a34066f0", 0x70}, {&(0x7f0000000440)="b240a0e8850c78d96ae5f117a970290b0158cd45de7b86afc6d58490a55e71280ab16e63fc7b0dbb8caf4b3d077d510b19349656dcd5f473926860593a4a92c003c81e157434578f109feddb0068060bb5d04480930e91cb67178767ca13", 0x5e}, {&(0x7f00000004c0)="591809ba407ada71f8cef8aaf8eb69f6d11c805f4939f8", 0x17}], 0x4) 11m9.464882197s ago: executing program 4 (id=3335): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRES16=r1, @ANYRESOCT=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x40, 0x17, 0x3, "b1b8ed"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r8, @ANYRESDEC=r8, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="b31722aab4473aeba7365b27a4e484eb5143674a2bd90be4c1071c3ea9a28844d831fb80ea9e76d9cf84d3f029e4be613d717a905587da292b5349ebcb8e2cdb07271473c2deb9bbed81d67291cd3afba51a4bf5ce6d28f90adffc394eab9eb6c3d4a9b4bea5498611c80d4074a20d961df803c5c3a30fed8befcf895b6441c04fe57bba6f88b92b58dc3ef9b8d0922a6571cd4df598b0a5fb40499c410d2f8371c29e9898462c64d8e44e186fdac5c818", @ANYRESHEX], 0x14}}, 0x0) 11m8.972684991s ago: executing program 2 (id=3338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000180)=0x1000b6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000056000/0x2000)=nil, 0x2000, 0x9, 0x30, r3, 0xf68ba000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x401, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fc020000000000000004000000000000fe8000000000000000000000000000aa00000200000000000000000000089078"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xa7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @local, 0x8, 0x700, 0x10000, 0xa}}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@deltfilter={0x34, 0x2d, 0x0, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0xfff1}, {0xe, 0x4}, {0xffff, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x34}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x43}, [0x0, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff000000], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@cpu={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x7, 0x0, 0x1, [0x200, 0x101, 0x6, 0x8004, 0xcbdc, 0x3, 0x1, 0x9841, 0xffff, 0x7, 0x9, 0x3, 0x1, 0x101, 0x1], 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x7, 0x4, 0x82d, 'netbios-ns\x00', 'syz0\x00', {0x94}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r3) 11m8.638399786s ago: executing program 34 (id=3338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000180)=0x1000b6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000056000/0x2000)=nil, 0x2000, 0x9, 0x30, r3, 0xf68ba000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x401, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fc020000000000000004000000000000fe8000000000000000000000000000aa00000200000000000000000000089078"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xa7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @local, 0x8, 0x700, 0x10000, 0xa}}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@deltfilter={0x34, 0x2d, 0x0, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0xfff1}, {0xe, 0x4}, {0xffff, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x34}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x43}, [0x0, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff000000], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@cpu={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x7, 0x0, 0x1, [0x200, 0x101, 0x6, 0x8004, 0xcbdc, 0x3, 0x1, 0x9841, 0xffff, 0x7, 0x9, 0x3, 0x1, 0x101, 0x1], 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x7, 0x4, 0x82d, 'netbios-ns\x00', 'syz0\x00', {0x94}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r3) 10m54.930122168s ago: executing program 35 (id=3335): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRES16=r1, @ANYRESOCT=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x40, 0x17, 0x3, "b1b8ed"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r8, @ANYRESDEC=r8, @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYBLOB="b31722aab4473aeba7365b27a4e484eb5143674a2bd90be4c1071c3ea9a28844d831fb80ea9e76d9cf84d3f029e4be613d717a905587da292b5349ebcb8e2cdb07271473c2deb9bbed81d67291cd3afba51a4bf5ce6d28f90adffc394eab9eb6c3d4a9b4bea5498611c80d4074a20d961df803c5c3a30fed8befcf895b6441c04fe57bba6f88b92b58dc3ef9b8d0922a6571cd4df598b0a5fb40499c410d2f8371c29e9898462c64d8e44e186fdac5c818", @ANYRESHEX], 0x14}}, 0x0) 2m26.923980735s ago: executing program 5 (id=5186): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 2m26.678275244s ago: executing program 5 (id=5188): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00002085000000700000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c) syz_emit_ethernet(0x113c, &(0x7f0000000e00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @broadcast, @val={@val={0x88a8, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x6, 0x6, "bffdc8", 0x10fe, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, {[@fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x9, 0x67}], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x413, 0x4, 0x2b, 0x0, 0x2, {[@sack={0x5, 0x16, [0x8000, 0x5, 0x83, 0x5, 0x2ee8]}, @mptcp=@capable={0x1e, 0x14, 0x5, 0x8, 0xf, 0x400, [0x1]}, @nop, @mptcp=@remove_addr={0x1e, 0x1003, 0x5, 0x0, "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"}, @mss={0x2, 0x4, 0x6}, @eol, @window={0x3, 0x3}]}}, {"a52e47a11c9087dd8cd2ced7e9f2441a6859606b9801e5ce9b3c50615d775521d4d3fa8cf2f5d9d4e05eb401e5d9efde012552da3cf2d17acfe28fb2b345839802f1d5d5b6991af03e7d74bb4f9082a647013c15732c89a42f53d9819c8870b27ae8c3ba6812d77635dea913a81989f164460515e641c1d0b6ffa19821bb73a146afbc7d8c2328acde484bf7f6d77437ff9ded421c568af46dc03339f2caead06b12b2bfda2b1a99aa96"}}}}}}}, 0x0) 2m26.575045643s ago: executing program 5 (id=5189): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000001300)=0x80000005, 0x4) r1 = socket(0x2, 0xa, 0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000900)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xb7, 0x8, 0x200, 0x4, 0x5, 0xffffffff, "ee12f2e46cccfd640c90852da39aa26c5868eed671210a42e044b81c57264340bd1857ca2aa4986ee0177147190fdf4878de7c38c5d729ae23fc037d80cba289ab2d2338f0b982d734241d027bcc7fda75107594bcc6ea8706c8b70c29def3965abe62b65ec332eb66c184a63d4ffe1e7ec8196f79294ae784fd9646e83dcc7e7cbf3e9f3a411c8b2daddc2dde93e92d9fbcc31bf3c1a1e8208b408bdf921c1e6fab43ae496a4ee51fe0b80db6ef45c7079e633721a499"}}, 0x1cf) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={@local, @local, @dev={0xfe, 0x80, '\x00', 0x40}, 0xbbac, 0xa, 0x2483, 0x480, 0x5, 0x4400040, r2}) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000080)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8020}, 0x4000040) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x25, &(0x7f0000000500)=ANY=[@ANYBLOB="b7080000000000060000007b8af0ff00000000bfa100002000000007010000f8ffffffbfa4000000000000df07000000202300"/63, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018440000050000000000000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x10, r6, 0x8, &(0x7f0000000680)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x0, 0x82e, 0xef9}, 0x10}, 0x94) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="93000500000000001c0012800e00010069705183727370616e0000000800028004001200"], 0x3c}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) sendto$packet(r0, &(0x7f0000000040)="6f3d7b6e3595904ad44263292847", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m22.681228369s ago: executing program 5 (id=5205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85000000710000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000004b00)='./file0\x00', &(0x7f0000004b40)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) (fail_nth: 1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2m19.56219552s ago: executing program 5 (id=5214): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000bb1e18d8444102bdfc4b08902421bfddc870e196c1283a7903a8522a9649b9149238203c6de1c45f462bd5e378d796b21c9808bd8bfdb7ef779db33315fa3e90026ebcbc58734f6bccdc64a1bbda032f4253d777db6e4dd1837945d7484772646c88cc8ee882df2e94e08ff02281c58e4f48dd5ea4df3f05e926cd4ef97a0b932afdb75b851d53dfab34e38cf1f763933859af9d09853d29fda7ce7cccf6e9922848aca0db686c0332517546797781bbe6864ac3bb6d4dd9aac8f6b18185fa55431b9046b453f9cc6f70fca10fab95a74c31350d2982c7f70fc61d7308674b49db881bd0e4d394ed743fe2", @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="30002f800c00020000000000000000000800010000000000180003800c00038006000100000000000800010000000000"], 0x4c}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 2m19.360864182s ago: executing program 5 (id=5216): r0 = syz_open_dev$sndctrl(0x0, 0xd4, 0x8680) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) open(0x0, 0x400, 0x43) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000e400100000000000000000000000400000000000000000"], 0x0, 0x2a}, 0x28) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x5}}, './file1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xd84e46aba9109f24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x290, 0xffffffff, 0x1f8, 0xe8, 0x1f8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x6b0b498af8769636, 'ip_vti0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x73, 0x0, 0x34}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x40, 0x41, {0x9}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 2m4.593740299s ago: executing program 36 (id=5216): r0 = syz_open_dev$sndctrl(0x0, 0xd4, 0x8680) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) open(0x0, 0x400, 0x43) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000e400100000000000000000000000400000000000000000"], 0x0, 0x2a}, 0x28) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x5}}, './file1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xd84e46aba9109f24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x290, 0xffffffff, 0x1f8, 0xe8, 0x1f8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x6b0b498af8769636, 'ip_vti0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x73, 0x0, 0x34}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x40, 0x41, {0x9}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 11.587153058s ago: executing program 1 (id=5749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x6, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r8 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r8, 0x0, 0x14) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e09, 0x1, @mcast2, 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000026ea944cc52fb6e0858b523d533d167184ff3cd43170af9f1f60e4c66d371b6227534473e501e5b1ebb2f3c174386dbb2cf88b18a7a2b25ef999bddcc3db11d2f544f500effe139e89d0188ff208b2030000002026e947", @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000100007800c0004000000000000000000"], 0x24}}, 0x0) 11.194743807s ago: executing program 9 (id=5754): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_gettime(r1, &(0x7f0000000100)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) 10.356859145s ago: executing program 9 (id=5758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x2}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x3, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 7.901348057s ago: executing program 1 (id=5766): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x2000000, {0x7, 0x0, 0x0, r2, 0x0, 0x2, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3a5}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000011c0)=0x7, &(0x7f0000000100)=0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x101c, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.844793565s ago: executing program 9 (id=5771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0xb}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000140)={0x1, 0x1, 0x1, "0000087aba10fdfffffbe30b51751ac53051a30000000000020016ebffffff00", 0x34565559}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) bind$llc(r4, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x10000, 0x3, 0xad, 0xf, 0x41, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x4000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x29, 0x5, 0x6, 0x3, 0x2}, {0x80a0000, 0x1000, 0x0, 0xc2, 0x1, 0x2, 0x8, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x0, 0x0, 0xe7, 0xa, 0x13, 0x1, 0x4, 0x8, 0x7, 0x5, 0xf1}, {0x4, 0x2000, 0xd, 0x9e, 0x5, 0x4, 0xa, 0x7f, 0x2, 0x0, 0xf7}, {0xeeee0000, 0xdddd1000, 0xf, 0x7, 0x7, 0xc, 0x4, 0x40, 0x80, 0xc, 0x1, 0x1}, {0x2000, 0xdddd1000, 0x3, 0x7, 0xce, 0x3, 0x1, 0x3, 0xf6, 0x80, 0x3, 0x6}, {0x8000000, 0x1, 0x9, 0x5, 0x6, 0x7, 0x22, 0x37, 0x2, 0x8, 0x2, 0xa}, {0x10000}, {0x4, 0x1}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0x1, 0x800, 0x3000, [0x5, 0x5, 0x15e, 0x1002]}) 6.479428809s ago: executing program 6 (id=5772): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000000000040'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'nr0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c08d3fc1408202b4788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.092854916s ago: executing program 9 (id=5773): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_io_uring_setup(0x7025, &(0x7f0000000300)={0x0, 0xafb4, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000540)=@llc={0x1a, 0x8, 0x7, 0xff, 0x7f, 0x80, @broadcast}}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x100, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000"], 0x18}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000280)={0x101ff, 0x1, 0xdddd1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r12, 0x4048aecb, &(0x7f0000000080)) 5.192788449s ago: executing program 9 (id=5774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) setns(r4, 0x10000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x203f, &(0x7f0000000000)=""/176) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "2d803a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00'}}}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x101, 0xf, 0x120000, 0x5, 0xfffffffffffffffc, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) 4.452955728s ago: executing program 1 (id=5776): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000080)='./file1\x00', 0x6000863) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 4.379361869s ago: executing program 6 (id=5777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 3.916286284s ago: executing program 1 (id=5780): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000"], 0xb8}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000380)={0x40, 0xc, 0xfb, {0xfb, 0x23, "ec11f5507e44f0b5a40b903f0b50553247894acf54517c881d0c7e63698bf93f83345b2003edb9115dbbd260f5fdbd4718c97cfaa7842d7bcff04afca4bdfdcf515c1b14905d7304cc329acdc8c341a9581ef0a830cb8300470a64dfaed168e5dd996a4f31bfe4bb3b66e71c229fe6d9843f2e7c919017047612a04ae73fad1ff8aaf7dda77d9453950214d139188acd5d78899c46acd0e2cef3d9fda110d72d831fb9ce9fa686339c2162be5f24bb07aec871bc2014261e401d57fdbd4443d7e290bb526bbee26ee9575a03f42e0a4046d7e52f2f6f619faab1a36a3d00805288db02e4111703f78a366975c8246495560fcaea4323bb4ab8"}}, &(0x7f0000000100)={0x0, 0x3, 0x26, @string={0x26, 0x3, "e3a9a2e10fe5aa061602e442b411a1975a4e062eb3614d92363f1fca81f858ce890ece14"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="00221011050000000000000022"], &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x7, 0x1, {0x22, 0xdbc}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="400c5d000000d169e8a491be70fdd012a9b9ff862eccf198f4a5e1f55ee88112a6d7c042a1d3cfd9f78cba81dde5290277f66b285a4f44b7be87b8bcc8e022ad860f52f8998afa10c7ab1de98a8210328046786d70fd1a00"/99], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x1, 0x94, "0655f0e60ea14df9a8bcbebbefb37d53f3d315addca1688fdd91ab3723ef33fdf1e3f8cd8a425865f374114e8154d264445187150b82c6bd3c34584bcb3603abfe7339eadee00840d1a215e39f65ce7f8cdd39273f75582d09374097dcf2b65e73fa42c6bda7a1b00fcb9e765285b10b931fe1998c541e96b9d46f126cc22f7ea1082d9aa190bcd7716800cf3245c48d456334b2"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x2}, 0x0, 0x0, 0x0, 0x0}) 3.724511814s ago: executing program 6 (id=5781): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xffe0) 2.625424233s ago: executing program 6 (id=5783): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="00114f"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.579233673s ago: executing program 8 (id=5784): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xffe0) (fail_nth: 3) 2.184628592s ago: executing program 7 (id=5785): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x81, 0x100) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="846b", 0x2}], 0x2}}], 0x1, 0x4604c880) sendto$inet6(r0, &(0x7f0000000440)='\x00\x00', 0x18, 0x20003bc4, 0x0, 0x0) 2.117180926s ago: executing program 9 (id=5786): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.11646201s ago: executing program 8 (id=5787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"000000000000000000006f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 2.115743369s ago: executing program 7 (id=5788): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) unshare(0x2c020400) shutdown(r5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') writev(r7, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000040)) ioctl$TIOCSETD(r6, 0x5412, &(0x7f00000000c0)=0xe9) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x311, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x2a, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.446024437s ago: executing program 1 (id=5789): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) unshare(0x60000) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1.349313992s ago: executing program 1 (id=5790): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0xd6b, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, &(0x7f0000000580)={0x40, 0x24, 0xb5, {0xb5, 0xf, "1e9d00e5c76c896f90f3de34c9222db2440777d9a608f7908599dd2a5c509c5b5c3b081a08d13f8c611980d4021bf66eab54ed0fa374ccd284de761a72e5ae3dd42efb76ff2b18dcd58136ecf051343a8d518b5d50c911c7c87cfde873b222c3c24fdb1d25c49e52cc262c3c02a1b9ae615ddd123c480ce541c391623a60c116e8992fe2d115674c5bcf69ae4616c8f30789a0ade08f0fc39631cb3462b09bfa40fa6e2abf1537a70b42da41d7fa484bde543a"}}, &(0x7f0000000640)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "72f951aaf373902a22f023fb8014aa5dc32c3ee2c8f77b5fa4f9f7650270b0191f11526c2eaf395a8a7ea7ffe1ad1d12cd4f47ea8724e71054360153ca60f4954c224f513364c295de240474726dafceb41f29a70af58b6923b3915ea42fa46637911d92436e0fdf8374b0d57ff85e0f1d2e848b38743b8c97fea6515f9954190bbb7d809c38d8d44a4519a7b6072c3f4ef1e3c6c08bc8c204e96fff0f"}}, &(0x7f0000000240)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x1, "2cfde704"}, @local=@item_4={0x3, 0x2, 0x1, "8f15cc70"}, @global=@item_4={0x3, 0x1, 0x5, "6e90ca59"}, @main=@item_4={0x3, 0x0, 0xc, "750ec71c"}, @main=@item_4={0x3, 0x0, 0xc, "80156da1"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0x764}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x40, 0xb, 0xc3, "90df70a45fc52d53069eda55f0c36548186e2707c30aa7e56781b3ea77a934bbe2c30157aee218cd98835d41e4a1c3a5d7fa18f21f2fe2e9b1b8705eb033f4c0d2aae8fd7e83c99e2bb7fdd63bcb0d1678a2206891483979b96552cb03016a4e71e3bdb0d67cccf28f461368340808de9742844df97326086a4daa42308c132e94196b7d468db97aad4aadfba068d28869b723dda27196cf91eec7ec1c2a80c18be65f04cf366c997acc88b64e39122bbe9f3da3d78e0d56a7f6f8c6a97cf46aea7207"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000880)={0x20, 0x1, 0x3, "c2769c"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x5}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 1.206551008s ago: executing program 8 (id=5791): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x9e8}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xfffffefa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000140)="740a059b53162d8be1b7f731d12ab6b985acacca9eabbaf06eee083bce3c43565ea2e486db44dda5810857a4e508a1dc328e9afdff5a39fec3499bb97285", &(0x7f00000000c0)=""/4, 0x4}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0xd) listen(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000960000000800450000200000000000119078"], 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000037c0)=""/4086, 0xff6}], 0x2}, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0xcb, &(0x7f00000047c0)={@empty, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x4, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv4=@icmp={{0x14, 0x4, 0x1, 0x1, 0xad, 0x66, 0x0, 0xe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x24, 0x30, 0x1, 0x6, [{@empty, 0x4e}, {@remote, 0x2}, {@private=0xa010100, 0x3}, {@multicast2, 0x1}]}, @lsrr={0x83, 0xf, 0xd4, [@private=0xa010102, @local, @broadcast]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0x1, [0x80]}]}}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6a, 0x5, {0x15, 0x4, 0x0, 0x21, 0x7, 0x65, 0x81, 0x8, 0x29, 0xe3ca, @local, @empty, {[@ssrr={0x89, 0x17, 0xdb, [@remote, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010100, @local]}, @end, @rr={0x7, 0xf, 0x5b, [@remote, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010102]}, @rr={0x7, 0xf, 0xeb, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast]}, @end, @cipso={0x86, 0x6, 0xffffffffffffffff}, @end]}}, "1f"}}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r7) 982.250016ms ago: executing program 7 (id=5792): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x9, 0x0, 0x800, 0x10, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x9000}) 979.87421ms ago: executing program 8 (id=5793): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x5}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7, 0x0, 0x5}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 914.801765ms ago: executing program 8 (id=5794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) fcntl$setstatus(r0, 0x4, 0x42c00) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 792.668951ms ago: executing program 7 (id=5795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x5}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7, 0x0, 0x5}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000042c0)={'wlan0\x00', 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000004300)={{0x1, 0x1, 0x18, r2, {0x4, 0xff}}, './file0\x00'}) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004340)={0x80, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0x8}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1c000000, 0x2c}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4c}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8004) socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 693.361329ms ago: executing program 8 (id=5796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000011c0)={0x84, @loopback, 0x15, 0x3, 'wlc\x00', 0x3f, 0x1, 0x7f}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000933caf3e24d0ee417eb03254673563054b52c62d2e86d5e5bdcd71d3aba63861dc2932b2771bcecae964de67ed50e500006ce33e799133e118f7239c092caa4e8f2d12cb627a932f1a17e251abe6ea571a3e62bda9f853717bf70d6807475f8347294ad1b700acec5b453380b8a73e8eddad319135d90d6a29667e701cae4c88296edafdbfc80908307809413fe98a2137a77fd731fc9a8a25ac37a3929556"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0xf, 0xfff, {"4a50abf0c8ed50f638facd57de6291e3"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r7 = dup(r4) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001200)=ANY=[@ANYRESHEX=r6]) ioperm(0x284, 0x7f, 0xe3) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x1, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x2000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000040000701feffffff0000000001780000040042800c00018006000600800a0000140002800d001480040005"], 0x38}, 0x1, 0x0, 0x0, 0x488d5}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) preadv2(r12, &(0x7f0000004140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x33, 0x4, 0x0) read$FUSE(r12, 0x0, 0x0) socket(0x15, 0x5, 0x0) 444.688753ms ago: executing program 7 (id=5797): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000080)='{&-#.+\'\x00', 0x8, 0x1) 341.025305ms ago: executing program 7 (id=5798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x4, 0xcc, 0xffffffb9, 0x1a}, 0x9c) 43.272682ms ago: executing program 6 (id=5799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x602, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000001}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\\]+@]@,.@'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004810) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x4, 0x7e, 0xfe, 0x73, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x700, 0xf6a, 0x8}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44040) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff83}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000010) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x216}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x6e3}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xc}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3a}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7d5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc810) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x24c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x45, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x80, 0xeb, @broadcast, 0x9cba, @value, 0x7, 0xffff0001, @device_a, 0x5}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x66}, 0xfe, 0xa, @device_a, 0xad7, 0x7fffffff, 0x9}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xa7, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @fast_bss_trans={0x37, 0x91, {0xa, 0x2, "2deb94f9920c13dd45b5e02c27481574", "164bf49d20a4b9194f7f229288c99a732ce4a7af441da0d7bd666cc6554a4c55", "9fff4b4c2b52ae234d699d1eb01963f3c5e534467baf50b1b03e1a88f0c51844", [{0x3, 0x1a, "5a889224dee7b4c5722dda9215d8c3ae58062e0da52675d401d9"}, {0x1, 0x21, "20b4b2c99feadc722336fd4b372fe0399063b884cd4f922952e7cf823e4e8d3daa"}]}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x28, 0x2d}}]}, @NL80211_ATTR_IE={0xf5, 0x2a, [@random_vendor={0xdd, 0x54, "cfbb73f3f2bcff16f2652c9dfc13b957b63880c7161b3a5641e3ed4ab5ff57c7cb68f85f57d169ccd157980b1f751e0ccda85736328f969dd7c12abb47918ec28f5c4e4f8bf12f5d23e7ba962ada51e9025d3eee"}, @erp={0x2a, 0x1, {0x1, 0x1}}, @fast_bss_trans={0x37, 0x93, {0x7f, 0x2, "74fd604e51970f782aa15a6fcf9bd823", "42515b14d0e41f92f1e14e14366d4465af5f32168c6599ae7b44d4b7925c40f5", "528402bf01e4721abd65b5dec8b5bf9dc25c6ba7bcbf40c58a57b674664274b8", [{0x1, 0x16, "1f6f59d8f7fe2bebf4077d745ad5b5560b220831cca0"}, {0x2, 0x27, "094ec42748dc96ee3c4a716f0a33af50acaaa46c9c5bf93c114c8da03cab33f66905edc487e515"}]}}, @challenge={0x10, 0x1, 0x2e}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4800}, 0x240000c0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r5) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20004840) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@ipv4_deladdr={0x38, 0x15, 0x2, 0x70bd2c, 0x25dfdbfb, {0x2, 0x8, 0x2, 0xfe, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x14048800}, 0x80) (async) sendmsg$NFC_CMD_ENABLE_SE(r10, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)) sendmmsg(r5, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f80)}], 0x1, &(0x7f0000001000)=[{0x50, 0x0, 0x412, "411be667808692832e36a1fb89b2b32d7c6dcd464774cbab662d7ad85a889718e77bb1eb4d7e1417115651292fc70419f594219bd71670b41f78907c542338cf"}, {0x1010, 0x10c, 0x100, "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"}], 0x1060}}], 0x1, 0xc001) (async) syz_create_resource$binfmt(&(0x7f00000020c0)='./file0\x00') (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100)={0x27, r8, 0x0, 0x3, 0x1, 0x5, "2dc715cb94b59e744dc47e4c05b5909d4fff979f0b6dd71e4a54b4d79abef30f300ec65712b6d48843792669613132dd92fd8eae1d3371e9009e9e2d8f9192", 0x15}, 0x60) (async) r13 = socket$can_j1939(0x1d, 0x2, 0x7) poll(&(0x7f0000002180)=[{r2, 0x19a0}, {r12, 0x101}, {r13}, {0xffffffffffffffff, 0x105}, {r5, 0x89}], 0x5, 0x4) connect$inet6(r2, &(0x7f00000021c0)={0xa, 0x4e24, 0x747, @mcast2, 0x7}, 0x1c) 0s ago: executing program 6 (id=5800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) kernel console output (not intermixed with test programs): to power cycle the pvrusb2 device in order to recover. [ 1305.352557][T17051] usb 2-1: USB disconnect, device number 105 [ 1305.364796][ T30] audit: type=1400 audit(1762695453.617:2112): avc: denied { write } for pid=25338 comm="syz.6.5222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1305.504932][T24865] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1305.521773][T24865] usb 8-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1305.544070][T24865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.552148][T24865] usb 8-1: Product: syz [ 1305.556797][T24865] usb 8-1: Manufacturer: syz [ 1305.561420][T24865] usb 8-1: SerialNumber: syz [ 1305.568409][T24865] usb 8-1: config 0 descriptor?? [ 1305.930173][T25360] wg1 speed is unknown, defaulting to 1000 [ 1306.049577][T25362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5227'. [ 1306.393981][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.402855][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.937754][T17051] usb 8-1: USB disconnect, device number 48 [ 1306.952560][ T9] usb 7-1: USB disconnect, device number 49 [ 1307.477993][ T30] audit: type=1326 audit(1762695455.853:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.146269][ T30] audit: type=1326 audit(1762695455.853:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.246232][ T30] audit: type=1326 audit(1762695455.853:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.270286][ T30] audit: type=1326 audit(1762695455.853:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.296052][ T30] audit: type=1326 audit(1762695455.853:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.320109][ T30] audit: type=1326 audit(1762695455.853:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.347304][ T30] audit: type=1326 audit(1762695455.853:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.479964][ T30] audit: type=1326 audit(1762695455.853:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.591421][ T30] audit: type=1326 audit(1762695455.853:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.691930][ T30] audit: type=1326 audit(1762695455.853:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25370 comm="syz.6.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47b38f6c9 code=0x7ffc0000 [ 1308.829958][ T123] block nbd11: Possible stuck request ffff888026800000: control (read@0,1024B). Runtime 270 seconds [ 1308.840891][ T123] block nbd11: Possible stuck request ffff8880268001c0: control (read@1024,1024B). Runtime 270 seconds [ 1308.852717][ T123] block nbd11: Possible stuck request ffff888026800380: control (read@2048,1024B). Runtime 270 seconds [ 1308.863948][ T123] block nbd11: Possible stuck request ffff888026800540: control (read@3072,1024B). Runtime 270 seconds [ 1308.877368][T18553] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1309.042349][T18553] usb 2-1: config 0 has no interfaces? [ 1309.047986][T18553] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1309.067863][T18553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.082645][T18553] usb 2-1: config 0 descriptor?? [ 1309.299376][T16522] usb 2-1: USB disconnect, device number 106 [ 1310.695732][T25410] fuse: Unknown parameter '0x0000000000000007' [ 1312.278037][T18553] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1312.450789][T18553] usb 7-1: Using ep0 maxpacket: 16 [ 1312.464017][T18553] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1312.478955][T18553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1312.490843][ T123] block nbd12: Possible stuck request ffff8880268b7000: control (read@0,1024B). Runtime 270 seconds [ 1312.502279][ T123] block nbd12: Possible stuck request ffff8880268b71c0: control (read@1024,1024B). Runtime 270 seconds [ 1312.519175][T18553] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1312.529427][ T123] block nbd12: Possible stuck request ffff8880268b7380: control (read@2048,1024B). Runtime 270 seconds [ 1312.540641][ T123] block nbd12: Possible stuck request ffff8880268b7540: control (read@3072,1024B). Runtime 270 seconds [ 1312.553741][T18553] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.563525][T18553] usb 7-1: Product: syz [ 1312.568593][T18553] usb 7-1: Manufacturer: syz [ 1312.573357][T18553] usb 7-1: SerialNumber: syz [ 1312.581579][T18553] usb 7-1: config 0 descriptor?? [ 1312.595491][T18553] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1312.607009][T18553] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1312.939510][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1312.939551][ T30] audit: type=1400 audit(1762695461.595:2141): avc: denied { write } for pid=25449 comm="syz.7.5251" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1313.098767][T21860] block nbd15: Possible stuck request ffff8880269be000: control (read@0,1024B). Runtime 210 seconds [ 1313.109861][T21860] block nbd15: Possible stuck request ffff8880269be1c0: control (read@1024,1024B). Runtime 210 seconds [ 1313.121187][T21860] block nbd15: Possible stuck request ffff8880269be380: control (read@2048,1024B). Runtime 210 seconds [ 1313.132471][T21860] block nbd15: Possible stuck request ffff8880269be540: control (read@3072,1024B). Runtime 210 seconds [ 1313.172021][T18553] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1314.273618][T25465] vxfs: WRONG superblock magic 00000000 at 1 [ 1314.280583][T25465] vxfs: WRONG superblock magic 00000000 at 8 [ 1314.286607][T25465] vxfs: can't find superblock. [ 1314.484495][T18553] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1314.494550][T18553] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1314.508870][T18553] em28xx 7-1:0.0: No AC97 audio processor [ 1314.516369][T25464] ceph: No mds server is up or the cluster is laggy [ 1314.523401][T16522] libceph: connect (1)[c::]:6789 error -101 [ 1314.537180][T16522] libceph: mon0 (1)[c::]:6789 connect error [ 1315.576071][T25478] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1316.717860][T25484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5260'. [ 1316.792583][T18553] usb 7-1: USB disconnect, device number 50 [ 1316.842057][T18553] em28xx 7-1:0.0: Disconnecting em28xx [ 1316.859436][T18553] em28xx 7-1:0.0: Freeing device [ 1316.898571][T25490] batadv_slave_1: entered promiscuous mode [ 1316.963515][T25485] batadv_slave_1: left promiscuous mode [ 1317.203043][T18524] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1317.301876][T22406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1317.312886][T22406] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1317.322447][T22406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1317.332336][T22406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1317.347392][T22406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1317.514024][T25501] wg1 speed is unknown, defaulting to 1000 [ 1318.158451][T18524] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1318.184243][T18524] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1318.215195][T18524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.259121][T18524] usb 8-1: config 0 descriptor?? [ 1318.284546][T25484] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1318.322697][T25501] chnl_net:caif_netlink_parms(): no params data found [ 1319.431992][T22406] Bluetooth: hci5: command tx timeout [ 1319.612204][T25501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.624513][T25501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.632914][T25501] bridge_slave_0: entered allmulticast mode [ 1319.641144][T25501] bridge_slave_0: entered promiscuous mode [ 1319.649726][T25501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.657135][T25501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.884504][ T123] block nbd1: Possible stuck request ffff888026097000: control (read@0,1024B). Runtime 540 seconds [ 1319.895430][ T123] block nbd1: Possible stuck request ffff8880260971c0: control (read@1024,1024B). Runtime 540 seconds [ 1319.906754][ T123] block nbd1: Possible stuck request ffff888026097380: control (read@2048,1024B). Runtime 540 seconds [ 1319.917874][ T123] block nbd1: Possible stuck request ffff888026097540: control (read@3072,1024B). Runtime 540 seconds [ 1320.013453][T25501] bridge_slave_1: entered allmulticast mode [ 1320.028914][T25501] bridge_slave_1: entered promiscuous mode [ 1320.037148][T25528] bridge_slave_1: left allmulticast mode [ 1320.042997][T25528] bridge_slave_1: left promiscuous mode [ 1320.048963][T25528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.057973][T18524] usbhid 8-1:0.0: can't add hid device: -71 [ 1320.064543][T18524] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1320.080082][T25528] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1320.194941][T18524] usb 8-1: USB disconnect, device number 49 [ 1320.201024][T25501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.222040][T25501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.418483][T21860] block nbd13: Possible stuck request ffff8880268ee000: control (read@0,1024B). Runtime 240 seconds [ 1320.429977][T21860] block nbd13: Possible stuck request ffff8880268ee1c0: control (read@1024,1024B). Runtime 240 seconds [ 1320.446286][T21860] block nbd13: Possible stuck request ffff8880268ee380: control (read@2048,1024B). Runtime 240 seconds [ 1320.460641][T21860] block nbd13: Possible stuck request ffff8880268ee540: control (read@3072,1024B). Runtime 240 seconds [ 1320.806864][T25501] team0: Port device team_slave_0 added [ 1321.125009][T25501] team0: Port device team_slave_1 added [ 1321.144222][T25536] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5272'. [ 1321.195529][T25501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.221975][T25501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.299367][T25501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.365181][T25501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.501279][T25501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.532540][T25501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.861137][T22406] Bluetooth: hci5: command tx timeout [ 1322.469286][T25501] hsr_slave_0: entered promiscuous mode [ 1322.481652][T25501] hsr_slave_1: entered promiscuous mode [ 1322.488286][T25501] debugfs: 'hsr0' already exists in 'hsr' [ 1322.494486][T25501] Cannot create hsr debugfs directory [ 1322.859375][ T123] block nbd8: Possible stuck request ffff888026355080: control (read@0,1024B). Runtime 300 seconds [ 1322.871437][ T123] block nbd8: Possible stuck request ffff888026355240: control (read@1024,1024B). Runtime 300 seconds [ 1322.884229][ T123] block nbd8: Possible stuck request ffff888026355400: control (read@2048,1024B). Runtime 300 seconds [ 1323.136614][T18524] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1323.144556][ T123] block nbd8: Possible stuck request ffff8880263555c0: control (read@3072,1024B). Runtime 300 seconds [ 1323.655016][T18524] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1323.664992][T18524] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.709656][T18524] usb 7-1: config 0 descriptor?? [ 1323.733276][T18524] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1323.852094][T22406] Bluetooth: hci5: command tx timeout [ 1324.115458][T25501] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1324.232437][T25501] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1324.308445][T25568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.320003][T25568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.471406][T25501] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1324.532070][T25501] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1325.203957][T18524] gspca_cpia1: usb_control_msg 03, error -110 [ 1325.295961][T18524] gspca_cpia1: usb_control_msg 01, error -32 [ 1325.374026][T25614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1325.531453][T18524] gspca_cpia1: usb_control_msg 01, error -32 [ 1325.611456][T18524] gspca_cpia1: usb_control_msg 01, error -32 [ 1325.655568][T18524] gspca_cpia1: usb_control_msg 01, error -32 [ 1325.692030][T18524] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1325.760043][T18524] usb 7-1: USB disconnect, device number 51 [ 1325.852203][T22406] Bluetooth: hci5: command tx timeout [ 1325.938993][ T123] block nbd9: Possible stuck request ffff888026385080: control (read@0,1024B). Runtime 300 seconds [ 1325.948036][T21860] block nbd3: Possible stuck request ffff88802616e000: control (read@0,1024B). Runtime 480 seconds [ 1325.952575][ T123] block nbd9: Possible stuck request ffff888026385240: control (read@1024,1024B). Runtime 300 seconds [ 1325.972874][T21860] block nbd3: Possible stuck request ffff88802616e1c0: control (read@1024,1024B). Runtime 480 seconds [ 1325.974275][ T123] block nbd9: Possible stuck request ffff888026385400: control (read@2048,1024B). Runtime 300 seconds [ 1325.984012][T21860] block nbd3: Possible stuck request ffff88802616e380: control (read@2048,1024B). Runtime 480 seconds [ 1326.742707][ T123] block nbd9: Possible stuck request ffff8880263855c0: control (read@3072,1024B). Runtime 300 seconds [ 1326.795509][T21860] block nbd3: Possible stuck request ffff88802616e540: control (read@3072,1024B). Runtime 480 seconds [ 1326.812847][T16781] block nbd7: Possible stuck request ffff8880262e5080: control (read@0,1024B). Runtime 300 seconds [ 1326.824809][T16781] block nbd7: Possible stuck request ffff8880262e5240: control (read@1024,1024B). Runtime 300 seconds [ 1326.836088][T16781] block nbd7: Possible stuck request ffff8880262e5400: control (read@2048,1024B). Runtime 300 seconds [ 1326.847199][T16781] block nbd7: Possible stuck request ffff8880262e55c0: control (read@3072,1024B). Runtime 300 seconds [ 1326.933530][T25501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.041502][T25501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.109486][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.117338][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.151178][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.158866][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.197244][T25501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1327.703277][T25673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1327.866870][T25501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.609352][T25501] veth0_vlan: entered promiscuous mode [ 1328.619208][ T30] audit: type=1400 audit(1762695478.056:2142): avc: denied { read } for pid=25701 comm="syz.7.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1328.628011][T25501] veth1_vlan: entered promiscuous mode [ 1328.723387][T25501] veth0_macvtap: entered promiscuous mode [ 1328.756604][T25501] veth1_macvtap: entered promiscuous mode [ 1328.783941][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1328.924504][T25709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5308'. [ 1329.350722][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5308'. [ 1329.636097][T25501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.680470][T25501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.728781][T20927] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.750626][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1329.752293][T20927] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.771236][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1329.816339][T20927] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.825353][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.834570][T20927] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.886941][ T9] usb 2-1: config 0 descriptor?? [ 1330.073396][ T30] audit: type=1400 audit(1762695479.578:2143): avc: denied { ioctl } for pid=25773 comm="syz.8.5311" path="socket:[101700]" dev="sockfs" ino=101700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1330.127896][T25779] netlink: 'syz.6.5312': attribute type 12 has an invalid length. [ 1330.177264][T11412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.222005][T11412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.292835][T11412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.302837][T11412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.595105][ T30] audit: type=1400 audit(1762695480.124:2144): avc: denied { lock } for pid=25798 comm="syz.9.5258" path="socket:[101133]" dev="sockfs" ino=101133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1330.900640][T19732] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1331.099519][T19732] usb 8-1: Using ep0 maxpacket: 32 [ 1331.123507][T19732] usb 8-1: config 0 has no interfaces? [ 1331.146940][T19732] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1331.172847][T19732] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.197474][T19732] usb 8-1: Product: syz [ 1331.207954][T19732] usb 8-1: Manufacturer: syz [ 1331.218012][T19732] usb 8-1: SerialNumber: syz [ 1331.226548][T19732] usb 8-1: config 0 descriptor?? [ 1331.415988][T16781] block nbd14: Possible stuck request ffff88802694e000: control (read@0,1024B). Runtime 240 seconds [ 1331.427151][T16781] block nbd14: Possible stuck request ffff88802694e1c0: control (read@1024,1024B). Runtime 240 seconds [ 1331.438416][T16781] block nbd14: Possible stuck request ffff88802694e380: control (read@2048,1024B). Runtime 240 seconds [ 1331.448276][T19732] usb 8-1: USB disconnect, device number 50 [ 1331.450815][T16781] block nbd14: Possible stuck request ffff88802694e540: control (read@3072,1024B). Runtime 240 seconds [ 1331.498201][ T5823] usb 2-1: USB disconnect, device number 107 [ 1331.615850][T25841] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5322'. [ 1331.658062][T25841] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1332.006568][T16781] block nbd2: Possible stuck request ffff8880260fe000: control (read@0,1024B). Runtime 540 seconds [ 1332.007686][T25845] FAULT_INJECTION: forcing a failure. [ 1332.007686][T25845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.017709][T16781] block nbd2: Possible stuck request ffff8880260fe1c0: control (read@1024,1024B). Runtime 540 seconds [ 1332.030836][T25845] CPU: 0 UID: 0 PID: 25845 Comm: syz.1.5323 Not tainted syzkaller #0 PREEMPT(full) [ 1332.030858][T25845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1332.030867][T25845] Call Trace: [ 1332.030873][T25845] [ 1332.030881][T25845] dump_stack_lvl+0x16c/0x1f0 [ 1332.030914][T25845] should_fail_ex+0x512/0x640 [ 1332.030936][T25845] _copy_from_user+0x2e/0xd0 [ 1332.030956][T25845] bpf_test_init.isra.0+0xce/0x130 [ 1332.030979][T25845] bpf_prog_test_run_xdp+0x66f/0x1660 [ 1332.031004][T25845] ? __fget_files+0x204/0x3c0 [ 1332.031021][T25845] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1332.031043][T25845] ? __might_fault+0x20/0x190 [ 1332.031068][T25845] ? fput+0x9b/0xd0 [ 1332.031086][T25845] ? __bpf_prog_get+0x97/0x2a0 [ 1332.031104][T25845] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1332.031123][T25845] __sys_bpf+0x1035/0x4980 [ 1332.031148][T25845] ? __pfx___sys_bpf+0x10/0x10 [ 1332.031168][T25845] ? find_held_lock+0x2b/0x80 [ 1332.031192][T25845] ? find_held_lock+0x2b/0x80 [ 1332.031215][T25845] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1332.031244][T25845] ? fput+0x9b/0xd0 [ 1332.031261][T25845] ? ksys_write+0x1ac/0x250 [ 1332.031274][T25845] ? __pfx_ksys_write+0x10/0x10 [ 1332.031297][T25845] __x64_sys_bpf+0x78/0xc0 [ 1332.031318][T25845] ? lockdep_hardirqs_on+0x7c/0x110 [ 1332.031339][T25845] do_syscall_64+0xcd/0xfa0 [ 1332.031355][T25845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.031370][T25845] RIP: 0033:0x7fcb73d8f6c9 [ 1332.031383][T25845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.031397][T25845] RSP: 002b:00007fcb74c78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1332.031417][T25845] RAX: ffffffffffffffda RBX: 00007fcb73fe5fa0 RCX: 00007fcb73d8f6c9 [ 1332.031426][T25845] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1332.031436][T25845] RBP: 00007fcb74c78090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.031444][T25845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.031453][T25845] R13: 00007fcb73fe6038 R14: 00007fcb73fe5fa0 R15: 00007fffa4346948 [ 1332.031475][T25845] [ 1332.380953][T16781] block nbd2: Possible stuck request ffff8880260fe380: control (read@2048,1024B). Runtime 540 seconds [ 1332.392076][T16781] block nbd2: Possible stuck request ffff8880260fe540: control (read@3072,1024B). Runtime 540 seconds [ 1332.547201][ T30] audit: type=1400 audit(1762695482.171:2145): avc: denied { append } for pid=25866 comm="syz.9.5329" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1333.037053][T25897] x_tables: duplicate underflow at hook 2 [ 1333.225731][ T123] block nbd5: Possible stuck request ffff888026215080: control (read@0,1024B). Runtime 480 seconds [ 1333.237025][ T123] block nbd5: Possible stuck request ffff888026215240: control (read@1024,1024B). Runtime 480 seconds [ 1333.248254][ T123] block nbd5: Possible stuck request ffff888026215400: control (read@2048,1024B). Runtime 480 seconds [ 1333.259567][ T123] block nbd5: Possible stuck request ffff8880262155c0: control (read@3072,1024B). Runtime 480 seconds [ 1333.433594][ T5823] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1333.549003][T16522] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1333.606197][ T5823] usb 10-1: Using ep0 maxpacket: 16 [ 1333.798040][ T5823] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1333.808076][ T30] audit: type=1400 audit(1762695483.494:2146): avc: denied { associate } for pid=25909 comm="syz.6.5338" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1333.895419][T25913] fuse: Bad value for 'fd' [ 1334.294189][ T5823] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1334.309264][ T5823] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1334.320975][T16522] usb 2-1: Using ep0 maxpacket: 16 [ 1334.349074][ T5823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.358559][T16522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1334.377919][ T5823] usb 10-1: Product: syz [ 1334.387144][T16522] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1334.480946][ T5823] usb 10-1: Manufacturer: syz [ 1334.486657][ T5823] usb 10-1: SerialNumber: syz [ 1334.488457][T25924] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1334.493579][ T5823] usb 10-1: config 0 descriptor?? [ 1334.497922][T25924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1334.510481][T16522] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 1334.524844][T16522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.535094][T25924] vhci_hcd vhci_hcd.0: Device attached [ 1334.535448][ T5823] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1334.555742][T16522] usb 2-1: config 0 descriptor?? [ 1334.566382][ T5823] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1334.612243][T25925] vhci_hcd: connection closed [ 1334.614658][T20927] vhci_hcd: stop threads [ 1334.628420][T20927] vhci_hcd: release socket [ 1334.639339][T20927] vhci_hcd: disconnect device [ 1334.702236][T18524] vhci_hcd: vhci_device speed not set [ 1334.743235][T25940] overlayfs: failed to clone upperpath [ 1335.386252][ T5823] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1335.802773][ T5823] em28xx 10-1:0.0: Config register raw data: 0x11 [ 1336.142291][T16522] usbhid 2-1:0.0: can't add hid device: -71 [ 1336.177971][ T5823] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1336.194335][T16522] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1336.208640][ T5823] em28xx 10-1:0.0: No AC97 audio processor [ 1336.388565][T16522] usb 2-1: USB disconnect, device number 108 [ 1336.428634][ T5823] usb 10-1: USB disconnect, device number 2 [ 1336.480069][ T5823] em28xx 10-1:0.0: Disconnecting em28xx [ 1336.630785][T25982] Can't find a SQUASHFS superblock on nullb0 [ 1336.642884][ T5823] em28xx 10-1:0.0: Freeing device [ 1336.938821][ T30] audit: type=1400 audit(1762695486.780:2147): avc: denied { ioctl } for pid=26006 comm="syz.9.5355" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1336.972140][T26009] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5356'. [ 1336.982683][T26009] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5356'. [ 1337.025723][T18473] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1337.044924][T16522] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1337.209784][T16522] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1337.221645][T18473] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1337.235728][T16522] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1337.249402][T18473] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1337.267184][T18473] usb 7-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.280910][T16522] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1337.444512][T26025] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5359'. [ 1337.486525][ T30] audit: type=1400 audit(1762695487.305:2148): avc: denied { bind } for pid=26018 comm="syz.7.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1337.537199][T26028] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5359'. [ 1337.573140][ T123] block nbd11: Possible stuck request ffff888026800000: control (read@0,1024B). Runtime 300 seconds [ 1337.586021][ T123] block nbd11: Possible stuck request ffff8880268001c0: control (read@1024,1024B). Runtime 300 seconds [ 1337.602625][ T123] block nbd11: Possible stuck request ffff888026800380: control (read@2048,1024B). Runtime 300 seconds [ 1337.616991][ T123] block nbd11: Possible stuck request ffff888026800540: control (read@3072,1024B). Runtime 300 seconds [ 1337.726470][ T30] audit: type=1400 audit(1762695487.536:2149): avc: denied { connect } for pid=26018 comm="syz.7.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1338.060323][T16522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.068663][T18473] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1338.081537][T18473] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1338.091441][T25991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1338.102373][T18473] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.114666][T16522] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1338.122294][T18473] usb 7-1: Product:   [ 1338.128967][T18473] usb 7-1: Manufacturer: ᠊ [ 1338.133779][T18473] usb 7-1: SerialNumber: 竜杞ꘀꭡ肔꩞ꥳ㱪邕컳㼜⬏೜熼2잞敩볎孖蛹⚻匾ꍥ쐫넊턍ᑴ㿶 [ 1338.171483][T25998] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1338.729447][T18473] usb 7-1: USB disconnect, device number 52 [ 1338.915786][ T9] usb 2-1: USB disconnect, device number 109 [ 1338.944734][T26068] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5364'. [ 1339.544416][T26108] netlink: 340 bytes leftover after parsing attributes in process `syz.6.5370'. [ 1339.638776][T26118] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1340.017164][T22406] Bluetooth: unknown link type 46 [ 1340.022576][T22406] Bluetooth: hci3: connection err: -111 [ 1341.152644][ T123] block nbd12: Possible stuck request ffff8880268b7000: control (read@0,1024B). Runtime 300 seconds [ 1341.164136][ T123] block nbd12: Possible stuck request ffff8880268b71c0: control (read@1024,1024B). Runtime 300 seconds [ 1341.175607][ T123] block nbd12: Possible stuck request ffff8880268b7380: control (read@2048,1024B). Runtime 300 seconds [ 1341.187557][ T123] block nbd12: Possible stuck request ffff8880268b7540: control (read@3072,1024B). Runtime 300 seconds [ 1341.270295][T26148] netlink: 'syz.7.5378': attribute type 1 has an invalid length. [ 1341.432383][T26148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1341.726178][ T5823] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1341.745886][T26152] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1341.903292][ T5823] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1341.976023][T26211] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1342.043153][T26210] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5380'. [ 1342.201345][T16781] block nbd15: Possible stuck request ffff8880269be000: control (read@0,1024B). Runtime 240 seconds [ 1342.218185][T16781] block nbd15: Possible stuck request ffff8880269be1c0: control (read@1024,1024B). Runtime 240 seconds [ 1342.229991][T16781] block nbd15: Possible stuck request ffff8880269be380: control (read@2048,1024B). Runtime 240 seconds [ 1342.241932][T16781] block nbd15: Possible stuck request ffff8880269be540: control (read@3072,1024B). Runtime 240 seconds [ 1342.261854][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.282502][ T5823] usb 7-1: config 0 descriptor?? [ 1342.292349][ T5823] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1342.595404][T16522] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1342.735445][ T5823] cpia1 7-1:0.0: unexpected state after lo power cmd: d1 [ 1342.831488][T16522] usb 10-1: Using ep0 maxpacket: 32 [ 1342.890751][T16522] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1342.937585][T16522] usb 10-1: config 0 has no interface number 0 [ 1342.951953][T16522] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1343.006233][T16522] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.051999][T16522] usb 10-1: Product: syz [ 1343.090914][T16522] usb 10-1: Manufacturer: syz [ 1343.145026][ T5823] gspca_cpia1: usb_control_msg 02, error -71 [ 1343.172416][T16522] usb 10-1: SerialNumber: syz [ 1343.227701][ T5823] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1343.236657][T16522] usb 10-1: config 0 descriptor?? [ 1343.262940][T16522] smsc95xx v2.0.0 [ 1343.331721][ T9] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1343.334335][ T5823] usb 7-1: USB disconnect, device number 53 [ 1343.474455][ T30] audit: type=1400 audit(1762695493.646:2150): avc: denied { map } for pid=26255 comm="syz.8.5388" path="socket:[102271]" dev="sockfs" ino=102271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1343.480101][T26260] netlink: 'syz.8.5388': attribute type 1 has an invalid length. [ 1343.521452][ T9] usb 2-1: device descriptor read/64, error -71 [ 1343.543332][T26260] netlink: 'syz.8.5388': attribute type 1 has an invalid length. [ 1343.649212][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5390'. [ 1343.724611][T16522] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1343.738167][T16522] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1343.770732][ T9] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1344.471522][ T9] usb 2-1: device descriptor read/64, error -71 [ 1344.554729][T16522] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1344.569168][T16522] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1344.588447][ T9] usb usb2-port1: attempt power cycle [ 1344.589759][T16522] usb 10-1: USB disconnect, device number 3 [ 1344.665313][ T870] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1344.819589][ T870] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1344.828915][ T870] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1344.840600][ T870] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1344.850223][ T870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1344.862334][ T870] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1344.877604][ T870] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1344.889845][ T870] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1344.902608][ T870] usb 7-1: Product: syz [ 1344.907284][ T870] usb 7-1: Manufacturer: syz [ 1344.924243][ T870] cdc_wdm 7-1:1.0: skipping garbage [ 1344.931882][ T9] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1344.935258][ T870] cdc_wdm 7-1:1.0: skipping garbage [ 1344.961261][ T9] usb 2-1: device descriptor read/8, error -71 [ 1344.962235][ T870] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1344.977313][ T870] cdc_wdm 7-1:1.0: Unknown control protocol [ 1345.332097][ T9] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 1345.420211][ T9] usb 2-1: device descriptor read/8, error -71 [ 1345.600224][ T9] usb usb2-port1: unable to enumerate USB device [ 1346.019965][T26316] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5394'. [ 1346.055207][T26316] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1346.519737][ T30] audit: type=1400 audit(1762695496.837:2151): avc: denied { read } for pid=26320 comm="syz.1.5397" path="socket:[102349]" dev="sockfs" ino=102349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1347.141465][T26341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4968 sclass=netlink_route_socket pid=26341 comm=syz.1.5397 [ 1347.167503][T26341] batadv_slave_0: entered promiscuous mode [ 1347.928660][ T9] usb 7-1: USB disconnect, device number 54 [ 1349.070339][T16781] block nbd13: Possible stuck request ffff8880268ee000: control (read@0,1024B). Runtime 270 seconds [ 1349.076633][ T123] block nbd1: Possible stuck request ffff888026097000: control (read@0,1024B). Runtime 570 seconds [ 1349.082094][T16781] block nbd13: Possible stuck request ffff8880268ee1c0: control (read@1024,1024B). Runtime 270 seconds [ 1349.094477][ T123] block nbd1: Possible stuck request ffff8880260971c0: control (read@1024,1024B). Runtime 570 seconds [ 1349.105084][T16781] block nbd13: Possible stuck request ffff8880268ee380: control (read@2048,1024B). Runtime 270 seconds [ 1349.105127][T16781] block nbd13: Possible stuck request ffff8880268ee540: control (read@3072,1024B). Runtime 270 seconds [ 1349.139984][ T123] block nbd1: Possible stuck request ffff888026097380: control (read@2048,1024B). Runtime 570 seconds [ 1349.151494][ T123] block nbd1: Possible stuck request ffff888026097540: control (read@3072,1024B). Runtime 570 seconds [ 1349.277409][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1349.380930][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5409'. [ 1349.403848][T26383] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5409'. [ 1349.427378][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5409'. [ 1349.584855][T26383] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5409'. [ 1349.829631][ T9] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1349.873165][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.907167][ T9] usb 7-1: config 0 descriptor?? [ 1349.940037][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1350.556500][T26401] FAULT_INJECTION: forcing a failure. [ 1350.556500][T26401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.585689][T26401] CPU: 1 UID: 0 PID: 26401 Comm: syz.7.5412 Not tainted syzkaller #0 PREEMPT(full) [ 1350.585719][T26401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1350.585731][T26401] Call Trace: [ 1350.585737][T26401] [ 1350.585747][T26401] dump_stack_lvl+0x16c/0x1f0 [ 1350.585783][T26401] should_fail_ex+0x512/0x640 [ 1350.585809][T26401] _copy_from_user+0x2e/0xd0 [ 1350.585833][T26401] ppp_write+0x1a0/0x400 [ 1350.585856][T26401] ? __pfx_ppp_write+0x10/0x10 [ 1350.585873][T26401] vfs_write+0x2a0/0x11d0 [ 1350.585897][T26401] ? __pfx_vfs_write+0x10/0x10 [ 1350.585911][T26401] ? find_held_lock+0x2b/0x80 [ 1350.585935][T26401] ? __fget_files+0x204/0x3c0 [ 1350.585957][T26401] ? __fget_files+0x20e/0x3c0 [ 1350.585982][T26401] ksys_write+0x12a/0x250 [ 1350.585998][T26401] ? __pfx_ksys_write+0x10/0x10 [ 1350.586021][T26401] do_syscall_64+0xcd/0xfa0 [ 1350.586041][T26401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.586059][T26401] RIP: 0033:0x7f9e1a38f6c9 [ 1350.586075][T26401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.586092][T26401] RSP: 002b:00007f9e1b155038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1350.586111][T26401] RAX: ffffffffffffffda RBX: 00007f9e1a5e5fa0 RCX: 00007f9e1a38f6c9 [ 1350.586122][T26401] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 1350.586133][T26401] RBP: 00007f9e1b155090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.586143][T26401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.586153][T26401] R13: 00007f9e1a5e6038 R14: 00007f9e1a5e5fa0 R15: 00007ffda8943a48 [ 1350.586178][T26401] [ 1350.838184][T26409] netlink: 341 bytes leftover after parsing attributes in process `syz.6.5405'. [ 1351.133326][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 1351.140087][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 1351.166407][ T9] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1351.226294][T26418] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5414'. [ 1351.241642][ T9] usb 7-1: USB disconnect, device number 55 [ 1352.169440][ T123] block nbd8: Possible stuck request ffff888026355080: control (read@0,1024B). Runtime 330 seconds [ 1352.382833][ T123] block nbd8: Possible stuck request ffff888026355240: control (read@1024,1024B). Runtime 330 seconds [ 1352.394509][ T123] block nbd8: Possible stuck request ffff888026355400: control (read@2048,1024B). Runtime 330 seconds [ 1352.401011][T26427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5414'. [ 1352.406236][ T123] block nbd8: Possible stuck request ffff8880263555c0: control (read@3072,1024B). Runtime 330 seconds [ 1352.674628][T26444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5415'. [ 1352.692118][T26444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5415'. [ 1352.953598][T26458] netlink: 'syz.1.5419': attribute type 2 has an invalid length. [ 1352.974771][T26458] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5419'. [ 1353.112342][ T30] audit: type=1400 audit(1762695503.766:2152): avc: denied { execute } for pid=26461 comm="syz.7.5420" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=103540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1354.124407][ T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1354.195640][T26528] __nla_validate_parse: 3 callbacks suppressed [ 1354.195660][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5429'. [ 1354.278807][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1354.306560][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.340812][ T9] usb 7-1: config 0 descriptor?? [ 1354.356963][ T9] cp210x 7-1:0.0: cp210x converter detected [ 1354.553822][ T123] block nbd9: Possible stuck request ffff888026385080: control (read@0,1024B). Runtime 330 seconds [ 1354.564894][ T123] block nbd9: Possible stuck request ffff888026385240: control (read@1024,1024B). Runtime 330 seconds [ 1354.576564][T16781] block nbd3: Possible stuck request ffff88802616e000: control (read@0,1024B). Runtime 510 seconds [ 1354.581399][ T123] block nbd9: Possible stuck request ffff888026385400: control (read@2048,1024B). Runtime 330 seconds [ 1354.588039][T16781] block nbd3: Possible stuck request ffff88802616e1c0: control (read@1024,1024B). Runtime 510 seconds [ 1354.619883][T16781] block nbd3: Possible stuck request ffff88802616e380: control (read@2048,1024B). Runtime 510 seconds [ 1354.959426][T26503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.987883][T26503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.064409][ T9] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1355.078965][ T9] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1355.745937][ T123] block nbd9: Possible stuck request ffff8880263855c0: control (read@3072,1024B). Runtime 330 seconds [ 1355.758157][T16781] block nbd3: Possible stuck request ffff88802616e540: control (read@3072,1024B). Runtime 510 seconds [ 1355.785732][T16781] block nbd7: Possible stuck request ffff8880262e5080: control (read@0,1024B). Runtime 330 seconds [ 1355.787321][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1355.796798][T16781] block nbd7: Possible stuck request ffff8880262e5240: control (read@1024,1024B). Runtime 330 seconds [ 1355.812477][ T9] usb 7-1: USB disconnect, device number 56 [ 1355.816782][T16781] block nbd7: Possible stuck request ffff8880262e5400: control (read@2048,1024B). Runtime 330 seconds [ 1355.825889][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1355.880480][T16781] block nbd7: Possible stuck request ffff8880262e55c0: control (read@3072,1024B). Runtime 330 seconds [ 1355.902555][ T9] cp210x 7-1:0.0: device disconnected [ 1355.912138][T18474] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1355.938953][T18474] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1355.981003][T18474] usb 6-1: USB disconnect, device number 99 [ 1356.054957][ T30] audit: type=1400 audit(1762695506.852:2153): avc: denied { bind } for pid=26577 comm="syz.9.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1356.210762][ T870] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1356.291990][ T30] audit: type=1400 audit(1762695507.104:2154): avc: denied { create } for pid=26604 comm="syz.8.5436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1356.302653][T26605] wg1 speed is unknown, defaulting to 1000 [ 1356.400693][ T870] usb 2-1: Using ep0 maxpacket: 8 [ 1356.417305][ T870] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1356.447156][ T870] usb 2-1: config 0 has no interface number 0 [ 1356.477818][ T870] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1356.510126][ T870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.550863][ T870] usb 2-1: Product: syz [ 1356.556417][ T870] usb 2-1: Manufacturer: syz [ 1356.561306][ T870] usb 2-1: SerialNumber: syz [ 1356.582466][ T870] usb 2-1: config 0 descriptor?? [ 1356.967763][ T870] uvcvideo 2-1:0.31: Found Unit with invalid ID 0 [ 1357.017231][ T870] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1357.035182][ T870] uvcvideo 2-1:0.31: No valid video chain found. [ 1357.088379][T26657] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5440'. [ 1357.096416][ T870] usb 2-1: USB disconnect, device number 114 [ 1357.151194][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5440'. [ 1357.162807][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1357.345474][ T9] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1357.668221][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.708445][ T9] usb 10-1: config 0 descriptor?? [ 1357.730051][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1358.824394][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 1358.847817][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 1358.876527][ T9] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1358.913080][ T9] usb 10-1: USB disconnect, device number 4 [ 1359.532178][ T30] audit: type=1400 audit(1762695510.506:2155): avc: denied { accept } for pid=26727 comm="syz.9.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1359.567325][ T30] audit: type=1400 audit(1762695510.537:2156): avc: denied { write } for pid=26728 comm="syz.6.5447" path="socket:[103024]" dev="sockfs" ino=103024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1360.801692][T26758] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5454'. [ 1360.958339][T26758] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1360.963866][ T9] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1361.006759][T26023] block nbd2: Possible stuck request ffff8880260fe000: control (read@0,1024B). Runtime 570 seconds [ 1361.019186][T16781] block nbd14: Possible stuck request ffff88802694e000: control (read@0,1024B). Runtime 270 seconds [ 1361.030903][T16781] block nbd14: Possible stuck request ffff88802694e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1361.074266][T16781] block nbd14: Possible stuck request ffff88802694e380: control (read@2048,1024B). Runtime 270 seconds [ 1361.086442][T16781] block nbd14: Possible stuck request ffff88802694e540: control (read@3072,1024B). Runtime 270 seconds [ 1361.321395][T26763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1361.331564][T26763] block device autoloading is deprecated and will be removed. [ 1361.340542][T26023] block nbd2: Possible stuck request ffff8880260fe1c0: control (read@1024,1024B). Runtime 570 seconds [ 1361.351843][T26023] block nbd2: Possible stuck request ffff8880260fe380: control (read@2048,1024B). Runtime 570 seconds [ 1361.363150][T26023] block nbd2: Possible stuck request ffff8880260fe540: control (read@3072,1024B). Runtime 570 seconds [ 1361.426174][ T9] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1361.504269][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.539254][ T9] usb 8-1: config 0 descriptor?? [ 1361.570738][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1361.593547][T26781] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5460'. [ 1361.668379][T19732] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1361.761563][T26790] overlayfs: failed to resolve './file0': -2 [ 1362.190280][ T9] cpia1 8-1:0.0: unexpected state after lo power cmd: d1 [ 1362.199627][ T123] block nbd5: Possible stuck request ffff888026215080: control (read@0,1024B). Runtime 510 seconds [ 1362.211870][ T123] block nbd5: Possible stuck request ffff888026215240: control (read@1024,1024B). Runtime 510 seconds [ 1362.223834][ T123] block nbd5: Possible stuck request ffff888026215400: control (read@2048,1024B). Runtime 510 seconds [ 1362.235519][ T123] block nbd5: Possible stuck request ffff8880262155c0: control (read@3072,1024B). Runtime 510 seconds [ 1362.249441][T18524] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1362.266833][ T30] audit: type=1400 audit(1762695513.371:2157): avc: denied { kexec_image_load } for pid=26788 comm="syz.9.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1362.299763][T19732] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1362.312717][T19732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.328359][T19732] usb 7-1: config 0 descriptor?? [ 1362.351023][T19732] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1362.413690][T18524] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1362.451823][T18524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1362.498825][T18524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1362.530662][T18524] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1362.555869][T18524] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1362.575823][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 1362.592282][T18524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.607553][ T9] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1362.658730][T18524] usb 2-1: config 0 descriptor?? [ 1362.666034][ T9] usb 8-1: USB disconnect, device number 51 [ 1362.760731][T26769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.811170][T26769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.896441][T18524] plantronics 0003:047F:FFFF.001B: item fetching failed at offset 8/15 [ 1362.910752][T18524] plantronics 0003:047F:FFFF.001B: parse failed [ 1362.919011][T18524] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 1362.940446][T18524] usb 2-1: USB disconnect, device number 115 [ 1363.040212][T26794] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1363.080213][T26833] netlink: 341 bytes leftover after parsing attributes in process `syz.6.5457'. [ 1363.400672][T19732] gspca_cpia1: usb_control_msg 03, error -71 [ 1363.413722][T19732] gspca_cpia1: usb_control_msg 01, error -71 [ 1363.420273][T19732] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1363.434759][T19732] usb 7-1: USB disconnect, device number 57 [ 1363.450325][T26794] usb 10-1: Using ep0 maxpacket: 32 [ 1363.486868][T26794] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.523702][T26794] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1363.533778][T26794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.542844][T26794] usb 10-1: Product: syz [ 1363.548062][T26794] usb 10-1: Manufacturer: syz [ 1363.553095][T26794] usb 10-1: SerialNumber: syz [ 1363.561973][T26794] usb 10-1: config 0 descriptor?? [ 1363.574992][T26794] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1363.815610][T26856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1363.824693][T26856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1363.857524][ T30] audit: type=1400 audit(1762695515.041:2158): avc: denied { unmount } for pid=16718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1363.886525][ T30] audit: type=1400 audit(1762695515.072:2159): avc: denied { mounton } for pid=26859 comm="syz.7.5467" path="/433/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1364.703933][ T30] audit: type=1400 audit(1762695515.230:2160): avc: denied { remount } for pid=26859 comm="syz.7.5467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1364.740397][T26794] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1364.784798][T26794] gspca_pac7302 10-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1364.828591][ T30] audit: type=1400 audit(1762695516.059:2161): avc: denied { unmount } for pid=17929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1364.921673][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1364.930972][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.988345][T26794] usb 10-1: USB disconnect, device number 5 [ 1365.040998][T26872] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5470'. [ 1365.061908][T26883] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5471'. [ 1365.463688][T26876] Invalid ELF header type: 3 != 1 [ 1365.469191][ T30] audit: type=1400 audit(1762695516.731:2162): avc: denied { module_load } for pid=26866 comm="syz.1.5468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1366.090764][ T30] audit: type=1400 audit(1762695517.392:2163): avc: denied { read } for pid=26893 comm="syz.9.5473" path="socket:[103153]" dev="sockfs" ino=103153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1366.152248][ T30] audit: type=1400 audit(1762695517.392:2164): avc: denied { write } for pid=26893 comm="syz.9.5473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1366.206577][ T30] audit: type=1400 audit(1762695517.476:2165): avc: denied { bind } for pid=26901 comm="syz.7.5475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1366.230004][ T30] audit: type=1400 audit(1762695517.476:2166): avc: denied { setopt } for pid=26901 comm="syz.7.5475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1366.746058][ T123] block nbd11: Possible stuck request ffff888026800000: control (read@0,1024B). Runtime 330 seconds [ 1366.763221][ T123] block nbd11: Possible stuck request ffff8880268001c0: control (read@1024,1024B). Runtime 330 seconds [ 1366.780348][ T123] block nbd11: Possible stuck request ffff888026800380: control (read@2048,1024B). Runtime 330 seconds [ 1366.797604][ T123] block nbd11: Possible stuck request ffff888026800540: control (read@3072,1024B). Runtime 330 seconds [ 1366.821092][ T30] audit: type=1326 audit(1762695518.148:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.7.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1a38f6c9 code=0x7ffc0000 [ 1366.863302][ T30] audit: type=1326 audit(1762695518.148:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.7.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1a38f6c9 code=0x7ffc0000 [ 1366.900410][ T30] audit: type=1326 audit(1762695518.148:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.7.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1a38f6c9 code=0x7ffc0000 [ 1367.174248][T18474] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 1367.626360][T26947] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5482'. [ 1367.642307][T26947] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1368.521769][T18474] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.578406][T18474] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1368.619474][T18474] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1368.651385][T18474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.676991][T18474] usb 8-1: Product: syz [ 1368.693163][T18474] usb 8-1: Manufacturer: syz [ 1368.698295][T18474] usb 8-1: SerialNumber: syz [ 1369.184296][T18474] usb 8-1: 0:2 : does not exist [ 1369.769227][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1369.769239][ T30] audit: type=1326 audit(1762695521.255:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.7.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e1a38f2cb code=0x7ffc0000 [ 1369.794598][ T123] block nbd12: Possible stuck request ffff8880268b7000: control (read@0,1024B). Runtime 330 seconds [ 1369.809680][ T123] block nbd12: Possible stuck request ffff8880268b71c0: control (read@1024,1024B). Runtime 330 seconds [ 1369.820844][ T123] block nbd12: Possible stuck request ffff8880268b7380: control (read@2048,1024B). Runtime 330 seconds [ 1369.832075][ T123] block nbd12: Possible stuck request ffff8880268b7540: control (read@3072,1024B). Runtime 330 seconds [ 1369.932707][T18474] usb 8-1: USB disconnect, device number 52 [ 1370.603733][ T30] audit: type=1400 audit(1762695522.127:2235): avc: denied { map } for pid=27008 comm="syz.8.5496" path="socket:[103963]" dev="sockfs" ino=103963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1370.628155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.684861][ T30] audit: type=1400 audit(1762695522.169:2236): avc: denied { create } for pid=27008 comm="syz.8.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1370.704655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.805963][T18474] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1371.360969][T16522] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1371.373213][T26023] block nbd15: Possible stuck request ffff8880269be000: control (read@0,1024B). Runtime 270 seconds [ 1371.384110][T26023] block nbd15: Possible stuck request ffff8880269be1c0: control (read@1024,1024B). Runtime 270 seconds [ 1371.395948][T26023] block nbd15: Possible stuck request ffff8880269be380: control (read@2048,1024B). Runtime 270 seconds [ 1371.407157][T26023] block nbd15: Possible stuck request ffff8880269be540: control (read@3072,1024B). Runtime 270 seconds [ 1371.442030][T18474] usb 8-1: Using ep0 maxpacket: 32 [ 1371.452319][T18474] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1371.460498][T18474] usb 8-1: config 0 has no interface number 0 [ 1371.478734][T18474] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1371.488105][T18474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.496426][T18474] usb 8-1: Product: syz [ 1371.500619][T18474] usb 8-1: Manufacturer: syz [ 1371.505204][T18474] usb 8-1: SerialNumber: syz [ 1371.512013][T18474] usb 8-1: config 0 descriptor?? [ 1371.526076][T18474] smsc95xx v2.0.0 [ 1371.616767][T18474] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1371.637457][T16522] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1371.650004][T18474] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 1371.709722][T16522] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.731596][T16522] usb 10-1: config 0 descriptor?? [ 1371.757416][T16522] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1372.133622][T27032] syz.1.5502 (27032): drop_caches: 2 [ 1372.153943][T27023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.186806][T27023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.265327][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5505'. [ 1372.320827][T27058] gretap0: left allmulticast mode [ 1372.326373][T27058] gretap0: left promiscuous mode [ 1372.340768][T27058] bridge0: port 3(gretap0) entered disabled state [ 1372.447529][T27061] netlink: 341 bytes leftover after parsing attributes in process `syz.9.5501'. [ 1372.700530][T27058] bridge_slave_0: left allmulticast mode [ 1372.708777][T16522] gspca_cpia1: usb_control_msg 03, error -71 [ 1372.710898][T27058] bridge_slave_0: left promiscuous mode [ 1372.721606][T27058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.736902][T16522] gspca_cpia1: usb_control_msg 01, error -71 [ 1372.759320][T16522] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1372.956173][T19732] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1373.056934][T17051] usb 8-1: USB disconnect, device number 53 [ 1373.072684][T16522] usb 10-1: USB disconnect, device number 6 [ 1373.108833][T19732] usb 2-1: Using ep0 maxpacket: 16 [ 1373.126389][T19732] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1373.162783][T19732] usb 2-1: config 0 has no interface number 0 [ 1373.194794][T19732] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1373.254685][T19732] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1373.286302][T19732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.311074][T19732] usb 2-1: Product: syz [ 1373.324274][T19732] usb 2-1: Manufacturer: syz [ 1373.337709][T19732] usb 2-1: SerialNumber: syz [ 1373.406794][T19732] usb 2-1: config 0 descriptor?? [ 1373.556289][T17051] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1373.618646][T19732] usbtouchscreen 2-1:0.214: Failed to read FW rev: 15 [ 1373.628752][T19732] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1373.684124][T17051] usb 8-1: device descriptor read/64, error -71 [ 1373.893261][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.901889][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.947040][T17051] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1374.070777][T17051] usb 8-1: device descriptor read/64, error -71 [ 1374.175779][T17051] usb usb8-port1: attempt power cycle [ 1374.263885][T27115] wg1 speed is unknown, defaulting to 1000 [ 1374.347139][T18474] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1374.499363][T17051] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1374.512813][T18474] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1374.522309][T18474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.532799][T18474] usb 10-1: config 0 descriptor?? [ 1374.538413][T17051] usb 8-1: device descriptor read/8, error -71 [ 1374.547294][T18474] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1374.766069][T17051] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1374.785875][T17051] usb 8-1: device descriptor read/8, error -71 [ 1374.890785][T17051] usb usb8-port1: unable to enumerate USB device [ 1374.934644][T27109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.944969][T27109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.128197][T27147] mkiss: ax0: crc mode is auto. [ 1375.210736][T27151] netlink: 341 bytes leftover after parsing attributes in process `syz.9.5513'. [ 1375.519144][T18474] cpia1 10-1:0.0: unexpected state after lo power cmd: 01 [ 1375.529809][T16522] usb 2-1: USB disconnect, device number 116 [ 1375.539751][T18474] gspca_cpia1: usb_control_msg 01, error -71 [ 1375.572659][T18474] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1375.609364][T18474] usb 10-1: USB disconnect, device number 7 [ 1375.918856][T16522] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1376.076082][T16522] usb 2-1: config 192 has an invalid interface number: 7 but max is 1 [ 1376.092844][T16522] usb 2-1: config 192 has an invalid interface number: 89 but max is 1 [ 1376.101615][T16522] usb 2-1: config 192 has no interface number 0 [ 1376.220197][T16522] usb 2-1: config 192 has no interface number 1 [ 1376.230382][T16522] usb 2-1: config 192 interface 7 altsetting 96 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1376.241967][T16522] usb 2-1: config 192 interface 7 altsetting 96 endpoint 0x1 has an invalid bInterval 64, changing to 10 [ 1376.260639][T16522] usb 2-1: config 192 interface 7 altsetting 96 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1376.317488][T27183] FAULT_INJECTION: forcing a failure. [ 1376.317488][T27183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.331089][T27183] CPU: 1 UID: 0 PID: 27183 Comm: syz.9.5518 Not tainted syzkaller #0 PREEMPT(full) [ 1376.331113][T27183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1376.331123][T27183] Call Trace: [ 1376.331130][T27183] [ 1376.331138][T27183] dump_stack_lvl+0x16c/0x1f0 [ 1376.331170][T27183] should_fail_ex+0x512/0x640 [ 1376.331194][T27183] _copy_from_user+0x2e/0xd0 [ 1376.331216][T27183] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 1376.331246][T27183] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1376.331275][T27183] ? sock_kmalloc+0x111/0x170 [ 1376.331305][T27183] alg_setsockopt+0x3bb/0xdd0 [ 1376.331338][T27183] ? __pfx_alg_setsockopt+0x10/0x10 [ 1376.331365][T27183] ? selinux_socket_setsockopt+0x6a/0x80 [ 1376.331394][T27183] ? __pfx_alg_setsockopt+0x10/0x10 [ 1376.331421][T27183] do_sock_setsockopt+0xf3/0x1d0 [ 1376.331450][T27183] __sys_setsockopt+0x1a0/0x230 [ 1376.331476][T27183] __x64_sys_setsockopt+0xbd/0x160 [ 1376.331496][T27183] ? do_syscall_64+0x91/0xfa0 [ 1376.331511][T27183] ? lockdep_hardirqs_on+0x7c/0x110 [ 1376.331538][T27183] do_syscall_64+0xcd/0xfa0 [ 1376.331555][T27183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.331573][T27183] RIP: 0033:0x7fe07638f6c9 [ 1376.331588][T27183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1376.331605][T27183] RSP: 002b:00007fe077240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1376.331623][T27183] RAX: ffffffffffffffda RBX: 00007fe0765e6180 RCX: 00007fe07638f6c9 [ 1376.331634][T27183] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000006 [ 1376.331644][T27183] RBP: 00007fe077240090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.331655][T27183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.331665][T27183] R13: 00007fe0765e6218 R14: 00007fe0765e6180 R15: 00007ffefd47e7a8 [ 1376.331691][T27183] [ 1376.555867][T16522] usb 2-1: config 192 interface 7 altsetting 96 has a duplicate endpoint with address 0x1, skipping [ 1376.567834][T16522] usb 2-1: config 192 interface 7 altsetting 96 has an endpoint descriptor with address 0x65, changing to 0x5 [ 1376.579749][T16522] usb 2-1: config 192 interface 7 altsetting 96 has a duplicate endpoint with address 0x5, skipping [ 1376.590933][T16522] usb 2-1: config 192 interface 7 altsetting 96 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 1376.607096][T16522] usb 2-1: config 192 interface 89 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1376.618184][T27189] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5519'. [ 1376.622832][T27189] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5519'. [ 1376.637281][T16522] usb 2-1: config 192 interface 89 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 1376.648830][T16522] usb 2-1: config 192 interface 89 altsetting 7 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1376.661980][T16522] usb 2-1: config 192 interface 89 altsetting 7 endpoint 0xB has invalid maxpacket 975, setting to 64 [ 1376.673254][T16522] usb 2-1: config 192 interface 7 has no altsetting 0 [ 1376.680871][T16522] usb 2-1: config 192 interface 89 has no altsetting 0 [ 1376.691118][T16522] usb 2-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=a1.69 [ 1376.700295][T16522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.708310][T16522] usb 2-1: Product: syz [ 1376.713183][T16522] usb 2-1: Manufacturer: 䠊 [ 1376.717799][T16522] usb 2-1: SerialNumber: syz [ 1376.739641][T27187] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5520'. [ 1376.998695][T16522] usb 2-1: USB disconnect, device number 117 [ 1377.202024][ T30] audit: type=1400 audit(1762695529.055:2237): avc: denied { watch watch_reads } for pid=27214 comm="syz.6.5523" path="/proc/1052/stat" dev="proc" ino=103407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1377.252327][T17051] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1377.897947][T26023] block nbd13: Possible stuck request ffff8880268ee000: control (read@0,1024B). Runtime 300 seconds [ 1377.898248][ T123] block nbd1: Possible stuck request ffff888026097000: control (read@0,1024B). Runtime 600 seconds [ 1377.909162][T26023] block nbd13: Possible stuck request ffff8880268ee1c0: control (read@1024,1024B). Runtime 300 seconds [ 1377.921467][ T123] block nbd1: Possible stuck request ffff8880260971c0: control (read@1024,1024B). Runtime 600 seconds [ 1377.935445][T26023] block nbd13: Possible stuck request ffff8880268ee380: control (read@2048,1024B). Runtime 300 seconds [ 1377.945458][T17051] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1377.959255][T26023] block nbd13: Possible stuck request ffff8880268ee540: control (read@3072,1024B). Runtime 300 seconds [ 1377.967770][ T123] block nbd1: Possible stuck request ffff888026097380: control (read@2048,1024B). Runtime 600 seconds [ 1377.967803][ T123] block nbd1: Possible stuck request ffff888026097540: control (read@3072,1024B). Runtime 600 seconds [ 1377.985927][T17051] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.109149][T17051] usb 8-1: config 0 descriptor?? [ 1378.201741][T17051] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1378.537439][T27240] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5525'. [ 1378.564850][T27240] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1378.615652][T27204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.807235][T27204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.214598][T27247] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1379.354429][T27243] netlink: 341 bytes leftover after parsing attributes in process `syz.7.5521'. [ 1379.401828][T27247] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1379.401923][T17051] gspca_cpia1: usb_control_msg 03, error -110 [ 1379.523827][T19732] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1379.612467][T17051] gspca_cpia1: usb_control_msg 01, error -32 [ 1379.648364][T17051] gspca_cpia1: usb_control_msg 01, error -71 [ 1379.668016][T17051] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1379.694518][T17051] usb 8-1: USB disconnect, device number 58 [ 1379.767112][T19732] usb 7-1: Using ep0 maxpacket: 8 [ 1379.812981][T19732] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1379.834987][T19732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.862553][T19732] usb 7-1: Product: syz [ 1379.869265][T19732] usb 7-1: Manufacturer: syz [ 1379.882136][T19732] usb 7-1: SerialNumber: syz [ 1379.903658][T19732] usb 7-1: config 0 descriptor?? [ 1379.925008][T19732] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1380.191433][T19732] gspca_sonixj: reg_r err -71 [ 1380.219552][T19732] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1380.246642][T19732] usb 7-1: USB disconnect, device number 58 [ 1380.372892][ T30] audit: type=1326 audit(1762695532.383:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27284 comm="syz.8.5532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f916478f6c9 code=0x0 [ 1380.535545][T27296] netlink: 'syz.8.5533': attribute type 32 has an invalid length. [ 1380.547993][T27292] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5531'. [ 1380.571199][T27296] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5533'. [ 1381.234083][T16522] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1381.480936][ T123] block nbd8: Possible stuck request ffff888026355080: control (read@0,1024B). Runtime 360 seconds [ 1381.492514][ T123] block nbd8: Possible stuck request ffff888026355240: control (read@1024,1024B). Runtime 360 seconds [ 1381.503737][ T123] block nbd8: Possible stuck request ffff888026355400: control (read@2048,1024B). Runtime 360 seconds [ 1381.514765][ T123] block nbd8: Possible stuck request ffff8880263555c0: control (read@3072,1024B). Runtime 360 seconds [ 1381.732164][T27321] wg1 speed is unknown, defaulting to 1000 [ 1381.754036][T27330] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5539'. [ 1381.759420][T16522] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1381.782362][T16522] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.811837][T27338] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5539'. [ 1381.834293][T16522] usb 10-1: config 0 descriptor?? [ 1381.853750][T27340] FAULT_INJECTION: forcing a failure. [ 1381.853750][T27340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1381.879261][T16522] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1381.902955][T27340] CPU: 1 UID: 0 PID: 27340 Comm: syz.6.5541 Not tainted syzkaller #0 PREEMPT(full) [ 1381.902984][T27340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1381.902994][T27340] Call Trace: [ 1381.903001][T27340] [ 1381.903009][T27340] dump_stack_lvl+0x16c/0x1f0 [ 1381.903046][T27340] should_fail_ex+0x512/0x640 [ 1381.903072][T27340] _copy_from_user+0x2e/0xd0 [ 1381.903095][T27340] wext_handle_ioctl+0xc2/0x2a0 [ 1381.903114][T27340] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1381.903137][T27340] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1381.903164][T27340] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1381.903190][T27340] sock_ioctl+0x3a1/0x6b0 [ 1381.903210][T27340] ? __pfx_sock_ioctl+0x10/0x10 [ 1381.903225][T27340] ? hook_file_ioctl_common+0x145/0x410 [ 1381.903258][T27340] ? selinux_file_ioctl+0x180/0x270 [ 1381.903276][T27340] ? selinux_file_ioctl+0xb4/0x270 [ 1381.903297][T27340] ? __pfx_sock_ioctl+0x10/0x10 [ 1381.903316][T27340] __x64_sys_ioctl+0x18e/0x210 [ 1381.903343][T27340] do_syscall_64+0xcd/0xfa0 [ 1381.903361][T27340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.903380][T27340] RIP: 0033:0x7fc47b38f6c9 [ 1381.903395][T27340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.903413][T27340] RSP: 002b:00007fc4795f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.903431][T27340] RAX: ffffffffffffffda RBX: 00007fc47b5e5fa0 RCX: 00007fc47b38f6c9 [ 1381.903443][T27340] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000004 [ 1381.903454][T27340] RBP: 00007fc4795f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.903465][T27340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.903476][T27340] R13: 00007fc47b5e6038 R14: 00007fc47b5e5fa0 R15: 00007ffc522214d8 [ 1381.903503][T27340] [ 1381.915137][T27338] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5539'. [ 1382.049812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1382.181047][T27366] No source specified [ 1382.209490][T27367] netlink: 'syz.1.5544': attribute type 4 has an invalid length. [ 1382.274823][T16522] cpia1 10-1:0.0: unexpected state after lo power cmd: d1 [ 1382.308715][T27373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5546'. [ 1382.624586][T27379] blktrace: Concurrent blktraces are not allowed on loop3 [ 1382.646610][ T30] audit: type=1400 audit(1762695534.745:2239): avc: denied { write } for pid=27375 comm="syz.1.5547" name="file0" dev="tmpfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1382.986792][ T30] audit: type=1400 audit(1762695534.745:2240): avc: denied { ioctl } for pid=27375 comm="syz.1.5547" path="/456/file0" dev="tmpfs" ino=2418 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1383.013405][T16522] gspca_cpia1: usb_control_msg 02, error -71 [ 1383.024817][T16522] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1383.072434][T16522] usb 10-1: USB disconnect, device number 8 [ 1383.248626][T26023] block nbd3: Possible stuck request ffff88802616e000: control (read@0,1024B). Runtime 540 seconds [ 1383.249027][ T123] block nbd9: Possible stuck request ffff888026385080: control (read@0,1024B). Runtime 360 seconds [ 1383.264050][T26023] block nbd3: Possible stuck request ffff88802616e1c0: control (read@1024,1024B). Runtime 540 seconds [ 1383.270385][ T123] block nbd9: Possible stuck request ffff888026385240: control (read@1024,1024B). Runtime 360 seconds [ 1383.282940][T26023] block nbd3: Possible stuck request ffff88802616e380: control (read@2048,1024B). Runtime 540 seconds [ 1383.293482][ T123] block nbd9: Possible stuck request ffff888026385400: control (read@2048,1024B). Runtime 360 seconds [ 1384.044424][T17051] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1384.355048][T26023] block nbd3: Possible stuck request ffff88802616e540: control (read@3072,1024B). Runtime 540 seconds [ 1384.360335][ T123] block nbd9: Possible stuck request ffff8880263855c0: control (read@3072,1024B). Runtime 360 seconds [ 1384.432693][T26023] block nbd7: Possible stuck request ffff8880262e5080: control (read@0,1024B). Runtime 360 seconds [ 1384.444263][T26023] block nbd7: Possible stuck request ffff8880262e5240: control (read@1024,1024B). Runtime 360 seconds [ 1384.468894][T26023] block nbd7: Possible stuck request ffff8880262e5400: control (read@2048,1024B). Runtime 360 seconds [ 1384.480500][T26023] block nbd7: Possible stuck request ffff8880262e55c0: control (read@3072,1024B). Runtime 360 seconds [ 1384.522927][T17051] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1384.563615][T17051] usb 8-1: can't read configurations, error -61 [ 1384.585257][T27417] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1384.637932][T27417] bridge3: entered promiscuous mode [ 1384.659386][T27417] bridge3: entered allmulticast mode [ 1384.758440][T17051] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1384.976803][T27434] Invalid ELF header type: 3 != 1 [ 1385.332764][T17051] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1385.347827][T17051] usb 8-1: can't read configurations, error -61 [ 1385.455498][T17051] usb usb8-port1: attempt power cycle [ 1385.638553][T27446] __nla_validate_parse: 2 callbacks suppressed [ 1385.638577][T27446] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5561'. [ 1385.811497][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5561'. [ 1385.825402][T17051] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1385.835278][T16522] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1385.875544][T17051] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1385.889245][T17051] usb 8-1: can't read configurations, error -61 [ 1386.044480][T17051] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1386.054152][T16522] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1386.063528][T16522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.073664][T16522] usb 2-1: config 0 descriptor?? [ 1386.081140][T16522] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1386.132128][ T30] audit: type=1400 audit(1762695538.430:2241): avc: denied { connect } for pid=27418 comm="syz.9.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1386.261433][T17051] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1386.269343][T17051] usb 8-1: can't read configurations, error -61 [ 1386.293905][T17051] usb usb8-port1: unable to enumerate USB device [ 1386.487066][T27486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5566'. [ 1386.508536][T27441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.527534][T27441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.552921][T27490] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1386.559485][T27490] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1386.584379][T27490] vhci_hcd vhci_hcd.0: Device attached [ 1386.595895][T27491] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 1386.603739][ T12] vhci_hcd: stop threads [ 1386.609753][ T12] vhci_hcd: release socket [ 1386.627898][ T12] vhci_hcd: disconnect device [ 1386.854242][T17051] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1387.408659][T16522] gspca_cpia1: usb_control_msg 03, error -110 [ 1387.442854][T27506] netlink: 341 bytes leftover after parsing attributes in process `syz.1.5560'. [ 1387.449722][T16522] gspca_cpia1: usb_control_msg 01, error -32 [ 1387.474808][T17051] usb 7-1: device descriptor read/64, error -71 [ 1387.895795][T16522] gspca_cpia1: usb_control_msg 01, error -71 [ 1387.933835][T16522] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1387.961477][T16522] usb 2-1: USB disconnect, device number 118 [ 1388.067043][T17051] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1388.637503][ T30] audit: type=1326 audit(1762695541.065:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1388.664281][T17051] usb 7-1: device descriptor read/64, error -71 [ 1388.774606][ T30] audit: type=1326 audit(1762695541.086:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1388.799469][T17051] usb usb7-port1: attempt power cycle [ 1388.805655][ T30] audit: type=1326 audit(1762695541.097:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1388.833315][ T30] audit: type=1326 audit(1762695541.097:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1388.861098][ T30] audit: type=1326 audit(1762695541.097:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1388.886812][ T30] audit: type=1326 audit(1762695541.097:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1388.929787][ T30] audit: type=1326 audit(1762695541.097:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1388.989557][ T30] audit: type=1326 audit(1762695541.097:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1389.049254][ T30] audit: type=1326 audit(1762695541.107:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1389.073321][ T30] audit: type=1326 audit(1762695541.107:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27517 comm="syz.9.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07638f6c9 code=0x7ffc0000 [ 1389.168805][T17051] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1389.199007][T17051] usb 7-1: device descriptor read/8, error -71 [ 1389.356679][T27539] netlink: 341 bytes leftover after parsing attributes in process `syz.8.5575'. [ 1389.454635][T17051] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1389.673779][T17051] usb 7-1: device not accepting address 62, error -71 [ 1389.684392][T17051] usb usb7-port1: unable to enumerate USB device [ 1389.930004][T26023] block nbd14: Possible stuck request ffff88802694e000: control (read@0,1024B). Runtime 300 seconds [ 1389.930161][T16781] block nbd2: Possible stuck request ffff8880260fe000: control (read@0,1024B). Runtime 600 seconds [ 1389.959985][T26023] block nbd14: Possible stuck request ffff88802694e1c0: control (read@1024,1024B). Runtime 300 seconds [ 1389.972516][T26023] block nbd14: Possible stuck request ffff88802694e380: control (read@2048,1024B). Runtime 300 seconds [ 1389.985717][T16781] block nbd2: Possible stuck request ffff8880260fe1c0: control (read@1024,1024B). Runtime 600 seconds [ 1389.997940][T26023] block nbd14: Possible stuck request ffff88802694e540: control (read@3072,1024B). Runtime 300 seconds [ 1390.106610][T26794] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1390.114257][T27563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5580'. [ 1390.126103][T26023] block nbd2: Possible stuck request ffff8880260fe380: control (read@2048,1024B). Runtime 600 seconds [ 1390.139754][T26023] block nbd2: Possible stuck request ffff8880260fe540: control (read@3072,1024B). Runtime 600 seconds [ 1390.289476][T27563] dummy0: entered promiscuous mode [ 1390.304856][T27563] macvtap1: entered promiscuous mode [ 1390.317545][T27563] macvtap1: entered allmulticast mode [ 1390.331514][T27563] dummy0: entered allmulticast mode [ 1390.619474][T26794] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1390.775325][T26794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.810246][T27578] binder: 27577:27578 ioctl c0306201 200000000680 returned -14 [ 1390.818630][T26794] usb 10-1: config 0 descriptor?? [ 1390.891849][T26794] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1391.062629][T27588] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5586'. [ 1391.140992][ T123] block nbd5: Possible stuck request ffff888026215080: control (read@0,1024B). Runtime 540 seconds [ 1391.152311][ T123] block nbd5: Possible stuck request ffff888026215240: control (read@1024,1024B). Runtime 540 seconds [ 1391.166764][ T123] block nbd5: Possible stuck request ffff888026215400: control (read@2048,1024B). Runtime 540 seconds [ 1391.178356][ T123] block nbd5: Possible stuck request ffff8880262155c0: control (read@3072,1024B). Runtime 540 seconds [ 1391.289804][T27586] fuse: Bad value for 'fd' [ 1391.456946][T26794] cpia1 10-1:0.0: unexpected state after lo power cmd: d1 [ 1391.476650][T27594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1391.931564][T26794] gspca_cpia1: usb_control_msg 02, error -71 [ 1391.938964][T26794] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1391.964226][T26794] usb 10-1: USB disconnect, device number 9 [ 1392.600759][T27633] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1392.628802][T27633] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.744943][T27633] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1392.756053][T27633] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.850256][T27633] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1392.890589][T27633] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.979835][T27661] i2c i2c-0: Invalid block write size 34 [ 1393.166685][T27662] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5594'. [ 1393.178313][T27662] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1393.219293][T27633] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.235295][T27633] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.375123][ T50] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.393046][ T50] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.435211][ T50] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.448905][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.495771][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.515841][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.544368][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.571651][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.991889][T27695] FAULT_INJECTION: forcing a failure. [ 1393.991889][T27695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.007635][T27686] netlink: 'syz.6.5597': attribute type 3 has an invalid length. [ 1394.045949][T27695] CPU: 1 UID: 0 PID: 27695 Comm: syz.9.5600 Not tainted syzkaller #0 PREEMPT(full) [ 1394.045982][T27695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1394.045998][T27695] Call Trace: [ 1394.046005][T27695] [ 1394.046015][T27695] dump_stack_lvl+0x16c/0x1f0 [ 1394.046058][T27695] should_fail_ex+0x512/0x640 [ 1394.046089][T27695] _copy_from_user+0x2e/0xd0 [ 1394.046119][T27695] do_hidp_sock_ioctl.constprop.0+0x174/0x510 [ 1394.046154][T27695] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 1394.046223][T27695] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1394.046261][T27695] ? kasan_quarantine_put+0x10a/0x240 [ 1394.046302][T27695] ? tomoyo_path_number_perm+0x18d/0x580 [ 1394.046364][T27695] sock_do_ioctl+0x118/0x280 [ 1394.046402][T27695] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1394.046447][T27695] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1394.046479][T27695] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1394.046511][T27695] sock_ioctl+0x227/0x6b0 [ 1394.046534][T27695] ? __pfx_sock_ioctl+0x10/0x10 [ 1394.046554][T27695] ? hook_file_ioctl_common+0x145/0x410 [ 1394.046594][T27695] ? selinux_file_ioctl+0x180/0x270 [ 1394.046617][T27695] ? selinux_file_ioctl+0xb4/0x270 [ 1394.046644][T27695] ? __pfx_sock_ioctl+0x10/0x10 [ 1394.046667][T27695] __x64_sys_ioctl+0x18e/0x210 [ 1394.046702][T27695] do_syscall_64+0xcd/0xfa0 [ 1394.046725][T27695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.046749][T27695] RIP: 0033:0x7fe07638f6c9 [ 1394.046768][T27695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1394.046790][T27695] RSP: 002b:00007fe077282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.046813][T27695] RAX: ffffffffffffffda RBX: 00007fe0765e5fa0 RCX: 00007fe07638f6c9 [ 1394.046828][T27695] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 1394.046841][T27695] RBP: 00007fe077282090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.046854][T27695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.046867][T27695] R13: 00007fe0765e6038 R14: 00007fe0765e5fa0 R15: 00007ffefd47e7a8 [ 1394.046901][T27695] [ 1394.258535][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.413411][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1394.413429][ T30] audit: type=1400 audit(1762695547.123:2294): avc: denied { mount } for pid=27703 comm="syz.8.5602" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1394.466849][T27704] overlayfs: failed to clone lowerpath [ 1394.838185][T27717] fuse: Bad value for 'fd' [ 1394.860299][ T30] audit: type=1400 audit(1762695547.595:2295): avc: denied { mounton } for pid=27716 comm="syz.9.5607" path="/55/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1395.154348][T27724] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5609'. [ 1395.166428][T27724] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1395.408656][ T123] block nbd11: Possible stuck request ffff888026800000: control (read@0,1024B). Runtime 360 seconds [ 1395.420155][ T123] block nbd11: Possible stuck request ffff8880268001c0: control (read@1024,1024B). Runtime 360 seconds [ 1395.431899][ T123] block nbd11: Possible stuck request ffff888026800380: control (read@2048,1024B). Runtime 360 seconds [ 1395.445434][ T123] block nbd11: Possible stuck request ffff888026800540: control (read@3072,1024B). Runtime 360 seconds [ 1397.362582][T27785] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5624'. [ 1397.374813][T27785] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1397.565052][T27803] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5622'. [ 1398.248765][T27819] fuse: Bad value for 'fd' [ 1398.447929][ T123] block nbd12: Possible stuck request ffff8880268b7000: control (read@0,1024B). Runtime 360 seconds [ 1398.463862][ T123] block nbd12: Possible stuck request ffff8880268b71c0: control (read@1024,1024B). Runtime 360 seconds [ 1398.475580][ T123] block nbd12: Possible stuck request ffff8880268b7380: control (read@2048,1024B). Runtime 360 seconds [ 1398.487068][ T123] block nbd12: Possible stuck request ffff8880268b7540: control (read@3072,1024B). Runtime 360 seconds [ 1399.687903][T27823] tipc: Enabled bearer , priority 0 [ 1399.706120][T27823] syzkaller0: entered promiscuous mode [ 1399.723583][T27823] syzkaller0: entered allmulticast mode [ 1399.752219][T27823] tipc: Resetting bearer [ 1399.787498][T27820] tipc: Resetting bearer [ 1399.827983][T19732] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1399.838520][T27820] tipc: Disabling bearer [ 1399.938995][T27837] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5633'. [ 1400.000962][T19732] usb 7-1: device descriptor read/64, error -71 [ 1400.297298][T26023] block nbd15: Possible stuck request ffff8880269be000: control (read@0,1024B). Runtime 300 seconds [ 1400.308237][T26023] block nbd15: Possible stuck request ffff8880269be1c0: control (read@1024,1024B). Runtime 300 seconds [ 1400.320901][T26023] block nbd15: Possible stuck request ffff8880269be380: control (read@2048,1024B). Runtime 300 seconds [ 1400.332480][T26023] block nbd15: Possible stuck request ffff8880269be540: control (read@3072,1024B). Runtime 300 seconds [ 1400.371420][T16522] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1400.422023][T19732] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1400.533419][T16522] usb 10-1: Using ep0 maxpacket: 16 [ 1400.546670][T16522] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1400.563378][T19732] usb 7-1: device descriptor read/64, error -71 [ 1400.626179][T16522] usb 10-1: config 0 has no interface number 0 [ 1400.732390][T19732] usb usb7-port1: attempt power cycle [ 1400.868365][T16522] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1400.878781][T16522] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1400.890703][T16522] usb 10-1: Manufacturer: syz [ 1400.914038][T16522] usb 10-1: SerialNumber: syz [ 1401.031130][T16522] usb 10-1: config 0 descriptor?? [ 1401.052300][T16522] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1401.124665][T27880] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5640'. [ 1401.135945][T27880] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1401.209228][T19732] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1401.269991][T27879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=27879 comm=syz.7.5642 [ 1401.476072][T19732] usb 7-1: device not accepting address 65, error -71 [ 1402.215995][T16522] gspca_spca1528: reg_w err -71 [ 1402.292978][T16522] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1402.505318][T16522] usb 10-1: USB disconnect, device number 10 [ 1403.611847][T27933] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1404.319137][T27947] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1404.330687][T27947] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1404.623613][T27954] openvswitch: netlink: Message has 584 unknown bytes. [ 1404.648013][T27954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1406.324898][T27983] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5667'. [ 1406.372198][T27983] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5667'. [ 1406.454983][ T30] audit: type=1400 audit(1762695559.762:2296): avc: denied { bind } for pid=27988 comm="syz.7.5668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1406.648518][T27992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1406.657651][ T30] audit: type=1400 audit(1762695559.794:2297): avc: denied { listen } for pid=27988 comm="syz.7.5668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1406.677294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.915202][T18474] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1406.952102][T27983] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5667'. [ 1406.982155][ T123] block nbd1: Possible stuck request ffff888026097000: control (read@0,1024B). Runtime 630 seconds [ 1406.984043][T26023] block nbd13: Possible stuck request ffff8880268ee000: control (read@0,1024B). Runtime 330 seconds [ 1406.993336][ T123] block nbd1: Possible stuck request ffff8880260971c0: control (read@1024,1024B). Runtime 630 seconds [ 1407.004267][T26023] block nbd13: Possible stuck request ffff8880268ee1c0: control (read@1024,1024B). Runtime 330 seconds [ 1407.015447][ T123] block nbd1: Possible stuck request ffff888026097380: control (read@2048,1024B). Runtime 630 seconds [ 1407.026503][T26023] block nbd13: Possible stuck request ffff8880268ee380: control (read@2048,1024B). Runtime 330 seconds [ 1407.038234][ T123] block nbd1: Possible stuck request ffff888026097540: control (read@3072,1024B). Runtime 630 seconds [ 1407.050618][T26023] block nbd13: Possible stuck request ffff8880268ee540: control (read@3072,1024B). Runtime 330 seconds [ 1407.143734][T18474] usb 2-1: Using ep0 maxpacket: 32 [ 1407.168039][T18474] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1407.201904][T18474] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1407.230220][T18474] usb 2-1: can't read configurations, error -71 [ 1407.343867][ T30] audit: type=1400 audit(1762695560.696:2298): avc: denied { connect } for pid=28012 comm="syz.9.5673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1407.847997][T28028] tipc: Enabled bearer , priority 0 [ 1408.216753][T28028] syzkaller0: entered promiscuous mode [ 1408.275968][T28028] syzkaller0: entered allmulticast mode [ 1408.384032][T28028] tipc: Resetting bearer [ 1408.413221][T28032] tipc: Resetting bearer [ 1408.719870][T18474] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1408.889366][T18474] usb 10-1: device descriptor read/64, error -71 [ 1409.116966][T18474] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1409.277801][T18474] usb 10-1: device descriptor read/64, error -71 [ 1409.411672][T18474] usb usb10-port1: attempt power cycle [ 1409.744893][T18474] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1409.798709][T18474] usb 10-1: device descriptor read/8, error -71 [ 1410.116194][T18474] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1410.146420][T18474] usb 10-1: device descriptor read/8, error -71 [ 1410.289314][T18474] usb usb10-port1: unable to enumerate USB device [ 1410.707994][ T123] block nbd8: Possible stuck request ffff888026355080: control (read@0,1024B). Runtime 390 seconds [ 1410.719629][ T123] block nbd8: Possible stuck request ffff888026355240: control (read@1024,1024B). Runtime 390 seconds [ 1410.731475][ T123] block nbd8: Possible stuck request ffff888026355400: control (read@2048,1024B). Runtime 390 seconds [ 1410.745171][ T123] block nbd8: Possible stuck request ffff8880263555c0: control (read@3072,1024B). Runtime 390 seconds [ 1410.816467][T28066] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5684'. [ 1410.987237][T28072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5684'. [ 1411.052441][T28071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5684'. [ 1411.703478][T18474] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1411.848471][T28092] fuse: Bad value for 'fd' [ 1411.983004][ T123] block nbd9: Possible stuck request ffff888026385080: control (read@0,1024B). Runtime 390 seconds [ 1411.994413][ T123] block nbd9: Possible stuck request ffff888026385240: control (read@1024,1024B). Runtime 390 seconds [ 1412.005971][ T123] block nbd9: Possible stuck request ffff888026385400: control (read@2048,1024B). Runtime 390 seconds [ 1412.241960][T18474] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1412.251448][T26023] block nbd3: Possible stuck request ffff88802616e000: control (read@0,1024B). Runtime 570 seconds [ 1412.262341][T26023] block nbd3: Possible stuck request ffff88802616e1c0: control (read@1024,1024B). Runtime 570 seconds [ 1412.273406][T26023] block nbd3: Possible stuck request ffff88802616e380: control (read@2048,1024B). Runtime 570 seconds [ 1412.286998][T18474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.298931][T18474] usb 10-1: config 0 descriptor?? [ 1412.332917][T18474] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1412.823550][T18474] cpia1 10-1:0.0: unexpected state after lo power cmd: d1 [ 1413.010120][T26023] block nbd3: Possible stuck request ffff88802616e540: control (read@3072,1024B). Runtime 570 seconds [ 1413.011606][ T123] block nbd9: Possible stuck request ffff8880263855c0: control (read@3072,1024B). Runtime 390 seconds [ 1413.088216][T26023] block nbd7: Possible stuck request ffff8880262e5080: control (read@0,1024B). Runtime 390 seconds [ 1413.099895][T26023] block nbd7: Possible stuck request ffff8880262e5240: control (read@1024,1024B). Runtime 390 seconds [ 1413.111437][T26023] block nbd7: Possible stuck request ffff8880262e5400: control (read@2048,1024B). Runtime 390 seconds [ 1413.122647][T26023] block nbd7: Possible stuck request ffff8880262e55c0: control (read@3072,1024B). Runtime 390 seconds [ 1413.242578][T18474] gspca_cpia1: usb_control_msg 02, error -71 [ 1413.248658][T18474] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1413.259763][T18474] usb 10-1: USB disconnect, device number 15 [ 1414.202286][T18474] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1414.383359][T18474] usb 10-1: Using ep0 maxpacket: 16 [ 1414.391593][T18474] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1414.400486][T18474] usb 10-1: config 0 has no interface number 0 [ 1414.407496][T18474] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1414.417871][T18474] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1414.428213][T18474] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1414.438376][T18474] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1414.450597][T18474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.459362][T18474] usb 10-1: Product: syz [ 1414.489017][T18474] usb 10-1: Manufacturer: syz [ 1414.493825][T18474] usb 10-1: SerialNumber: syz [ 1414.501190][T18474] usb 10-1: config 0 descriptor?? [ 1414.520520][T28118] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1414.528263][T28118] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1414.743469][T28124] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1414.753426][T28124] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1414.763692][T28032] tipc: Disabling bearer [ 1415.056926][T18474] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1415.120828][T18474] usb 10-1: USB disconnect, device number 16 [ 1415.326045][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5699'. [ 1415.414586][T28147] wg1 speed is unknown, defaulting to 1000 [ 1415.526170][T28130] netlink: 'syz.7.5694': attribute type 6 has an invalid length. [ 1415.938023][T28182] Invalid ELF header type: 3 != 1 [ 1416.342396][ T30] audit: type=1400 audit(1762695570.145:2299): avc: denied { create } for pid=28204 comm="syz.8.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1417.793603][T28206] fuse: Bad value for 'fd' [ 1418.985410][T26023] block nbd14: Possible stuck request ffff88802694e000: control (read@0,1024B). Runtime 330 seconds [ 1418.996264][T16781] block nbd2: Possible stuck request ffff8880260fe000: control (read@0,1024B). Runtime 630 seconds [ 1419.007001][T16781] block nbd2: Possible stuck request ffff8880260fe1c0: control (read@1024,1024B). Runtime 630 seconds [ 1419.066271][T26023] block nbd14: Possible stuck request ffff88802694e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1419.077392][T16781] block nbd2: Possible stuck request ffff8880260fe380: control (read@2048,1024B). Runtime 630 seconds [ 1419.091486][T26023] block nbd14: Possible stuck request ffff88802694e380: control (read@2048,1024B). Runtime 330 seconds [ 1419.102610][T16781] block nbd2: Possible stuck request ffff8880260fe540: control (read@3072,1024B). Runtime 630 seconds [ 1419.113612][T26023] block nbd14: Possible stuck request ffff88802694e540: control (read@3072,1024B). Runtime 330 seconds [ 1419.784620][ T123] block nbd5: Possible stuck request ffff888026215080: control (read@0,1024B). Runtime 570 seconds [ 1419.795879][ T123] block nbd5: Possible stuck request ffff888026215240: control (read@1024,1024B). Runtime 570 seconds [ 1419.807542][ T123] block nbd5: Possible stuck request ffff888026215400: control (read@2048,1024B). Runtime 570 seconds [ 1419.818767][ T123] block nbd5: Possible stuck request ffff8880262155c0: control (read@3072,1024B). Runtime 570 seconds [ 1419.972026][T28235] netlink: 341 bytes leftover after parsing attributes in process `syz.8.5709'. [ 1420.249240][ T30] audit: type=1326 audit(1762695574.239:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28242 comm="syz.7.5711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e1a38f6c9 code=0x0 [ 1420.637826][T28254] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5713'. [ 1420.692879][T28255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5713'. [ 1421.089543][ T30] audit: type=1400 audit(1762695575.121:2301): avc: denied { cmd } for pid=28272 comm="syz.8.5714" path="socket:[107777]" dev="sockfs" ino=107777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1421.410463][T28276] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5715'. [ 1421.421870][T28276] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1421.844836][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5718'. [ 1421.876536][ T9] IPVS: starting estimator thread 0... [ 1421.965993][T28296] IPVS: using max 45 ests per chain, 108000 per kthread [ 1422.058402][T28303] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1422.209033][T28303] cramfs: wrong magic [ 1423.153164][ T9] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1423.452675][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.498833][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1423.533577][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1423.648052][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1423.775402][T19732] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1423.803126][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.843712][T28325] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1423.855012][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.977045][T19732] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1424.080791][T19732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.118378][ T123] block nbd11: Possible stuck request ffff888026800000: control (read@0,1024B). Runtime 390 seconds [ 1424.130564][ T870] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1424.167726][ T123] block nbd11: Possible stuck request ffff8880268001c0: control (read@1024,1024B). Runtime 390 seconds [ 1424.194523][ T123] block nbd11: Possible stuck request ffff888026800380: control (read@2048,1024B). Runtime 390 seconds [ 1424.252960][ T123] block nbd11: Possible stuck request ffff888026800540: control (read@3072,1024B). Runtime 390 seconds [ 1424.284983][ T870] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1424.298423][T19732] usb 2-1: config 0 descriptor?? [ 1424.363625][T28370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5730'. [ 1424.383253][T16522] usb 8-1: USB disconnect, device number 63 [ 1424.384637][T19732] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1424.499810][ T870] usb 10-1: config 0 has an invalid interface number: 23 but max is 0 [ 1424.516663][ T870] usb 10-1: config 0 has no interface number 0 [ 1424.524979][ T870] usb 10-1: config 0 interface 23 has no altsetting 0 [ 1424.547327][ T870] usb 10-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice= d.09 [ 1424.585339][ T870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.595869][ T870] usb 10-1: Product: syz [ 1424.600404][ T870] usb 10-1: Manufacturer: syz [ 1424.601665][T28338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.613828][ T870] usb 10-1: SerialNumber: syz [ 1424.616323][ T870] usb 10-1: config 0 descriptor?? [ 1424.662813][T28394] netlink: 341 bytes leftover after parsing attributes in process `syz.7.5724'. [ 1424.950210][T28338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.052366][ T870] safe_serial 10-1:0.23: safe_serial converter detected [ 1425.070786][ T870] usb 10-1: safe_serial converter now attached to ttyUSB0 [ 1425.127280][ T870] usb 10-1: USB disconnect, device number 17 [ 1425.151164][ T870] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 1425.177159][ T870] safe_serial 10-1:0.23: device disconnected [ 1426.105572][T19732] gspca_cpia1: usb_control_msg 05, error -110 [ 1426.113171][T22406] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 1426.114217][T19732] gspca_cpia1: usb_control_msg 01, error -32 [ 1426.180820][T28420] netlink: 341 bytes leftover after parsing attributes in process `syz.1.5726'. [ 1426.269619][T19732] gspca_cpia1: usb_control_msg 01, error -32 [ 1426.575957][T19732] gspca_cpia1: usb_control_msg 01, error -71 [ 1426.582135][T19732] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1426.625631][T19732] usb 2-1: USB disconnect, device number 121 [ 1426.852734][ T870] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1427.006286][ T870] usb 10-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 1427.043168][ T870] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1427.073385][ T870] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1427.104552][ T870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.104999][ T123] block nbd12: Possible stuck request ffff8880268b7000: control (read@0,1024B). Runtime 390 seconds [ 1427.126800][ T870] usb 10-1: config 0 descriptor?? [ 1427.126934][ T123] block nbd12: Possible stuck request ffff8880268b71c0: control (read@1024,1024B). Runtime 390 seconds [ 1427.146941][ T123] block nbd12: Possible stuck request ffff8880268b7380: control (read@2048,1024B). Runtime 390 seconds [ 1427.158900][ T123] block nbd12: Possible stuck request ffff8880268b7540: control (read@3072,1024B). Runtime 390 seconds [ 1427.203111][ T870] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1427.465306][T28473] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5741'. [ 1427.476038][T28473] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5741'. [ 1428.693512][T28491] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 1428.931346][T26023] block nbd15: Possible stuck request ffff8880269be000: control (read@0,1024B). Runtime 330 seconds [ 1428.942716][T26023] block nbd15: Possible stuck request ffff8880269be1c0: control (read@1024,1024B). Runtime 330 seconds [ 1428.954573][T26023] block nbd15: Possible stuck request ffff8880269be380: control (read@2048,1024B). Runtime 330 seconds [ 1428.968053][T26023] block nbd15: Possible stuck request ffff8880269be540: control (read@3072,1024B). Runtime 330 seconds [ 1429.524006][T28509] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1429.687935][T16522] usb 10-1: USB disconnect, device number 18 [ 1429.926919][T16719] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1429.937396][T16719] Bluetooth: hci3: Injecting HCI hardware error event [ 1429.947691][T16719] Bluetooth: hci3: hardware error 0x00 [ 1429.980843][T28537] tipc: New replicast peer: 255.255.255.255 [ 1429.998792][T28537] tipc: Enabled bearer , priority 10 [ 1430.187431][T28537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1431.091771][T26794] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1431.258984][T26794] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1431.673863][T26794] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1431.713284][T26794] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1431.786661][T26794] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1431.840984][T26794] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1431.893291][T26794] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1431.911222][T16719] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1431.977060][T26794] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1432.029978][T26794] usb 10-1: Product: syz [ 1432.055662][T26794] usb 10-1: Manufacturer: syz [ 1432.220131][T26794] cdc_wdm 10-1:1.0: skipping garbage [ 1432.225767][T26794] cdc_wdm 10-1:1.0: skipping garbage [ 1432.268239][T28620] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5764'. [ 1432.282339][T26794] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1432.308047][T26794] cdc_wdm 10-1:1.0: Unknown control protocol [ 1432.365186][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5764'. [ 1433.491988][T28649] team0: invalid flags given to default FDB implementation [ 1433.528331][T28651] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1433.815386][T18474] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1434.111600][ T870] usb 10-1: USB disconnect, device number 19 [ 1434.236781][T18474] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1434.301932][T18474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.337927][T18474] usb 2-1: Product: syz [ 1434.440872][T18474] usb 2-1: Manufacturer: syz [ 1434.463034][T18474] usb 2-1: SerialNumber: syz [ 1434.486579][T18474] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1434.532917][T16522] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1434.752040][ T30] audit: type=1400 audit(1762695589.471:2302): avc: denied { bind } for pid=28686 comm="syz.9.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1434.873832][T28697] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1435.223102][T16719] Bluetooth: hci5: command 0x0406 tx timeout [ 1435.327340][T28706] fuse: Bad value for 'fd' [ 1435.644368][T28673] block nbd1: Possible stuck request ffff888026097000: control (read@0,1024B). Runtime 660 seconds [ 1435.644543][T16522] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1435.655192][T28673] block nbd1: Possible stuck request ffff8880260971c0: control (read@1024,1024B). Runtime 660 seconds [ 1435.673446][T28673] block nbd1: Possible stuck request ffff888026097380: control (read@2048,1024B). Runtime 660 seconds [ 1435.678419][T16522] ath9k_htc: Failed to initialize the device [ 1435.684535][T28673] block nbd1: Possible stuck request ffff888026097540: control (read@3072,1024B). Runtime 660 seconds [ 1435.701710][T26023] block nbd13: Possible stuck request ffff8880268ee000: control (read@0,1024B). Runtime 360 seconds [ 1435.713817][T26023] block nbd13: Possible stuck request ffff8880268ee1c0: control (read@1024,1024B). Runtime 360 seconds [ 1435.726607][T26023] block nbd13: Possible stuck request ffff8880268ee380: control (read@2048,1024B). Runtime 360 seconds [ 1435.739095][T26023] block nbd13: Possible stuck request ffff8880268ee540: control (read@3072,1024B). Runtime 360 seconds [ 1435.809374][T16522] usb 2-1: ath9k_htc: USB layer deinitialized [ 1436.273020][T28720] ip6t_rpfilter: unknown options [ 1436.282835][T28719] netlink: 184 bytes leftover after parsing attributes in process `syz.8.5775'. [ 1436.550804][ T870] usb 2-1: USB disconnect, device number 122 [ 1436.658830][ T30] audit: type=1400 audit(1762695591.466:2303): avc: denied { unmount } for pid=19883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1437.176399][T28712] fuse: Unknown parameter '0x000000000000010a0x0000000000000007' [ 1437.401967][T28756] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5779'. [ 1437.422619][T28756] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1437.568419][T26794] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1437.799610][T26794] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1437.828994][T26794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.861447][T26794] usb 2-1: config 0 descriptor?? [ 1437.876907][T26794] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1438.270481][T26794] cpia1 2-1:0.0: unexpected state after lo power cmd: d1 [ 1438.673814][T26794] gspca_cpia1: usb_control_msg 02, error -71 [ 1438.689817][T26794] gspca_cpia1: usb_control_msg 05, error -71 [ 1438.699212][T26794] cpia1 2-1:0.0: unexpected systemstate: d1 [ 1438.710332][T26794] usb 2-1: USB disconnect, device number 123 [ 1439.092640][T16522] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1439.264562][T16522] usb 7-1: Using ep0 maxpacket: 32 [ 1439.383059][T16522] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1439.584778][T28801] sp0: Synchronizing with TNC [ 1439.589698][T16522] usb 7-1: config 0 has no interface number 0 [ 1439.610231][T16522] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1439.625672][T28801] sp0: Found TNC [ 1439.638287][T16522] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.665158][T16522] usb 7-1: Product: syz [ 1439.671428][T16522] usb 7-1: Manufacturer: syz [ 1439.676518][T16522] usb 7-1: SerialNumber: syz [ 1439.684051][T16522] usb 7-1: config 0 descriptor?? [ 1439.696129][T16522] smsc95xx v2.0.0 [ 1439.903238][T28673] block nbd8: Possible stuck request ffff888026355080: control (read@0,1024B). Runtime 420 seconds [ 1439.914160][T28673] block nbd8: Possible stuck request ffff888026355240: control (read@1024,1024B). Runtime 420 seconds [ 1439.925863][T28673] block nbd8: Possible stuck request ffff888026355400: control (read@2048,1024B). Runtime 420 seconds [ 1439.936942][T28673] block nbd8: Possible stuck request ffff8880263555c0: control (read@3072,1024B). Runtime 420 seconds [ 1439.988101][ T870] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1440.186319][ T870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.200984][ T870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.211825][ T870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1440.226576][ T870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1440.237049][ T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.248964][ T870] usb 2-1: config 0 descriptor?? [ 1440.414546][T18474] IPVS: starting estimator thread 0... [ 1440.468567][T28843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1440.479093][T16522] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1440.515395][T16522] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1440.526561][T28842] IPVS: using max 41 ests per chain, 98400 per kthread [ 1440.558593][T16522] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1440.585245][T16522] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1440.610106][T16522] usb 7-1: USB disconnect, device number 67 [ 1440.663437][ T870] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1441.001909][ C0] plantronics 0003:047F:FFFF.001C: hid_field_extract() called with n (132) > 32! (syz.6.5783) [ 1441.121874][ T31] INFO: task syz.5.5216:25316 blocked for more than 143 seconds. [ 1441.122240][T28673] block nbd9: Possible stuck request ffff888026385080: control (read@0,1024B). Runtime 420 seconds [ 1441.129647][T26023] block nbd3: Possible stuck request ffff88802616e000: control (read@0,1024B). Runtime 600 seconds [ 1441.129677][T26023] block nbd3: Possible stuck request ffff88802616e1c0: control (read@1024,1024B). Runtime 600 seconds [ 1441.129700][T26023] block nbd3: Possible stuck request ffff88802616e380: control (read@2048,1024B). Runtime 600 seconds [ 1441.141087][T28673] block nbd9: Possible stuck request ffff888026385240: control (read@1024,1024B). Runtime 420 seconds [ 1441.154073][ T31] Not tainted syzkaller #0 [ 1441.162904][T28673] block nbd9: Possible stuck request ffff888026385400: control (read@2048,1024B). Runtime 420 seconds [ 1441.194776][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1441.210681][ T31] task:syz.5.5216 state:D stack:27992 pid:25316 tgid:25310 ppid:22573 task_flags:0x400040 flags:0x00080002 [ 1441.223100][ T31] Call Trace: [ 1441.226627][ T31] [ 1441.229673][ T31] __schedule+0x1190/0x5de0 [ 1441.234346][ T31] ? __pfx___schedule+0x10/0x10 [ 1441.239500][ T31] ? find_held_lock+0x2b/0x80 [ 1441.244245][ T31] ? schedule+0x2d7/0x3a0 [ 1441.248696][ T31] ? bdev_open+0x41a/0xe40 [ 1441.253130][ T31] schedule+0xe7/0x3a0 [ 1441.257347][ T31] schedule_preempt_disabled+0x13/0x30 [ 1441.262827][ T31] __mutex_lock+0x818/0x1060 [ 1441.267931][ T31] ? bdev_open+0x41a/0xe40 [ 1441.273399][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1441.278628][ T31] ? bdev_open+0x41a/0xe40 [ 1441.283168][ T31] bdev_open+0x41a/0xe40 [ 1441.288454][ T31] ? iput+0x35/0x40 [ 1441.292272][ T31] blkdev_open+0x34e/0x4f0 [ 1441.297397][ T31] do_dentry_open+0x982/0x1530 [ 1441.302146][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1441.307254][ T31] vfs_open+0x82/0x3f0 [ 1441.311416][ T31] path_openat+0x1de4/0x2cb0 [ 1441.316330][ T31] ? __pfx_path_openat+0x10/0x10 [ 1441.321315][ T31] do_filp_open+0x20b/0x470 [ 1441.326000][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1441.331176][ T31] ? alloc_fd+0x471/0x7d0 [ 1441.335624][ T31] do_sys_openat2+0x11b/0x1d0 [ 1441.340342][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1441.345704][ T31] ? __pfx___schedule+0x10/0x10 [ 1441.350674][ T31] __x64_sys_openat+0x174/0x210 [ 1441.355565][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1441.361039][ T31] do_syscall_64+0xcd/0xfa0 [ 1441.365573][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.371526][ T31] RIP: 0033:0x7fad4e78df10 [ 1441.375959][ T31] RSP: 002b:00007fad4f5a7b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1441.385184][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fad4e78df10 [ 1441.393358][ T31] RDX: 0000000000000002 RSI: 00007fad4f5a7c10 RDI: 00000000ffffff9c [ 1441.401433][ T31] RBP: 00007fad4f5a7c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1441.409498][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1441.417572][ T31] R13: 00007fad4e9e6218 R14: 00007fad4e9e6180 R15: 00007fff2c92c508 [ 1441.425597][ T31] [ 1441.428723][ T31] [ 1441.428723][ T31] Showing all locks held in the system: [ 1441.436800][ T31] 1 lock held by khungtaskd/31: [ 1441.441663][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1441.452410][ T31] 2 locks held by getty/5575: [ 1441.457190][ T31] #0: ffff8880356b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1441.467085][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1441.477346][ T31] 1 lock held by udevd/14693: [ 1441.482053][ T31] #0: ffff888025f39358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.491489][ T31] 1 lock held by udevd/14721: [ 1441.496208][ T31] #0: ffff88802687b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.506020][ T31] 1 lock held by udevd/14723: [ 1441.510728][ T31] #0: ffff8880260d9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.520284][ T31] 1 lock held by udevd/15772: [ 1441.525046][ T31] #0: ffff88802625f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.534479][ T31] 1 lock held by udevd/16249: [ 1441.540648][ T31] #0: ffff8881437f7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.550036][ T31] 1 lock held by udevd/16912: [ 1441.554816][ T31] #0: ffff88802629b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.564529][ T31] 1 lock held by udevd/16913: [ 1441.569276][ T31] #0: ffff888026025358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.580327][ T31] 1 lock held by udevd/18470: [ 1441.585060][ T31] #0: ffff88802625d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.594514][ T31] 1 lock held by udevd/19247: [ 1441.599593][ T31] #0: ffff888026299358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.609310][T26023] block nbd3: Possible stuck request ffff88802616e540: control (read@3072,1024B). Runtime 600 seconds [ 1441.616989][T28673] block nbd9: Possible stuck request ffff8880263855c0: control (read@3072,1024B). Runtime 420 seconds [ 1441.620641][ T31] 1 lock held by udevd/19680: [ 1441.636214][ T31] #0: ffff8880261ad358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.645613][ T31] 1 lock held by udevd/20716: [ 1441.650354][ T31] #0: ffff888143b79358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.659791][ T31] 1 lock held by udevd/21103: [ 1441.664509][ T31] #0: ffff88802625b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.673862][ T31] 1 lock held by syz.5.5216/25316: [ 1441.679196][ T31] #0: ffff8880260d9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1441.689014][ T31] 3 locks held by syz.9.5786/28800: [ 1441.694278][ T31] #0: ffff8880520542b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1441.703390][ T31] #1: ffff888052724420 (sb_writers#13){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 1441.712485][ T31] #2: ffff88805a3e6348 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: fuse_fsync+0x139/0x340 [ 1441.722942][ T31] [ 1441.725280][ T31] ============================================= [ 1441.725280][ T31] [ 1441.734034][ T31] NMI backtrace for cpu 0 [ 1441.734047][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1441.734067][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1441.734077][ T31] Call Trace: [ 1441.734083][ T31] [ 1441.734090][ T31] dump_stack_lvl+0x116/0x1f0 [ 1441.734120][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1441.734147][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1441.734174][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1441.734196][ T31] watchdog+0xf3f/0x1170 [ 1441.734221][ T31] ? rcu_is_watching+0x12/0xc0 [ 1441.734242][ T31] ? __pfx_watchdog+0x10/0x10 [ 1441.734260][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1441.734287][ T31] ? __kthread_parkme+0x19e/0x250 [ 1441.734311][ T31] ? __pfx_watchdog+0x10/0x10 [ 1441.734330][ T31] kthread+0x3c5/0x780 [ 1441.734347][ T31] ? __pfx_kthread+0x10/0x10 [ 1441.734365][ T31] ? rcu_is_watching+0x12/0xc0 [ 1441.734386][ T31] ? __pfx_kthread+0x10/0x10 [ 1441.734403][ T31] ret_from_fork+0x675/0x7d0 [ 1441.734417][ T31] ? __pfx_kthread+0x10/0x10 [ 1441.734434][ T31] ret_from_fork_asm+0x1a/0x30 [ 1441.734468][ T31] [ 1441.734488][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1441.855055][ C1] NMI backtrace for cpu 1 [ 1441.855068][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1441.855085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1441.855094][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1441.855119][ C1] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 86 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1441.855131][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1441.855143][ C1] RAX: 0000000004be3423 RBX: 0000000000000001 RCX: ffffffff8b60a2a9 [ 1441.855152][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b6a1 RDI: ffffffff8bf070c0 [ 1441.855161][ C1] RBP: ffffed1003ad2490 R08: 0000000000000001 R09: ffffed10170a6655 [ 1441.855173][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 1441.855181][ C1] R13: ffff88801d692480 R14: ffffffff90820cd0 R15: 0000000000000000 [ 1441.855190][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 1441.855204][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.855213][ C1] CR2: 000020000000a000 CR3: 00000000393b8000 CR4: 00000000003526f0 [ 1441.855222][ C1] Call Trace: [ 1441.855227][ C1] [ 1441.855232][ C1] default_idle+0x13/0x20 [ 1441.855245][ C1] default_idle_call+0x6c/0xb0 [ 1441.855259][ C1] do_idle+0x38d/0x500 [ 1441.855278][ C1] ? __pfx_do_idle+0x10/0x10 [ 1441.855293][ C1] ? do_idle+0x13/0x500 [ 1441.855309][ C1] cpu_startup_entry+0x4f/0x60 [ 1441.855325][ C1] start_secondary+0x21d/0x2b0 [ 1441.855343][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1441.855372][ C1] common_startup_64+0x13e/0x148 [ 1441.855393][ C1] [ 1441.856099][T26023] block nbd7: Possible stuck request ffff8880262e5080: control (read@0,1024B). Runtime 420 seconds [ 1442.040299][T26023] block nbd7: Possible stuck request ffff8880262e5240: control (read@1024,1024B). Runtime 420 seconds [ 1442.051306][T26023] block nbd7: Possible stuck request ffff8880262e5400: control (read@2048,1024B). Runtime 420 seconds [ 1442.062311][T26023] block nbd7: Possible stuck request ffff8880262e55c0: control (read@3072,1024B). Runtime 420 seconds [ 1442.159782][T16522] usb 2-1: reset high-speed USB device number 124 using dummy_hcd [ 1443.351149][T18474] usb 2-1: USB disconnect, device number 124 [ 1446.317281][ T5188] udevd[5188]: worker [16913] /devices/virtual/block/nbd3 timeout; kill it [ 1446.326078][ T5188] udevd[5188]: seq 22391 '/devices/virtual/block/nbd3' killed [ 1446.333611][ T5188] udevd[5188]: worker [19680] /devices/virtual/block/nbd7 timeout; kill it [ 1446.342387][ T5188] udevd[5188]: seq 25137 '/devices/virtual/block/nbd7' killed [ 1446.349856][ T5188] udevd[5188]: worker [16249] /devices/virtual/block/nbd1 timeout; kill it [ 1446.358991][ T5188] udevd[5188]: seq 21587 '/devices/virtual/block/nbd1' killed [ 1446.366683][ T5188] udevd[5188]: worker [14693] /devices/virtual/block/nbd2 timeout; kill it [ 1446.376801][ T5188] udevd[5188]: seq 21767 '/devices/virtual/block/nbd2' killed [ 1446.384499][ T5188] udevd[5188]: worker [16912] /devices/virtual/block/nbd9 timeout; kill it [ 1446.393445][ T5188] udevd[5188]: seq 25168 '/devices/virtual/block/nbd9' killed [ 1447.831900][T16781] block nbd14: Possible stuck request ffff88802694e000: control (read@0,1024B). Runtime 360 seconds [ 1447.842835][T16781] block nbd14: Possible stuck request ffff88802694e1c0: control (read@1024,1024B). Runtime 360 seconds [ 1447.853954][T26023] block nbd2: Possible stuck request ffff8880260fe000: control (read@0,1024B). Runtime 660 seconds [ 1447.864809][T16781] block nbd14: Possible stuck request ffff88802694e380: control (read@2048,1024B). Runtime 360 seconds [ 1447.875904][T26023] block nbd2: Possible stuck request ffff8880260fe1c0: control (read@1024,1024B). Runtime 660 seconds [ 1447.887292][T16781] block nbd14: Possible stuck request ffff88802694e540: control (read@3072,1024B). Runtime 360 seconds [ 1447.898370][T26023] block nbd2: Possible stuck request ffff8880260fe380: control (read@2048,1024B). Runtime 660 seconds [ 1447.909450][T26023] block nbd2: Possible stuck request ffff8880260fe540: control (read@3072,1024B). Runtime 660 seconds [ 1448.447471][T28673] block nbd5: Possible stuck request ffff888026215080: control (read@0,1024B). Runtime 600 seconds [ 1448.458708][T28673] block nbd5: Possible stuck request ffff888026215240: control (read@1024,1024B). Runtime 600 seconds [ 1448.470757][T28673] block nbd5: Possible stuck request ffff888026215400: control (read@2048,1024B). Runtime 600 seconds [ 1448.482172][T28673] block nbd5: Possible stuck request ffff8880262155c0: control (read@3072,1024B). Runtime 600 seconds