last executing test programs: 13m56.214692131s ago: executing program 32 (id=390): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x22480) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) setreuid(0xffffffffffffffff, 0xffffffffffffffff) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e20, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) bpf$BPF_LINK_CREATE_XDP(0x9, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x37}, 0x40) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc4}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48854}, 0x24040884) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) syz_emit_ethernet(0x5f, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xfffffffffffffdee, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x2, 0x2, "d462daf76d13b82ce3b95fcce69e43"}]}}}}}}, 0x0) r5 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, &(0x7f0000000580)={0x14, &(0x7f0000000240)={0x40, 0x7, 0x12, {0x12, 0x7, "ffa3560c2f2f36030a9c86524ca5a3ac"}}, &(0x7f0000000440)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "eb5ad953c781d46e890a55bf7f4c9b6530374ea79a7581362ebd395f3eb68554a0e355d63102c1d6dd37e8a4854bc10c40de6fb34e45f9a08575b3782ea374e2de3ed2616906c01eba3e6979e8b2682eed66eb766948dc88a03eb708b6916c39cd8aae73358992db7216e19780738ba64733dc1d5f338637907f4d08519214d729ee3a90406636a8c28f071ecd67f2a231b5646a4bb239cb4b68142f050393734307abe48aa9eaf3d32b457c015329122cb54dda4573d933d57c8e37dad683c6c98c1b50fd62a1d55792e10bcd"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x2e7574db8240618, 0x6, 0x42, "fecedf918baeae4fef8ec08e6ed29741d2c64b3b15067235958b1d926a6c8a3c377918928e6aded00279d06daae5bbde94f994b68c813cdf75881ea97700dcc41692"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x81, 0x2, "6688"}, &(0x7f0000000780)={0x20, 0x82, 0x2, "d611"}, &(0x7f00000007c0)={0x20, 0x83, 0x3, "c4eac2"}, &(0x7f0000000800)={0x20, 0x84, 0x3, "561c4d"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "530d11"}}) ioctl$CEC_ADAP_G_LOG_ADDRS(r1, 0x805c6103, &(0x7f0000000100)) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000200)={0x0, 0x7b3, 0x8, '\x00', &(0x7f00000001c0)=0xd}) 12m41.717218538s ago: executing program 33 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = getpid() ioprio_get$pid(0x0, r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setparam(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) sendmsg$key(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x34000}, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r6 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsmount(r6, 0x0, 0xd) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 12m23.168477718s ago: executing program 34 (id=572): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x2ca}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 10m40.404120703s ago: executing program 35 (id=931): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040841}, 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000a00)=ANY=[@ANYBLOB="120101000814c910be0632a2e133010203010902120001000000000904"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a0106"], 0x6c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20008020) accept4$x25(r0, 0x0, &(0x7f0000000040)=0x53, 0x80c00) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) getpid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) 10m17.240526248s ago: executing program 36 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f0000000300)=""/71, 0x47}], 0x4, 0x7, 0x20000000) r5 = dup2(r2, r0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0x7, 0xb}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000100)={@mcast1, 0x5, r8}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001100010027bd7000fedbdf2500000000", @ANYRESDEC=r0, @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x44895}, 0xc040) 9m41.784278092s ago: executing program 37 (id=1106): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/7, 0x7}, {&(0x7f00000006c0)=""/220, 0xdc}, {0x0}, {&(0x7f0000001280)=""/189, 0xbd}], 0x7, &(0x7f0000000a00)=""/78, 0x4e}, 0xa8e9}, {{&(0x7f0000000a80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000e00), 0x0, &(0x7f0000000e80)=""/179, 0xb3}, 0xa1}, {{&(0x7f0000000f40)=@isdn, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000fc0)=""/35, 0x23}, {&(0x7f00000036c0)=""/4109, 0x100d}, {&(0x7f0000003000)=""/43, 0x2b}, {&(0x7f0000003040)=""/249, 0xf9}, {&(0x7f0000003140)=""/54, 0x36}, {&(0x7f0000003180)=""/63, 0x3f}, {&(0x7f00000031c0)=""/41, 0x29}, {&(0x7f0000001000)=""/210, 0xd2}], 0x8, &(0x7f0000003280)=""/51, 0x33}, 0x9}, {{&(0x7f00000032c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003340)=""/95, 0x5f}, {&(0x7f00000033c0)=""/76, 0x4c}, {&(0x7f0000003440)=""/98, 0x62}], 0x3, &(0x7f0000003500)=""/181, 0xb5}, 0x1}], 0x4, 0x140, 0x0) 8m39.950004222s ago: executing program 38 (id=1237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0x100000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bind$802154_raw(r7, &(0x7f0000000200)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 8m0.261275751s ago: executing program 39 (id=1385): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/file0\x00', 0x2, 0x30) write(r0, &(0x7f0000000000)='3', 0x4e) socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000200)=0x104) 2m44.544551609s ago: executing program 6 (id=2491): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) r8 = eventfd2(0x2, 0x1) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="6effef930c53dea1", 0x8}, {&(0x7f0000000280)='~', 0x1}], 0x2) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x18, 0xf, "ee4ef9677ff3f932698ca9fd6e8aee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x2b, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000300)={0x0}) 2m42.19222945s ago: executing program 8 (id=2497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x44b, 0x70bd25, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8}}, 0x2c}, 0x1, 0x0, 0x0, 0x100088c4}, 0x48040) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd, 0x20}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "55da854e30"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "229c5b2282"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x40}}, 0x20000014) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020a009078000094d9afac2452c72d3d720bc0cc34657669f4ff018dd49567ce67a86b7b6ae7ce8c44e2a6835ac19986576561ac0547102b0417766081e0fb7728cabd7e0815e18498"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) 2m41.201340078s ago: executing program 6 (id=2503): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) readv(r3, &(0x7f0000000b80)=[{&(0x7f0000000240)=""/246, 0x1c}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) 2m40.214735801s ago: executing program 6 (id=2506): syz_open_dev$vim2m(&(0x7f0000000300), 0x400000000000003, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='100', 0x3) r0 = socket(0xa, 0x801, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt(r0, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f"], 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x1e, 0x4, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) pselect6(0x40, &(0x7f0000006040)={0xe, 0x1, 0x4009, 0xb813, 0xfffffffffffffff9, 0x5, 0x80000000, 0x7}, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './sys/devices/system/node/node0/reclaim\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xa897, 0xc5b, {0xffffffffffffffff}, {}, 0xf, 0x1}) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x34ba, &(0x7f0000000540)={0x0, 0x4069ee, 0x2000, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x45, 0x6000, @fd_index=0x4, 0x64, 0x0, 0x0, 0x1c, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0, 0xfffffffff7ffffff}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2m39.410301979s ago: executing program 8 (id=2512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100283d7000fddbdf250c00000020000580080001007564709300e2e1522d4a9306001400028008000500ff0f00"], 0x34}}, 0x24004084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="840202"], 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000240)={r3}) r5 = mq_open(&(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0xa7, &(0x7f0000000100)={0x6, 0x5, 0x8, 0x9}) mq_notify(r5, &(0x7f0000000200)={0x0, 0x15, 0x4, @tid=r3}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYRES32, @ANYBLOB="040013000a7efc84000600ffffffffffff000006001200000800000600b500c90200000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x44000) r9 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) r10 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 2m38.087345247s ago: executing program 8 (id=2517): socket$kcm(0x10, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0xfffffff7, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000080)="91", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(0xffffffffffffffff, 0xa7, 0x4000084, &(0x7f00000001c0)="0100010000000000", 0xffffff57) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x88081, 0x0) dup(r1) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r8 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) fchown(r8, 0x0, 0x0) read$FUSE(r7, &(0x7f0000004500)={0x2020}, 0xfffffe0c) landlock_restrict_self(0xffffffffffffffff, 0xc) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000102, 0x0, 0x9}]}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) 2m36.185270852s ago: executing program 6 (id=2520): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x119) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)}], 0x1}}], 0x2, 0x8020) 2m35.768593519s ago: executing program 8 (id=2523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x81, 0x6, 0x9, 0x5d}, {0xf2, 0x2, 0x7fff, 0xfffb, 0x0, 0xffff}, 0x0, 0x80000000, 0x2190}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m35.319529374s ago: executing program 8 (id=2526): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000003000028014000100fe8000000000000000000000000000aa080003000000000008"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x48001) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x89e1, &(0x7f00000000c0)='lapb0') socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r3, 0x0, 0x800) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) accept(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x7f}) 2m34.617968105s ago: executing program 6 (id=2528): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x657, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000", 0x30) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd604401010000ff0000000000000000000000ffffac1414bbfe8000000000000000000000000000aaaefdd2c586b6f45328e8b03db257eb3d59c9949a6ba70871053035d923e0a523acadb618af2ef708870a9dc280446a1317aa8dd957e8c31d167d8a5685c6bdc98fe88a00923a0e62a0f287fb051da8e5da8fba18014094489274f8f0a211e41d6e49b2bafe7e27b51aacd6c8e000f0f09a190d9a29f15be2fb"], 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r7, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e304, 0x42, 0x1000002, 0x93, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x76402, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x4003bfff, 0x69, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x20, 0x1, 0x400000f1, 0x0, r6}}], 0x1, 0x0, 0x0) 2m33.061632314s ago: executing program 8 (id=2533): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r1, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 2m32.842280641s ago: executing program 6 (id=2536): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0x1, 0x1}, 0x449e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x1, 0x4, 0x6, 0x0, [{0x27a4, 0xa}]}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x501000, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000080), 0x0, 0x48050) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000500)={{r1}, "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"}) r6 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, 0x81, 0x14) write(r2, &(0x7f00000000c0)="84b65a2f909dae6971f2046aa2e47ff8dd9e88315d73d3b31cc3a41ad06415d57206114b9578522e433fd6f8a9d2189611ff9c24366434592ff6badbe837c35eeaf7c9ae287aec8f3281c2604fa239ad1bc3cdc7d03069106f8b381fa9a63f20b0a98edd81b79cb1b9023f211bf4998304b7f9b9fe7d4a114a5f53f71eef648378d45396c78776b4da4adcbc595b657f816286d1872cb86b49dc73bfa888335a8c76a9e5ef73933f406c9cfe69e28b136d2e20d859b866ef5458b425927396f4ed2c9735e43fdd0fa98ed0604c0cd31fcbfdee40632606c421de98bdcd", 0xdd) 2m17.530126194s ago: executing program 2 (id=2592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x2f, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001740)={0x8, &(0x7f0000001640)=[{0x5, 0xa1, &(0x7f0000000280)="20a83293d79956677aa16339fcda6db68b4303416758bed237d87d36a531a374c11bef193abd0efa466c5671d921e0cd22ed61bed44bea925f14ca08a92395ca1ad5f5989e9dda3bd0d2ec3712da7d89004ce8965b9c831345583792e791449423619afbc7b02a7d86e19f53e63bde7f9de342301056acb8172874eea6e0ee7fa479996289de9edee43a8514e3d8b251059aaa6792360beb7a739a6cc66898407d", 0x1, 0x1}, {0x2, 0x50, &(0x7f0000000340)="09710b453a4e4b15dc563f2ca8b47cd408e476b5103f16e06804fcbb785cc177910cbc08aa1921a6871285a6b8a40c321ff117c58e76c8673608dee383049f683a4ce2646804f618d9cd7e2b7bcf623c", 0x0, 0x1}, {0x8, 0x4b, &(0x7f0000000400)="aa7b15d2a8228f8de740321e2e0a65b5bd57be75d3e8886efd912d18eccd408d5ca38a32f2970d55e494d876b871df61260d6b7b9d76c8b1352eb442e421387471307bea7664dee676c55e", 0x0, 0x1}, {0x1000, 0x4, &(0x7f00000004c0)="f5c86578", 0x1, 0x1}, {0x69, 0xef, &(0x7f00000013c0)="b3422b7c02d31b1fc78b1f7ddf1318c234ffe9a49d697546695d40d12c88e248281174c83f9fd134ac122fe188b2b5adb29f06602a52ce9b0ad68d59dd1b2c8903aa4bf696f56d7040099691744f187639de0a9da6a2338b73ddc4b21b6f70ebcae9dfdb5831732adbde5d55fff66ff73bc48f0bade933118711d9b81cdd65224829d990d6a3ab69397b55b59c6b5d739d961203457cdd460d487f32d21ed7050e21535457e633ffdbd06ffeb0e35fc9e7a2334e6df708e54b12a2715219e5afc800b1e7298f33c77921ae45d0c622fd3b3eafd9951a620ec110ba466017289738c7a2f8e8853bde1fea27f6db07cc", 0x1, 0x1}, {0x1, 0x63, &(0x7f00000014c0)="d3eeb67eca928a2460390f43cf0423c1966898d6d8f696d7c9b3be64665a4eb2ff50d50f7c72a4ea510ba105e0541784bf752fba5508eba139ccfb5c3cad6869520994ee7d85fe0e94ffab6182457006901b2fe398ca9a0f8fd0fa1ea87475aed42c59", 0x0, 0x1}, {0x10001, 0x33, &(0x7f0000001540)="8120596dce4ee89c6fc95bf8ad7b2170ffe0141ff5794cd55def94721c92cafda5ae98ba1a607a7892361ea06818ebf9588a95", 0x1}, {0xc0000000, 0x85, &(0x7f0000001580)="7349fdf88d5299d635b8c1434ceb419c89bad96d4d4f08bb4a2097102b9762ee5f82ad209b1218998c45a9ac3e99895955aaed0a30509da187933657a19e7c6050a7fa0ec7a7582487081fb814eab5c77dc484ab14f1a83c6816da8c5f96dff1a0f59ffeafd8f40432d8047b8ad14b4a2611c140179d4add20aceeec86176cbeaa41a2e374", 0x0, 0x1}]}) write$uinput_user_dev(r2, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xebc0, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x420, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x901, 0x9, 0x9a0], [0x3, 0x208, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x46, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2002, 0x0, 0x62, 0x7, 0x6, 0x4, 0x2006, 0xfff, 0x4], [0x4, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x282, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x10001, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x20000002, 0x66, 0xfffe, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x5, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x2000003, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1000000, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0xdbe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b9, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) openat(r3, &(0x7f0000000240)='./file1\x00', 0x103a02, 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x4855}, 0x48000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 2m17.511007366s ago: executing program 40 (id=2536): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0x1, 0x1}, 0x449e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x1, 0x4, 0x6, 0x0, [{0x27a4, 0xa}]}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x501000, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000080), 0x0, 0x48050) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000500)={{r1}, "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"}) r6 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, 0x81, 0x14) write(r2, &(0x7f00000000c0)="84b65a2f909dae6971f2046aa2e47ff8dd9e88315d73d3b31cc3a41ad06415d57206114b9578522e433fd6f8a9d2189611ff9c24366434592ff6badbe837c35eeaf7c9ae287aec8f3281c2604fa239ad1bc3cdc7d03069106f8b381fa9a63f20b0a98edd81b79cb1b9023f211bf4998304b7f9b9fe7d4a114a5f53f71eef648378d45396c78776b4da4adcbc595b657f816286d1872cb86b49dc73bfa888335a8c76a9e5ef73933f406c9cfe69e28b136d2e20d859b866ef5458b425927396f4ed2c9735e43fdd0fa98ed0604c0cd31fcbfdee40632606c421de98bdcd", 0xdd) 2m17.466098404s ago: executing program 41 (id=2533): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r1, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 2m13.563080595s ago: executing program 2 (id=2603): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04000000000000000002000000"], 0xa8}}, 0x4048010) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) setns(0xc9, 0x0) r4 = socket(0x8, 0x2, 0x0) setsockopt(r4, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r4, &(0x7f0000000100)=@generic={0x8, "0000ffff0100feffffff00"}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x31, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) bind$inet(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x80000000, 0x7}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x9, 0x0, 0xe, {[@timestamp={0x8, 0xa, 0x3, 0x401}]}}}}}}}, 0x0) listen(r1, 0x5) socket$netlink(0x10, 0x3, 0x0) 2m12.266213794s ago: executing program 2 (id=2606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m11.985543456s ago: executing program 2 (id=2609): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'pcmmio\x00', [0x300, 0xc0000000, 0x2, 0x400, 0xe, 0x4, 0xa, 0x7fff, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x1f03, 0x89, 0x12, 0x7f, 0x4, 0x5, 0xe66, 0x8, 0x2000008, 0xa6b3, 0x0, 0x5]}) 2m11.777890222s ago: executing program 2 (id=2611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x141002, 0x80) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0xfff) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="39000000100039040000001502000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000002001800128008000100736974000c0002800800140005000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095", @ANYRES32=r1, @ANYRESOCT=r1, @ANYBLOB="f2cbf58c7935b1570a5e379926fbe21d5ef3656df4c7eac5593258fadce855c0e45917892131283453a026978c5755677b056dc6978408"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x1, 0x10, 0x401, 0x4e2f22e1, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @broadcast, {[@noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000020000000000000004000000184500000400020000000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x6, 0xb9, &(0x7f00000001c0)=""/185, 0x40f00, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x4, 0xd, 0xb}, {0x5, 0x1, 0x7, 0x2}], 0x10, 0xd8}, 0x94) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fb830000"], 0x50) ioctl(r7, 0x4048aec9, &(0x7f00000000c0)="030000000000000001") socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000340)="8e", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x7fffffff, @local}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000600)="c9dd66b27daf212c869538fc9ed18f4c", 0x10}], 0x1}}, {{&(0x7f0000000680)={0xa, 0x4e23, 0x1ff, @mcast1, 0x162}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000006c0)="a2a4ff70fbbe7a1f240c4e6210964b8ce113fab45c300f0ad25afbcf5146013b4781eebb5e9143da89eb2c51ee6ff45f1c003b3a32c91593f4c0ff10139f8a75493133c28e402ffa967c8f69260513ef46216f54010ce96dbd160b394cd3586707ee256acdfb089682fd504fef3c15123ee280465f74d81239f8b5a322591b7e8910dc447f605258451d446686b7530bfef967fdf6ea9697071748b02409d167d94acaeae4246fa462f4c01eea3a", 0xae}, {&(0x7f0000000780)="f5c70063f2d11f99a738ea2906c747c74bc32edabe0ec509377833137af9aad7ac9d56b1fa2e8a23448c457364637dfacd3cadd19093774dd413abcd1bf2e2aea4b8920ed9ee959764ff0f5dc146343ae86d276fc1fbcfffc7a8b0f8d6597e4bbaa15929ed2cedd4ff7e3b1971659e12831d13ea59c0d24cf2dd822ef093c3a31307283692b7ac11ec8a30c711f21a1d2d4af8df9e540f", 0x97}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000000380000000000000029000000360000000003000000000000000100c20400001000c910fc0100"/60], 0x2f8}}], 0x3, 0x0) sendmmsg$inet6(r8, &(0x7f00000045c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x200, @private2, 0xfffffffb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000100)="e3d1", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0xc07, @private2, 0xa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000004c0)="4af07831e4", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000040) shutdown(r8, 0x1) 2m11.007267013s ago: executing program 2 (id=2613): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r1, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 1m55.990466409s ago: executing program 42 (id=2613): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r1, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 1m36.404663266s ago: executing program 7 (id=2715): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c081) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x4, {0x0, 0x1, 0x6}, 0x2}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0xfe}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100000009000300738c7a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002050002000300000008000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x4800) open(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x40142, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1m35.912094158s ago: executing program 7 (id=2717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x410}, 0x20048840) r3 = getpid() r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) write$selinux_load(r5, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "3a7160e01ef8dd1da9c61e3ecc623360f062381f65c7a0fd20811802d3606156c37090d7a98fdca3979ae580398e7aca69879dd903ae1f5c23e13872a95dbefe3654cc860bb56e1d72091a8fc4678a2066b23508f648eb24b7cf111010a004da545dc71b10aed6efecfa05b97f7c971ebc6fb14e766b12fa203a5805f0bf8d0ddbcc229a53c86752266caf31238f64b93325d45389afa6fa1e3204f2f22940099c"}, 0xb1) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setpriority(0x1, r3, 0x7) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001fc0)={0x1350, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x1340, 0x0, 0x0, 0x1, [@nested={0x130b, 0x109, 0x0, 0x1, [@generic="0df68f0d", @nested={0x1218, 0x6b, 0x0, 0x1, [@nested={0x118, 0xf6, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @u32=0xffffffff}, @typed={0x102, 0x167, 0x0, 0x0, @binary="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"}, @typed={0x8, 0xb3, 0x0, 0x0, @pid=r3}]}, @generic="88c833128b1404df46f34b84f604be710fbfc7b60de0e93251d2b83ebe5ba2be83c0e1705879dee2dc391661cb9dbaaba07d64d539a81509deb1f668b5e894457a9cf240d340a3e35478a6334c73744d8dfe3d9b1b23af2e7bb5f1bea3dfdeae8622114c86a7ada6bffa8254438929ac1f035313e91b5c02fc31bf850538d2e63ba756f23536b8da78f1e3700b8f1f44ad96f2184e5740799d7fac10bb0229c7be0dacf8a0e8bf367ba3108ef47f28043846246f3583e8226896a91966867d51884878c4f19c37dfe41a06c8dd143fb970f4dd7e1ca47352bb0ab833b9c91e37", @generic="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", @generic="6a8bdaa0399a6d05ef2f1dc719df7d88623ea3b2307eaab33e8c9213"]}, @generic="f6305cefee4747468a669d71d5478119d03e1372bebe3685ceb8708966b55dac1722fa02aab0a8315a92671b1cd45aeb7db131557bba4d46a6d5ec66f9a9e160de22652c3e927c5d4be0ce8ee450bd9251059f4a58077b66af828c26b3fa7d923f3c5f31ceb1539cf8257893fa7d754c5e502d3db8394f4b0ac65cb8af805871e1010d0f0bd97a90f712521f5fff85d9e37242badaef1d85418686ddcdb38bc4974ee026b7d97b1ae8420184243130f9a77e052643566abbebd0f160ee45e64cb33e2f5f4e5fbe9b4b5be2de304142ac2c1f2398b923a7bf0979c94ce14fe9cef88f706be75287bab97be0"]}, @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x1350}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) 1m34.095425296s ago: executing program 7 (id=2722): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9}, 0x90) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m33.738574562s ago: executing program 7 (id=2723): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1fb) mount(0x0, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac1.usb0/p_volume_max\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x7b, &(0x7f00000001c0)=ANY=[@ANYBLOB="120190cf00000010532b230040000102030109026900030100e000080b0001010c204d090400000001012000092401ff030a090003090401000001022000090401010101022000090501099da3a6cb84fcd672820f0a05000904020000010220000904020101010220000905820908004081000825010101055000"], &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffe7e, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x8, &(0x7f00000003c0)=[{0x8000, 0x7, 0x59, 0xb3ca}, {0xc1, 0x5, 0x9, 0x908}, {0xfffc, 0x5, 0x88, 0x3}, {0x6, 0x5, 0x3, 0xfff}, {0x9, 0x1, 0x4, 0x4}, {0x101, 0x6, 0x7, 0x9}, {0x1ff, 0x8, 0x3, 0x4}, {0x200, 0x8, 0x2, 0x7}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) lseek(r3, 0x8000000000000001, 0x0) socket$inet6(0xa, 0x2, 0x7) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000380)=ANY=[@ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x7fffffff}, 0x10}, 0x94) socket$kcm(0x11, 0x20000000000000a, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1.usb0/p_volume_max\x00', 0x1, 0x0) write(r7, &(0x7f0000000280)='10', 0x2) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8932, &(0x7f0000000040)={'geneve0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 1m32.63361448s ago: executing program 7 (id=2726): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x48001) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x89e1, &(0x7f00000000c0)='lapb0') socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r3, 0x0, 0x800) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) accept(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x7f}) 1m30.372317323s ago: executing program 7 (id=2733): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r1, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 1m15.368526337s ago: executing program 43 (id=2733): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfff7fffe) sendmsg$inet6(r1, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x28}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 58.07970997s ago: executing program 0 (id=2837): listxattr(&(0x7f00000004c0)='./cgroup\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100, 0x0, 0x0, 0x0, 0xd, 0x1}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x9b0000, 0x400, 0x8, 0xffffffffffffffff, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) 55.117822583s ago: executing program 0 (id=2849): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 53.908007377s ago: executing program 0 (id=2855): syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') io_setup(0x6, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) io_getevents(r0, 0x6, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) socket$igmp(0x2, 0x3, 0x2) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) 52.006631937s ago: executing program 0 (id=2860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x3a) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x141142, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1b, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xb, 0x0, 0x50, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendfile(r3, r3, 0x0, 0x800000009) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000040)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01864c1, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080), 0x111, 0x1}}, 0x20) 50.518384604s ago: executing program 0 (id=2865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) r6 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r8, 0xab03) socket$nl_generic(0x10, 0x3, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x100) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x0, 0x0) read(r10, &(0x7f0000000140)=""/9, 0xffffff64) r11 = io_uring_setup(0x19c0, &(0x7f00000001c0)={0x0, 0x1fffff, 0x400, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r11, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r11, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r14, @ANYBLOB="44000280"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x4, 0x1, 0x8, r4}) 49.613671629s ago: executing program 0 (id=2868): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$can_j1939(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r2, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x20}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 34.487121457s ago: executing program 44 (id=2868): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$can_j1939(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r2, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x20}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 14.531675042s ago: executing program 1 (id=3001): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, 0x0, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="1201000000000000000c0bf00000000000010902240001000000000904000009030002000921200000012229000905810308000008c51ef533157738cae9a090f6a65b82ad8592926c3e33f298c47f49be9b8951ce0dc72067ac7a4aabfb8d54dab3a7f44238773696d6bdbaafc5d8cf33fe6adfa23b8b1006e4c22ddac73a4bbf"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r7 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) (async) r9 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) (async) r10 = dup(r2) write$UHID_INPUT(r10, &(0x7f0000000080)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b428f0e1ac6e7049b346d959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25470a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490843bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e90af2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0f1f4f674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ffc4ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a5869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be1200fdc4e9134f77020000f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d594c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3eff1b0ff034ef655b253ca050083815b1b6fc6522d4e4fdcf3a38cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d0100d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfd7b2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154504b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b033a53faf46366e7205dd8d6f37525c1a0e94610dd94223f6c15d07f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef928ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd1cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f87a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17cb51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e80e0082d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459716246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f352ceee26596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f0cfc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea62839b4a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30842b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bbb935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c0bec664bff000000000000005d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e975be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f04817fb909729a7db6ff9576abc9ede7886294ff1aa7082ead01a9b03c37b0969be0bff60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bccf8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000370f00", 0x5bb1f126059684ef}}, 0x1006) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000b2b5000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) 10.217063467s ago: executing program 1 (id=3014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0xaba00000) getsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000600)=""/144, &(0x7f0000e5f000)=0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x7352, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a5657f1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x402]}}) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000000c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="c825a1268497fd1800000000000000000a00000005000100070000000900020097797a301b0000001c000780180001801400024000"/68], 0x44}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x38d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x3415}}) 9.089860413s ago: executing program 9 (id=3017): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0'}, 0x33) 8.246069952s ago: executing program 1 (id=3020): r0 = syz_open_procfs(0x0, &(0x7f0000001e80)='net/rpc\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x121}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) getdents64(r0, &(0x7f0000000080)=""/43, 0x2b) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x10, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r2}) 7.978004331s ago: executing program 9 (id=3022): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000001fc0)={{0x12, 0x1, 0x220, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x90, 0x3, {0x8, 0xb, 0x1, 0x0, 0x1, 0x2, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x7, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x10, 0x8, {0x8, 0x25, 0x1, 0x3, 0x30, 0x40, 0x58}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x34, 0x1, 0x4, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x6, 0x10}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xa, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc1a}}, {0xb8, &(0x7f0000000040)=@string={0xb8, 0x3, "16965e7f67b16fdbf76f80f42d7307abe5c1e6524572efe6be2ba4507c8236e921e25768699631f8c8e77d49a2c575331e15b311f40f9ebf83313636fcc16e68d305492020fb0c0326ebd13d5015f9dbfcaadeb2cc39e7a4b7df568971f45c7783939933264db214950d448d8a8e1ca9093def19b3a5cbab58d32514b4c939b3d86b9e46f968bf5453a38c1e27225012928e3e158715ac42c7b8c0c6db3a4db2ae5c5d9431568f8f3aa0ff2b599aec1900f7feef8a44"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x180c}}, {0x8d, &(0x7f0000000500)=ANY=[@ANYBLOB="8d03c54c9a444aa045e668baaec0ffa8247d4f4a08511e580671e09c895eeebdd9bf15846cecfef78d5f5257dc8bee1e61bcc8cc8a54ce6fddf56556db46cf0cf3cec2ec36a94e1b2083a661322dd4e67899dfabeee07d5e2923fa26d46e9316570231e9cee93e802795d3d9e241a33297851e45d542d3"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x830}}, {0xff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42a}}, {0x2a, &(0x7f0000000180)=@string={0x2a, 0x3, "13df2b3bccb7cacd8e21a3bc02ee3d251a8882854dc232d03e1b559c31b3816bf621d0aaa8cf90f5"}}, {0x0, 0x0}]}) 7.832180773s ago: executing program 5 (id=3024): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000c00)=@ublk_get_queue_affinity_sqe={0x2e, 0x0, 0x0, r0, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000001b00), 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x840, 0x16f) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', 0x0]}, &(0x7f0000000640)={[&(0x7f00000004c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80`\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf\x00@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000100)={0x2, 0x5}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x0, 0x3, 0x0, 0x7, 0x6, 0x6, 0x7f}}) r8 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f00000003c0)={0x1}) poll(&(0x7f00000000c0)=[{r11, 0x1009}], 0x0, 0x8000007) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) close_range(r12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400ffc, 0x14000000215b9037, 0x40190, 0x1, 0x11, 0x8000000000f2, 0x7, 0x3, 0x20000005, 0x1, 0xc6bd, 0x568, 0x45, 0x5, 0xff], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.694574644s ago: executing program 1 (id=3026): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a000b0049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) brk(0x200000ffc000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000340), 0x10) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0x12) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2480, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000380)={{0x4, 0x5}, 0x0, 0x8, 0xb92, {0x8, 0x7}, 0xf, 0x8}) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f0000000140)) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000580)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='/', 0x1) 6.432780569s ago: executing program 5 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) writev(r4, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x400c090) 6.380225971s ago: executing program 4 (id=3033): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a00000003"], 0x2a) 6.309859996s ago: executing program 4 (id=3034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x8}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000030000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000050029000a000000080014"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x385, 0x46}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_MATCH={0x53, 0x5b, "2564855112cf487d265da39d6ff57b90fd2948cd331420283fef3f42c6fec12bbbdb70b0c2fe97b834829b4d92ae1d1005cf574769e3431801252e6cab7ad905bf233820d33956256c8964455fc451"}, @NL80211_ATTR_FRAME_MATCH={0xfb, 0x5b, "3afd399ba60ca2e7c8c221d1a4de163ac15196500dd52f94bd2bed8a6139a34c96e83b5cbce3db13434b1b60602832aef17e65e20f442413e4bec01dc4df8b8f9964c94941a9e54bd5f86faec2e952d4f002e55c93120902dea1fd240ebb8c1b74db074f4396b28adfd5946f05879f88354233a72153e343ba388db10eff76e76824b457d5ee156a6d9ec804fff51f049a752f3b94a76384b5e23a9f4f7073d2987229edd8edf62c7297705fb4b3c2cdc5bfc55ce360f11a29e3a3f473412fec38201fbd96dc21198da13274a708c167795ddfaf1afe6a35aea7224cf2388e326dc9de7bbb13da65813ef39ed46810b89d2c1d911414c5"}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) close(r0) 6.175290847s ago: executing program 4 (id=3035): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="4018030000004171336fdf000f79a9442cdaf947c9a606ee6cc86d59044374e17114dbbcf277fb51e3daa86b4af0a90dbd8a4b3ae285c5faf5055b5d9861453185002b21a8f36099cfca39d116b027ce4befebc3a4695f1cbb55a5b95fe860e33c7ad0f6253a29d8f8fb9543ad209aa8f3a26c7c38d787cd71586847120a3d260e3ea4057adb79d4548aaf2b68ce30173b6919be3ff93feac2b75e5e9c53fca75fb6b9cffa914551806320814f2a"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000000100000c000b00736970000800094001000bcc000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="4018030000004171336fdf000f79a9442cdaf947c9a606ee6cc86d59044374e17114dbbcf277fb51e3daa86b4af0a90dbd8a4b3ae285c5faf5055b5d9861453185002b21a8f36099cfca39d116b027ce4befebc3a4695f1cbb55a5b95fe860e33c7ad0f6253a29d8f8fb9543ad209aa8f3a26c7c38d787cd71586847120a3d260e3ea4057adb79d4548aaf2b68ce30173b6919be3ff93feac2b75e5e9c53fca75fb6b9cffa914551806320814f2a"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000000100000c000b00736970000800094001000bcc000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) 6.008224961s ago: executing program 3 (id=3036): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) getrandom(&(0x7f0000000100)=""/43, 0x2b, 0x2) setresgid(0xee00, 0x0, 0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRES32=r4, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r4], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x7000000) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0xfff, 0x7}, 0x50) read$midi(0xffffffffffffffff, &(0x7f00000001c0)=""/70, 0xffffffd8) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$msr(r1, &(0x7f0000000040)=""/192, 0xc0) 5.98305461s ago: executing program 9 (id=3037): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() unshare(0x68040000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="042c11"], 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0x10000007) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) syz_usb_connect(0xb, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010005109b0009048f0000bf575a00"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x64842, 0x47) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x8080, &(0x7f00000003c0)={'trans=unix,', {[{@noxattr}, {@dfltuid}, {@aname={'aname', 0x3d, ']'}}, {@directio}], [{@appraise}]}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x9, 0x14, 0xd, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x8, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x7, 0x1e88, 0x5, 0x80000003, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x397, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000022, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x7f, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x3, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f00001a9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f00000f2000/0x4000)=nil, &(0x7f0000afd000/0x1000)=nil, &(0x7f00006b6000/0x1000)=nil, &(0x7f00005f5000/0x4000)=nil, &(0x7f000004e000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 4.291472493s ago: executing program 5 (id=3038): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b03, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x6a}}], 0x1, 0x0, 0x0) 4.132790344s ago: executing program 5 (id=3039): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000480)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x4000, 0x400, {0x77359400}, {0x2, 0x0, 0x8, 0x4, 0xf, 0x5, "c4e3ca54"}, 0x2, 0x1, {&(0x7f0000000280)=[{0x5, 0x1, {0x7e7}, 0xff}, {0x1, 0x73, {0x1ff}, 0x2}]}, 0x1ff}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, 0x0) getpid() r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$sequencer(r7, &(0x7f0000000000), 0x0) write(r6, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0xefffffffffffffff, 0x6402) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x6, 0x8}, {0xf06, 0x240, 0x5, 0x6}}}}, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x5) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.922027914s ago: executing program 9 (id=3040): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 2.918102611s ago: executing program 5 (id=3041): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000240)={&(0x7f0000000140)=""/169, 0xa9, 0x0, 0x7}) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008006d50000000d3a19dd000000000000000000001fa4c46df9da561526d310821d59f1d9db74be6fd39c578556808de4156cc535af7965a2c65f49720b16a606a5cd2be6f1f47187b6d02bb9feac7d66f533a61306360c6dd195e3dd2d85d1b12af8ba78cb2f804a572189d6d6e46c7299872820028e769a0b08537a66274d7a4f7734e524e1fc84bda14273ddb7c3c8b2153eee909f173eda9b50d5a4f36b098848b1ba5f29ef847ff566387b5c4a7e00"/198], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) connect$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x3, {0x0, 0xf0, 0x3}}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x10, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) bind$can_j1939(r4, &(0x7f00000003c0)={0x1d, r5, 0x2, {0x0, 0xff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.84333924s ago: executing program 1 (id=3042): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.842548093s ago: executing program 4 (id=3043): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$getflags(r4, 0x401) socket$nl_route(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 2.531074305s ago: executing program 3 (id=3046): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7eff, 0xf, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56e, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x82, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x0, 0x5f, 0x1, {0x22, 0x999}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x25, 0x2}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0xb, 0x2, 0x5, 0x20}, 0x24, &(0x7f0000000780)={0x5, 0xf, 0x24, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3e, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xa, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x10, 0xb, 0x9}]}, 0x1, [{0xea, &(0x7f00000007c0)=@string={0xea, 0x3, "450d9d8e858b096cd93a12594310a4f2b8809237d0a620c191a3bdb515ce99c185ea0b2a511ca3a5ede66ceb4d44864692c59fcb98319f9e417d275b49b42283bfd0bcce56df09032b4f3024c60bf19c1c4dce33aa1e8ccdbf26a62235e0c05b6da89ac08f3b5f4b2b79ec4b88f82a18b10ed8512998cb3c7846c4a1a9e609b8d7feec361c941695cf0b1d56af7b44df1363e96287570ca8a66f804dbe62d519264bbe06451fbdd49e6a33f1b163e265f7ba3ad3617384d7ede43bacfdfd0e5d5341ff13722801f50c61a3570fdae07c46687a7824368cfec8a1701117702b2d619c421bfebeac2c"}}]}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b03"]) syz_usb_control_io$uac2(r3, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x40, 0x6, 0xf9, {0xf9, 0x6, "c8915d207ad90c04832a9f8f90585cd10fbb577a65beb14066ace1db973745c211607c2cabd077bceaa7dfccbf10e0f593c7c0f3d8ac290d3891b6994ca9b3438ede34b97a977dacbb318bcb4ad340b556ed0161bd20f5d66109788e4d968af29ab035539b69c070e6446b345c87cb7223954a34d85a236e03d61b44fbfb84f4be770d441bde110ec25499a962a1a8010d5079e409442d2e31a502d47dc10c1ca2ae4c52fc2cc2796f860e128e8e662bfc270ba7165984b2a34d8d62e888e834585434e074ef2f2e517f081c65e2d07a10a09f2bb305cc506017fdf188560dde0f65d4f81f75aa2ccb7027fe1545cc8af8e4ecfc9ad15c"}}, &(0x7f0000000300)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "f091ca26f3938b6ef2a36ac6923e3af343c1d424627d8bbad1b5eb11d5168fbbf461520896cfa49bddc8bba402c98e10cecfa44eb85a1d3d2b4c203265a1febcc5f1fa004b6c1ae6bdf638a4b2a8132bf3e7bf68dd35c4d791508ea77867bb12d94b54a9bf681df131071404c4881ab7c8d6d609fe15f9182b734f1fc3005b9e4586b6bb4d1a075756bf092e1bf28721e8bef44aba2a6a79f74aa88b487679"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000400)={0x40, 0x16, 0x7e, "79204555edec09f3f02ea0b73075e31bc596b287a62cf18c6ffc733fd46261d4ac3c95cbd05dad68b37f2d89eb58561c81752e3cb0119e0934df05874f2558f21c1719ffbc1474b7318a1714d4273399192996f0e665e1d1aa472643c4a479bfbc76cd153ed1d7c3ce4acb51082af00d82d618d520a8baadeeb6a1e15e20"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "5f7f"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "ae"}, &(0x7f0000000640)={0x20, 0x83, 0x1, "a4"}, &(0x7f0000000680)={0x20, 0x84, 0x1, ' '}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "31ca0f"}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r4, &(0x7f0000001300)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x8, 0x3) close(r4) 2.361334677s ago: executing program 4 (id=3047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) syz_usb_connect(0x3, 0xc7, &(0x7f0000000100)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c240503010000020000000007058103", @ANYBLOB='bt\''], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8], 0x20) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a80)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg(r0, &(0x7f0000003d00)={&(0x7f00000005c0)=@can, 0x80, 0x0}, 0x48004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x90000915, &(0x7f00000001c0)="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") ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0x4, 0x60e, {{0x4f, 0x4, 0x1, 0x0, 0x13c, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x7, 0xee, [@multicast1]}, @timestamp_addr={0x44, 0x24, 0x68, 0x1, 0x7, [{@multicast1, 0x200}, {@private=0xa010102}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @cipso={0x86, 0x26, 0x0, [{0x2, 0xd, "add8edf8a20738019c963f"}, {0x0, 0xc, "126242e50a093a8327de"}, {0x1, 0x7, "8c7b499d20"}]}, @lsrr={0x83, 0x17, 0xc6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_addr={0x44, 0x3c, 0x4c, 0x1, 0x1, [{@rand_addr=0x64010100, 0x9}, {@private=0x7, 0x79328000}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0x7935}, {@rand_addr=0x64010100, 0x8}, {@multicast2, 0x4}, {@multicast1, 0x80}]}, @cipso={0x86, 0x65, 0x0, [{0x7, 0x4, "dc51"}, {0x0, 0x7, "7d2ca6e4e6"}, {0x7, 0x10, "7891b6f1d428bf848b86f442be09"}, {0x7, 0xd, "91b1f642302d5308143884"}, {0x6, 0xa, "7ac2d14d7b20ec59"}, {0x2, 0x12, "8b9aebb8f68216051e0ebed12e2d1967"}, {0x6, 0x10, "639af6d4fe9c4e9d8c059f6e1ef1"}, {0x0, 0xb, "6dfbe1fb98ddca194b"}]}, @lsrr={0x83, 0xb, 0xbe, [@remote, @dev={0xac, 0x14, 0x14, 0xa}]}, @rr={0x7, 0x13, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @broadcast, @local]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5f}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x253}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe771, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000500)={0x2e, 0x20, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.920514365s ago: executing program 3 (id=3048): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0xf401, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) 1.643191373s ago: executing program 3 (id=3049): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000003000028014000100fe8000000000000000000000000000aa0800030000"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x48001) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x89e1, &(0x7f00000000c0)='lapb0') socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r3, 0x0, 0x800) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) accept(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x7f}) 1.605786945s ago: executing program 3 (id=3050): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8041) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) write(r2, &(0x7f0000000000)='3', 0x4e) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="200a020000009cf3"], 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="f66941f59a81b68648f2dd1cc572ed743aa5cceb0ef4ad99d79efdb5eaf89d128f4aee3aaf86f42ade91c30b"]) 512.467491ms ago: executing program 9 (id=3051): syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$OCFS2_IOC_RESVSP64(r1, 0x800a6f2f, &(0x7f0000000080)={0x0, 0x0, 0x7fffffff, 0x100000000, 0x10001, 0x5b1}) io_setup(0x7, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0xffffff4c}]) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000000c0)={0xa0, 0x4c, &(0x7f0000000040)="0501f8f67719edf2ed3d0000000000000000", {0x0, 0xe, 0x39555659, 0x3, 0x6, 0x5}}) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0xc, 0x1800, {0x5, 0x4, 0x2, 0x5, 0x2, 0x64, 0x0, 0x24, 0x6, 0x3, @empty, @private=0xa010101}}}}}}, 0x0) 402.171375ms ago: executing program 5 (id=3052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="f2ac660f38082b65360fc7b4e2009a370a1100baf80c66b8413d0c8a66efbafc0cb034ee0f0e0f01c90fd97e4e0fc7330f32", 0x32}], 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.433864ms ago: executing program 1 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc/mtrr\x00', &(0x7f0000000080)='smb3\x00', 0x800040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d08, &(0x7f0000000a00)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x20000) 0s ago: executing program 4 (id=3054): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) kernel console output (not intermixed with test programs): T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 928.409223][T17391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2667'. [ 928.447543][T17322] team0: Port device team_slave_0 added [ 928.520043][ T5712] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 928.577903][T17322] team0: Port device team_slave_1 added [ 928.656786][T17322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.669694][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.669723][T17322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.670580][T17322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.670591][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.670606][T17322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.868531][ T5712] usb 8-1: USB disconnect, device number 14 [ 928.949247][T17322] hsr_slave_0: entered promiscuous mode [ 928.949909][T17322] hsr_slave_1: entered promiscuous mode [ 928.950193][T17322] debugfs: 'hsr0' already exists in 'hsr' [ 928.950206][T17322] Cannot create hsr debugfs directory [ 930.151950][ T5608] Bluetooth: hci6: command tx timeout [ 930.422411][T17424] 9p: Bad value for 'rfdno' [ 930.709645][T17428] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2671'. [ 930.814781][T17433] 9p: Bad value for 'rfdno' [ 930.942685][T17428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.951432][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 930.951462][ T31] audit: type=1800 audit(1788335475.886:2704): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272714 res=0 errno=0 [ 931.071447][T17431] syzkaller1: entered promiscuous mode [ 931.071470][T17431] syzkaller1: entered allmulticast mode [ 931.084226][ T5712] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 931.246979][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 931.255059][ T5712] usb 1-1: not running at top speed; connect to a high speed hub [ 931.255082][ T5712] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 931.273170][ T5712] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 931.273191][ T5712] usb 1-1: config 0 has no interface number 0 [ 931.273216][ T5712] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 931.273233][ T5712] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 931.273247][ T5712] usb 1-1: config 0 interface 88 has no altsetting 0 [ 931.323151][ T5712] usb 1-1: language id specifier not provided by device, defaulting to English [ 931.350734][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 931.350758][ T5712] usb 1-1: Product: syz [ 931.350775][ T5712] usb 1-1: SerialNumber: syz [ 931.373634][ T5712] usb 1-1: config 0 descriptor?? [ 931.495863][ T31] audit: type=1800 audit(1788335476.327:2705): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272733 res=0 errno=0 [ 931.533485][ T31] audit: type=1800 audit(1788335476.467:2706): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=272764 res=0 errno=0 [ 931.533533][ T31] audit: type=1800 audit(1788335476.477:2707): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=272740 res=0 errno=0 [ 931.533560][ T31] audit: type=1800 audit(1788335476.477:2708): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=272741 res=0 errno=0 [ 931.978711][ T31] audit: type=1800 audit(1788335476.917:2709): pid=17322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24518 res=0 errno=0 [ 932.020285][ T31] audit: type=1800 audit(1788335476.957:2710): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272784 res=0 errno=0 [ 932.212114][ T31] audit: type=1400 audit(1788335477.157:2711): avc: denied { write } for pid=17436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.235519][ T5608] Bluetooth: hci6: command tx timeout [ 932.412939][ T31] audit: type=1400 audit(1788335477.357:2712): avc: denied { write } for pid=17453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.654922][ T31] audit: type=1800 audit(1788335477.597:2713): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 932.730166][T17322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 932.758043][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 932.767472][T17322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 932.802007][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 932.810446][T17322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 932.849716][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 932.857957][T17322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 932.870264][T17322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 932.970012][T17465] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.106295][T17322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.143591][T17322] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.161266][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.161320][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.188577][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.188630][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.336270][ T5608] Bluetooth: hci6: command tx timeout [ 934.414886][ T5712] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input57 [ 934.484483][ T5712] usb 1-1: USB disconnect, device number 57 [ 934.620289][T17322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.771909][T17328] udevd[17328]: Error opening device "/dev/input/event4": No such file or directory [ 934.771976][T17328] udevd[17328]: Unable to EVIOCGABS device "/dev/input/event4" [ 934.793512][T17328] udevd[17328]: Unable to EVIOCGABS device "/dev/input/event4" [ 935.076338][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805668ac00: rx timeout, send abort [ 935.278637][T17322] veth0_vlan: entered promiscuous mode [ 935.298835][T17322] veth1_vlan: entered promiscuous mode [ 935.355230][T17322] veth0_macvtap: entered promiscuous mode [ 935.369784][T17322] veth1_macvtap: entered promiscuous mode [ 935.403650][T17322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.419025][T17322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.505153][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.505324][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.505367][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.505387][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.576319][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805668ac00: abort rx timeout. Force session deactivation [ 935.577832][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805668b400: rx timeout, send abort [ 935.732533][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.732553][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.847949][T10468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.847969][T10468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.981483][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 935.981507][ T31] audit: type=1400 audit(1788335480.917:2737): avc: denied { write } for pid=17532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.059050][ T31] audit: type=1800 audit(1788335480.997:2738): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 936.080200][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805668b400: abort rx timeout. Force session deactivation [ 936.154308][ T5785] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 936.192357][T17556] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 936.272475][ T31] audit: type=1400 audit(1788335481.217:2739): avc: denied { write } for pid=17558 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.294623][ T5785] usb 1-1: device descriptor read/64, error -71 [ 936.331437][ T31] audit: type=1800 audit(1788335481.267:2740): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 936.416125][ T31] audit: type=1800 audit(1788335481.357:2741): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 937.101122][ T5785] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 937.267658][ T5785] usb 1-1: device descriptor read/64, error -71 [ 937.450031][T17574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.453902][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 937.453918][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2691'. [ 937.453934][T17574] netlink: 'syz.4.2691': attribute type 14 has an invalid length. [ 937.453943][T17574] netlink: 'syz.4.2691': attribute type 12 has an invalid length. [ 937.493007][ T5785] usb usb1-port1: attempt power cycle [ 937.508470][ T31] audit: type=1800 audit(1788335482.447:2742): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273688 res=0 errno=0 [ 937.841584][ T5785] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 937.863800][ T5785] usb 1-1: device descriptor read/8, error -71 [ 937.920336][ T31] audit: type=1400 audit(1788335482.857:2743): avc: denied { write } for pid=17569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.038983][ T31] audit: type=1800 audit(1788335482.977:2744): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 938.131117][ T5785] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 938.155981][ T5785] usb 1-1: device descriptor read/8, error -71 [ 938.208399][ T31] audit: type=1800 audit(1788335483.137:2745): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 938.254605][ T31] audit: type=1400 audit(1788335483.197:2746): avc: denied { write } for pid=17593 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.277364][ T5785] usb usb1-port1: unable to enumerate USB device [ 938.366478][T17599] SELinux: syz.7.2696 (17599) wrote to user. This is no longer supported. [ 940.671310][ T5712] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 941.484507][ T5712] usb 1-1: device descriptor read/64, error -71 [ 941.545395][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 941.545418][ T31] audit: type=1400 audit(1788335486.488:2752): avc: denied { write } for pid=17602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.666554][ T31] audit: type=1800 audit(1788335486.608:2753): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 941.721164][ T5712] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 941.799329][ T31] audit: type=1400 audit(1788335486.738:2754): avc: denied { write } for pid=17645 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.851933][ T5712] usb 1-1: device descriptor read/64, error -71 [ 941.886766][ T31] audit: type=1800 audit(1788335486.818:2755): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 941.961285][ T5712] usb usb1-port1: attempt power cycle [ 942.191792][ T5788] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 942.253139][ T31] audit: type=1800 audit(1788335487.198:2756): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 942.332138][ T5712] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 942.350505][ T5788] usb 8-1: Using ep0 maxpacket: 32 [ 942.357589][ T5712] usb 1-1: device descriptor read/8, error -71 [ 942.364198][ T5788] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 942.378116][ T5788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.378141][ T5788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.378169][ T5788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.416144][ T5788] usb 8-1: config 0 descriptor?? [ 942.424378][ T31] audit: type=1800 audit(1788335487.368:2757): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273797 res=0 errno=0 [ 942.479078][ T31] audit: type=1800 audit(1788335487.418:2758): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=273826 res=0 errno=0 [ 942.513604][ T31] audit: type=1800 audit(1788335487.458:2759): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=273804 res=0 errno=0 [ 942.570972][T17670] 9p: Bad value for 'rfdno' [ 942.588589][ T31] audit: type=1800 audit(1788335487.528:2760): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=273805 res=0 errno=0 [ 942.619619][ T31] audit: type=1800 audit(1788335487.558:2761): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=273806 res=0 errno=0 [ 942.642581][ T5712] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 942.735751][ T5712] usb 1-1: device descriptor read/8, error -71 [ 942.764623][T17668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2709'. [ 942.764729][T17668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2709'. [ 942.841410][ T5712] usb usb1-port1: unable to enumerate USB device [ 943.915181][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'. [ 945.136934][ T5788] usbhid 8-1:0.0: can't add hid device: -71 [ 945.136995][ T5788] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 945.159100][ T5788] usb 8-1: USB disconnect, device number 15 [ 945.335569][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 946.583900][T17716] loop5: detected capacity change from 0 to 7 [ 946.591500][T17716] Dev loop5: unable to read RDB block 7 [ 946.641108][T17716] loop5: unable to read partition table [ 946.641217][T17716] loop5: partition table beyond EOD, truncated [ 946.641237][T17716] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 946.705307][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2717'. [ 946.717879][T17716] unsupported nlmsg_type 40 [ 947.528659][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 947.528684][ T31] audit: type=1800 audit(1788335492.468:2771): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 947.933273][ T31] audit: type=1800 audit(1788335492.878:2772): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 948.014910][ T31] audit: type=1400 audit(1788335492.958:2773): avc: denied { write } for pid=17711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.249655][ T31] audit: type=1800 audit(1788335493.189:2774): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2723" name="p_volume_max" dev="configfs" ino=64935 res=0 errno=0 [ 948.318930][ T31] audit: type=1800 audit(1788335493.259:2775): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2723" name="run" dev="sysfs" ino=1838 res=0 errno=0 [ 948.408219][ T31] audit: type=1400 audit(1788335493.339:2776): avc: denied { write } for pid=17740 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.500038][T17743] netlink: 'syz.1.2724': attribute type 9 has an invalid length. [ 948.892850][T17754] dummy0: entered promiscuous mode [ 948.892873][T17754] dummy0: entered allmulticast mode [ 949.015050][ T31] audit: type=1800 audit(1788335493.959:2777): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15742 res=0 errno=0 [ 949.084017][ T31] audit: type=1800 audit(1788335494.029:2778): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 949.999608][ T31] audit: type=1400 audit(1788335494.939:2779): avc: denied { write } for pid=17745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.026045][T17763] dummy0: entered promiscuous mode [ 950.026065][T17763] dummy0: entered allmulticast mode [ 950.213179][ T31] audit: type=1800 audit(1788335495.159:2780): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 950.934698][T17783] comedi comedi3: comedi_config --init_data is deprecated [ 951.760366][ T5785] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 951.910174][ T5785] usb 5-1: Using ep0 maxpacket: 16 [ 951.915658][ T5785] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 951.929721][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.929745][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.929771][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.961054][ T5785] usb 5-1: config 0 descriptor?? [ 952.068523][T17801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.425510][ T5785] hid (null): report_id 0 is invalid [ 952.425534][ T5785] hid (null): report_id 4252247276 is invalid [ 952.425558][ T5785] hid (null): unknown global tag 0xe [ 952.425573][ T5785] hid (null): global environment stack underflow [ 952.426010][ T5785] hid (null): usage index exceeded [ 952.565845][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 952.565877][ T31] audit: type=1400 audit(1788335497.509:2793): avc: denied { write } for pid=17811 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 952.873198][ T5785] usb 5-1: string descriptor 0 read error: -71 [ 952.900610][ T5785] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 952.900659][ T5785] letsketch 0003:6161:4D15.0027: probe with driver letsketch failed with error -32 [ 952.926459][ T5785] usb 5-1: USB disconnect, device number 30 [ 953.939024][T17824] Can't find a SQUASHFS superblock on nullb0 [ 954.196483][ T31] audit: type=1400 audit(1788335499.129:2794): avc: denied { write } for pid=17817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.268407][ T31] audit: type=1800 audit(1788335499.199:2795): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 955.235333][ T31] audit: type=1400 audit(1788335500.169:2796): avc: denied { write } for pid=17849 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.860691][ T31] audit: type=1326 audit(1788335501.800:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17856 comm="syz.3.2743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2cd79e159 code=0x7fc00000 [ 956.955980][ T31] audit: type=1800 audit(1788335501.890:2798): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 957.145384][ T31] audit: type=1326 audit(1788335502.080:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17856 comm="syz.3.2743" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc2cd79e159 code=0x7fc00000 [ 957.189884][ T5788] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 957.307439][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 957.359204][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 957.364686][ T5788] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 957.375110][ T5788] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 957.375132][ T5788] usb 1-1: config 0 has no interface number 0 [ 957.375157][ T5788] usb 1-1: config 0 interface 184 has no altsetting 0 [ 957.400676][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.400698][ T5788] usb 1-1: Product: syz [ 957.400714][ T5788] usb 1-1: Manufacturer: syz [ 957.400730][ T5788] usb 1-1: SerialNumber: syz [ 957.426629][ T5788] usb 1-1: config 0 descriptor?? [ 957.433339][ T31] audit: type=1800 audit(1788335502.380:2800): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274405 res=0 errno=0 [ 957.466800][ T31] audit: type=1800 audit(1788335502.400:2801): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=274437 res=0 errno=0 [ 957.489813][ T31] audit: type=1800 audit(1788335502.430:2802): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=274412 res=0 errno=0 [ 957.660771][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 957.660795][ T31] audit: type=1400 audit(1788335502.600:2804): avc: denied { write } for pid=17858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.898249][ T31] audit: type=1400 audit(1788335502.830:2805): avc: denied { write } for pid=17890 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.325918][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2751'. [ 958.453978][T17912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.475334][ T5788] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 958.475367][ T5788] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 958.507136][T17912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.539119][ T5788] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 958.539144][ T5788] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 958.539164][ T5788] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 958.539176][ T5788] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 958.539281][ T5788] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 958.595038][ T31] audit: type=1800 audit(1788335503.540:2806): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=274434 res=0 errno=0 [ 958.617679][ T31] audit: type=1800 audit(1788335503.560:2807): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=274435 res=0 errno=0 [ 958.640119][ T31] audit: type=1800 audit(1788335503.580:2808): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=274414 res=0 errno=0 [ 958.670343][ T31] audit: type=1800 audit(1788335503.610:2809): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=274436 res=0 errno=0 [ 958.703711][ T31] audit: type=1800 audit(1788335503.640:2810): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274457 res=0 errno=0 [ 958.815945][ T31] audit: type=1400 audit(1788335503.750:2811): avc: denied { write } for pid=17894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.927660][ T31] audit: type=1400 audit(1788335503.860:2812): avc: denied { write } for pid=17920 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.086599][ T31] audit: type=1800 audit(1788335504.020:2813): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 959.322476][T17929] FAULT_INJECTION: forcing a failure. [ 959.322476][T17929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 959.322506][T17929] CPU: 0 UID: 0 PID: 17929 Comm: syz.4.2754 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.322523][T17929] Tainted: [L]=SOFTLOCKUP [ 959.322528][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 959.322534][T17929] Call Trace: [ 959.322539][T17929] [ 959.322544][T17929] dump_stack_lvl+0x100/0x190 [ 959.322564][T17929] should_fail_ex.cold+0x5/0xa [ 959.322577][T17929] ? prepare_alloc_pages+0x16d/0x5b0 [ 959.322593][T17929] should_fail_alloc_page+0xeb/0x140 [ 959.322608][T17929] prepare_alloc_pages+0x1f0/0x5b0 [ 959.322624][T17929] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 959.322642][T17929] ? __pfx_vma_is_shared_writable+0x10/0x10 [ 959.322659][T17929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 959.322671][T17929] ? percpu_counter_add_batch+0xb9/0x230 [ 959.322688][T17929] ? inode_to_bdi+0x9e/0x160 [ 959.322710][T17929] ? vma_fs_can_writeback+0x112/0x170 [ 959.322725][T17929] ? vma_wants_writenotify+0xe7/0x340 [ 959.322742][T17929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 959.322764][T17929] ? vma_set_page_prot+0x13e/0x1c0 [ 959.322778][T17929] ? __pfx_vma_set_page_prot+0x10/0x10 [ 959.322794][T17929] ? __mmap_region+0xc96/0x32c0 [ 959.322810][T17929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 959.322823][T17929] ? policy_nodemask+0xed/0x4f0 [ 959.322839][T17929] alloc_pages_mpol+0x201/0x550 [ 959.322854][T17929] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 959.322868][T17929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 959.322883][T17929] folio_alloc_mpol_noprof+0x36/0x260 [ 959.322900][T17929] shmem_alloc_folio+0x135/0x160 [ 959.322914][T17929] shmem_alloc_and_add_folio+0x371/0xd40 [ 959.322933][T17929] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 959.322949][T17929] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 959.322968][T17929] shmem_get_folio_gfp+0x75b/0x1980 [ 959.322987][T17929] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 959.323004][T17929] ? filemap_map_pages+0x114a/0x2100 [ 959.323021][T17929] shmem_fault+0x1fb/0xa30 [ 959.323036][T17929] ? __pfx_shmem_fault+0x10/0x10 [ 959.323054][T17929] ? __pfx_filemap_map_pages+0x10/0x10 [ 959.323069][T17929] ? find_held_lock+0x2b/0x80 [ 959.323086][T17929] ? __pfx_filemap_map_pages+0x10/0x10 [ 959.323098][T17929] __do_fault+0x10b/0x440 [ 959.323110][T17929] do_fault+0xb3f/0x1830 [ 959.323126][T17929] ? __pfx_do_fault+0x10/0x10 [ 959.323138][T17929] ? rcu_read_unlock+0x2d/0xb0 [ 959.323152][T17929] ? rcu_read_unlock+0x2d/0xb0 [ 959.323167][T17929] ? __pte_offset_map+0x179/0x310 [ 959.323181][T17929] __handle_mm_fault+0x150b/0x2f60 [ 959.323199][T17929] ? __pfx___handle_mm_fault+0x10/0x10 [ 959.323213][T17929] ? __pfx_mt_find+0x10/0x10 [ 959.323234][T17929] ? find_vma+0xbf/0x140 [ 959.323245][T17929] ? __pfx_find_vma+0x10/0x10 [ 959.323257][T17929] handle_mm_fault+0x363/0xa20 [ 959.323275][T17929] do_user_addr_fault+0x745/0x12f0 [ 959.323293][T17929] exc_page_fault+0x6f/0xd0 [ 959.323305][T17929] asm_exc_page_fault+0x26/0x30 [ 959.323317][T17929] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 959.323333][T17929] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff b0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 959.323344][T17929] RSP: 0018:ffffc90005c2fe08 EFLAGS: 00050206 [ 959.323354][T17929] RAX: 0000000000000001 RBX: 00002000000001c0 RCX: 00000000000001c0 [ 959.323362][T17929] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff888077fb6e40 [ 959.323369][T17929] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100eff6dff [ 959.323376][T17929] R10: ffff888077fb6fff R11: 0000000000000000 R12: 0000000000000000 [ 959.323383][T17929] R13: ffff888077fb6000 R14: 1ffff92000b85fcf R15: 0000000000000000 [ 959.323399][T17929] _copy_from_user+0x98/0xd0 [ 959.323416][T17929] copy_mount_options+0x76/0x190 [ 959.323434][T17929] __x64_sys_mount+0x1ab/0x310 [ 959.323450][T17929] ? __pfx___x64_sys_mount+0x10/0x10 [ 959.323470][T17929] do_syscall_64+0x123/0x790 [ 959.323484][T17929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.323496][T17929] RIP: 0033:0x7f0adc19e159 [ 959.323506][T17929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.323516][T17929] RSP: 002b:00007f0add0a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 959.323526][T17929] RAX: ffffffffffffffda RBX: 00007f0adc425fa0 RCX: 00007f0adc19e159 [ 959.323532][T17929] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 959.323539][T17929] RBP: 00007f0adc235024 R08: 00002000000001c0 R09: 0000000000000000 [ 959.323546][T17929] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000000 [ 959.323553][T17929] R13: 00007f0adc426038 R14: 00007f0adc425fa0 R15: 00007ffcf0052e08 [ 959.323568][T17929] [ 959.943837][ T5788] usb 1-1: USB disconnect, device number 66 [ 961.155068][ T5785] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 961.321284][ T5785] usb 1-1: Using ep0 maxpacket: 16 [ 961.329190][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 961.329220][ T5785] usb 1-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 961.348475][ T5785] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 961.360442][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.360462][ T5785] usb 1-1: Product: syz [ 961.360478][ T5785] usb 1-1: Manufacturer: syz [ 961.360488][ T5785] usb 1-1: SerialNumber: syz [ 961.488319][T16231] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 961.596060][ T5785] usb-storage 1-1:4.0: USB Mass Storage device detected [ 961.640043][ T5785] usb 1-1: USB disconnect, device number 67 [ 961.656942][T16231] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 961.670090][T16231] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 961.670107][T16231] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 961.670120][T16231] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 961.670133][T16231] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 961.670145][T16231] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 961.670157][T16231] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 961.706890][T16231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 961.706905][T16231] usb 5-1: Product: syz [ 961.706914][T16231] usb 5-1: Manufacturer: syz [ 961.764527][T17967] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 961.764610][T17967] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 961.764660][T17967] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 961.764727][T17967] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 961.764797][T17967] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 961.764859][T17967] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 961.773345][T16231] usb 5-1: USB2VGA dongle found at address 31 [ 961.826188][T16231] usb 5-1: Allocated 8 output buffers [ 961.845444][T16231] usb 5-1: Failed to early initialize device [ 962.216203][T17994] lo speed is unknown, defaulting to 1000 [ 962.256187][T17998] usb 5-1: Failed to initialize device [ 962.473694][T18011] fuse: Bad value for 'group_id' [ 962.473714][T18011] fuse: Bad value for 'group_id' [ 962.684666][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 962.684689][ T31] audit: type=1400 audit(1788335507.620:2844): avc: denied { write } for pid=18015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.762303][ T31] audit: type=1400 audit(1788335507.700:2845): avc: denied { write } for pid=18027 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.145413][ T31] audit: type=1400 audit(1788335508.080:2846): avc: denied { write } for pid=18029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.290604][ T31] audit: type=1800 audit(1788335508.230:2847): pid=18016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2763" name="/" dev="fuse" ino=1 res=0 errno=0 [ 963.325552][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 963.336529][ T31] audit: type=1400 audit(1788335508.280:2848): avc: denied { write } for pid=18053 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.412384][T18052] hsr_slave_1 (unregistering): left promiscuous mode [ 964.354079][ T5785] usb 5-1: USB disconnect, device number 31 [ 964.402010][ T31] audit: type=1800 audit(1788335509.340:2849): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 964.522056][T18067] netlink: 'syz.1.2773': attribute type 1 has an invalid length. [ 964.572684][T18069] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12089] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18069] [ 964.592872][T18067] bond3: entered promiscuous mode [ 964.593067][T18067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 964.711852][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 964.745159][T18069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2771'. [ 964.866918][ T31] audit: type=1800 audit(1788335509.800:2850): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2775" name="nullb0" dev="tmpfs" ino=1330 res=0 errno=0 [ 965.018172][ T5785] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 965.073619][ T31] audit: type=1400 audit(1788335510.010:2851): avc: denied { write } for pid=18066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.178567][ T5785] usb 1-1: Using ep0 maxpacket: 8 [ 965.185023][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 965.185058][ T5785] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0037, bcdDevice=58.26 [ 965.203723][ T5785] usb 1-1: config 7 has an invalid interface number: 73 but max is 0 [ 965.203744][ T5785] usb 1-1: config 7 has an invalid interface association descriptor of length 2, skipping [ 965.203761][ T5785] usb 1-1: config 7 has no interface number 0 [ 965.203783][ T5785] usb 1-1: config 7 interface 73 has no altsetting 0 [ 965.242673][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.242696][ T5785] usb 1-1: Product: syz [ 965.242711][ T5785] usb 1-1: Manufacturer: syz [ 965.242722][ T5785] usb 1-1: SerialNumber: syz [ 965.272701][ T31] audit: type=1800 audit(1788335510.210:2852): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=275992 res=0 errno=0 [ 965.272733][ T31] audit: type=1800 audit(1788335510.210:2853): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=276024 res=0 errno=0 [ 965.474321][T18078] FAULT_INJECTION: forcing a failure. [ 965.474321][T18078] name failslab, interval 1, probability 0, space 0, times 0 [ 965.490812][T18078] CPU: 0 UID: 0 PID: 18078 Comm: syz.0.2774 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.490832][T18078] Tainted: [L]=SOFTLOCKUP [ 965.490836][T18078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 965.490843][T18078] Call Trace: [ 965.490847][T18078] [ 965.490852][T18078] dump_stack_lvl+0x100/0x190 [ 965.490871][T18078] should_fail_ex.cold+0x5/0xa [ 965.490888][T18078] should_failslab+0xc2/0x120 [ 965.490902][T18078] __kvmalloc_node_noprof+0x113/0x9b0 [ 965.490916][T18078] ? __pfx_net_ctl_permissions+0x10/0x10 [ 965.490932][T18078] ? proc_sys_call_handler+0x2c7/0x5a0 [ 965.490951][T18078] proc_sys_call_handler+0x2c7/0x5a0 [ 965.490968][T18078] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 965.490989][T18078] vfs_write+0x6af/0x1050 [ 965.491007][T18078] ? __pfx_proc_sys_write+0x10/0x10 [ 965.491023][T18078] ? __pfx_vfs_write+0x10/0x10 [ 965.491039][T18078] ? find_held_lock+0x2b/0x80 [ 965.491063][T18078] ksys_write+0x12a/0x250 [ 965.491073][T18078] ? __pfx_ksys_write+0x10/0x10 [ 965.491088][T18078] do_syscall_64+0x123/0x790 [ 965.491102][T18078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.491114][T18078] RIP: 0033:0x7f30e719e159 [ 965.491124][T18078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.491134][T18078] RSP: 002b:00007f30e7fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 965.491146][T18078] RAX: ffffffffffffffda RBX: 00007f30e7425fa0 RCX: 00007f30e719e159 [ 965.491153][T18078] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 965.491160][T18078] RBP: 00007f30e7fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 965.491166][T18078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.491173][T18078] R13: 00007f30e7426038 R14: 00007f30e7425fa0 R15: 00007fffcd2eb4f8 [ 965.491187][T18078] [ 965.713278][ T5785] usb 1-1: USB disconnect, device number 68 [ 965.809508][T18100] FAULT_INJECTION: forcing a failure. [ 965.809508][T18100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 965.844444][T18100] CPU: 0 UID: 0 PID: 18100 Comm: syz.4.2779 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.844464][T18100] Tainted: [L]=SOFTLOCKUP [ 965.844469][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 965.844478][T18100] Call Trace: [ 965.844482][T18100] [ 965.844487][T18100] dump_stack_lvl+0x100/0x190 [ 965.844508][T18100] should_fail_ex.cold+0x5/0xa [ 965.844522][T18100] ? prepare_alloc_pages+0x16d/0x5b0 [ 965.844536][T18100] should_fail_alloc_page+0xeb/0x140 [ 965.844552][T18100] prepare_alloc_pages+0x1f0/0x5b0 [ 965.844568][T18100] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 965.844593][T18100] ? lock_acquire+0x1d1/0x380 [ 965.844605][T18100] ? page_table_check_set+0x11d/0x580 [ 965.844620][T18100] ? find_held_lock+0x2b/0x80 [ 965.844635][T18100] ? page_table_check_set+0x30f/0x580 [ 965.844648][T18100] ? page_table_check_set+0x30f/0x580 [ 965.844664][T18100] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 965.844681][T18100] ? page_table_check_set+0x31e/0x580 [ 965.844696][T18100] ? __page_table_check_ptes_set+0x1d5/0x530 [ 965.844712][T18100] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 965.844727][T18100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 965.844743][T18100] ? xas_find+0x32c/0x8e0 [ 965.844759][T18100] ? find_held_lock+0x2b/0x80 [ 965.844774][T18100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 965.844788][T18100] ? policy_nodemask+0xed/0x4f0 [ 965.844803][T18100] alloc_pages_mpol+0x201/0x550 [ 965.844818][T18100] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 965.844836][T18100] folio_alloc_mpol_noprof+0x36/0x260 [ 965.844853][T18100] vma_alloc_folio_noprof+0xed/0x1d0 [ 965.844869][T18100] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 965.844889][T18100] do_anonymous_page+0xac9/0x2050 [ 965.844909][T18100] ? __pfx_do_anonymous_page+0x10/0x10 [ 965.844923][T18100] ? rcu_read_unlock+0x2d/0xb0 [ 965.844938][T18100] ? rcu_read_unlock+0x2d/0xb0 [ 965.844953][T18100] ? __pte_offset_map+0x179/0x310 [ 965.844967][T18100] __handle_mm_fault+0x1ff3/0x2f60 [ 965.844984][T18100] ? lock_vma_under_rcu+0x11d/0x590 [ 965.844999][T18100] ? __pfx___handle_mm_fault+0x10/0x10 [ 965.845017][T18100] ? lock_vma_under_rcu+0x17c/0x590 [ 965.845039][T18100] handle_mm_fault+0x363/0xa20 [ 965.845057][T18100] do_user_addr_fault+0x59c/0x12f0 [ 965.845076][T18100] exc_page_fault+0x6f/0xd0 [ 965.845088][T18100] asm_exc_page_fault+0x26/0x30 [ 965.845100][T18100] RIP: 0033:0x7f0adc05f6cb [ 965.845111][T18100] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 965.845122][T18100] RSP: 002b:00007f0add09ffa0 EFLAGS: 00010206 [ 965.845132][T18100] RAX: 0000000000000000 RBX: 00007f0adc425fa0 RCX: 0000000000000000 [ 965.845139][T18100] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000180 [ 965.845146][T18100] RBP: 00007f0add0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 965.845153][T18100] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 965.845159][T18100] R13: 00007f0adc426038 R14: 00007f0adc425fa0 R15: 00007ffcf0052e08 [ 965.845174][T18100] [ 965.893457][T18100] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 966.754878][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 966.772771][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 966.793052][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 966.807835][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 966.815122][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 967.109087][T16231] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 967.258380][T16231] usb 1-1: Using ep0 maxpacket: 32 [ 967.263927][T16231] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 967.275372][T16231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.275396][T16231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.275421][T16231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.308885][T16231] usb 1-1: config 0 descriptor?? [ 967.891312][T18120] lo speed is unknown, defaulting to 1000 [ 967.998916][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 967.998954][ T31] audit: type=1800 audit(1788335512.941:2876): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 968.867906][ T5608] Bluetooth: hci7: command tx timeout [ 968.918426][T16231] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 968.935577][ T31] audit: type=1800 audit(1788335513.881:2877): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35319 res=0 errno=0 [ 968.971974][ T31] audit: type=1800 audit(1788335513.911:2878): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277086 res=0 errno=0 [ 969.001741][ T31] audit: type=1800 audit(1788335513.941:2879): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277108 res=0 errno=0 [ 969.048854][ T31] audit: type=1800 audit(1788335513.991:2880): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277122 res=0 errno=0 [ 969.183931][ T31] audit: type=1400 audit(1788335514.121:2881): avc: denied { write } for pid=18141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.249162][T16231] usb 1-1: USB disconnect, device number 69 [ 969.298646][T18166] fido_id[18166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 969.486297][ T31] audit: type=1400 audit(1788335514.421:2882): avc: denied { write } for pid=18175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.553826][ T31] audit: type=1800 audit(1788335514.491:2883): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36085 res=0 errno=0 [ 969.723430][T18120] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.737871][T18120] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.745121][T18120] bridge_slave_0: entered allmulticast mode [ 969.758654][T18120] bridge_slave_0: entered promiscuous mode [ 969.774656][T18120] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.782231][T18120] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.789576][T18120] bridge_slave_1: entered allmulticast mode [ 969.800735][T18120] bridge_slave_1: entered promiscuous mode [ 969.863988][T18120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.886371][T18120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.963500][T18120] team0: Port device team_slave_0 added [ 969.973330][T18120] team0: Port device team_slave_1 added [ 970.103111][T18120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.103132][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.103152][T18120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.103972][T18120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.103983][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.103997][T18120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.321101][T18120] hsr_slave_0: entered promiscuous mode [ 970.333379][T18120] hsr_slave_1: entered promiscuous mode [ 970.333708][T18120] debugfs: 'hsr0' already exists in 'hsr' [ 970.333723][T18120] Cannot create hsr debugfs directory [ 971.242268][T18202] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 971.242307][T18202] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 971.242381][ T5608] Bluetooth: hci7: command tx timeout [ 971.351683][ T31] audit: type=1800 audit(1788335516.291:2884): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 971.469829][ T31] audit: type=1400 audit(1788335516.411:2885): avc: denied { write } for pid=18182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.267555][ T5608] Bluetooth: hci7: command tx timeout [ 973.339533][T18214] zonefs (loop4) ERROR: Not a zoned block device [ 973.663040][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 973.663064][ T31] audit: type=1800 audit(1788335518.511:2888): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 974.724868][ T31] audit: type=1400 audit(1788335519.662:2889): avc: denied { write } for pid=18226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.974880][ T31] audit: type=1400 audit(1788335519.912:2890): avc: denied { write } for pid=18255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.270749][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 975.346812][ T5608] Bluetooth: hci7: command tx timeout [ 975.490500][ T31] audit: type=1800 audit(1788335520.432:2891): pid=18120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24518 res=0 errno=0 [ 975.544048][ T31] audit: type=1800 audit(1788335520.472:2892): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=281985 res=0 errno=0 [ 975.777360][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 975.830545][ T31] audit: type=1400 audit(1788335520.772:2893): avc: denied { write } for pid=18261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.450767][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 976.460895][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.460924][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 976.460943][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 976.460958][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.460980][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.521997][ T31] audit: type=1800 audit(1788335521.472:2894): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282082 res=0 errno=0 [ 976.556591][ T31] audit: type=1800 audit(1788335521.492:2895): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=282111 res=0 errno=0 [ 976.556630][ T31] audit: type=1800 audit(1788335521.492:2896): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=282089 res=0 errno=0 [ 976.604792][ T31] audit: type=1800 audit(1788335521.492:2897): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=282090 res=0 errno=0 [ 976.895529][T18120] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 976.910524][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.920512][T18120] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 976.942098][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.993567][T18120] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 977.011015][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.019694][T18120] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 977.031774][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.065485][T18292] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 977.244272][T18120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.279804][T18120] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.304566][ T1350] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.304623][ T1350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.333610][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.333662][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.662252][T18324] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2811'. [ 977.848942][T18324] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2811'. [ 978.470576][T18120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.739268][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 978.739292][ T31] audit: type=1400 audit(1788335523.682:2906): avc: denied { write } for pid=18338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.925903][ T31] audit: type=1400 audit(1788335523.862:2907): avc: denied { write } for pid=18373 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.005678][T18120] veth0_vlan: entered promiscuous mode [ 979.019280][T16231] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 979.038211][T18120] veth1_vlan: entered promiscuous mode [ 979.085625][T18120] veth0_macvtap: entered promiscuous mode [ 979.104397][T18120] veth1_macvtap: entered promiscuous mode [ 979.114747][ T31] audit: type=1400 audit(1788335524.062:2908): avc: denied { bind } for pid=18377 comm="syz.1.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 979.150650][ T31] audit: type=1400 audit(1788335524.092:2909): avc: denied { ioctl } for pid=18377 comm="syz.1.2823" path="socket:[66780]" dev="sockfs" ino=66780 ioctlcmd=0xae66 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 979.183828][T18120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.198544][T16231] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 979.210022][T16231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 979.210047][T16231] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 979.210073][T16231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.249538][T18120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.259897][ T31] audit: type=1800 audit(1788335524.202:2910): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282539 res=0 errno=0 [ 979.260758][T18366] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 979.297876][ T31] audit: type=1800 audit(1788335524.242:2911): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=282568 res=0 errno=0 [ 979.321229][ T31] audit: type=1800 audit(1788335524.272:2912): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=282546 res=0 errno=0 [ 979.343796][T16231] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 979.364724][ T31] audit: type=1800 audit(1788335524.302:2913): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=282547 res=0 errno=0 [ 979.364759][ T31] audit: type=1800 audit(1788335524.302:2914): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=282548 res=0 errno=0 [ 979.431053][ T31] audit: type=1800 audit(1788335524.372:2915): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=282588 res=0 errno=0 [ 979.466510][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.480718][ T1350] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.480895][ T1350] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.480941][ T1350] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.719211][T16231] usb 5-1: USB disconnect, device number 32 [ 980.517966][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.517988][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.635122][ T9] usb 1-1: USB disconnect, device number 70 [ 980.690366][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.690388][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.803017][T18394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 981.640844][T18418] 9p: Bad value for 'rfdno' [ 983.844497][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 983.844521][ T31] audit: type=1400 audit(1788335528.783:2940): avc: denied { write } for pid=18446 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.002874][ T31] audit: type=1800 audit(1788335528.943:2941): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 984.162481][ T31] audit: type=1800 audit(1788335529.103:2942): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 984.980905][ T31] audit: type=1800 audit(1788335529.923:2943): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35319 res=0 errno=0 [ 985.248990][T18472] 9p: Bad value for 'rfdno' [ 985.651641][ T31] audit: type=1800 audit(1788335530.583:2944): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 985.702870][ T31] audit: type=1800 audit(1788335530.643:2945): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36085 res=0 errno=0 [ 985.856198][ T31] audit: type=1400 audit(1788335530.803:2946): avc: denied { write } for pid=18455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.063936][T18486] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 986.112307][ T31] audit: type=1800 audit(1788335531.053:2947): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 986.170790][ T31] audit: type=1400 audit(1788335531.113:2948): avc: denied { write } for pid=18490 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.297382][T18486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 986.471216][ T31] audit: type=1800 audit(1788335531.413:2949): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 986.555574][T18495] bond2: (slave geneve3): making interface the new active one [ 986.600645][T18495] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 986.825746][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 986.975381][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 986.980795][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 986.993440][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.993464][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.993489][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.027923][ T9] usb 5-1: config 0 descriptor?? [ 987.193372][T18530] input: syz0 as /devices/virtual/input/input58 [ 987.276830][T18530] 9p: Unknown Cache mode or invalid value 7777777777777 [ 987.354533][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.561670][ T9] savu 0003:1E7D:2D5A.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 987.800814][ T9] usb 5-1: USB disconnect, device number 33 [ 987.811363][T18540] fido_id[18540]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1E7D:2D5A.0029/report_descriptor': No such device [ 989.521504][T18556] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.523216][T18556] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.578753][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 989.578776][ T31] audit: type=1800 audit(1788335534.513:2978): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 989.853891][ T31] audit: type=1800 audit(1788335534.793:2979): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 990.299957][ T31] audit: type=1800 audit(1788335535.243:2980): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31592 res=0 errno=0 [ 990.334090][ T31] audit: type=1800 audit(1788335535.273:2981): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31615 res=0 errno=0 [ 990.394657][ T31] audit: type=1800 audit(1788335535.333:2982): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 990.430477][ T31] audit: type=1400 audit(1788335535.373:2983): avc: denied { write } for pid=18541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.045143][T16231] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 991.537951][T16231] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 991.552520][T16231] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 991.552545][T16231] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.574367][T16231] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 991.574389][T16231] usb 10-1: Manufacturer: syz [ 991.592482][ T31] audit: type=1800 audit(1788335536.534:2984): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 991.614190][T16231] usb 10-1: config 0 descriptor?? [ 991.633931][ T31] audit: type=1800 audit(1788335536.574:2985): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284000 res=0 errno=0 [ 991.633964][ T31] audit: type=1800 audit(1788335536.574:2986): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=284030 res=0 errno=0 [ 991.701818][ T31] audit: type=1800 audit(1788335536.644:2987): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=284007 res=0 errno=0 [ 991.831403][T16231] rc_core: IR keymap rc-hauppauge not found [ 991.831424][T16231] Registered IR keymap rc-empty [ 991.831911][T16231] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 991.885767][T16231] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input59 [ 991.912865][T18582] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2865'. [ 992.327391][ C0] igorplugusb 10-1:0.0: receive overflow invalid: 166 [ 992.549631][T16231] usb 10-1: USB disconnect, device number 8 [ 994.589523][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 994.589546][ T31] audit: type=1800 audit(1788335539.534:3013): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 994.673948][ T31] audit: type=1800 audit(1788335539.614:3014): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284160 res=0 errno=0 [ 994.899376][ T31] audit: type=1800 audit(1788335539.834:3015): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36085 res=0 errno=0 [ 995.602004][ T31] audit: type=1400 audit(1788335540.544:3016): avc: denied { write } for pid=18626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.829245][ T31] audit: type=1400 audit(1788335540.774:3017): avc: denied { write } for pid=18644 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.900338][ T31] audit: type=1800 audit(1788335540.844:3018): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 995.953691][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 995.981248][T18648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 996.006235][T18648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2876'. [ 996.039967][T18648] bond4: entered promiscuous mode [ 996.039987][T18648] bond4: entered allmulticast mode [ 996.343130][ T31] audit: type=1800 audit(1788335541.284:3019): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 996.535858][ T31] audit: type=1800 audit(1788335541.484:3020): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 996.750949][ T31] audit: type=1800 audit(1788335541.694:3021): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 996.793356][ T31] audit: type=1400 audit(1788335541.734:3022): avc: denied { write } for pid=18655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.874335][T10241] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 997.628400][T10241] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 997.641117][T10241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.650821][T10241] usb 5-1: config 0 descriptor?? [ 997.663735][T10241] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 997.735172][ T5712] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 997.894524][ T5712] usb 10-1: Using ep0 maxpacket: 8 [ 997.900006][ T5712] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 997.910334][ T5712] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.910368][ T5712] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 997.910389][ T5712] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.952535][ T5712] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 997.952557][ T5712] usb 10-1: Product: syz [ 997.952572][ T5712] usb 10-1: Manufacturer: syz [ 997.952582][ T5712] usb 10-1: SerialNumber: syz [ 997.981094][ T5712] usb 10-1: config 0 descriptor?? [ 998.104720][T18671] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2880'. [ 998.116528][ T5712] rc_core: IR keymap rc-imon-rsc not found [ 998.116560][ T5712] Registered IR keymap rc-empty [ 998.117319][ T5712] rc rc0: iMON Station as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 998.142679][T18671] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2880'. [ 998.156000][ T5712] input: iMON Station as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input60 [ 998.183437][T10241] gspca_cpia1: usb_control_msg 03, error -32 [ 998.194290][T10241] gspca_cpia1: usb_control_msg 03, error -71 [ 998.203659][T10241] gspca_cpia1: usb_control_msg 01, error -71 [ 998.203682][T10241] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 998.233275][T10241] usb 5-1: USB disconnect, device number 34 [ 998.381993][T18681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.382272][T18681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.527104][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2882'. [ 998.580889][T10241] usb 10-1: USB disconnect, device number 9 [ 999.884248][T18704] dummy0: entered promiscuous mode [ 999.884269][T18704] dummy0: entered allmulticast mode [ 999.947860][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 999.947884][ T31] audit: type=1800 audit(1788335544.895:3054): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 1000.023293][ T31] audit: type=1400 audit(1788335544.965:3055): avc: denied { write } for pid=18710 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.233041][ T31] audit: type=1800 audit(1788335545.175:3056): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1000.597398][T18726] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.597427][T18726] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.629802][ T31] audit: type=1800 audit(1788335545.575:3057): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=225023 res=0 errno=0 [ 1000.652878][T18724] FAULT_INJECTION: forcing a failure. [ 1000.652878][T18724] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.667802][T18724] CPU: 0 UID: 0 PID: 18724 Comm: syz.4.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.667821][T18724] Tainted: [L]=SOFTLOCKUP [ 1000.667825][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1000.667832][T18724] Call Trace: [ 1000.667837][T18724] [ 1000.667841][T18724] dump_stack_lvl+0x100/0x190 [ 1000.667862][T18724] should_fail_ex.cold+0x5/0xa [ 1000.667877][T18724] should_failslab+0xc2/0x120 [ 1000.667892][T18724] __kmalloc_noprof+0xfc/0x840 [ 1000.667903][T18724] ? tomoyo_encode2+0xfb/0x3c0 [ 1000.667917][T18724] tomoyo_encode2+0xfb/0x3c0 [ 1000.667930][T18724] tomoyo_encode+0x29/0x50 [ 1000.667940][T18724] tomoyo_realpath_from_path+0x18c/0x690 [ 1000.667954][T18724] tomoyo_check_open_permission+0x2af/0x3c0 [ 1000.667971][T18724] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1000.667992][T18724] ? hook_file_open+0x248/0x8e0 [ 1000.668017][T18724] tomoyo_file_open+0x6b/0x90 [ 1000.668030][T18724] security_file_open+0xb5/0x1e0 [ 1000.668043][T18724] do_dentry_open+0x588/0x14d0 [ 1000.668058][T18724] vfs_open+0x82/0x3f0 [ 1000.668073][T18724] path_openat+0x19fa/0x2440 [ 1000.668088][T18724] ? __pfx_path_openat+0x10/0x10 [ 1000.668100][T18724] ? __pfx___up_read+0x10/0x10 [ 1000.668113][T18724] ? do_user_addr_fault+0x7d7/0x12f0 [ 1000.668133][T18724] ? do_user_addr_fault+0x7d7/0x12f0 [ 1000.668150][T18724] do_file_open+0x20e/0x430 [ 1000.668163][T18724] ? __pfx_do_file_open+0x10/0x10 [ 1000.668176][T18724] ? lockdep_hardirqs_on+0x7d/0x110 [ 1000.668197][T18724] ? _raw_spin_unlock+0x28/0x50 [ 1000.668213][T18724] ? alloc_fd+0x471/0x7a0 [ 1000.668230][T18724] do_sys_openat2+0x10f/0x1e0 [ 1000.668244][T18724] ? __pfx_do_sys_openat2+0x10/0x10 [ 1000.668258][T18724] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1000.668274][T18724] __x64_sys_openat+0x12d/0x210 [ 1000.668292][T18724] ? __pfx___x64_sys_openat+0x10/0x10 [ 1000.668312][T18724] do_syscall_64+0x123/0x790 [ 1000.668325][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.668337][T18724] RIP: 0033:0x7f0adc15e98e [ 1000.668347][T18724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1000.668358][T18724] RSP: 002b:00007f0add0a09b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1000.668370][T18724] RAX: ffffffffffffffda RBX: 00007f0add0a16c0 RCX: 00007f0adc15e98e [ 1000.668377][T18724] RDX: 0000000000080001 RSI: 00007f0adc209070 RDI: ffffffffffffff9c [ 1000.668384][T18724] RBP: 00007f0adc209070 R08: 0000000000000000 R09: 0000000000000000 [ 1000.668391][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1000.668398][T18724] R13: 00007f0add0a0a90 R14: 00007f0adc425fa0 R15: 00007ffcf0052e08 [ 1000.668412][T18724] [ 1000.706693][ T5712] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1000.719180][ T31] audit: type=1800 audit(1788335545.665:3058): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=225028 res=0 errno=0 [ 1000.729151][T18724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1000.834608][ T31] audit: type=1800 audit(1788335545.785:3059): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=225032 res=0 errno=0 [ 1000.894412][ T5712] usb 10-1: Using ep0 maxpacket: 32 [ 1000.900980][ T31] audit: type=1800 audit(1788335545.845:3060): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=225031 res=0 errno=0 [ 1000.941441][ T5712] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1000.941694][ T31] audit: type=1800 audit(1788335545.895:3061): pid=18724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2892" name="attach" dev="sysfs" ino=32888 res=0 errno=0 [ 1000.950579][T18724] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1000.950592][T18724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1000.950640][T18724] vhci_hcd vhci_hcd.0: Device attached [ 1000.961205][T18729] vhci_hcd: connection closed [ 1000.991263][ T31] audit: type=1800 audit(1788335545.945:3062): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=225034 res=0 errno=0 [ 1000.991301][ T59] vhci_hcd vhci_hcd.4: stop threads [ 1000.991319][ T59] vhci_hcd vhci_hcd.4: release socket [ 1000.991329][ T59] vhci_hcd vhci_hcd.4: disconnect device [ 1001.262276][ T5712] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.262300][ T5712] usb 10-1: Product: syz [ 1001.262316][ T5712] usb 10-1: Manufacturer: syz [ 1001.262326][ T5712] usb 10-1: SerialNumber: syz [ 1001.287510][ T5712] usb 10-1: config 0 descriptor?? [ 1001.302051][ T5712] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1001.313391][ T31] audit: type=1800 audit(1788335546.255:3063): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284888 res=0 errno=0 [ 1002.186657][ T5712] gspca_topro: reg_w err -110 [ 1002.214748][ T5712] gspca_topro: Sensor soi763a [ 1002.423246][ T9] usb 10-1: USB disconnect, device number 10 [ 1004.293767][T18764] 9p: Bad value for 'rfdno' [ 1005.100492][T18781] sctp: [Deprecated]: syz.1.2904 (pid 18781) Use of int in max_burst socket option. [ 1005.100492][T18781] Use struct sctp_assoc_value instead [ 1005.295381][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 1005.295405][ T31] audit: type=1800 audit(1788335550.245:3081): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 1005.383971][ T31] audit: type=1400 audit(1788335550.335:3082): avc: denied { write } for pid=18768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.540627][ T31] audit: type=1800 audit(1788335550.485:3083): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1005.631389][ T31] audit: type=1800 audit(1788335550.575:3084): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 1005.670179][ T31] audit: type=1400 audit(1788335550.615:3085): avc: denied { write } for pid=18796 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.403505][ T31] audit: type=1800 audit(1788335551.345:3086): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35319 res=0 errno=0 [ 1006.550707][ T5262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1006.763173][ T5788] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1006.843910][ T31] audit: type=1800 audit(1788335551.795:3087): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36085 res=0 errno=0 [ 1006.874525][ T31] audit: type=1800 audit(1788335551.815:3088): pid=18805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.2909" name="/newroot/357" dev="tmpfs" ino=2016 res=0 errno=0 [ 1006.913485][ T5788] usb 10-1: Using ep0 maxpacket: 16 [ 1007.012332][ T5788] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1007.012366][ T5788] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1007.031470][ T5788] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1007.031490][ T5788] usb 10-1: can't read configurations, error -71 [ 1007.178911][ T31] audit: type=1400 audit(1788335552.125:3089): avc: denied { recv } for pid=18498 comm="syz.0.2837" saddr=10.128.0.169 src=30006 daddr=10.128.1.182 dest=56402 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1007.971857][ T31] audit: type=1800 audit(1788335552.915:3090): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285152 res=0 errno=0 [ 1008.006942][ T4917] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1008.037598][ T4917] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1008.045413][ T4917] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1008.056923][ T4917] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1008.065960][ T4917] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1008.924075][ T5712] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1008.965855][T18824] lo speed is unknown, defaulting to 1000 [ 1009.092822][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 1009.147816][ T5712] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1009.162867][ T5712] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.162890][ T5712] usb 5-1: config 0 has no interface number 0 [ 1009.163068][ T5712] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1009.163083][ T5712] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1009.203556][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.203578][ T5712] usb 5-1: Product: syz [ 1009.203594][ T5712] usb 5-1: Manufacturer: syz [ 1009.203604][ T5712] usb 5-1: SerialNumber: syz [ 1009.226710][ T5712] usb 5-1: config 0 descriptor?? [ 1009.455432][ T5712] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1009.471353][ T5712] cx231xx 5-1:0.1: Not found matching IAD interface [ 1009.488762][ T5712] usb 5-1: USB disconnect, device number 35 [ 1009.566633][T18824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.574298][T18824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.581565][T18824] bridge_slave_0: entered allmulticast mode [ 1009.582300][T18824] bridge_slave_0: entered promiscuous mode [ 1009.600610][T18824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.610343][T18824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.618173][T18824] bridge_slave_1: entered allmulticast mode [ 1009.627162][T18824] bridge_slave_1: entered promiscuous mode [ 1009.690999][T18824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.705107][T18824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.750297][T18824] team0: Port device team_slave_0 added [ 1009.760402][T18824] team0: Port device team_slave_1 added [ 1009.809119][T18824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.809138][T18824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.809158][T18824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.809932][T18824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.809942][T18824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.809957][T18824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.968522][T18874] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2924'. [ 1009.981170][T18824] hsr_slave_0: entered promiscuous mode [ 1009.992448][T18824] hsr_slave_1: entered promiscuous mode [ 1009.999236][T18824] debugfs: 'hsr0' already exists in 'hsr' [ 1010.007131][T18824] Cannot create hsr debugfs directory [ 1010.036639][T18874] macvlan2: entered promiscuous mode [ 1010.036662][T18874] macvlan2: entered allmulticast mode [ 1010.143377][ T5608] Bluetooth: hci8: command tx timeout [ 1010.279866][T18824] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.445518][ T5712] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1010.628660][ T5788] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1010.637769][T18824] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.662339][T18883] 9p: Bad value for 'rfdno' [ 1010.700166][T18824] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.710858][ T5712] usb 10-1: Using ep0 maxpacket: 32 [ 1010.717289][ T5712] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1010.727537][ T5712] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1010.727559][ T5712] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1010.752776][ T5712] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1010.752797][ T5712] usb 10-1: Product: syz [ 1010.752812][ T5712] usb 10-1: Manufacturer: syz [ 1010.752822][ T5712] usb 10-1: SerialNumber: syz [ 1010.776902][ T5712] usb 10-1: config 0 descriptor?? [ 1010.783059][ T5788] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 1010.783909][ T5788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1010.783927][ T5788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1010.795353][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1010.795367][ T5788] usb 5-1: Product: syz [ 1010.795375][ T5788] usb 5-1: Manufacturer: syz [ 1010.821095][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 1010.821107][ T31] audit: type=1800 audit(1788335555.776:3110): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291146 res=0 errno=0 [ 1010.878410][ T31] audit: type=1800 audit(1788335555.826:3111): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=291178 res=0 errno=0 [ 1010.903375][ T31] audit: type=1800 audit(1788335555.856:3112): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291153 res=0 errno=0 [ 1010.926859][ T31] audit: type=1800 audit(1788335555.876:3113): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291198 res=0 errno=0 [ 1010.950767][ T31] audit: type=1800 audit(1788335555.896:3114): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291154 res=0 errno=0 [ 1010.980314][ T31] audit: type=1800 audit(1788335555.926:3115): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=291229 res=0 errno=0 [ 1011.142726][ T31] audit: type=1800 audit(1788335556.086:3116): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291205 res=0 errno=0 [ 1011.142770][ T31] audit: type=1800 audit(1788335556.086:3117): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291206 res=0 errno=0 [ 1011.984061][ T31] audit: type=1800 audit(1788335556.936:3118): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=291175 res=0 errno=0 [ 1011.984097][ T31] audit: type=1800 audit(1788335556.936:3119): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=291176 res=0 errno=0 [ 1012.079580][ T9] usb 10-1: USB disconnect, device number 13 [ 1012.714480][ T5608] Bluetooth: hci8: command tx timeout [ 1012.848947][T18824] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.292827][T16231] usb 5-1: USB disconnect, device number 36 [ 1013.595584][T18824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1013.614753][T18824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1013.624001][T18824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1013.648703][T18824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1013.656922][T18824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1013.675016][T18824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1013.684587][T18824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1013.695951][T18824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.867200][T18824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.894162][T18824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.907032][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.907081][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.932140][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.932191][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.105230][ T5608] Bluetooth: hci8: command tx timeout [ 1015.561492][T18960] netlink: 'syz.9.2941': attribute type 10 has an invalid length. [ 1015.596799][T18960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1015.693478][T18960] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1015.746111][T18824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.854053][T16231] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1016.016691][T16231] usb 10-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 1016.027193][T16231] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1016.027222][T16231] usb 10-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1016.027239][T16231] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1016.061257][T16231] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.061280][T16231] usb 10-1: Product: syz [ 1016.061295][T16231] usb 10-1: Manufacturer: 颧ꅏ⾸ꀗꚯ恂餁콏ﱭ凚'싙⭀የ始斒覓馃ᚹᨌ㣹磗䔷⠫囸 [ 1016.061309][T16231] usb 10-1: SerialNumber: syz [ 1016.094446][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1016.094467][ T31] audit: type=1800 audit(1788335561.046:3150): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291898 res=0 errno=0 [ 1016.136667][ T31] audit: type=1800 audit(1788335561.086:3151): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=291930 res=0 errno=0 [ 1016.159568][ T31] audit: type=1800 audit(1788335561.106:3152): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291905 res=0 errno=0 [ 1016.182438][ T31] audit: type=1800 audit(1788335561.136:3153): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291906 res=0 errno=0 [ 1016.211380][T18967] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1016.211445][T18967] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1016.487773][T18824] veth0_vlan: entered promiscuous mode [ 1016.513390][T18824] veth1_vlan: entered promiscuous mode [ 1016.565985][T18824] veth0_macvtap: entered promiscuous mode [ 1016.578507][T18824] veth1_macvtap: entered promiscuous mode [ 1016.609596][T18824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.625516][T18824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.674314][T10469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.684782][T10468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.697583][T10468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.724192][ T5852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.760897][ T31] audit: type=1800 audit(1788335561.706:3154): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291977 res=0 errno=0 [ 1016.786551][T16231] usbhid 10-1:1.0: can't add hid device: -71 [ 1016.786613][T16231] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1016.804807][T16231] usb 10-1: USB disconnect, device number 14 [ 1016.846352][ T31] audit: type=1800 audit(1788335561.796:3155): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=291927 res=0 errno=0 [ 1016.846386][ T31] audit: type=1800 audit(1788335561.796:3156): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=291928 res=0 errno=0 [ 1016.846413][ T31] audit: type=1800 audit(1788335561.796:3157): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=291929 res=0 errno=0 [ 1017.001420][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.001442][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.020350][ T31] audit: type=1800 audit(1788335561.966:3158): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292137 res=0 errno=0 [ 1017.094379][T10469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.094401][T10469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.181895][ T5608] Bluetooth: hci8: command tx timeout [ 1017.203522][ T31] audit: type=1800 audit(1788335562.157:3159): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 1017.356794][T18993] 9p: Bad value for 'rfdno' [ 1017.615566][T19006] macsec1: entered promiscuous mode [ 1018.211859][T16231] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1018.337321][T19030] tc_dump_action: action bad kind [ 1018.366652][T16231] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1018.384206][T16231] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.384237][T16231] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1018.384256][T16231] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1018.384280][T16231] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.384302][T16231] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.503399][T19032] 9p: Bad value for 'rfdno' [ 1018.737799][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1019.883929][T16231] gud 10-1:1.0: DVI-D-1: Failed to add properties (ret=-71) [ 1019.883971][T16231] gud 10-1:1.0: Failed to get connectors (error=-71) [ 1019.883992][T16231] gud 10-1:1.0: probe with driver gud failed with error -71 [ 1019.926588][T16231] usb 10-1: USB disconnect, device number 15 [ 1020.062046][T10241] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1020.224538][T10241] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=51.9a [ 1020.235114][T10241] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1020.235137][T10241] usb 5-1: config 0 has no interface number 0 [ 1020.235163][T10241] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1020.260833][T10241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.260855][T10241] usb 5-1: Product: syz [ 1020.260870][T10241] usb 5-1: Manufacturer: syz [ 1020.260881][T10241] usb 5-1: SerialNumber: syz [ 1020.284603][T10241] usb 5-1: config 0 descriptor?? [ 1021.497305][ T31] kauditd_printk_skb: 414 callbacks suppressed [ 1021.497329][ T31] audit: type=1800 audit(1788335566.447:3574): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 1021.598831][ T31] audit: type=1800 audit(1788335566.547:3575): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 1021.652960][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.671281][T19074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.680098][ T31] audit: type=1800 audit(1788335566.627:3576): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292572 res=0 errno=0 [ 1021.755008][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.782632][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.792307][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.801648][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.810811][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.823361][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.836045][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.845796][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1021.997342][T19081] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1022.173374][ T31] audit: type=1804 audit(1788335567.127:3577): pid=19088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.2974" name="kvm" dev="tmpfs" ino=921 res=1 errno=0 [ 1022.213902][ T31] audit: type=1800 audit(1788335567.167:3578): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 1022.267026][ T31] audit: type=1400 audit(1788335567.217:3579): avc: denied { map } for pid=19085 comm="syz.1.2972" path="socket:[70316]" dev="sockfs" ino=70316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1022.267078][ T31] audit: type=1400 audit(1788335567.217:3580): avc: denied { read } for pid=19085 comm="syz.1.2972" path="socket:[70316]" dev="sockfs" ino=70316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1022.561076][ T31] audit: type=1800 audit(1788335567.507:3581): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 1022.617328][ T31] audit: type=1800 audit(1788335567.567:3582): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31392 res=0 errno=0 [ 1022.647280][ T31] audit: type=1800 audit(1788335567.597:3583): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31415 res=0 errno=0 [ 1022.787917][T19099] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1022.787960][T19099] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1022.787990][T19099] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1022.792401][T19099] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1022.903441][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1023.062127][ T9] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1023.071978][ T9] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1023.072014][ T9] usb 6-1: config 0 has no interface number 0 [ 1023.072040][ T9] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1023.072057][ T9] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1023.117359][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.117386][ T9] usb 6-1: Product: syz [ 1023.117403][ T9] usb 6-1: Manufacturer: syz [ 1023.117413][ T9] usb 6-1: SerialNumber: syz [ 1023.141996][T19108] FAULT_INJECTION: forcing a failure. [ 1023.141996][T19108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.155542][ T9] usb 6-1: config 0 descriptor?? [ 1023.155974][T19097] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1023.173816][ T9] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1023.193640][T19108] CPU: 0 UID: 0 PID: 19108 Comm: syz.9.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.193659][T19108] Tainted: [L]=SOFTLOCKUP [ 1023.193664][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1023.193670][T19108] Call Trace: [ 1023.193676][T19108] [ 1023.193681][T19108] dump_stack_lvl+0x100/0x190 [ 1023.193701][T19108] should_fail_ex.cold+0x5/0xa [ 1023.193724][T19108] _copy_to_user+0x32/0xd0 [ 1023.193742][T19108] simple_read_from_buffer+0xcb/0x170 [ 1023.193756][T19108] proc_fail_nth_read+0x1af/0x230 [ 1023.193770][T19108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.193784][T19108] ? rw_verify_area+0xce/0x6d0 [ 1023.193799][T19108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.193812][T19108] vfs_read+0x1e4/0xb40 [ 1023.193830][T19108] ? lock_acquire+0x1d1/0x380 [ 1023.193841][T19108] ? __fget_files+0x34/0x3d0 [ 1023.193854][T19108] ? __pfx_vfs_read+0x10/0x10 [ 1023.193869][T19108] ? find_held_lock+0x2b/0x80 [ 1023.193885][T19108] ? __fget_files+0x215/0x3d0 [ 1023.193900][T19108] ? __fget_files+0x21f/0x3d0 [ 1023.193916][T19108] ksys_read+0x12a/0x250 [ 1023.193926][T19108] ? __pfx_ksys_read+0x10/0x10 [ 1023.193947][T19108] do_syscall_64+0x123/0x790 [ 1023.193962][T19108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.193973][T19108] RIP: 0033:0x7f0caf15e98e [ 1023.193984][T19108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1023.193995][T19108] RSP: 002b:00007f0caffd0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1023.194007][T19108] RAX: ffffffffffffffda RBX: 00007f0caffd16c0 RCX: 00007f0caf15e98e [ 1023.194014][T19108] RDX: 000000000000000f RSI: 00007f0caffd10a0 RDI: 0000000000000004 [ 1023.194021][T19108] RBP: 00007f0caffd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.194027][T19108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1023.194034][T19108] R13: 00007f0caf426128 R14: 00007f0caf426090 R15: 00007ffdc6144348 [ 1023.194048][T19108] [ 1023.265375][ T9] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1023.875505][T19113] __nla_validate_parse: 24 callbacks suppressed [ 1023.875536][T19113] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2982'. [ 1024.025829][ T9] usb 6-1: USB disconnect, device number 30 [ 1024.046061][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1024.058546][ T9] cyberjack 6-1:0.69: device disconnected [ 1024.077851][T10241] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1024.087697][T10241] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1024.110087][T10241] usb 5-1: USB disconnect, device number 37 [ 1025.405734][T19132] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1025.746129][T19135] WARNING! power/level is deprecated; use power/control instead [ 1025.843291][T19148] 9pnet: p9_errstr2errno: server reported unknown error [ 1026.001915][T10241] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1026.153391][T10241] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 1026.163420][T10241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1026.163444][T10241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 115, changing to 7 [ 1026.163465][T10241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 42631, setting to 1024 [ 1026.199058][T10241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.199079][T10241] usb 6-1: Product: syz [ 1026.199095][T10241] usb 6-1: Manufacturer: syz [ 1026.199106][T10241] usb 6-1: SerialNumber: syz [ 1026.222574][T10241] usb 6-1: config 0 descriptor?? [ 1026.229461][T10241] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1026.243916][T10241] usb 6-1: Detected SIO [ 1026.248416][T10241] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 1026.265362][T10241] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1026.449639][T19135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.464040][T19135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.479629][T16231] usb 6-1: USB disconnect, device number 31 [ 1026.491729][T16231] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1026.502452][T16231] ftdi_sio 6-1:0.0: device disconnected [ 1026.567644][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 1026.567667][ T31] audit: type=1800 audit(1788335571.518:3636): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1026.646177][T19164] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1026.702971][ T31] audit: type=1800 audit(1788335571.648:3637): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1026.984839][ T31] audit: type=1800 audit(1788335571.938:3638): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 1027.066416][ T31] audit: type=1800 audit(1788335572.018:3639): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293379 res=0 errno=0 [ 1027.180345][T19169] sctp: [Deprecated]: syz.9.2999 (pid 19169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.180345][T19169] Use struct sctp_sack_info instead [ 1027.204120][ T31] audit: type=1800 audit(1788335572.158:3640): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 1027.245736][T19169] sctp: [Deprecated]: syz.9.2999 (pid 19169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.245736][T19169] Use struct sctp_sack_info instead [ 1027.318193][ T31] audit: type=1800 audit(1788335572.268:3641): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1027.509628][ T31] audit: type=1800 audit(1788335572.458:3642): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1028.321705][ T5608] Bluetooth: hci6: command 0x0406 tx timeout [ 1028.380826][T10241] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1029.126691][ T31] audit: type=1800 audit(1788335574.078:3643): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35319 res=0 errno=0 [ 1029.236175][T10241] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice= 0.02 [ 1029.246468][T10241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.246492][T10241] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 1029.273584][T10241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.273621][T10241] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 1029.452169][T10241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.452208][T10241] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 1029.452237][T10241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.477492][T19192] 9p: Bad value for 'rfdno' [ 1029.495846][ T31] audit: type=1800 audit(1788335574.448:3644): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293406 res=0 errno=0 [ 1029.518555][T10241] usb 6-1: config 0 descriptor?? [ 1029.533518][T10241] rndis_host 6-1:0.0: rndis: master #0/ffff888023ab3000 slave #1/0000000000000000 [ 1029.553040][ T31] audit: type=1800 audit(1788335574.508:3645): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=293435 res=0 errno=0 [ 1029.728676][T16230] usb 6-1: USB disconnect, device number 32 [ 1030.164024][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1030.167573][T19196] ovs-system: entered promiscuous mode [ 1030.434277][T19200] FAULT_INJECTION: forcing a failure. [ 1030.434277][T19200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.434307][T19200] CPU: 0 UID: 0 PID: 19200 Comm: syz.5.3009 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.434324][T19200] Tainted: [L]=SOFTLOCKUP [ 1030.434328][T19200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1030.434335][T19200] Call Trace: [ 1030.434340][T19200] [ 1030.434345][T19200] dump_stack_lvl+0x100/0x190 [ 1030.434364][T19200] should_fail_ex.cold+0x5/0xa [ 1030.434380][T19200] _copy_from_user+0x2e/0xd0 [ 1030.434398][T19200] core_sys_select+0x472/0xbb0 [ 1030.434414][T19200] ? __pfx_core_sys_select+0x10/0x10 [ 1030.434426][T19200] ? __lock_acquire+0x4c5/0x1ec0 [ 1030.434451][T19200] ? __pfx_set_user_sigmask+0x10/0x10 [ 1030.434470][T19200] ? __pfx_do_futex+0x10/0x10 [ 1030.434486][T19200] do_pselect.constprop.0+0x238/0x270 [ 1030.434500][T19200] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1030.434513][T19200] ? __x64_sys_futex+0x358/0x4d0 [ 1030.434529][T19200] ? xfd_validate_state+0x129/0x190 [ 1030.434543][T19200] __x64_sys_pselect6+0x149/0x1c0 [ 1030.434558][T19200] do_syscall_64+0x123/0x790 [ 1030.434572][T19200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.434583][T19200] RIP: 0033:0x7f8f1179e159 [ 1030.434600][T19200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.434612][T19200] RSP: 002b:00007f8f0f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1030.434624][T19200] RAX: ffffffffffffffda RBX: 00007f8f11a25fa0 RCX: 00007f8f1179e159 [ 1030.434632][T19200] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1030.434639][T19200] RBP: 00007f8f11835024 R08: 0000200000000280 R09: 0000200000000300 [ 1030.434646][T19200] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1030.434653][T19200] R13: 00007f8f11a26038 R14: 00007f8f11a25fa0 R15: 00007ffe8b39c068 [ 1030.434667][T19200] [ 1031.166725][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3006'. [ 1031.737320][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 1031.737342][ T31] audit: type=1800 audit(1788335576.688:3657): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 1031.803864][ T31] audit: type=1800 audit(1788335576.758:3658): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 1032.568710][ T31] audit: type=1800 audit(1788335577.518:3659): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35319 res=0 errno=0 [ 1032.713655][ T31] audit: type=1800 audit(1788335577.668:3660): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 1032.790024][T10241] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1032.907432][ T31] audit: type=1800 audit(1788335577.858:3661): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36085 res=0 errno=0 [ 1032.951016][T10241] usb 6-1: Using ep0 maxpacket: 16 [ 1032.956515][T10241] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1032.966084][T10241] usb 6-1: config 0 has no interfaces? [ 1032.973204][T10241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.973225][T10241] usb 6-1: Product: syz [ 1032.973239][T10241] usb 6-1: Manufacturer: syz [ 1032.973250][T10241] usb 6-1: SerialNumber: syz [ 1033.000186][T10241] usb 6-1: config 0 descriptor?? [ 1033.012490][ T31] audit: type=1800 audit(1788335577.968:3662): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293647 res=0 errno=0 [ 1033.049228][ T31] audit: type=1800 audit(1788335577.998:3663): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=293679 res=0 errno=0 [ 1033.049261][ T31] audit: type=1800 audit(1788335577.998:3664): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=293654 res=0 errno=0 [ 1033.049288][ T31] audit: type=1800 audit(1788335577.998:3665): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=293655 res=0 errno=0 [ 1033.074825][ T31] audit: type=1800 audit(1788335578.028:3666): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=293676 res=0 errno=0 [ 1033.233382][T16230] usb 6-1: USB disconnect, device number 33 [ 1033.537650][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1033.681894][T19238] overlayfs: failed to resolve './file1/file0': -2 [ 1033.940882][T10241] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1034.092061][T10241] usb 10-1: Using ep0 maxpacket: 32 [ 1034.101836][T10241] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1034.101868][T10241] usb 10-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1034.119996][T10241] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1034.142686][T10241] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.142709][T10241] usb 10-1: Product: й [ 1034.142726][T10241] usb 10-1: Manufacturer: 阖罞녧濷猭꬇쇥勦牅⮾傤艼桗险䥽얢㍵ᔞᆳ࿴뾞ㆃ㘶쇼桮ד⁉ﬠ̌㷑ᕐ꫼닞㧌ꓧ襖睜鎃㎙䴦ᒲඕ资躊ꤜ㴉᧯ꖳꯋ퍘ᐥ즴댹毘䚞棹咿ꍓẌ∧ቐ躒ᔾᖇ䊬룇움㫛뉍岮鑝嘱辏ꀺ⯿驙᧬䒊 [ 1034.142746][T10241] usb 10-1: SerialNumber: ᠌ [ 1035.070247][T10241] usb 10-1: Fast Track Pro switching to config #2 [ 1035.107281][T10241] usb 10-1: USB disconnect, device number 16 [ 1035.731366][T16230] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1035.903226][T16230] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1036.136329][T16230] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1036.136355][T16230] usb 5-1: Product: syz [ 1036.136370][T16230] usb 5-1: Manufacturer: syz [ 1036.136381][T16230] usb 5-1: SerialNumber: syz [ 1036.308806][T16230] usb 5-1: config 0 descriptor?? [ 1036.776724][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 1036.776749][ T31] audit: type=1800 audit(1788335581.729:3696): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294113 res=0 errno=0 [ 1036.807694][T19276] 9pnet_fd: p9_fd_create_unix (19276): problem connecting socket: ./file0: -111 [ 1036.819779][T19275] lo speed is unknown, defaulting to 1000 [ 1036.828322][ T31] audit: type=1800 audit(1788335581.779:3697): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=294145 res=0 errno=0 [ 1036.854408][ T31] audit: type=1800 audit(1788335581.809:3698): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=294120 res=0 errno=0 [ 1036.891772][ T31] audit: type=1800 audit(1788335581.849:3699): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=294121 res=0 errno=0 [ 1036.921129][T19276] input: syz0 as /devices/virtual/input/input62 [ 1036.932000][ T31] audit: type=1800 audit(1788335581.889:3700): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294247 res=0 errno=0 [ 1036.956625][ T31] audit: type=1800 audit(1788335581.909:3701): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=294262 res=0 errno=0 [ 1036.985139][ T31] audit: type=1800 audit(1788335581.939:3702): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=294265 res=0 errno=0 [ 1037.008624][ T31] audit: type=1800 audit(1788335581.959:3703): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=294264 res=0 errno=0 [ 1037.035324][ T31] audit: type=1800 audit(1788335581.989:3704): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=294263 res=0 errno=0 [ 1037.060450][ T31] audit: type=1800 audit(1788335582.019:3705): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=294254 res=0 errno=0 [ 1037.133841][T16230] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1037.344226][T16230] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 1037.344273][T16230] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 1037.344352][T16230] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 1037.439805][T16230] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 1037.548628][T19273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.548844][T19273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.766803][T16230] usb 5-1: USB disconnect, device number 38 [ 1039.129610][T19302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7953 sclass=netlink_route_socket pid=19302 comm=syz.9.3045 [ 1039.468437][T19296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3041'. [ 1039.549806][T16230] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1039.703695][T16230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1039.703730][T16230] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1039.721634][T16230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.721657][T16230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1039.721686][T16230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1039.721702][T16230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25698, setting to 1024 [ 1039.773587][T16230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1039.773610][T16230] usb 5-1: Product: syz [ 1039.773626][T16230] usb 5-1: Manufacturer: syz [ 1039.795838][T19307] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1039.808717][T16230] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1039.817508][T16230] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 1039.893082][ T4917] block nbd9: Receive control failed (result -32) [ 1039.905228][T19302] block nbd9: shutting down sockets [ 1041.089253][T10241] usb 5-1: USB disconnect, device number 39 [ 1041.740734][ T32] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 1041.740761][ T32] Tainted: G L syzkaller #0 [ 1041.740775][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1041.740782][ T32] task:kworker/0:1 state:D stack:20872 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1041.740816][ T32] Workqueue: events_freezable mmc_rescan [ 1041.740840][ T32] Call Trace: [ 1041.740846][ T32] [ 1041.740854][ T32] __schedule+0x1259/0x6920 [ 1041.740872][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1041.740892][ T32] ? __pfx___schedule+0x10/0x10 [ 1041.740904][ T32] ? find_held_lock+0x2b/0x80 [ 1041.740922][ T32] ? schedule+0x225/0x2c0 [ 1041.740937][ T32] schedule+0xdd/0x2c0 [ 1041.740949][ T32] schedule_timeout+0x1b2/0x280 [ 1041.740967][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1041.740990][ T32] ? mark_held_locks+0x40/0x70 [ 1041.741005][ T32] __wait_for_common+0x2e7/0x4c0 [ 1041.741019][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1041.741039][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 1041.741054][ T32] ? led_trigger_event+0x60/0x270 [ 1041.741076][ T32] mmc_wait_for_req_done+0xcd/0x3d0 [ 1041.741096][ T32] mmc_wait_for_req+0x207/0x2c0 [ 1041.741112][ T32] mmc_wait_for_cmd+0x154/0x200 [ 1041.741128][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 1041.741152][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 1041.741169][ T32] ? rpm_resume+0x7eb/0x1320 [ 1041.741186][ T32] mmc_io_rw_direct_host+0x126/0x330 [ 1041.741203][ T32] ? __pfx_mmc_io_rw_direct_host+0x10/0x10 [ 1041.741223][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1041.741236][ T32] ? __pm_runtime_resume+0xc3/0x170 [ 1041.741250][ T32] ? __mmc_claim_host+0x2e2/0x5f0 [ 1041.741265][ T32] sdio_reset+0x92/0x240 [ 1041.741281][ T32] ? __pfx_sdio_reset+0x10/0x10 [ 1041.741296][ T32] ? mmc_sw_reset+0x40/0xd0 [ 1041.741310][ T32] ? __lock_acquire+0xe15/0x1ec0 [ 1041.741324][ T32] ? __pfx_default_wake_function+0x10/0x10 [ 1041.741341][ T32] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 1041.741355][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 1041.741371][ T32] mmc_rescan+0xba9/0x11c0 [ 1041.741393][ T32] process_one_work+0xac7/0x1b10 [ 1041.741418][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1041.741437][ T32] ? lock_acquire+0x1d1/0x380 [ 1041.741454][ T32] ? __pfx_mmc_rescan+0x10/0x10 [ 1041.741478][ T32] worker_thread+0x5ef/0xe50 [ 1041.741502][ T32] ? kthread+0x13a/0x450 [ 1041.741518][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1041.741536][ T32] kthread+0x373/0x450 [ 1041.741553][ T32] ? __pfx_kthread+0x10/0x10 [ 1041.741585][ T32] ret_from_fork+0x730/0xd60 [ 1041.741600][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1041.741616][ T32] ? __switch_to+0x800/0x10f0 [ 1041.741633][ T32] ? __pfx_kthread+0x10/0x10 [ 1041.741651][ T32] ret_from_fork_asm+0x1a/0x30 [ 1041.741672][ T32] [ 1041.741748][ T32] INFO: task kworker/0:9:5804 blocked for more than 143 seconds. [ 1041.741760][ T32] Tainted: G L syzkaller #0 [ 1041.741768][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1041.741774][ T32] task:kworker/0:9 state:D stack:21096 pid:5804 tgid:5804 ppid:2 task_flags:0x4288160 flags:0x00080000 [ 1041.741806][ T32] Workqueue: usb_hub_wq hub_event [ 1041.741822][ T32] Call Trace: [ 1041.741828][ T32] [ 1041.741836][ T32] __schedule+0x1259/0x6920 [ 1041.741849][ T32] ? lock_acquire+0x1d1/0x380 [ 1041.741866][ T32] ? mark_held_locks+0x40/0x70 [ 1041.741879][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1041.741898][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 1041.741914][ T32] ? __pfx___schedule+0x10/0x10 [ 1041.741926][ T32] ? find_held_lock+0x2b/0x80 [ 1041.741943][ T32] ? schedule+0x225/0x2c0 [ 1041.741958][ T32] schedule+0xdd/0x2c0 [ 1041.741971][ T32] schedule_timeout+0x1b2/0x280 [ 1041.741989][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1041.742012][ T32] ? mark_held_locks+0x40/0x70 [ 1041.742027][ T32] __wait_for_common+0x2e7/0x4c0 [ 1041.742041][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1041.742061][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 1041.742075][ T32] ? __flush_work+0x4ca/0xcb0 [ 1041.742094][ T32] ? find_held_lock+0x2b/0x80 [ 1041.742110][ T32] ? __flush_work+0x928/0xcb0 [ 1041.742129][ T32] ? __flush_work+0x928/0xcb0 [ 1041.742149][ T32] ? __flush_work+0x4ca/0xcb0 [ 1041.742168][ T32] __flush_work+0x7c7/0xcb0 [ 1041.742188][ T32] ? __timer_delete+0xd1/0x1b0 [ 1041.742208][ T32] ? __pfx___flush_work+0x10/0x10 [ 1041.742228][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 1041.778773][ T32] ? __pfx___might_resched+0x10/0x10 [ 1041.778791][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1041.778810][ T32] ? usb_hcd_flush_endpoint+0x359/0x400 [ 1041.778829][ T32] cancel_delayed_work_sync+0xd1/0xf0 [ 1041.778843][ T32] mmc_stop_host+0xe9/0x400 [ 1041.778860][ T32] mmc_remove_host+0x15/0x60 [ 1041.778877][ T32] vub300_disconnect+0x12d/0x170 [ 1041.778895][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 1041.788510][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1041.859718][ T32] device_remove+0x12a/0x180 [ 1041.859744][ T32] device_release_driver_internal+0x44e/0x620 [ 1041.859760][ T32] bus_remove_device+0x2bc/0x560 [ 1041.859778][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 1041.859794][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 1041.859814][ T32] device_del+0x376/0x9b0 [ 1041.859833][ T32] ? __pfx_device_del+0x10/0x10 [ 1041.859849][ T32] ? kobject_put+0xb9/0x640 [ 1041.859867][ T32] usb_disable_device+0x367/0x810 [ 1041.859886][ T32] usb_disconnect+0x2e2/0x9a0 [ 1041.859902][ T32] hub_event+0x1bb1/0x4420 [ 1041.859923][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1041.859938][ T32] ? __pfx_hub_event+0x10/0x10 [ 1041.859950][ T32] ? mark_lock+0xea0/0x1020 [ 1041.859963][ T32] ? lock_acquire+0x1d1/0x380 [ 1041.859974][ T32] ? process_one_work+0xa2c/0x1b10 [ 1041.859993][ T32] ? process_one_work+0x906/0x1b10 [ 1041.860009][ T32] ? process_one_work+0x906/0x1b10 [ 1041.860028][ T32] process_one_work+0xac7/0x1b10 [ 1041.860051][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1041.860069][ T32] ? lock_acquire+0x1d1/0x380 [ 1041.860084][ T32] ? __pfx_hub_event+0x10/0x10 [ 1041.860098][ T32] worker_thread+0x5ef/0xe50 [ 1041.860119][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1041.860137][ T32] ? kthread+0x13a/0x450 [ 1041.860152][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1041.860168][ T32] kthread+0x373/0x450 [ 1041.860183][ T32] ? __pfx_kthread+0x10/0x10 [ 1041.860199][ T32] ret_from_fork+0x730/0xd60 [ 1041.860213][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1041.860226][ T32] ? __switch_to+0x800/0x10f0 [ 1041.860242][ T32] ? __pfx_kthread+0x10/0x10 [ 1041.860258][ T32] ret_from_fork_asm+0x1a/0x30 [ 1041.860277][ T32] [ 1041.860317][ T32] INFO: task syz.8.2533:16672 blocked for more than 143 seconds. [ 1041.860327][ T32] Tainted: G L syzkaller #0 [ 1041.860334][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1041.860338][ T32] task:syz.8.2533 state:D stack:26216 pid:16672 tgid:16671 ppid:9663 task_flags:0x400140 flags:0x00080002 [ 1041.860370][ T32] Call Trace: [ 1041.860373][ T32] [ 1041.860380][ T32] __schedule+0x1259/0x6920 [ 1041.860391][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1041.860405][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1041.860421][ T32] ? lock_acquire+0x1d1/0x380 [ 1041.860433][ T32] ? __pfx___schedule+0x10/0x10 [ 1041.860443][ T32] ? find_held_lock+0x2b/0x80 [ 1041.860459][ T32] ? schedule+0x225/0x2c0 [ 1041.860476][ T32] schedule+0xdd/0x2c0 [ 1041.860487][ T32] schedule_preempt_disabled+0x13/0x30 [ 1041.860499][ T32] __mutex_lock+0xccb/0x1bd0 [ 1041.860512][ T32] ? usbdev_open+0x1b6/0x870 [ 1041.860527][ T32] ? klist_put+0xcb/0x1d0 [ 1041.860542][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1041.860555][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1041.860572][ T32] ? kobject_put+0xb9/0x640 [ 1041.860590][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 1041.860603][ T32] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1041.860620][ T32] ? usbdev_open+0x9d/0x870 [ 1041.860637][ T32] ? usbdev_open+0x1b6/0x870 [ 1041.860652][ T32] usbdev_open+0x1b6/0x870 [ 1041.860668][ T32] ? kobject_get_unless_zero+0x156/0x200 [ 1041.860683][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1041.886992][ T32] ? chrdev_open+0x10b/0x6a0 [ 1041.887011][ T32] ? chrdev_open+0x10b/0x6a0 [ 1041.887025][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1041.887041][ T32] chrdev_open+0x234/0x6a0 [ 1041.887055][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1041.887068][ T32] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1041.887088][ T32] do_dentry_open+0x6ab/0x14d0 [ 1041.887099][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1041.887115][ T32] vfs_open+0x82/0x3f0 [ 1041.887131][ T32] path_openat+0x19fa/0x2440 [ 1041.887146][ T32] ? __pfx_path_openat+0x10/0x10 [ 1041.887163][ T32] do_file_open+0x20e/0x430 [ 1041.887178][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1041.887201][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1041.887217][ T32] ? alloc_fd+0x471/0x7a0 [ 1041.887235][ T32] do_sys_openat2+0x10f/0x1e0 [ 1041.887249][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1041.887265][ T32] ? raw_ioctl+0x26f/0x2b80 [ 1041.887283][ T32] __x64_sys_openat+0x12d/0x210 [ 1041.887298][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 1041.887318][ T32] do_syscall_64+0x123/0x790 [ 1041.887332][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.887344][ T32] RIP: 0033:0x7f332035e98e [ 1041.887354][ T32] RSP: 002b:00007f331e5f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1041.887366][ T32] RAX: ffffffffffffffda RBX: 00007f331e5f66c0 RCX: 00007f332035e98e [ 1041.887373][ T32] RDX: 0000000000008401 RSI: 00007f331e5f5c00 RDI: ffffffffffffff9c [ 1041.887381][ T32] RBP: 00007f331e5f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1041.972946][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1041.972957][ T32] R13: 00007f3320626038 R14: 00007f3320625fa0 R15: 00007ffd7d085a68 [ 1041.972972][ T32] [ 1041.972982][ T32] INFO: task syz.6.2536:16681 blocked for more than 143 seconds. [ 1041.972992][ T32] Tainted: G L syzkaller #0 [ 1041.972999][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1041.973003][ T32] task:syz.6.2536 state:D stack:28728 pid:16681 tgid:16680 ppid:7957 task_flags:0x400140 flags:0x00080002 [ 1041.973035][ T32] Call Trace: [ 1041.973039][ T32] [ 1041.973045][ T32] __schedule+0x1259/0x6920 [ 1041.973060][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1041.973075][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1041.973091][ T32] ? lock_acquire+0x1d1/0x380 [ 1041.973103][ T32] ? __pfx___schedule+0x10/0x10 [ 1041.973113][ T32] ? find_held_lock+0x2b/0x80 [ 1041.973129][ T32] ? schedule+0x225/0x2c0 [ 1041.973141][ T32] schedule+0xdd/0x2c0 [ 1041.973152][ T32] schedule_preempt_disabled+0x13/0x30 [ 1041.973163][ T32] __mutex_lock+0xccb/0x1bd0 [ 1041.973176][ T32] ? usbdev_open+0x1b6/0x870 [ 1041.973193][ T32] ? klist_put+0xcb/0x1d0 [ 1041.973208][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1041.973220][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1041.973238][ T32] ? kobject_put+0xb9/0x640 [ 1041.973255][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 1041.973269][ T32] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1041.973286][ T32] ? usbdev_open+0x9d/0x870 [ 1041.973303][ T32] ? usbdev_open+0x1b6/0x870 [ 1041.973318][ T32] usbdev_open+0x1b6/0x870 [ 1041.973334][ T32] ? kobject_get_unless_zero+0x156/0x200 [ 1041.973350][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1041.973364][ T32] ? chrdev_open+0x10b/0x6a0 [ 1041.973377][ T32] ? chrdev_open+0x10b/0x6a0 [ 1041.973392][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1041.973407][ T32] chrdev_open+0x234/0x6a0 [ 1041.973420][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1041.973434][ T32] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1041.973453][ T32] do_dentry_open+0x6ab/0x14d0 [ 1041.973469][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1041.973484][ T32] vfs_open+0x82/0x3f0 [ 1041.986302][ T32] path_openat+0x19fa/0x2440 [ 1041.986327][ T32] ? __pfx_path_openat+0x10/0x10 [ 1041.986344][ T32] do_file_open+0x20e/0x430 [ 1041.986359][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1041.986381][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1041.986399][ T32] ? alloc_fd+0x471/0x7a0 [ 1041.986417][ T32] do_sys_openat2+0x10f/0x1e0 [ 1041.986432][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1041.986445][ T32] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1041.986469][ T32] __x64_sys_openat+0x12d/0x210 [ 1041.986485][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 1041.986505][ T32] do_syscall_64+0x123/0x790 [ 1041.986519][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.986532][ T32] RIP: 0033:0x7fea7d75e98e [ 1041.986542][ T32] RSP: 002b:00007fea7e6e8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1041.986554][ T32] RAX: ffffffffffffffda RBX: 00007fea7e6e96c0 RCX: 00007fea7d75e98e [ 1041.986561][ T32] RDX: 0000000000109301 RSI: 00007fea7e6e8c00 RDI: ffffffffffffff9c [ 1041.986569][ T32] RBP: 00007fea7e6e8c00 R08: 0000000000000000 R09: 0000000000000000 [ 1041.986577][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1041.986584][ T32] R13: 00007fea7da26038 R14: 00007fea7da25fa0 R15: 00007ffea67ee708 [ 1041.986599][ T32] [ 1041.986632][ T32] [ 1041.986632][ T32] Showing all locks held in the system: [ 1041.986638][ T32] locks held by kworker/0:1/10: 2, on CPU#0: [ 1041.986646][ T32] #0: ffff88801c056140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1041.986679][ T32] #1: ffffc900000f7d08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1041.986711][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 1041.986719][ T32] #0: ffff888052770140 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1041.986749][ T32] #1: ffffc90000117d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1041.986780][ T32] #2: ffff88805190f980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1041.986808][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1041.986816][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1041.986846][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1041.986854][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1041.986887][ T32] locks held by kworker/u8:4/59: 1, last CPU#0: [ 1041.986895][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 1041.986933][ T32] locks held by kworker/u8:7/1350: 2, last CPU#0: [ 1041.986941][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1041.986971][ T32] #1: ffffc9000591fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1041.987018][ T32] locks held by getty/5356: 2, on CPU#1: [ 1041.987026][ T32] #0: ffff88803418e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1041.987056][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1041.987087][ T32] locks held by kworker/0:9/5804: 5, on CPU#0: [ 1041.987095][ T32] #0: ffff888023ef0140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1041.987125][ T32] #1: ffffc900049a7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1042.104051][ T32] #2: ffff88802ae331d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1042.104080][ T32] #3: ffff888043f331d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1042.104106][ T32] #4: ffff88801c0b61a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1042.104134][ T32] locks held by kworker/u8:10/5852: 2, last CPU#0: [ 1042.104143][ T32] #0: ffff888034185940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1042.104174][ T32] #1: ffffc90004bf7d08 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1042.104206][ T32] locks held by kworker/u8:13/6578: 3, last CPU#0: [ 1042.104214][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1042.104245][ T32] #1: ffffc90003057d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1042.104277][ T32] #2: ffff88802b954258 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1042.104322][ T32] locks held by kworker/0:5/16231: 2, last CPU#0: [ 1042.104330][ T32] #0: ffff88801c055d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1042.104361][ T32] #1: ffffc9000544fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1042.104392][ T32] locks held by syz.8.2533/16672: 1, on CPU#0: [ 1042.104400][ T32] #0: ffff88802ae331d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1042.104430][ T32] locks held by syz.6.2536/16681: 1, on CPU#0: [ 1042.104438][ T32] #0: ffff88802ae331d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1042.104475][ T32] locks held by syz.2.2613/16967: 1, on CPU#0: [ 1042.104483][ T32] #0: ffff88802ae331d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1042.104516][ T32] locks held by syz.7.2733/17785: 1, on CPU#0: [ 1042.104524][ T32] #0: ffff88802ae331d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1042.104557][ T32] locks held by syz.1.2961/19047: 2, last CPU#0: [ 1042.104565][ T32] #0: ffff88808a681078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1042.104592][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1042.104617][ T32] locks held by syz.1.2961/19051: 3, on CPU#0: [ 1042.104625][ T32] #0: ffff88805a8a6460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1042.104654][ T32] #1: ffff88807ac1ef18 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1042.104683][ T32] #2: ffffe8ffffc8a1d8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 [ 1042.104713][ T32] locks held by syz.1.2961/19053: 3, last CPU#0: [ 1042.104721][ T32] #0: ffff88805a8a6460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1042.104748][ T32] #1: ffff88807ac18288 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1042.104776][ T32] #2: ffffe8ffffc8a1d8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 [ 1042.104806][ T32] locks held by syz.1.2961/19054: 3, on CPU#0: [ 1042.104813][ T32] #0: ffff88805a8a6460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1042.104841][ T32] #1: ffff8880361f26b8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1042.104869][ T32] #2: ffffe8ffffc8a1d8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 [ 1042.104899][ T32] locks held by syz.1.3014/19222: 3, on CPU#0: [ 1042.104907][ T32] #0: ffff88805a8a6460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1042.104935][ T32] #1: ffff8880365950f0 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1042.104963][ T32] #2: ffffe8ffffc8a1d8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 [ 1042.104992][ T32] locks held by syz.9.3051/19322: 1, last CPU#0: [ 1042.105000][ T32] #0: ffff8880797d3c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x46/0x2c0 [ 1042.105028][ T32] locks held by syz.1.3053/19333: 2, on CPU#0: [ 1042.105035][ T32] #0: ffffffff8ee51c50 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x530d/0x8370 [ 1042.105075][ T32] #1: ffffe8ffffc8a1d8 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 [ 1042.105106][ T32] locks held by syz.4.3054/19336: 2, last CPU#0: [ 1042.105114][ T32] #0: ffff88802495fae8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_common_ioctl+0x419/0x2b80 [ 1042.105149][ T32] #1: ffff88802495fc80 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_common_ioctl+0x443/0x2b80 [ 1042.105182][ T32] [ 1042.105185][ T32] ============================================= [ 1042.105185][ T32] [ 1042.105190][ T32] NMI backtrace for cpu 0 [ 1042.105200][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.105216][ T32] Tainted: [L]=SOFTLOCKUP [ 1042.105220][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1042.105226][ T32] Call Trace: [ 1042.105231][ T32] [ 1042.105236][ T32] dump_stack_lvl+0x100/0x190 [ 1042.105252][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1042.105270][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1042.105283][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1042.105301][ T32] sys_info+0x141/0x190 [ 1042.105315][ T32] watchdog+0xcb1/0x1030 [ 1042.105330][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1042.105342][ T32] ? __pfx_watchdog+0x10/0x10 [ 1042.105354][ T32] ? __kthread_parkme+0x18f/0x230 [ 1042.105369][ T32] ? kthread+0x13a/0x450 [ 1042.105383][ T32] ? __pfx_watchdog+0x10/0x10 [ 1042.105394][ T32] kthread+0x373/0x450 [ 1042.105409][ T32] ? __pfx_kthread+0x10/0x10 [ 1042.105424][ T32] ret_from_fork+0x730/0xd60 [ 1042.105437][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1042.105452][ T32] ? __switch_to+0x800/0x10f0 [ 1042.105471][ T32] ? __pfx_kthread+0x10/0x10 [ 1042.105486][ T32] ret_from_fork_asm+0x1a/0x30 [ 1042.105504][ T32] [ 1042.246588][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1043.838635][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.849284][ T32] Tainted: [L]=SOFTLOCKUP [ 1043.853590][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1043.863616][ T32] Call Trace: [ 1043.866871][ T32] [ 1043.869778][ T32] dump_stack_lvl+0x100/0x190 [ 1043.874435][ T32] vpanic+0x553/0x970 [ 1043.878390][ T32] ? __pfx_vpanic+0x10/0x10 [ 1043.882869][ T32] panic+0xd1/0xe0 [ 1043.886564][ T32] ? __pfx_panic+0x10/0x10 [ 1043.890955][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1043.897088][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1043.903218][ T32] ? watchdog.cold+0x1ec/0x234 [ 1043.907957][ T32] watchdog.cold+0x1fd/0x234 [ 1043.912527][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1043.918304][ T32] ? __pfx_watchdog+0x10/0x10 [ 1043.922956][ T32] ? __kthread_parkme+0x18f/0x230 [ 1043.927956][ T32] ? kthread+0x13a/0x450 [ 1043.932173][ T32] ? __pfx_watchdog+0x10/0x10 [ 1043.936821][ T32] kthread+0x373/0x450 [ 1043.940865][ T32] ? __pfx_kthread+0x10/0x10 [ 1043.945432][ T32] ret_from_fork+0x730/0xd60 [ 1043.949996][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1043.955082][ T32] ? __switch_to+0x800/0x10f0 [ 1043.959737][ T32] ? __pfx_kthread+0x10/0x10 [ 1043.964313][ T32] ret_from_fork_asm+0x1a/0x30 [ 1043.969057][ T32] [ 1043.972086][ T32] Kernel Offset: disabled [ 1043.976385][ T32] Rebooting in 86400 seconds..