last executing test programs: 20m58.314008037s ago: executing program 32 (id=884): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314050000000000000000000900020073797a30000000000800410072786500140033006c6f0000000000000000000000000000d8698bafaac50b2dfa4ac283fc6af32961082455940539d447917886b1"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000440)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14, 0x0) connect(r2, &(0x7f00000004c0)=@in={0x2, 0x4e20, @loopback}, 0x10) 18m35.567955135s ago: executing program 33 (id=1585): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314050000000000000000000900020073797a30000000000800410072786500140033006c6f0000000000000000000000000000d8698bafaac50b2dfa4ac283fc6af32961082455940539d447917886b1"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000440)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14, 0x0) connect(r2, &(0x7f00000004c0)=@in={0x2, 0x4e20, @loopback}, 0x10) 16m36.456670023s ago: executing program 34 (id=2063): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730909000000fd1bd24b7ffc8c1ece85108c1331c774d299a25a70745096cb268cbc6070d680e1be250700f758d02ae11ef24171ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703499d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fadc02f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d1b8186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f95555a5ca6fdf75b86ea6171b046b856168f403b5253a5c0500430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fba0900000000000000f95d242d6d05be2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fc5b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176d31b2db18dba54991a9553cedb7f585786388d400600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) 13m24.405370353s ago: executing program 35 (id=2870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 11m58.31440366s ago: executing program 36 (id=3081): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9m20.947380696s ago: executing program 37 (id=3723): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2, 0x0, 0x1}}, 0x2e) close(r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r6, 0x0, r5}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) 9m11.120723304s ago: executing program 38 (id=3848): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') openat(r0, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x121041, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy(0x0, 0xfffffffffffffffc, 0xc9, &(0x7f0000ff7000/0x4000)=nil, 0x2) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x24000841) 9m2.699041545s ago: executing program 39 (id=3819): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) 8m49.708821264s ago: executing program 40 (id=3874): getpid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) flock(0xffffffffffffffff, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b6a, &(0x7f0000000040)={0x200f, 0x200d, 0x1, 0x2, 0x200c, 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getqdisc={0x28, 0x26, 0x55791b1837eb8b3d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfffd}, {0x10012, 0xe}, {0x10, 0xfff1}}, [{0x4}]}, 0x28}}, 0x10) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, &(0x7f0000000080)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) socket(0x400000000010, 0x3, 0x0) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000480)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000000000000a5"], 0x18, 0x4004045}, 0x24000052) 8m38.793650969s ago: executing program 41 (id=3900): socket(0x2b, 0x80801, 0x1) (async) r0 = socket(0x2b, 0x80801, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000040)="e3462dde6570c42489e558e422f86b8e00d87cc95c09085c42af030ab12c") r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) socket(0x400000000010, 0xa, 0x8) (async) r8 = socket(0x400000000010, 0xa, 0x8) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) modify_ldt$read(0x0, 0x0, 0x0) (async) modify_ldt$read(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffe0, 0xc}, {0x0, 0x9}, {0xf, 0xfff6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffe0, 0xc}, {0x0, 0x9}, {0xf, 0xfff6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x100000000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xffff8001, 0x3, 0x1, 'queue0\x00', 0x1}) 8m18.379565054s ago: executing program 42 (id=3981): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x1a8, 0x280, 0x280, 0x340, 0x110, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x2, 0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xff, 'veth0_to_bond\x00', 'pimreg0\x00', {}, {0xff}, 0x62, 0x2, 0xe}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf49, 0xfffffc00, @ipv4=@local, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0xffffff00, 'rose0\x00', 'veth1_to_batadv\x00', {}, {}, 0x62, 0x3, 0x9}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x7, 0x3}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'vlan0\x00', 'hsr0\x00', {}, {}, 0x84, 0x3, 0x9}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x8, @multicast2, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./mnt\x00') lseek(r3, 0x3, 0x0) read$FUSE(r0, &(0x7f0000004840)={0x2020}, 0x2020) 8m14.417222834s ago: executing program 43 (id=4000): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x200000}, {0x8, 0x8}, {0x0, 0x8}, {0x0, 0x40000000, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7m30.115697615s ago: executing program 46 (id=4150): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000008c0)={0xd, 0x3}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402504a1a44000000001010902"], 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, {0xa, 0x4e21, 0xb5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0xffffffffffffffff, {[0x80000001, 0x9, 0x3e2b, 0x6, 0x140000, 0xe4, 0x7f, 0x3ea]}}, 0x5c) splice(r3, 0x0, r5, 0x0, 0x3ff, 0x5) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x9) 7m19.267754917s ago: executing program 47 (id=4210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x80000000, 0x9, 0x10010, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425"], 0x4c}}, 0x0) 7m10.731430099s ago: executing program 48 (id=4235): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0400, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b00)={&(0x7f0000001b80)=ANY=[@ANYBLOB="bc160000", @ANYRES16=r1, @ANYBLOB="00042abd9000fcf5df254a00000008000300", @ANYRES32=r2, @ANYBLOB="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", @ANYRESDEC=r2], 0x16bc}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x177f, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d8"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6m53.802082269s ago: executing program 49 (id=4271): syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff1d0900452e003800660000080190780a0101020a010100050290787f00889606224e0100660751a8cc69f897fe3000ac1414aa060022ebffff0000"], 0x0) socket$key(0xf, 0x3, 0x2) r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) connect$netlink(r3, &(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc) ioctl$UBLK_U_CMD_GET_FEATURES(r3, 0x80207513, &(0x7f00000000c0)={0x0, 0xffff, 0x8}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x5021, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRES32, @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xe6d0c7f767486cd4) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x7, 0x810000, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x90, 0x0, 0x2, {0x0, 0x0, 0xbd16, 0x5, 0x7, 0x6, {0x4, 0x5, 0x66, 0x6, 0x8003, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, r7, 0x3ff, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000001, {0x5, 0x5, 0x34, 0x8000000, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xffff, 0xffffffffffffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4a, 0xa000, 0x3, r6, r7, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000240)) r10 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r11, r11) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="530000207d020000000412a62e1332d43900480d0500000004010000000900000000000000000001200800000015cbc522000000000000000002005e7b030020010001007b0000", @ANYRES16=r9, @ANYRES32=r8, @ANYRES32=r11], 0x53) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x91800) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) r14 = accept$alg(r13, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000840)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) sendmmsg$alg(r14, &(0x7f0000005680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='5\n', 0x2}, {&(0x7f0000000480)='7', 0x1}], 0x2, 0x0, 0x0, 0x4804}], 0x1, 0x40000) ioctl$SIOCGETSGCNT_IN6(r12, 0x89e1, &(0x7f0000000280)={@mcast2, @loopback}) 6m48.735811248s ago: executing program 50 (id=4285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 5m59.967077173s ago: executing program 5 (id=4444): r0 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x4, 0x7}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 5m59.308726321s ago: executing program 5 (id=4447): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 5m59.171025654s ago: executing program 5 (id=4448): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x2}}, 0x50) socket$igmp(0x2, 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x40000000) r3 = socket(0x2a, 0x2, 0x9) bind$inet(r3, &(0x7f0000000180)={0x2a, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x20000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x9, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x8000, 0x0) 5m58.18205955s ago: executing program 5 (id=4450): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/ep1in-bulk\x00', 0x8000, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfffff034}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) write(r3, 0x0, 0xb00) 5m57.243036196s ago: executing program 5 (id=4453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/ep1in-bulk\x00', 0x8000, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfffff034}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) write(r3, 0x0, 0xb00) 5m55.837082041s ago: executing program 5 (id=4458): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000200)=""/172, 0xac}], 0x1) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 5m55.458651659s ago: executing program 51 (id=4458): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000200)=""/172, 0xac}], 0x1) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 5m47.91364689s ago: executing program 3 (id=4479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r11, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5m46.793947491s ago: executing program 3 (id=4482): r0 = io_uring_setup(0x177f, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c62e", 0x2, 0x8040, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m46.563613465s ago: executing program 3 (id=4484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd61}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000c6}, 0xc000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_disconnect(r2) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000180)='a') syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(r2, 0x2, 0x0, 0x0) getpeername(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000041b000/0x2000)=nil, 0x2000, 0x100000b, 0x110, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfffff034}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write(r3, 0x0, 0xb00) 5m41.067695635s ago: executing program 3 (id=4497): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x4, 0x2, 0x6, 0x9, 0x10, @loopback, @private1, 0x8, 0x8000, 0x3, 0x3}}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000280)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000380)={0xa0d, &(0x7f00000002c0)="1378780d3c92fd39d92ef5fef8a30c3ac219db7b4a5cd613ee71afad8fab471d8345f0d3ac77987594faf95c7a1ddd87270c5581f28e9a3bb11a43539c66f53d811c04fb14a2d02f8bed41348988a0b7f18e7d00835fdcf26385b83129d05713ae020bb63e1c47eb2d918bcf9652b1decb0d6329b0d69b61f615d9a56add974debbcff6fc7711f32c18b94469c0d2878d37b129555de07"}) (async) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000380)={0xa0d, &(0x7f00000002c0)="1378780d3c92fd39d92ef5fef8a30c3ac219db7b4a5cd613ee71afad8fab471d8345f0d3ac77987594faf95c7a1ddd87270c5581f28e9a3bb11a43539c66f53d811c04fb14a2d02f8bed41348988a0b7f18e7d00835fdcf26385b83129d05713ae020bb63e1c47eb2d918bcf9652b1decb0d6329b0d69b61f615d9a56add974debbcff6fc7711f32c18b94469c0d2878d37b129555de07"}) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f00000003c0)) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000400)={0x7, @sdr={0x20303159, 0x9}}) (async) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000400)={0x7, @sdr={0x20303159, 0x9}}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000500)={0x4, @meta={0x53353543, 0x376a112, 0x8068, 0x1809, 0x7a00f8d4}}) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000600), &(0x7f0000000640)=0x4) gettid() (async) r4 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) (async) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000780)={r3, r3, 0x9}) (async) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000780)={r3, r3, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) futex(&(0x7f0000000800), 0x0, 0x2, &(0x7f0000000880)={r9, r10+10000000}, &(0x7f00000008c0)=0x1, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r1, 0x90801000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000900)=0x5) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000001980)={0x1, 0x2, 0x1000, 0x1000, &(0x7f0000000940)="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", 0x1, 0x0, &(0x7f0000001940)="17"}) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000001a00)={0xc, @meta={0xc61700e, 0x1dbb358e, 0x5db4, 0xf02c, 0x1a5da072}}) mmap$qrtrtun(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x970dbfc5914f396, r1, 0x6) (async) mmap$qrtrtun(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x970dbfc5914f396, r1, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, 0x1411, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000000) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001c00)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xd, r2}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001c40), 0x80202, 0x0) ioctl$XFS_IOC_GETBMAPX(r8, 0xc0205838, &(0x7f0000001c80)={0x7, 0x3, 0x9, 0xe, 0xc, 0x10, 0xe}) 5m39.384820498s ago: executing program 3 (id=4501): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0xe0, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0xc4, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x715c}, @device_a, @broadcast, @from_mac=@device_b, {0x7, 0x1}}, 0x14, 0x4a, @random=0x3, @void, @val={0x2d, 0x1a, {0x800, 0x3, 0x7, 0x0, {0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x4, 0x9}}, [{0xdd, 0x9, "9065c5b1e2cd9586ef"}, {0xdd, 0x79, "46669302a3d99e740bfe2a7103cd433ec1b354b27bae95cb515b24fc78b37f76818bd46ed96803699502bc5752dea10f7df1fbde56e872687302003f28b8921ee92d6435d17dc768dae6cfd3d5fbaf5851518760bb3b3601fb3536a70740f17c5a025daabcae19b94a97befe8b9930727964c8873062baf201"}]}}]}, 0xe0}}, 0x40014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140008002f00096735bd880000000067569639f0"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_connect$midi(0x3, 0x65, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x89, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x6, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x1c, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7f, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x1, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x9}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x9, 0x6, [{0xf, 0x7}, {0x1, 0x1d}, {0xa, 0x7}, {0x3, 0xc}, {0xcd}, {0x3, 0x2}], 0x6}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x1, 0x4, [{0x46, 0x9}, {0x2, 0x2}, {0x9, 0x7}, {0x6, 0x80}], 0xab}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0xb}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x6d, 0x6, 0x4, 0xff, 0x5}, 0x38, &(0x7f0000000440)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "f1050bca999583aeb538ebd9b2028e1a"}, @ss_container_id={0x14, 0x10, 0x4, 0x26, "fe8522a5fe3de9534c0ae1584c403522"}, @wireless={0xb, 0x10, 0x1, 0x80f550b00d823e6a, 0x9, 0x3, 0x7, 0x4, 0xd}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc1a}}]}) 5m38.945873095s ago: executing program 52 (id=4501): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0xe0, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0xc4, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x715c}, @device_a, @broadcast, @from_mac=@device_b, {0x7, 0x1}}, 0x14, 0x4a, @random=0x3, @void, @val={0x2d, 0x1a, {0x800, 0x3, 0x7, 0x0, {0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x4, 0x9}}, [{0xdd, 0x9, "9065c5b1e2cd9586ef"}, {0xdd, 0x79, "46669302a3d99e740bfe2a7103cd433ec1b354b27bae95cb515b24fc78b37f76818bd46ed96803699502bc5752dea10f7df1fbde56e872687302003f28b8921ee92d6435d17dc768dae6cfd3d5fbaf5851518760bb3b3601fb3536a70740f17c5a025daabcae19b94a97befe8b9930727964c8873062baf201"}]}}]}, 0xe0}}, 0x40014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140008002f00096735bd880000000067569639f0"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_connect$midi(0x3, 0x65, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x89, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x6, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x1c, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7f, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x1, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x9}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x9, 0x6, [{0xf, 0x7}, {0x1, 0x1d}, {0xa, 0x7}, {0x3, 0xc}, {0xcd}, {0x3, 0x2}], 0x6}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x1, 0x4, [{0x46, 0x9}, {0x2, 0x2}, {0x9, 0x7}, {0x6, 0x80}], 0xab}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0xb}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x6d, 0x6, 0x4, 0xff, 0x5}, 0x38, &(0x7f0000000440)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "f1050bca999583aeb538ebd9b2028e1a"}, @ss_container_id={0x14, 0x10, 0x4, 0x26, "fe8522a5fe3de9534c0ae1584c403522"}, @wireless={0xb, 0x10, 0x1, 0x80f550b00d823e6a, 0x9, 0x3, 0x7, 0x4, 0xd}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc1a}}]}) 5m18.098437975s ago: executing program 2 (id=4564): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffe00, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 5m17.905333442s ago: executing program 2 (id=4565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r11, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5m17.581775871s ago: executing program 2 (id=4566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8, @rand_addr=' \x01\x00', 0xffffffff}]}, &(0x7f0000000240)=0xfd3a) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) 5m16.506697128s ago: executing program 2 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/ep1in-bulk\x00', 0x8000, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfffff034}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write(r3, 0x0, 0xb00) 5m13.775282603s ago: executing program 2 (id=4575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r10, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 5m11.146913352s ago: executing program 2 (id=4581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e9000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x81) r7 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000dfe86bc0d908422984835f59772d1c78682fc70c4276a113fe479d07a750295e0c87e07a465849d5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r8, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) close_range(r8, 0xffffffffffffffff, 0x0) 5m10.762234911s ago: executing program 53 (id=4581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e9000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x81) r7 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000dfe86bc0d908422984835f59772d1c78682fc70c4276a113fe479d07a750295e0c87e07a465849d5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r8, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) close_range(r8, 0xffffffffffffffff, 0x0) 4m59.188031221s ago: executing program 1 (id=4622): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) timer_create(0x3, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f00000000c0)) r1 = socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xd, 0x30, r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, 0x0, 0x1, 0x6}, {0x0}, 0x0, 0x30}, 0xa0) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005"], 0xc4}}, 0x20050890) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 4m58.817944082s ago: executing program 1 (id=4625): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='ramfs\x00', 0x800, 0x0) r0 = socket(0x2, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x1, 0x0) dup2(r4, r3) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x451, 0x40000009, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x8, 0x4800003c, 0xffffffffffffffff, 0x0) dup2(r7, r5) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x240808c1) ioctl$SNDCTL_DSP_RESET(r1, 0x80044dff, 0x1000000000000) flistxattr(r0, &(0x7f0000000040)=""/53, 0x35) 4m56.609577102s ago: executing program 1 (id=4628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) uname(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r5}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x3, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0xe, 0x0, 0x6}]}}, {0x4e20, 0x4e24, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "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"}}}}, 0x7ff) 4m55.546816983s ago: executing program 1 (id=4633): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/ep1in-bulk\x00', 0x8000, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfffff034}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write(r3, 0x0, 0xb00) 4m54.307766845s ago: executing program 1 (id=4634): unshare(0x28000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) epoll_create(0x567) socketpair(0x21, 0x3, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x0, 0x0, 0x0) 4m53.10076798s ago: executing program 1 (id=4638): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}, {&(0x7f00000002c0)="f509ddc5b1f761acb7fd87fc378928d59172b02c7bac54c0f1497b1537c48ee2987a8a273fbb049fe31f8a4f4220f0ae742b29c14d4eb00f0eedf38ddd7187cdd4dd82b3e7b3a88b7d0d3773573d4f62e26c7aa456ef9319850cacdc20797ae7492ee1bca6ffa456bcc77a68e2c7d616b8571a5a035422e77b77522dd0a4bfc827afe57ff2140eb52a91f87dd011d97557a31826188f38c4792250a96ae741631c6cedfb22ecfa97", 0xa8}], 0x2, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000600)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x12000000) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'wlan1\x00', 0x400}) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000040)='./cgroup\x00', 0x20) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000000580)=""/47, 0x2f) lseek(r7, 0x0, 0x0) close(r4) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 4m50.898136311s ago: executing program 54 (id=4638): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}, {&(0x7f00000002c0)="f509ddc5b1f761acb7fd87fc378928d59172b02c7bac54c0f1497b1537c48ee2987a8a273fbb049fe31f8a4f4220f0ae742b29c14d4eb00f0eedf38ddd7187cdd4dd82b3e7b3a88b7d0d3773573d4f62e26c7aa456ef9319850cacdc20797ae7492ee1bca6ffa456bcc77a68e2c7d616b8571a5a035422e77b77522dd0a4bfc827afe57ff2140eb52a91f87dd011d97557a31826188f38c4792250a96ae741631c6cedfb22ecfa97", 0xa8}], 0x2, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000600)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x12000000) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'wlan1\x00', 0x400}) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000040)='./cgroup\x00', 0x20) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000000580)=""/47, 0x2f) lseek(r7, 0x0, 0x0) close(r4) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 4m28.761983175s ago: executing program 8 (id=4704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e9000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x81) r7 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000dfe86bc0d908422984835f59772d1c78682fc70c4276a113fe479d07a750295e0c87e07a465849d5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r8, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) close_range(r8, 0xffffffffffffffff, 0x0) 4m28.386698318s ago: executing program 8 (id=4706): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000340)}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0b", 0x26}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m25.833059426s ago: executing program 8 (id=4713): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m25.323653358s ago: executing program 8 (id=4720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/ep1in-bulk\x00', 0x8000, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfffff034}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) write(r2, 0x0, 0xb00) 4m23.783142829s ago: executing program 8 (id=4728): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x1010, r1, 0x0) write(r1, &(0x7f0000000380)='f', 0x1) vmsplice(r0, &(0x7f0000001500)=[{&(0x7f0000000080)="fd", 0x1}], 0x1, 0xb) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x5, 0x1, 0xc1}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r6, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m22.529197478s ago: executing program 8 (id=4731): r0 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x0, 0x77}, {@multicast2, 0x4e1c, 0x2, 0x6, 0x1}}, 0x44) (fail_nth: 1) 4m22.144400017s ago: executing program 55 (id=4731): r0 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x0, 0x77}, {@multicast2, 0x4e1c, 0x2, 0x6, 0x1}}, 0x44) (fail_nth: 1) 7.865807449s ago: executing program 4 (id=5930): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x1c) sendto$inet6(r0, &(0x7f0000000280)="f58ac06f9bbe86df40e5ae6e55d42ef4d893ba4d0713d8aa2de9830cecf15fefbe9f9363b62e1465916e732c2a4630", 0x2f, 0x40010, &(0x7f00000002c0)={0xa, 0x4e20, 0x51, @dev={0xfe, 0x80, '\x00', 0x13}, 0x6}, 0x1c) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7.500165938s ago: executing program 0 (id=5934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010928bd700000000000021880000003ff000010000008000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r9, &(0x7f0000002080)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000000c0)="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", 0x11f}, {&(0x7f0000000640)="6c8c778bd61f52153eadf672a8afd4ac2cd4485dcd4ec767a7bc9928c1328c782cc6c00961536b8714456de68c0b95c356c5b4aabed86f3324eeb0d0c5180e6ee7", 0x41}, {&(0x7f00000006c0)="0998b6d80a5faee59cbeec7bcfcf9c1e2063f5c7082c6896033bfc01320f555949aa7fb3aa9d03660281ad546de98f985dd938e4ed7e46ad0a835981830e04e89e6a70df4c3d0e95a4ff35c7fdcdc22db9305a009437df2d7eeb7d268c412a2a8b4dc9a4a82b330784399d9b907b59e310e590915cf77c7e8aebd679af6993193e5d6f9b2d040a353af1b5a36d640147dc4a59034dfb80c58eaf1ed1b1c0a1d6c26cd0e6238521f2e427", 0xaa}, {&(0x7f0000000780)="b36fb12aeed1fca7dbe86cf8a51fcba64a4500b788fff99c2fea82772ec33fc8474c776390bdeadd0d0163242a6aeee9f37464", 0x33}, {&(0x7f00000007c0)="c53403c9821d42ed436ddabc91e99c52cf74e4b7206281f94b750df03503ba7407ac3ed8d4423ff381d8c5ac6672bec3e85d29de039e96e57d5f68983261f0f7ab687cee54125ba3c3ae32dc0a78f5fefac1a06071f63da3c50eac66f63e6faad0176c96972e6e4e6314f80acf08a24b714ad9cd607f1e1d680b8f6be20f06fad2a91d3bbed6eb8651887af873", 0x8d}], 0x5}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000037c0)="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", 0x2f6}], 0x1}}], 0x2, 0x2000c044) writev(r9, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0x1}], 0x1) setgroups(0x0, 0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) 7.301352263s ago: executing program 4 (id=5935): syz_usb_connect(0x0, 0x1c0, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000082f5d008a5043530c21e000000010902ae0101000000000904000001f8055a"], 0x0) 6.606043949s ago: executing program 6 (id=5939): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a0000050900010073797a3100000000040004800900020073797a3200000000140000001100010000000000000000000100000aa09c9862e5142f520efc7dfbb2800220eb6c8ab296b30a5e8cdebbb1874ed5c3e5d0c91ef706e9862a8f2e401bd400165e623d8dd86dba383a066a22a7b0ac2689b5cfa67777be9395e8fccfc8461afb76b17f3352e99f921bfb86e819a92fbb9f"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x9}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) 6.409329878s ago: executing program 0 (id=5941): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x4) r3 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf3}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000c80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4010020}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="90030007", @ANYRES16=0x0, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x24000050}, 0x24000800) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x40000100) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) 6.179324182s ago: executing program 6 (id=5943): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgid(0xffffffffffffffff) 6.023567951s ago: executing program 6 (id=5945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000400"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e9000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x81) r7 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000dfe86bc0d908422984835f59772d1c78682fc70c4276a113fe479d07a750295e0c87e07a465849d5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r8, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) 5.746497359s ago: executing program 4 (id=5946): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109"], 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1602010401"], 0x19) fanotify_init(0x20, 0x1) syz_io_uring_modify_offsets$flags(r2, r3, 0x68, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00"/38], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000200)=[r0]}, 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmmsg$unix(r10, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x12141, 0x0) close(0x4) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r7, &(0x7f0000000280)={@void, @void, @eth={@random="7de102ec8729", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x64, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "2aa7ba4927c51ee2f5170f2f3a0072ae8bdc7d17430e9cdab3dac3ad86d35880", "1cc1da49ece4be1c578b9ae7174e98c7", {"322e109dbcb3bc4e915ba6de2dab1188", "99e2077b885aaf3c1d2e182f2863f441"}}}}}}}}}, 0x9e) 5.695380653s ago: executing program 0 (id=5948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x2, {0xa, 0x1, 0x8001, 0x40}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000087d1e38310000000000010902240001000080050904008101030003000921021047012228000905810340"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="401e7f0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@gid}, {@mode={'mode', 0x3d, 0xd}}, {@uid={'uid', 0x3d, 0xee01}}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 5.335906031s ago: executing program 9 (id=5950): connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x3f) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 5.144988288s ago: executing program 9 (id=5951): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100090e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec000"], 0x70}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa02000000000000006400000402907800000000e000000211009078e000000200000002000000aa00000000"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 5.032316468s ago: executing program 6 (id=5952): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xf3a, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000380)={0x6, @raw_data="a5ca3354ab28de31bd93c26bd64d7bf250bcece4a58b1106d332fa7e1bb0444726d117b633124532524331259eaa03f9940b0a32d107a477724ff80b36b42487579f363b8e5610a08d8a0a12d1ada6944600a37331d008f81a320c3a85daf423dff45be2f01ebd9aae667ed95076ff9e27abf9327382593d33543d09e008931ce64fcb93f9092f36a7d01153df0323d10b5131f0e012d6f6bb7da8a72daaccc16ef2580ee1b9205a4291527255a77c32da0de9cb1e870be47419492ade788ccd03de171beda98f00"}) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r6 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 4.715084214s ago: executing program 9 (id=5953): getcwd(&(0x7f0000000340)=""/4096, 0x1000) 4.600106235s ago: executing program 9 (id=5954): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) syz_genetlink_get_family_id$nl80211(0x0, r1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000a0000050900010073797a3100000000040004800900020073797a3200000000140000001100010000000000000000000100000aa09c9862e5142f520efc7dfbb2800220eb6c8ab296b30a5e8cdebbb1874ed5c3e5d0c91ef706e9862a8f2e401bd400165e623d8dd86dba383a066a22a7b0ac2689b5cfa67777be9395e8fccfc8461afb76b17f3352e99f921bfb86e819a92fbb9f"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x9}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) 4.264939433s ago: executing program 9 (id=5955): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4.025386777s ago: executing program 6 (id=5956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.814559258s ago: executing program 7 (id=5957): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0527bd7000ffdbdf2500000000080002000100000008"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) 3.812483428s ago: executing program 6 (id=5958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r6, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x4000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000500)={0x7d5}, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r8) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4001004) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r12, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x1c, r13, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x44084) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x13810020}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000ffdbdf250f00000008000300", @ANYRES32=r11, @ANYBLOB="0e6aed0978fc5ea19f8b7f9d57a098c3c630bf333496bd92c2b735eb39c02bd80ff83c7b07df9b6907ba3f9d73733e8a25b73ff23fafcaee3d1caa80bb7fb29307ab5ae1dde3f23992e6a82681891afaf7b717e753e56ef136e22b5c1a1c947224c8ba452e6f4bcbec5e3bf1", @ANYRES32=r14, @ANYBLOB="05000f00070000000c000600000000000000000008000300", @ANYRES32=r8, @ANYBLOB="0c00060000000000020000000c0006000300000003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r15 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r16 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r16, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x5dc}], 0x1}, 0x4011) 3.581168168s ago: executing program 7 (id=5959): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.222004444s ago: executing program 4 (id=5960): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6000c0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x1fb) ftruncate(r7, 0x2007ffb) close(r7) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xffc, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0x10, 0x8}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(0x0, 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) 3.139850312s ago: executing program 7 (id=5961): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r0 = socket(0x2, 0x80000, 0x6) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) wait4(r1, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff01, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) syz_emit_ethernet(0x7e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r5) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140), 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x8, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x3, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) 2.145581449s ago: executing program 0 (id=5962): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xd883, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@xino_auto}]}) (async) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacad, 0x1, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa634, 0x0, 0x40, 0x4}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc110, 0x1, 0xfffffffe}}], 0x1, &(0x7f0000000a00)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffe, 0x715, 0x0, 0x0}}, 0x0) (async) r8 = syz_open_dev$vbi(&(0x7f0000008a00), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000008ac0)={0x9c0000, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0}) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) (async) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e24, 0x42, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0xf}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x11, &(0x7f0000000040)=0x2, 0x4) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='nfsd\x00', 0x2000000, &(0x7f0000000240)='&)\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2, 0x0, 0xc, 0x0, 0x1}, 0x20) 1.848254284s ago: executing program 4 (id=5963): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040), 0x4) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b7020000feffff7fbfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) fsopen(&(0x7f0000000140)='zonefs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140), 0x0, 0x7000000, 0x0, 0x36, 0x0, 0x0, 0x0, 0x6}, 0x4c) 1.724687434s ago: executing program 0 (id=5964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x1) syz_open_dev$usbmon(0x0, 0x8002, 0xa2000) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1.699043234s ago: executing program 7 (id=5965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb9515e9532db83a9c209041b8cfd28b4e9000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x81) r7 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='source', 0x0, r3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000dfe86bc0d908422984835f59772d1c78682fc70c4276a113fe479d07a750295e0c87e07a465849d5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r8, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) 1.370877307s ago: executing program 4 (id=5966): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000000)={0x1, 0x200, 0x0, 0x8, 0x2, 0x25, 0x8, 0xf, 0x1, 0x10001, 0x7, 0x4}) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80) r2 = fanotify_init(0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x11e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0xe8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, [{0x18, 0xf, "00000000e50053bff4db7fb81947a98ef6c30aef8bffd4310d8c8cfbdfdcf5ad49792ea9afa9553dcd662ba253fb01a9bda9916838f848a6e18c02bf95848d398ec9dba34d082016dcb10b44b93da65d02ba88666428204a908ad971d0047aabc2491e667b9900"/118}, {0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x2, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x1d80, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) 1.162953767s ago: executing program 9 (id=5967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYRES32], 0x3c}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x312, 0x1020}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0xfffffefd}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r10, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01e1ddbd7000fddbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x44084) 187.157627ms ago: executing program 7 (id=5968): setresuid(0x0, 0xee00, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x10, 0x464, 0x800, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 153.541071ms ago: executing program 0 (id=5969): memfd_create(&(0x7f0000000040)='\xef\x15\x00\boSaW\x00', 0x2) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be90", 0xbf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9", 0xaa}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0xb1) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000440)) socket$inet_mptcp(0x2, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x427e}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x6f) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 7 (id=5970): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket(0x21, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040029bd7000fcdbdf250400000005000600fc00000008000267166636ebf0061c40bef88112f2000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0xc4) openat$fb0(0xffffffffffffff9c, 0x0, 0x2d01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402104341200010000000109023100020100c032090400000002fe000005240600010324ab"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x11e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x1) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000280)='./file0\x00', 0x2000974) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_off}]}) kernel console output (not intermixed with test programs): 002000000000c0 RDI: 0000000000000005 [ 1518.901040][T28470] RBP: 00007f5f5e4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.901046][T28470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.901052][T28470] R13: 00007f5f5d826038 R14: 00007f5f5d825fa0 R15: 00007fff9da97558 [ 1518.901066][T28470] [ 1518.901111][T28470] Mem-Info: [ 1519.322608][T28499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5467'. [ 1519.485552][T28470] active_anon:48018 inactive_anon:5821 isolated_anon:0 [ 1519.485552][T28470] active_file:135 inactive_file:67838 isolated_file:0 [ 1519.485552][T28470] unevictable:768 dirty:357 writeback:0 [ 1519.485552][T28470] slab_reclaimable:8372 slab_unreclaimable:115533 [ 1519.485552][T28470] mapped:32582 shmem:42978 pagetables:2147 [ 1519.485552][T28470] sec_pagetables:0 bounce:0 [ 1519.485552][T28470] kernel_misc_reclaimable:0 [ 1519.485552][T28470] free:1224888 free_pcp:10381 free_cma:0 [ 1519.601150][T28470] Node 0 active_anon:194288kB inactive_anon:23284kB active_file:540kB inactive_file:271144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130308kB dirty:1476kB writeback:0kB shmem:172556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14784kB pagetables:8444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1519.670980][T28470] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1519.754730][T28470] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.819113][T28470] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1519.832177][T28470] Node 0 DMA32 free:941676kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:194340kB inactive_anon:23284kB active_file:540kB inactive_file:271144kB unevictable:1536kB writepending:1476kB zspages:308kB present:3129332kB managed:2532120kB mlocked:0kB bounce:0kB free_pcp:39624kB local_pcp:39624kB free_cma:0kB [ 1519.902522][T28470] lowmem_reserve[]: 0 0 0 0 0 [ 1519.911998][T28470] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.974918][T28470] lowmem_reserve[]: 0 0 0 0 0 [ 1519.985004][T28470] Node 1 Normal free:3942532kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.053629][T28470] lowmem_reserve[]: 0 0 0 0 0 [ 1520.063887][T28470] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1520.090986][T28470] Node 0 DMA32: 3703*4kB (UM) 2120*8kB (UME) 827*16kB (UME) 383*32kB (UME) 377*64kB (UME) 117*128kB (UME) 50*256kB (UME) 16*512kB (UME) 7*1024kB (UME) 7*2048kB (UME) 196*4096kB (UM) = 941676kB [ 1520.130590][T28470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1520.156771][T28470] Node 1 Normal: 9*4kB (UM) 6*8kB (UM) 7*16kB (UM) 2*32kB (M) 8*64kB (UM) 7*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942532kB [ 1520.195402][T28470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1520.216081][T28470] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1520.235984][T28470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1520.303629][T28470] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1520.333757][T28470] 111496 total pagecache pages [ 1520.349298][T28470] 1 pages in swap cache [ 1520.363207][T28470] Free swap = 124776kB [ 1520.378521][T28470] Total swap = 124996kB [ 1520.392677][T28470] 2097051 pages RAM [ 1520.405638][T28470] 0 pages HighMem/MovableOnly [ 1520.420515][T28470] 432312 pages reserved [ 1520.435310][T28470] 0 pages cma reserved [ 1520.834840][T28523] IPVS: Scheduler module ip_vs_ not found [ 1521.520573][T28525] macsec1: entered promiscuous mode [ 1521.525856][T28525] bridge0: entered promiscuous mode [ 1521.538194][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 1521.538205][ T30] audit: type=1400 audit(1785515113.457:2742): avc: denied { connect } for pid=28520 comm="syz.4.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1521.615760][ T30] audit: type=1400 audit(1785515113.507:2743): avc: denied { write } for pid=28520 comm="syz.4.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1521.825588][T28532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5478'. [ 1521.849352][ T30] audit: type=1400 audit(1785515113.507:2744): avc: denied { unmount } for pid=23354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1521.890445][T28532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5478'. [ 1521.962427][ T30] audit: type=1800 audit(1785515113.537:2745): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1522.099116][ T30] audit: type=1400 audit(1785515113.567:2746): avc: denied { mounton } for pid=28527 comm="syz.7.5476" path="/183/file0" dev="tmpfs" ino=1002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1522.249614][ T30] audit: type=1800 audit(1785515113.577:2747): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1522.376407][ T30] audit: type=1800 audit(1785515113.577:2748): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=510050 res=0 errno=0 [ 1522.463088][ T30] audit: type=1800 audit(1785515113.577:2749): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=510054 res=0 errno=0 [ 1522.569842][ T30] audit: type=1800 audit(1785515113.587:2750): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=510082 res=0 errno=0 [ 1522.703223][ T30] audit: type=1400 audit(1785515113.607:2751): avc: denied { create } for pid=28527 comm="syz.7.5476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1523.007266][ T9] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1523.078752][T28573] IPVS: Scheduler module ip_vs_ not found [ 1523.217937][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1523.256146][ T9] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1523.429899][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1523.874004][T28589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5489'. [ 1524.197629][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1524.363401][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1524.482597][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1524.531130][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1524.622964][ T9] usb 10-1: Product: syz [ 1524.644358][ T9] usb 10-1: Manufacturer: syz [ 1524.678078][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 1524.727956][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 1524.750427][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1524.784346][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 1525.934931][ T5732] usb 10-1: USB disconnect, device number 36 [ 1526.043684][T28632] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1526.209224][T28640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5505'. [ 1526.361684][T28644] netlink: 'syz.0.5505': attribute type 10 has an invalid length. [ 1526.369895][T28644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5505'. [ 1526.392185][T28644] bridge1: port 1(dummy0) entered blocking state [ 1526.398643][T28644] bridge1: port 1(dummy0) entered forwarding state [ 1527.154995][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 1527.155007][ T30] audit: type=1400 audit(1785515119.077:2823): avc: denied { recv } for pid=5594 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.163 dest=59784 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1527.253101][T28644] dummy0: left allmulticast mode [ 1527.294589][T28644] bridge1: port 1(dummy0) entered disabled state [ 1527.325465][ T30] audit: type=1400 audit(1785515119.117:2824): avc: denied { read write } for pid=23354 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1527.497577][ T30] audit: type=1400 audit(1785515119.117:2825): avc: denied { open } for pid=23354 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1527.601149][ T30] audit: type=1400 audit(1785515119.117:2826): avc: denied { ioctl } for pid=23354 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1527.683425][ T30] audit: type=1800 audit(1785515119.117:2827): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1527.723211][T28658] netlink: 'syz.0.5509': attribute type 10 has an invalid length. [ 1527.737305][T28658] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1527.746395][ T30] audit: type=1400 audit(1785515119.147:2828): avc: denied { read write } for pid=28647 comm="syz.7.5507" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1527.801729][ T30] audit: type=1400 audit(1785515119.147:2829): avc: denied { open } for pid=28647 comm="syz.7.5507" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1527.841956][T28661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1527.860664][ T30] audit: type=1400 audit(1785515119.157:2830): avc: denied { ioctl } for pid=28647 comm="syz.7.5507" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1527.916990][ T30] audit: type=1800 audit(1785515119.167:2831): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1527.967324][ T30] audit: type=1400 audit(1785515119.187:2832): avc: denied { map_create } for pid=28649 comm="syz.9.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1528.032703][T28550] Set syz1 is full, maxelem 65536 reached [ 1528.331950][T28661] Can't find ip_set type bitmax:ip [ 1528.349293][T28670] bridge_slave_0: left allmulticast mode [ 1528.372848][T28670] bridge_slave_0: left promiscuous mode [ 1528.408478][T28670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.426430][T28670] bridge_slave_1: left allmulticast mode [ 1528.434284][T28670] bridge_slave_1: left promiscuous mode [ 1528.447782][T28670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.467998][T28670] bond0: (slave veth0_to_bond): Releasing backup interface [ 1528.497451][T28670] bond0: (slave bond_slave_0): Releasing backup interface [ 1528.506578][T28670] bond0: (slave bond_slave_1): Releasing backup interface [ 1528.525976][T28670] team0: Port device team_slave_0 removed [ 1528.532634][T28670] team0: Port device team_slave_1 removed [ 1528.573566][T28670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.624262][ T9] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1528.647495][T28670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.678464][T28678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1528.686452][T28670] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1528.788939][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1528.800259][ T9] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1529.577866][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.625667][ T9] usb 10-1: config 0 has no interface number 0 [ 1529.685114][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1529.732755][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.782084][ T9] usb 10-1: Product: syz [ 1529.805327][ T9] usb 10-1: Manufacturer: syz [ 1529.838690][ T9] usb 10-1: SerialNumber: syz [ 1529.865971][ T9] usb 10-1: config 0 descriptor?? [ 1529.893598][ T9] uvcvideo 10-1:0.105: probe with driver uvcvideo failed with error -22 [ 1530.052488][T28691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5517'. [ 1530.143877][ T9] usb 10-1: USB disconnect, device number 37 [ 1530.356953][T28704] usb usb9: usbfs: process 28704 (syz.4.5519) did not claim interface 0 before use [ 1530.914293][ T9] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1531.033551][T28720] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5527'. [ 1531.096642][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.136333][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1531.169042][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.215509][ T9] usb 8-1: Product: syz [ 1531.241823][ T9] usb 8-1: Manufacturer: syz [ 1531.271794][ T9] usb 8-1: SerialNumber: syz [ 1531.294109][T18738] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.319929][T18738] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.345277][T18738] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.365137][T18738] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.504106][T21042] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1531.665189][T21042] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 1531.682091][T21042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1531.689013][ T5732] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1531.713662][T21042] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1531.725736][T21042] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1531.743887][T21042] usb 10-1: Product: syz [ 1531.752773][T21042] usb 10-1: Manufacturer: syz [ 1531.763248][T21042] usb 10-1: SerialNumber: syz [ 1531.776609][T21042] usb 10-1: config 0 descriptor?? [ 1531.793009][T28729] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1531.804701][T21042] usb 10-1: selecting invalid altsetting 0 [ 1531.855288][ T5732] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 1531.886323][ T5732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1531.941956][ T5732] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1531.966903][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1531.992844][ T5732] usb 1-1: Product: syz [ 1532.012208][ T5732] usb 1-1: Manufacturer: syz [ 1532.023454][ T5732] usb 1-1: SerialNumber: syz [ 1532.040253][ T5732] usb 1-1: config 0 descriptor?? [ 1532.053257][T28731] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1532.068875][T21042] usb 10-1: USB disconnect, device number 38 [ 1532.121273][ T5732] usb 1-1: selecting invalid altsetting 0 [ 1532.192887][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 1532.192911][ T30] audit: type=1800 audit(1785515124.107:2988): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=511083 res=0 errno=0 [ 1532.320585][ T30] audit: type=1800 audit(1785515124.107:2989): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=511084 res=0 errno=0 [ 1532.346039][ T9] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1532.368519][T21042] usb 1-1: USB disconnect, device number 81 [ 1532.374883][ T9] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1532.409402][ T9] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 1532.451100][ T30] audit: type=1800 audit(1785515124.147:2990): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=511063 res=0 errno=0 [ 1532.499021][ T30] audit: type=1800 audit(1785515124.157:2991): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=511085 res=0 errno=0 [ 1532.545152][ T30] audit: type=1800 audit(1785515124.157:2992): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=511106 res=0 errno=0 [ 1532.591540][ T30] audit: type=1800 audit(1785515124.157:2993): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=511125 res=0 errno=0 [ 1532.636859][ T30] audit: type=1800 audit(1785515124.157:2994): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=511152 res=0 errno=0 [ 1532.746528][ T9] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 1532.768348][ T30] audit: type=1800 audit(1785515124.157:2995): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=511165 res=0 errno=0 [ 1532.816633][ T9] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1532.923568][ T9] usb 8-1: USB disconnect, device number 38 [ 1532.938242][ T30] audit: type=1800 audit(1785515124.157:2996): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=511138 res=0 errno=0 [ 1532.997389][ T9] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 1533.021737][T28734] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1533.113221][ T30] audit: type=1800 audit(1785515124.167:2997): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=511178 res=0 errno=0 [ 1533.705196][ T9] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1533.775003][T21042] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1533.885969][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1533.913758][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.946002][T21042] usb 1-1: Using ep0 maxpacket: 16 [ 1533.965821][T21042] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.981160][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1534.031324][T21042] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.048609][ T9] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1534.094638][T21042] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1534.101862][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.128558][T21042] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1534.142084][ T9] usb 8-1: Product: syz [ 1534.159664][ T9] usb 8-1: Manufacturer: syz [ 1534.181393][T21042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.196447][ T9] usb 8-1: SerialNumber: syz [ 1534.232364][ T9] usb 8-1: selecting invalid altsetting 1 [ 1534.240352][T21042] usb 1-1: config 0 descriptor?? [ 1534.270610][ T9] usb 8-1: unit 6 not found! [ 1534.401180][T28783] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5544'. [ 1534.423903][ T9] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 1534.436565][T28783] dummy0: left promiscuous mode [ 1534.442501][T28783] bridge2: port 1(dummy0) entered blocking state [ 1534.449186][T28783] bridge2: port 1(dummy0) entered disabled state [ 1534.455771][T28783] dummy0: entered allmulticast mode [ 1534.461838][T28783] dummy0: entered promiscuous mode [ 1534.563317][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1534.628017][ T9] usb 8-1: USB disconnect, device number 39 [ 1534.679149][T21042] hid (null): unknown global tag 0xd [ 1534.698257][T25760] udevd[25760]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1534.716878][T28792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5545'. [ 1534.738210][T21042] hid (null): unknown global tag 0xe [ 1534.763256][T21042] hid (null): unknown global tag 0xe [ 1534.796976][T21042] hid (null): unknown global tag 0xc [ 1534.834869][T21042] hid (null): global environment stack underflow [ 1535.433260][T24191] libceph: connect (1)[c::]:6789 error -101 [ 1535.471914][T24191] libceph: mon0 (1)[c::]:6789 connect error [ 1535.654865][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1535.776019][T21042] libceph: connect (1)[c::]:6789 error -101 [ 1535.804172][T21042] libceph: mon0 (1)[c::]:6789 connect error [ 1535.824663][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1535.851609][ T9] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.907006][ T9] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1535.944184][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.970127][ T9] usb 5-1: Product: syz [ 1535.989073][ T9] usb 5-1: Manufacturer: syz [ 1536.009843][ T9] usb 5-1: SerialNumber: syz [ 1536.285818][T24191] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1536.297826][ T9] powermate 5-1:251.0: probe with driver powermate failed with error -22 [ 1536.321446][ T9] usb 5-1: USB disconnect, device number 23 [ 1536.355378][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 1536.366860][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 1536.437773][T28736] ceph: No mds server is up or the cluster is laggy [ 1536.471824][T24191] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1536.507338][T24191] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.526699][ T5732] usb 1-1: USB disconnect, device number 82 [ 1536.561179][T24191] usb 8-1: Product: syz [ 1536.589661][T24191] usb 8-1: Manufacturer: syz [ 1536.647977][T24191] usb 8-1: SerialNumber: syz [ 1537.454235][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5556'. [ 1537.757600][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 1537.757611][ T30] audit: type=1400 audit(1785515129.577:3115): avc: denied { setopt } for pid=28829 comm="syz.6.5556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1537.840159][T24191] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1537.958615][ T30] audit: type=1400 audit(1785515129.677:3116): avc: denied { name_bind } for pid=28829 comm="syz.6.5556" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1537.989122][T24191] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1538.095803][T24191] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1538.151283][ T30] audit: type=1800 audit(1785515129.857:3117): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0 [ 1538.178900][T24191] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1538.218988][T24191] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1538.242807][T24191] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1538.253351][ T30] audit: type=1800 audit(1785515129.877:3118): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1538.304240][ T5732] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1538.349786][ T30] audit: type=1800 audit(1785515130.047:3119): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1538.400847][ T30] audit: type=1800 audit(1785515130.217:3120): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=512212 res=0 errno=0 [ 1538.468322][ T30] audit: type=1800 audit(1785515130.217:3121): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=512213 res=0 errno=0 [ 1538.494904][ T9] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1538.520450][ T5732] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1538.548770][ T5732] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.575507][ T30] audit: type=1800 audit(1785515130.217:3122): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=512192 res=0 errno=0 [ 1538.603395][ T5732] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1538.620118][T28843] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1538.631579][T28844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.663869][ T5732] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1538.677306][T28842] IPVS: stopping backup sync thread 28843 ... [ 1538.692082][ T9] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1538.709100][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.717519][ T30] audit: type=1800 audit(1785515130.217:3123): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=512214 res=0 errno=0 [ 1538.744132][T28844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.755775][ T9] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1538.777275][T28846] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1538.785516][ T5732] usb 1-1: Product: syz [ 1538.804829][ T5732] usb 1-1: Manufacturer: syz [ 1538.818763][T28841] netlink: 'syz.7.5553': attribute type 12 has an invalid length. [ 1538.830031][ T9] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1538.853132][ T5732] usb 1-1: SerialNumber: syz [ 1538.864796][ T30] audit: type=1800 audit(1785515130.237:3124): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=512235 res=0 errno=0 [ 1538.895885][T28841] netlink: 'syz.7.5553': attribute type 29 has an invalid length. [ 1538.919388][ T9] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1538.937423][ T5732] usb 1-1: selecting invalid altsetting 1 [ 1538.950697][T28841] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5553'. [ 1538.978958][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.989605][ T5732] usb 1-1: unit 6 not found! [ 1539.028021][T28839] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1539.182574][T28850] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1539.212248][T28852] usb usb9: usbfs: process 28852 (syz.6.5563) did not claim interface 0 before use [ 1540.065452][T24191] usb 8-1: USB disconnect, device number 40 [ 1540.179936][T28873] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5570'. [ 1540.206558][T28873] Process accounting resumed [ 1540.333535][T28876] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5572'. [ 1540.409727][T28879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5573'. [ 1540.422664][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5573'. [ 1540.483558][T28881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5574'. [ 1540.617606][ T9] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 1540.662070][ T9] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input53 [ 1540.813620][ T9] usb 10-1: USB disconnect, device number 39 [ 1540.819706][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1540.844228][T21042] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1540.977799][T23976] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1540.988869][ T5732] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1541.037155][T21042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1541.051263][T23976] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1541.063095][T28891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5577'. [ 1541.117510][T28891] dummy0: left promiscuous mode [ 1541.122770][T28891] bridge10: port 1(dummy0) entered blocking state [ 1541.129261][T28891] bridge10: port 1(dummy0) entered disabled state [ 1541.136123][T28891] dummy0: entered allmulticast mode [ 1541.142091][T28891] dummy0: entered promiscuous mode [ 1541.161290][T21042] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1541.195967][T28893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5578'. [ 1541.231120][T21042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1541.245846][ T5732] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1541.280118][T28895] netlink: 'syz.6.5577': attribute type 10 has an invalid length. [ 1541.303111][T21042] usb 8-1: Product: syz [ 1541.334103][ T5732] usb 1-1: USB disconnect, device number 83 [ 1541.341623][T21042] usb 8-1: Manufacturer: syz [ 1541.351733][T28895] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5577'. [ 1541.381522][T21042] usb 8-1: SerialNumber: syz [ 1541.412833][T25760] udevd[25760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1541.435187][T28895] bridge10: port 1(dummy0) entered blocking state [ 1541.441700][T28895] bridge10: port 1(dummy0) entered forwarding state [ 1541.463280][T21042] usb 8-1: config 0 descriptor?? [ 1541.507803][T21042] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1541.552001][T28895] dummy0: left allmulticast mode [ 1541.559590][T21042] pctv452e: pctv452e_power_ctrl: 1 [ 1541.559590][T21042] [ 1541.586928][T28895] bridge10: port 1(dummy0) entered disabled state [ 1541.610110][T21042] usb 8-1: selecting invalid altsetting 3 [ 1541.739022][T21042] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1541.739022][T21042] [ 1542.508500][T21042] dvb-usb: bulk message failed: -22 (5/0) [ 1542.546952][T21042] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1542.686504][T21042] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1542.803319][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 1542.803330][ T30] audit: type=1800 audit(1785515134.717:3211): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1543.031782][T21042] usb 8-1: USB disconnect, device number 41 [ 1543.189625][ T30] audit: type=1400 audit(1785515134.877:3212): avc: denied { create } for pid=28907 comm="syz.0.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1543.224674][T28919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5587'. [ 1543.335180][ T30] audit: type=1400 audit(1785515134.947:3213): avc: denied { map } for pid=28909 comm="syz.6.5583" path="socket:[125222]" dev="sockfs" ino=125222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1543.424722][ T9] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1543.446029][ T30] audit: type=1800 audit(1785515134.947:3214): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=513139 res=0 errno=0 [ 1543.499455][ T30] audit: type=1800 audit(1785515134.947:3215): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=513140 res=0 errno=0 [ 1543.615580][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1543.633536][ T30] audit: type=1800 audit(1785515134.947:3216): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=513119 res=0 errno=0 [ 1543.676384][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.714280][T21042] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 1543.726720][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1543.753837][ T30] audit: type=1800 audit(1785515134.947:3217): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=513141 res=0 errno=0 [ 1543.799870][ T9] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1543.835008][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.868158][ T30] audit: type=1800 audit(1785515134.987:3218): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=513162 res=0 errno=0 [ 1543.900556][ T9] usb 10-1: Product: syz [ 1543.914494][ T9] usb 10-1: Manufacturer: syz [ 1543.937224][ T9] usb 10-1: SerialNumber: syz [ 1543.977108][ T9] usb 10-1: selecting invalid altsetting 1 [ 1543.990676][ T30] audit: type=1800 audit(1785515135.027:3219): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1544.028625][ T9] usb 10-1: unit 6 not found! [ 1544.180315][ T9] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 1544.197177][ T30] audit: type=1800 audit(1785515135.067:3220): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1544.410549][ T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1544.452727][ T9] usb 10-1: USB disconnect, device number 40 [ 1544.464171][T24191] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1544.505707][T25760] udevd[25760]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1544.645256][T24191] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.662143][T24191] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.687625][T24191] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.711297][T24191] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1544.742012][T24191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.777412][T28929] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1545.091922][T28942] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1545.116098][T28947] kAFS: unable to lookup cell '' [ 1545.166164][T28947] netlink: 'syz.7.5595': attribute type 10 has an invalid length. [ 1545.180193][T28949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5596'. [ 1545.218838][T28947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1545.253238][T28947] team0: Port device netdevsim1 added [ 1545.618622][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.341750][T24191] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1546.803986][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5601'. [ 1547.050187][T24191] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input54 [ 1547.074850][T23976] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1547.140314][T24191] usb 1-1: USB disconnect, device number 84 [ 1547.146347][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1547.290651][T23976] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1547.339917][T23976] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1547.391834][T23976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1547.435916][T23976] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1547.512557][T23976] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1547.557306][T23976] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1547.584850][T21042] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1547.592566][T23976] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1547.638140][T23976] usb 10-1: Product: syz [ 1547.661442][T23976] usb 10-1: Manufacturer: syz [ 1547.691274][T23976] cdc_wdm 10-1:1.0: skipping garbage [ 1547.699346][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1547.724501][T23976] cdc_wdm 10-1:1.0: skipping garbage [ 1547.743339][T23976] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1547.772933][T21042] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 1547.786094][T23976] cdc_wdm 10-1:1.0: Unknown control protocol [ 1547.813039][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1547.813050][ T30] audit: type=1800 audit(1785515139.727:3294): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=513877 res=0 errno=0 [ 1547.847104][T21042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1547.881944][T21042] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1547.930354][T21042] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1547.994591][T21042] usb 8-1: Product: syz [ 1548.097896][ T30] audit: type=1800 audit(1785515139.727:3295): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=513878 res=0 errno=0 [ 1548.128350][T21042] usb 8-1: Manufacturer: syz [ 1548.889349][T21042] usb 8-1: SerialNumber: syz [ 1548.913569][T21042] usb 8-1: config 0 descriptor?? [ 1548.950302][T28973] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1548.976569][ T30] audit: type=1800 audit(1785515139.727:3296): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=513857 res=0 errno=0 [ 1549.025900][T21042] usb 8-1: selecting invalid altsetting 0 [ 1549.180640][ T9] usb 10-1: USB disconnect, device number 41 [ 1549.213275][T28989] usb usb9: usbfs: process 28989 (syz.4.5610) did not claim interface 0 before use [ 1549.228582][ T30] audit: type=1800 audit(1785515139.787:3297): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=513899 res=0 errno=0 [ 1549.359063][T21042] usb 8-1: USB disconnect, device number 43 [ 1549.438309][ T30] audit: type=1800 audit(1785515139.797:3298): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=513916 res=0 errno=0 [ 1549.515202][T25353] udevd[25353]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1549.579359][ T30] audit: type=1400 audit(1785515139.887:3299): avc: denied { read write } for pid=28961 comm="syz.9.5600" name="cdc-wdm0" dev="devtmpfs" ino=4282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1549.744677][ T9] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1549.761674][ T30] audit: type=1400 audit(1785515139.887:3300): avc: denied { open } for pid=28961 comm="syz.9.5600" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1550.272929][T24191] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1550.496033][ T30] audit: type=1800 audit(1785515139.897:3301): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1550.524095][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1550.543534][T24191] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.003984][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5614'. [ 1551.235812][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.305675][T24191] usb 1-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 1551.326332][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1551.399296][ T30] audit: type=1400 audit(1785515140.787:3302): avc: denied { connect } for pid=28986 comm="syz.0.5609" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1551.431927][T24191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.455121][ T9] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1551.476407][T24191] usb 1-1: Product: syz [ 1551.495489][T24191] usb 1-1: Manufacturer: syz [ 1551.537423][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.561973][T24191] usb 1-1: SerialNumber: syz [ 1551.575542][ T30] audit: type=1400 audit(1785515140.787:3303): avc: denied { ioctl } for pid=28986 comm="syz.0.5609" path="socket:[125563]" dev="sockfs" ino=125563 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1551.607309][ T9] usb 10-1: Product: syz [ 1551.630735][ T9] usb 10-1: Manufacturer: syz [ 1551.662737][ T9] usb 10-1: SerialNumber: syz [ 1551.709270][ T9] usb 10-1: selecting invalid altsetting 1 [ 1551.747288][ T9] usb 10-1: unit 6 not found! [ 1551.894448][T29019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.911488][ T9] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 1552.027517][T29019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.071582][ T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1552.134095][ T9] usb 10-1: USB disconnect, device number 42 [ 1552.218136][T25214] udevd[25214]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1552.367815][T24191] usb 1-1: USB disconnect, device number 85 [ 1552.434806][ T5732] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1553.178729][ T5732] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.065903][ T5732] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1554.101406][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1554.101417][ T30] audit: type=1800 audit(1785515146.017:3355): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1554.165879][ T5732] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1554.233589][ T5732] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1554.263426][ T30] audit: type=1800 audit(1785515146.127:3356): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1554.289071][ T5732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.330573][T29015] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1554.383652][ T30] audit: type=1800 audit(1785515146.267:3357): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=514580 res=0 errno=0 [ 1554.553080][T29043] dlm: plock device version mismatch: kernel (1.2.0), user (1.4143972352.236) [ 1554.566157][ T30] audit: type=1800 audit(1785515146.267:3358): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=514609 res=0 errno=0 [ 1554.657330][ T30] audit: type=1800 audit(1785515146.267:3359): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=514587 res=0 errno=0 [ 1555.121032][T29021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1555.655399][ T30] audit: type=1800 audit(1785515146.267:3360): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=514588 res=0 errno=0 [ 1555.792522][ T30] audit: type=1800 audit(1785515146.267:3361): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=514589 res=0 errno=0 [ 1555.869549][ T5732] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 1555.899338][ T5732] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input55 [ 1555.945092][ T30] audit: type=1800 audit(1785515146.277:3362): pid=29037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5623" name="resume_offset" dev="sysfs" ino=1436 res=0 errno=0 [ 1556.024345][ T5732] usb 8-1: USB disconnect, device number 44 [ 1556.024381][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1556.083519][T29054] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5629'. [ 1556.106925][T29054] dummy0: left allmulticast mode [ 1556.111962][T29054] dummy0: left promiscuous mode [ 1556.117168][T29054] bridge2: port 1(dummy0) entered disabled state [ 1556.131436][T29054] bridge3: port 1(dummy0) entered blocking state [ 1556.137957][T29054] bridge3: port 1(dummy0) entered disabled state [ 1556.144472][T29054] dummy0: entered allmulticast mode [ 1556.150473][T29054] dummy0: entered promiscuous mode [ 1556.185268][ T30] audit: type=1800 audit(1785515146.297:3363): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=514629 res=0 errno=0 [ 1556.239002][T29056] netlink: 'syz.9.5629': attribute type 10 has an invalid length. [ 1556.266207][T29056] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5629'. [ 1556.303892][ T30] audit: type=1800 audit(1785515146.337:3364): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1556.332139][T29056] bridge3: port 1(dummy0) entered blocking state [ 1556.338605][T29056] bridge3: port 1(dummy0) entered forwarding state [ 1556.382453][T29056] dummy0: left allmulticast mode [ 1556.401286][T29056] bridge3: port 1(dummy0) entered disabled state [ 1556.852017][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1556.900938][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1556.936741][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1556.936754][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1557.060930][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1557.061749][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.061763][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1557.063311][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1557.063328][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.063339][ T9] usb 5-1: Product: syz [ 1557.063348][ T9] usb 5-1: Manufacturer: syz [ 1557.063357][ T9] usb 5-1: SerialNumber: syz [ 1557.078466][ T9] usb 5-1: selecting invalid altsetting 1 [ 1557.078770][ T9] usb 5-1: unit 6 not found! [ 1557.276732][ T9] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1557.292364][T29090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5639'. [ 1557.330554][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1557.333266][ T9] usb 5-1: USB disconnect, device number 24 [ 1557.430500][T25760] udevd[25760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1557.659376][T29100] FAULT_INJECTION: forcing a failure. [ 1557.659376][T29100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.689963][T29100] CPU: 0 UID: 0 PID: 29100 Comm: syz.7.5643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.689984][T29100] Tainted: [L]=SOFTLOCKUP [ 1557.689988][T29100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1557.689997][T29100] Call Trace: [ 1557.690001][T29100] [ 1557.690006][T29100] dump_stack_lvl+0x100/0x190 [ 1557.690024][T29100] should_fail_ex.cold+0x5/0xa [ 1557.690039][T29100] _copy_from_iter+0x1f4/0x1690 [ 1557.690056][T29100] ? __asan_memset+0x23/0x50 [ 1557.690068][T29100] ? __pfx__copy_from_iter+0x10/0x10 [ 1557.690083][T29100] ? __pfx___alloc_skb+0x10/0x10 [ 1557.690102][T29100] netlink_sendmsg+0x808/0xda0 [ 1557.690116][T29100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.690128][T29100] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1557.690147][T29100] ____sys_sendmsg+0xa4d/0xbe0 [ 1557.690162][T29100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.690174][T29100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1557.690196][T29100] ___sys_sendmsg+0x190/0x1e0 [ 1557.690214][T29100] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.690230][T29100] ? __lock_acquire+0x49f/0x1a40 [ 1557.690244][T29100] ? get_pid_task+0x106/0x250 [ 1557.690269][T29100] __sys_sendmsg+0x160/0x210 [ 1557.690283][T29100] ? __pfx___sys_sendmsg+0x10/0x10 [ 1557.690303][T29100] do_syscall_64+0x115/0x870 [ 1557.690316][T29100] ? clear_bhb_loop+0x40/0x90 [ 1557.690329][T29100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.690340][T29100] RIP: 0033:0x7ff34399e019 [ 1557.690350][T29100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.690362][T29100] RSP: 002b:00007ff3447dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.690373][T29100] RAX: ffffffffffffffda RBX: 00007ff343c25fa0 RCX: 00007ff34399e019 [ 1557.690380][T29100] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1557.690386][T29100] RBP: 00007ff3447dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.690392][T29100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.690399][T29100] R13: 00007ff343c26038 R14: 00007ff343c25fa0 R15: 00007ffee91e9da8 [ 1557.690412][T29100] [ 1558.238227][ T9] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1558.385121][T23976] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1558.406964][ T9] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 1558.426900][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1558.450867][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1558.461017][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1558.502355][ T9] usb 1-1: Product: syz [ 1558.514196][ T5732] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1558.527787][ T9] usb 1-1: Manufacturer: syz [ 1558.534244][T23976] usb 5-1: Using ep0 maxpacket: 16 [ 1558.542113][T23976] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1558.561745][T23976] usb 5-1: config 0 has no interface number 0 [ 1558.572280][ T9] usb 1-1: SerialNumber: syz [ 1558.639666][T23976] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1558.658570][ T9] usb 1-1: config 0 descriptor?? [ 1558.679412][ T5732] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1558.702221][ T5732] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1558.713781][T29098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1558.736771][T23976] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1558.771877][ T9] usb 1-1: selecting invalid altsetting 0 [ 1558.781598][ T5732] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1558.799588][T23976] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1558.828478][T23976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.854651][ T5732] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1558.876236][T23976] usb 5-1: Product: syz [ 1558.892130][T23976] usb 5-1: Manufacturer: syz [ 1558.897501][ T5732] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.913851][T23976] usb 5-1: SerialNumber: syz [ 1558.941222][T29108] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1558.960171][T23976] usb 5-1: config 0 descriptor?? [ 1558.992594][ T9] usb 1-1: USB disconnect, device number 86 [ 1559.049125][T23976] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1559.075994][T23976] nokiaca42v2 ttyUSB0: probe with driver nokiaca42v2 failed with error -22 [ 1559.107675][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 1559.107685][ T30] audit: type=1800 audit(1785515151.027:3452): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=515567 res=0 errno=0 [ 1559.166488][ T30] audit: type=1800 audit(1785515151.067:3453): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=515568 res=0 errno=0 [ 1559.193524][ T30] audit: type=1800 audit(1785515151.067:3454): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=515547 res=0 errno=0 [ 1559.217802][ T30] audit: type=1800 audit(1785515151.067:3455): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=515569 res=0 errno=0 [ 1559.240665][ T9] usb 5-1: USB disconnect, device number 25 [ 1559.252519][ T9] cypress_m8 5-1:0.35: device disconnected [ 1559.270308][ T30] audit: type=1800 audit(1785515151.077:3456): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=515608 res=0 errno=0 [ 1559.292935][ T30] audit: type=1800 audit(1785515151.077:3457): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=515624 res=0 errno=0 [ 1559.437236][ T30] audit: type=1800 audit(1785515151.347:3458): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1559.527778][ T30] audit: type=1800 audit(1785515151.407:3459): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1559.588334][T29134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5653'. [ 1559.612381][T29134] openvswitch: netlink: EtherType 0 is less than min 600 [ 1559.623401][ T30] audit: type=1800 audit(1785515151.437:3460): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1559.645003][ T30] audit: type=1800 audit(1785515151.497:3461): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1560.500413][ T5732] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 1560.949111][ T5732] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input56 [ 1561.092773][ T5732] usb 10-1: USB disconnect, device number 43 [ 1561.092805][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1561.148416][T29148] nbd: must specify a device to reconfigure [ 1561.323974][T23976] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1561.474198][T23976] usb 1-1: Using ep0 maxpacket: 16 [ 1561.493598][T23976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.530863][T23976] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1561.568634][T23976] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1561.598310][T23976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.640529][T23976] usb 1-1: config 0 descriptor?? [ 1563.071387][T29183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.096397][T29183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.459541][T29194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5677'. [ 1563.479990][T29194] dummy0: left promiscuous mode [ 1563.543529][T29197] netlink: 'syz.6.5677': attribute type 10 has an invalid length. [ 1563.569935][T29197] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5677'. [ 1563.597084][T29197] dummy0: entered promiscuous mode [ 1564.041436][T29211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5683'. [ 1564.170244][T29213] xt_NFQUEUE: number of total queues is 0 [ 1564.179507][ T9] usb 1-1: USB disconnect, device number 87 [ 1564.250021][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1564.250039][ T30] audit: type=1800 audit(1785515156.167:3526): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1564.501977][T29225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1564.602767][ T30] audit: type=1800 audit(1785515156.277:3527): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1564.652910][T29225] netlink: 'syz.4.5690': attribute type 10 has an invalid length. [ 1564.660949][T29225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1564.768802][ T30] audit: type=1800 audit(1785515156.347:3528): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1564.897887][ T30] audit: type=1400 audit(1785515156.367:3529): avc: denied { ioctl } for pid=29219 comm="syz.7.5688" path="socket:[126833]" dev="sockfs" ino=126833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1565.064317][ T30] audit: type=1800 audit(1785515156.387:3530): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1565.171442][ T30] audit: type=1400 audit(1785515156.437:3531): avc: denied { ioctl } for pid=29219 comm="syz.7.5688" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1565.286028][ T30] audit: type=1400 audit(1785515156.447:3532): avc: denied { read } for pid=29219 comm="syz.7.5688" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1565.445600][ T30] audit: type=1400 audit(1785515156.447:3533): avc: denied { open } for pid=29219 comm="syz.7.5688" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1565.596956][T29263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5699'. [ 1565.679048][ T30] audit: type=1400 audit(1785515156.447:3534): avc: denied { ioctl } for pid=29219 comm="syz.7.5688" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x4814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1565.836612][ T30] audit: type=1800 audit(1785515156.557:3535): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1565.970332][T29276] bridge_slave_0: left allmulticast mode [ 1565.993412][T29276] bridge_slave_0: left promiscuous mode [ 1566.058689][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5704'. [ 1566.122606][T29276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.207207][T29285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5708'. [ 1566.221233][T29276] bridge_slave_1: left allmulticast mode [ 1566.276468][T29276] bridge_slave_1: left promiscuous mode [ 1566.317035][T29276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.397515][T29276] bond0: (slave bond_slave_0): Releasing backup interface [ 1566.421453][T29276] bond0: (slave bond_slave_1): Releasing backup interface [ 1566.442739][T29276] team0: Port device team_slave_0 removed [ 1566.452071][T29276] team0: Port device team_slave_1 removed [ 1566.461372][T29276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.476684][T29276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1566.493387][T29276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1566.569279][T29277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1568.739548][T29330] FAULT_INJECTION: forcing a failure. [ 1568.739548][T29330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.840663][T29330] CPU: 0 UID: 0 PID: 29330 Comm: syz.0.5722 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.840684][T29330] Tainted: [L]=SOFTLOCKUP [ 1568.840688][T29330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1568.840695][T29330] Call Trace: [ 1568.840699][T29330] [ 1568.840704][T29330] dump_stack_lvl+0x100/0x190 [ 1568.840722][T29330] should_fail_ex.cold+0x5/0xa [ 1568.840737][T29330] _copy_from_iter+0x1f4/0x1690 [ 1568.840754][T29330] ? __asan_memset+0x23/0x50 [ 1568.840765][T29330] ? __pfx__copy_from_iter+0x10/0x10 [ 1568.840780][T29330] ? __pfx___alloc_skb+0x10/0x10 [ 1568.840798][T29330] netlink_sendmsg+0x808/0xda0 [ 1568.840812][T29330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1568.840824][T29330] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1568.840843][T29330] ____sys_sendmsg+0xa4d/0xbe0 [ 1568.840858][T29330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1568.840871][T29330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1568.840893][T29330] ___sys_sendmsg+0x190/0x1e0 [ 1568.840911][T29330] ? __pfx____sys_sendmsg+0x10/0x10 [ 1568.840927][T29330] ? __lock_acquire+0x49f/0x1a40 [ 1568.840941][T29330] ? get_pid_task+0x106/0x250 [ 1568.840965][T29330] __sys_sendmsg+0x160/0x210 [ 1568.840979][T29330] ? __pfx___sys_sendmsg+0x10/0x10 [ 1568.840999][T29330] do_syscall_64+0x115/0x870 [ 1568.841011][T29330] ? clear_bhb_loop+0x40/0x90 [ 1568.841024][T29330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.841035][T29330] RIP: 0033:0x7f755479e019 [ 1568.841045][T29330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.841055][T29330] RSP: 002b:00007f755559d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1568.841067][T29330] RAX: ffffffffffffffda RBX: 00007f7554a25fa0 RCX: 00007f755479e019 [ 1568.841074][T29330] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1568.841080][T29330] RBP: 00007f755559d090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.841088][T29330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.841095][T29330] R13: 00007f7554a26038 R14: 00007f7554a25fa0 R15: 00007fff347cf058 [ 1568.841109][T29330] [ 1569.413784][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1569.413797][ T30] audit: type=1800 audit(1785515161.257:3586): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1569.577199][ T30] audit: type=1800 audit(1785515161.287:3587): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1569.660168][ T30] audit: type=1800 audit(1785515161.327:3588): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1569.751670][ T30] audit: type=1800 audit(1785515161.397:3589): pid=29345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5726" name="new_id" dev="sysfs" ino=21888 res=0 errno=0 [ 1569.908895][ T30] audit: type=1400 audit(1785515161.557:3590): avc: denied { map } for pid=29353 comm="syz.0.5730" path="socket:[127451]" dev="sockfs" ino=127451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1570.060538][ T30] audit: type=1800 audit(1785515161.607:3591): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=516719 res=0 errno=0 [ 1570.181263][ T30] audit: type=1800 audit(1785515161.617:3592): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=516729 res=0 errno=0 [ 1570.218575][ T30] audit: type=1800 audit(1785515161.717:3593): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1570.285028][ T30] audit: type=1800 audit(1785515161.767:3594): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1570.324034][ T5732] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1570.373529][ T30] audit: type=1400 audit(1785515161.767:3595): avc: denied { create } for pid=29360 comm="syz.6.5729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1570.478887][ T5732] usb 5-1: not running at top speed; connect to a high speed hub [ 1570.489563][ T5732] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1570.501554][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.527755][ T5732] usb 5-1: Product: syz [ 1570.540336][ T5732] usb 5-1: Manufacturer: syz [ 1570.577212][ T5732] usb 5-1: SerialNumber: syz [ 1570.596648][ T5732] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 1570.663250][ T5732] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1570.752005][ T5732] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1570.807080][ T5732] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1570.874875][ T5732] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1570.949996][T29388] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5740'. [ 1571.012491][T29388] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5740'. [ 1571.481547][T29408] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5746'. [ 1571.528508][T29408] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1571.653798][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5746'. [ 1571.767876][ T5732] usb 5-1: USB disconnect, device number 26 [ 1571.795636][ T5732] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1571.849299][ T5732] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1572.781584][ T5732] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1572.867920][ T5732] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1574.889670][ T5732] keyspan 5-1:1.0: device disconnected [ 1574.940577][T23976] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1575.091566][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1575.091584][ T30] audit: type=1800 audit(1785515167.007:3659): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1575.259964][T23976] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1575.301275][T23976] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1575.319391][ T30] audit: type=1800 audit(1785515167.207:3660): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1575.371655][T23976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1575.413105][T23976] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1575.431660][ T30] audit: type=1800 audit(1785515167.317:3661): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1575.459290][T29441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5757'. [ 1575.483137][T23976] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1575.529136][T23976] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1575.544771][ T30] audit: type=1400 audit(1785515167.397:3662): avc: denied { connect } for pid=29439 comm="syz.7.5758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1575.573314][T23976] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1575.608994][T23976] usb 10-1: Product: syz [ 1575.629598][T23976] usb 10-1: Manufacturer: syz [ 1575.637995][ T30] audit: type=1800 audit(1785515167.427:3663): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1575.687396][T29447] ieee802154 phy1 wpan1: encryption failed: -22 [ 1575.702679][T23976] cdc_wdm 10-1:1.0: skipping garbage [ 1575.750077][T23976] cdc_wdm 10-1:1.0: skipping garbage [ 1575.775374][ T30] audit: type=1800 audit(1785515167.587:3664): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1575.802749][T23976] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1575.841447][T23976] cdc_wdm 10-1:1.0: Unknown control protocol [ 1576.237806][T23976] usb 10-1: USB disconnect, device number 44 [ 1576.723485][ T30] audit: type=1800 audit(1785515167.617:3665): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518100 res=0 errno=0 [ 1577.122122][T29453] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1577.209487][ T30] audit: type=1800 audit(1785515167.617:3666): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=518131 res=0 errno=0 [ 1577.272077][T29453] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1577.353351][T29453] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1577.435726][ T30] audit: type=1800 audit(1785515167.667:3667): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=518107 res=0 errno=0 [ 1577.624652][ T30] audit: type=1800 audit(1785515167.667:3668): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=518108 res=0 errno=0 [ 1577.678241][T23976] IPVS: starting estimator thread 0... [ 1577.804428][T29483] IPVS: using max 79 ests per chain, 189600 per kthread [ 1578.113300][T29493] netlink: 'syz.0.5771': attribute type 11 has an invalid length. [ 1578.404128][T23976] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1578.554984][T23976] usb 1-1: Using ep0 maxpacket: 16 [ 1578.597357][T23976] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1578.651074][T23976] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1578.715858][T23976] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1578.740250][T23976] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1578.792130][T23976] usb 1-1: Product: syz [ 1578.828160][T23976] usb 1-1: Manufacturer: syz [ 1578.878498][T23976] usb 1-1: SerialNumber: syz [ 1578.911159][T23976] usb 1-1: config 0 descriptor?? [ 1578.941218][T29512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1579.209644][T29494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.261828][T29494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.258065][T23976] usb 1-1: USB disconnect, device number 88 [ 1582.290886][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1582.290897][ T30] audit: type=1800 audit(1785515174.207:3712): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1582.442745][ T30] audit: type=1800 audit(1785515174.287:3713): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1582.469971][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1582.615809][ T30] audit: type=1800 audit(1785515174.437:3714): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5783" name="reclaim" dev="sysfs" ino=1147 res=0 errno=0 [ 1582.673203][T29526] netlink: 'syz.4.5782': attribute type 10 has an invalid length. [ 1582.682399][T29526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1582.744232][T24191] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 1582.762435][ T30] audit: type=1800 audit(1785515174.437:3715): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1582.873061][ T30] audit: type=1800 audit(1785515174.527:3716): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1582.981154][ T30] audit: type=1800 audit(1785515174.747:3717): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1583.005069][T24191] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 1583.026477][T24191] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1583.042676][T24191] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1583.056674][ T30] audit: type=1400 audit(1785515174.767:3718): avc: denied { kexec_image_load } for pid=29537 comm="syz.9.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1583.078424][T24191] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1583.096606][T24191] usb 8-1: Product: syz [ 1583.106228][T24191] usb 8-1: Manufacturer: syz [ 1583.115637][T24191] usb 8-1: SerialNumber: syz [ 1583.123105][ T30] audit: type=1804 audit(1785515174.827:3719): pid=29538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.5785" name="/newroot/241/file0" dev="tmpfs" ino=1319 res=1 errno=0 [ 1583.149585][T24191] usb 8-1: config 0 descriptor?? [ 1583.162076][T29524] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1583.186905][T24191] usb 8-1: selecting invalid altsetting 0 [ 1583.201463][ T30] audit: type=1800 audit(1785515175.097:3720): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518883 res=0 errno=0 [ 1583.227114][T29546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5784'. [ 1583.284970][ T30] audit: type=1800 audit(1785515175.097:3721): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=518915 res=0 errno=0 [ 1583.398387][T24191] usb 8-1: USB disconnect, device number 45 [ 1583.888394][T29557] netlink: 3752 bytes leftover after parsing attributes in process `syz.9.5791'. [ 1583.908227][T29559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5790'. [ 1583.986286][T29562] netlink: 'syz.4.5790': attribute type 10 has an invalid length. [ 1584.031446][T29562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5790'. [ 1584.184086][T24191] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1584.355970][T24191] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1584.364049][T23976] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1584.376500][T24191] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1584.396843][T24191] usb 1-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 1584.406542][T24191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.417754][T24191] usb 1-1: Product: syz [ 1584.421974][T24191] usb 1-1: Manufacturer: ﴀ豈⻕ᯀ됍蚡銤㊄⍑ῦ귵槍髉㔂었罼ୗ嫦矶声㥭蓞५魚ꚲ샕푴搼풴Ⱝ쐎ͨ췉ꦣ㙷뉙⹘☔鵞⪪竽혭僚⹝✞뎳챓㆗䓃힘謣밬蚇᥏豰闅学誴ꄟ逃陽儍㆑⸴镭ᤫ數⟩漤꿿㤤얙䛠沘爊報歓༾攊⺳塀阡∹묉畹Ƶ砥깆⃉漸銿桕᱌声花 [ 1584.466074][T24191] usb 1-1: SerialNumber: syz [ 1584.534211][T23976] usb 10-1: Using ep0 maxpacket: 32 [ 1584.543580][T23976] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1584.556896][T23976] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.573768][T23976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1584.617639][T23976] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1584.650857][T23976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.673484][T29580] No source specified [ 1584.696568][T23976] usb 10-1: Product: syz [ 1584.704571][T24191] usb 1-1: unit 4 not found! [ 1584.720657][T23976] usb 10-1: Manufacturer: syz [ 1584.731159][T24191] usb 1-1: unit 255 not found! [ 1584.750913][T23976] usb 10-1: SerialNumber: syz [ 1585.128166][T23976] usb 10-1: unit 4 not found! [ 1585.158978][T24191] usb 1-1: USB disconnect, device number 89 [ 1585.171908][T23976] usb 10-1: unit 0 not found! [ 1585.257269][T29567] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x35 (-16) [ 1585.346889][T23976] usb 10-1: USB disconnect, device number 45 [ 1585.416193][T25760] udevd[25760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1585.541968][T25214] udevd[25214]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1586.173739][T29614] FAULT_INJECTION: forcing a failure. [ 1586.173739][T29614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.254404][T29614] CPU: 0 UID: 0 PID: 29614 Comm: syz.9.5808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1586.254424][T29614] Tainted: [L]=SOFTLOCKUP [ 1586.254428][T29614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1586.254434][T29614] Call Trace: [ 1586.254438][T29614] [ 1586.254442][T29614] dump_stack_lvl+0x100/0x190 [ 1586.254460][T29614] should_fail_ex.cold+0x5/0xa [ 1586.254474][T29614] _copy_from_user+0x2e/0xd0 [ 1586.254490][T29614] bpf_test_init.isra.0+0xaf/0x100 [ 1586.254513][T29614] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 1586.254536][T29614] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1586.254554][T29614] ? find_held_lock+0x2b/0x80 [ 1586.254565][T29614] ? __fget_files+0x215/0x3d0 [ 1586.254578][T29614] ? __fget_files+0x21f/0x3d0 [ 1586.254592][T29614] ? fput+0x79/0x100 [ 1586.254604][T29614] ? __bpf_prog_get+0x97/0x2a0 [ 1586.254619][T29614] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1586.254637][T29614] __sys_bpf+0x2a12/0x4e80 [ 1586.254652][T29614] ? __pfx___sys_bpf+0x10/0x10 [ 1586.254662][T29614] ? find_held_lock+0x2b/0x80 [ 1586.254671][T29614] ? get_pid_task+0xfc/0x250 [ 1586.254680][T29614] ? get_pid_task+0xfc/0x250 [ 1586.254697][T29614] ? find_held_lock+0x2b/0x80 [ 1586.254709][T29614] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1586.254720][T29614] ? find_held_lock+0x2b/0x80 [ 1586.254729][T29614] ? ksys_write+0x190/0x250 [ 1586.254744][T29614] ? ksys_write+0x190/0x250 [ 1586.254770][T29614] ? fput+0x79/0x100 [ 1586.254785][T29614] ? __x64_sys_bpf+0xce/0x140 [ 1586.254795][T29614] __x64_sys_bpf+0xce/0x140 [ 1586.254806][T29614] ? do_syscall_64+0x90/0x870 [ 1586.254820][T29614] do_syscall_64+0x115/0x870 [ 1586.254832][T29614] ? clear_bhb_loop+0x40/0x90 [ 1586.254845][T29614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.254856][T29614] RIP: 0033:0x7f5f5d59e019 [ 1586.254866][T29614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.254877][T29614] RSP: 002b:00007f5f5e4cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1586.254888][T29614] RAX: ffffffffffffffda RBX: 00007f5f5d825fa0 RCX: 00007f5f5d59e019 [ 1586.254895][T29614] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 1586.254901][T29614] RBP: 00007f5f5e4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.254908][T29614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.254914][T29614] R13: 00007f5f5d826038 R14: 00007f5f5d825fa0 R15: 00007fff9da97558 [ 1586.254928][T29614] [ 1586.869105][T29627] sg_write: data in/out 808464396/116 bytes for SCSI command 0x30-- guessing data in; [ 1586.869105][T29627] program syz.0.5812 not setting count and/or reply_len properly [ 1586.928881][T29632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5816'. [ 1586.946604][T29631] loop5: detected capacity change from 0 to 3239 [ 1587.038643][T29634] loop5: detected capacity change from 3239 to 5295 [ 1587.129135][T29636] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5817'. [ 1587.161576][T25229] Buffer I/O error on dev loop5, logical block 661, async page read [ 1587.218990][T25760] Buffer I/O error on dev loop5, logical block 661, async page read [ 1587.326717][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 1587.326728][ T30] audit: type=1800 audit(1785515179.247:3800): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=520536 res=0 errno=0 [ 1588.213869][ T30] audit: type=1800 audit(1785515179.287:3801): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=520546 res=0 errno=0 [ 1588.291254][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'. [ 1588.333400][ T30] audit: type=1400 audit(1785515179.957:3802): avc: denied { unmount } for pid=23617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1588.948045][ T30] audit: type=1400 audit(1785515180.187:3803): avc: denied { bind } for pid=29646 comm="syz.0.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1589.078248][ T30] audit: type=1400 audit(1785515180.217:3804): avc: denied { setopt } for pid=29646 comm="syz.0.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1589.118811][T29655] FAULT_INJECTION: forcing a failure. [ 1589.118811][T29655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.170310][T29655] CPU: 0 UID: 0 PID: 29655 Comm: syz.4.5826 Tainted: G L syzkaller #0 PREEMPT(full) [ 1589.170330][T29655] Tainted: [L]=SOFTLOCKUP [ 1589.170334][T29655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1589.170341][T29655] Call Trace: [ 1589.170345][T29655] [ 1589.170350][T29655] dump_stack_lvl+0x100/0x190 [ 1589.170369][T29655] should_fail_ex.cold+0x5/0xa [ 1589.170384][T29655] _copy_from_user+0x2e/0xd0 [ 1589.170401][T29655] kstrtouint_from_user+0xd6/0x1d0 [ 1589.170413][T29655] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1589.170424][T29655] ? __lock_acquire+0x49f/0x1a40 [ 1589.170444][T29655] proc_fail_nth_write+0x83/0x220 [ 1589.170462][T29655] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1589.170483][T29655] vfs_write+0x2aa/0x1050 [ 1589.170501][T29655] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1589.170520][T29655] ? __pfx_vfs_write+0x10/0x10 [ 1589.170536][T29655] ? __fget_files+0x215/0x3d0 [ 1589.170551][T29655] ? __fget_files+0x21f/0x3d0 [ 1589.170566][T29655] ksys_write+0x12a/0x250 [ 1589.170583][T29655] ? __pfx_ksys_write+0x10/0x10 [ 1589.170604][T29655] do_syscall_64+0x115/0x870 [ 1589.170617][T29655] ? clear_bhb_loop+0x40/0x90 [ 1589.170631][T29655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.170643][T29655] RIP: 0033:0x7f43e775e84e [ 1589.170652][T29655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1589.170663][T29655] RSP: 002b:00007f43e8738fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1589.170677][T29655] RAX: ffffffffffffffda RBX: 00007f43e87396c0 RCX: 00007f43e775e84e [ 1589.170684][T29655] RDX: 0000000000000001 RSI: 00007f43e87390a0 RDI: 0000000000000004 [ 1589.170691][T29655] RBP: 00007f43e8739090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.170697][T29655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.170703][T29655] R13: 00007f43e7a26038 R14: 00007f43e7a25fa0 R15: 00007ffd9cfba988 [ 1589.170718][T29655] [ 1589.377627][ T30] audit: type=1800 audit(1785515180.837:3805): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 1589.398800][ T30] audit: type=1800 audit(1785515180.857:3806): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1589.419835][ T30] audit: type=1800 audit(1785515180.907:3807): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1589.440806][ T30] audit: type=1800 audit(1785515181.077:3808): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1589.473368][ T30] audit: type=1800 audit(1785515181.387:3809): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1589.703991][T23976] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1589.928964][T23976] usb 8-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 1589.979731][T23976] usb 8-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 1590.013634][T29678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5833'. [ 1590.052620][T23976] usb 8-1: Product: syz [ 1590.059852][T29678] dummy0: left promiscuous mode [ 1590.082683][T23976] usb 8-1: Manufacturer: syz [ 1590.115450][T23976] usb 8-1: config 0 descriptor?? [ 1590.127510][T29682] netlink: 'syz.0.5833': attribute type 10 has an invalid length. [ 1590.147716][T29682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5833'. [ 1590.162185][T23976] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1590.181180][T23976] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 1590.204975][T29682] dummy0: entered promiscuous mode [ 1590.372071][ T9] usb 8-1: USB disconnect, device number 46 [ 1590.384068][ T9] ftdi_sio 8-1:0.0: device disconnected [ 1591.034536][ T9] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1591.204032][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1591.231903][ T9] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1591.278868][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.323144][ T9] usb 10-1: config 0 descriptor?? [ 1591.329650][T23976] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1591.507800][T23976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.524129][T24191] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1591.550358][T23976] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1591.573231][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1591.599214][T23976] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1591.614986][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5843'. [ 1591.629842][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1591.668782][T23976] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1591.696403][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1591.718460][T24191] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 1591.737131][T23976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.753193][ T9] usb 10-1: media controller created [ 1591.771190][T29696] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 1591.780057][T24191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1591.791553][T23976] usb 5-1: Product: syz [ 1591.811546][T23976] usb 5-1: Manufacturer: syz [ 1591.830458][T29696] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 1591.847853][T24191] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1591.863875][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1591.878443][T23976] usb 5-1: SerialNumber: syz [ 1591.898333][T24191] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1591.942938][T24191] usb 1-1: Product: syz [ 1591.975752][T24191] usb 1-1: Manufacturer: syz [ 1591.982916][ T9] az6027: usb out operation failed. (-71) [ 1591.996389][T24191] usb 1-1: SerialNumber: syz [ 1592.022957][ T9] az6027: usb out operation failed. (-71) [ 1592.032162][T24191] usb 1-1: config 0 descriptor?? [ 1592.059350][ T9] stb0899_attach: Driver disabled by Kconfig [ 1592.070649][T29729] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1592.090558][ T9] az6027: no front-end attached [ 1592.090558][ T9] [ 1592.103830][T24191] usb 1-1: selecting invalid altsetting 0 [ 1592.144955][ T9] az6027: usb out operation failed. (-71) [ 1592.185329][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1592.235256][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input57 [ 1592.296777][T24191] usb 1-1: USB disconnect, device number 90 [ 1592.339816][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1592.339827][ T30] audit: type=1800 audit(1785515184.257:3883): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521957 res=0 errno=0 [ 1592.371660][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1592.463454][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1592.546251][ T9] usb 10-1: USB disconnect, device number 46 [ 1592.587906][ T30] audit: type=1800 audit(1785515184.307:3884): pid=25229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=521886 res=0 errno=0 [ 1592.702770][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1592.715880][T23976] usb 5-1: USB disconnect, device number 27 [ 1592.737682][ T30] audit: type=1800 audit(1785515184.307:3885): pid=25229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=521889 res=0 errno=0 [ 1592.828984][T25229] udevd[25229]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1592.913144][ T30] audit: type=1800 audit(1785515184.307:3886): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521998 res=0 errno=0 [ 1592.970029][T29759] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5849'. [ 1593.030720][ T30] audit: type=1800 audit(1785515184.337:3887): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522078 res=0 errno=0 [ 1593.127021][ T30] audit: type=1400 audit(1785515184.347:3888): avc: denied { setopt } for pid=29720 comm="syz.7.5839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1593.268533][T29759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29759 comm=syz.9.5849 [ 1593.803996][T29766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'. [ 1594.062988][ T30] audit: type=1800 audit(1785515184.367:3889): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=522017 res=0 errno=0 [ 1594.231630][T29772] dlm: no locking on control device [ 1594.266580][ T30] audit: type=1800 audit(1785515184.477:3890): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1594.361998][ T30] audit: type=1800 audit(1785515184.647:3891): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=521783 res=0 errno=0 [ 1594.527685][ T30] audit: type=1800 audit(1785515184.647:3892): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=521784 res=0 errno=0 [ 1594.873972][ T9] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1595.045225][ T9] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 1595.076902][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1595.100449][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1595.125615][ T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1595.153794][ T9] usb 10-1: Product: syz [ 1595.168283][ T9] usb 10-1: Manufacturer: syz [ 1595.183160][ T9] usb 10-1: SerialNumber: syz [ 1595.200366][ T9] usb 10-1: config 0 descriptor?? [ 1595.222144][T29786] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1595.244146][ T9] usb 10-1: selecting invalid altsetting 0 [ 1595.439502][ T9] IPVS: starting estimator thread 0... [ 1595.521320][T23976] usb 10-1: USB disconnect, device number 47 [ 1595.637561][T29789] IPVS: using max 78 ests per chain, 187200 per kthread [ 1596.107511][T29796] bridge4: entered promiscuous mode [ 1597.214029][T29796] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1597.659590][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1597.659604][ T30] audit: type=1800 audit(1785515189.577:3912): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522798 res=0 errno=0 [ 1597.688158][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1598.517763][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1598.630642][ T30] audit: type=1800 audit(1785515189.617:3913): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522809 res=0 errno=0 [ 1598.674666][T29801] bond0: (slave bond_slave_0): Releasing backup interface [ 1598.715128][T29804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5865'. [ 1598.730807][ T30] audit: type=1800 audit(1785515190.477:3914): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1598.755612][T29801] bond0: (slave bond_slave_1): Releasing backup interface [ 1598.779386][T29801] team0: Port device team_slave_0 removed [ 1598.797295][T29801] team0: Port device team_slave_1 removed [ 1598.805808][ T30] audit: type=1800 audit(1785515190.517:3915): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1598.841065][T29812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5864'. [ 1598.850529][T29801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.868112][T29801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.891849][T29801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1598.913492][ T30] audit: type=1800 audit(1785515190.617:3916): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1599.007403][T29804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1599.154987][ T30] audit: type=1800 audit(1785515191.057:3917): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1599.316177][ T30] audit: type=1800 audit(1785515191.127:3918): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1599.418413][T29823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1599.433438][ T30] audit: type=1800 audit(1785515191.207:3919): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1599.487812][T24191] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1599.572100][ T30] audit: type=1800 audit(1785515191.427:3920): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1599.678867][ T30] audit: type=1800 audit(1785515191.577:3921): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1599.701952][T24950] Bluetooth: hci4: command 0x1003 tx timeout [ 1599.714824][ T4926] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1599.741420][T24191] usb 10-1: Using ep0 maxpacket: 16 [ 1599.859286][T24191] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1599.875353][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1599.906732][T29834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5874'. [ 1599.926180][T24191] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 1600.007681][T29834] dummy0: left allmulticast mode [ 1600.012679][T29834] dummy0: left promiscuous mode [ 1600.018019][T29834] bridge2: port 1(dummy0) entered disabled state [ 1600.026536][T29834] bridge5: port 1(dummy0) entered blocking state [ 1600.032978][T29834] bridge5: port 1(dummy0) entered disabled state [ 1600.040188][T29834] dummy0: entered allmulticast mode [ 1600.046425][T29834] dummy0: entered promiscuous mode [ 1600.075002][T24191] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1600.116498][T29832] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1600.134874][T24191] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.146289][T24191] usb 10-1: config 0 descriptor?? [ 1600.151583][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1600.181790][T24191] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1600.194817][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1600.235809][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1600.249615][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.277672][ T9] usb 1-1: Product: syz [ 1600.289499][ T9] usb 1-1: Manufacturer: syz [ 1600.299691][ T9] usb 1-1: SerialNumber: syz [ 1601.350110][T29845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.417506][T29845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.457838][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1603.457849][ T30] audit: type=1400 audit(1785515195.377:3937): avc: denied { create } for pid=29847 comm="syz.7.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1603.509224][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1603.543463][T24191] usb 10-1: USB disconnect, device number 48 [ 1603.575972][ T9] usb 1-1: 2:1 : unsupported format bits 0xd6000008 [ 1603.639990][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1603.678848][ T30] audit: type=1400 audit(1785515195.417:3938): avc: denied { write } for pid=29847 comm="syz.7.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1603.844946][T29866] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.5882'. [ 1603.877435][ T30] audit: type=1800 audit(1785515195.487:3939): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1603.910728][ T9] usb 1-1: USB disconnect, device number 92 [ 1604.499334][T29861] nvme_fabrics: missing parameter 'transport=%s' [ 1604.903879][ T30] audit: type=1800 audit(1785515195.547:3940): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1604.938434][T29861] nvme_fabrics: missing parameter 'nqn=%s' [ 1605.089756][ T30] audit: type=1800 audit(1785515195.587:3941): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1605.117720][T29881] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5889'. [ 1605.266400][ T30] audit: type=1800 audit(1785515195.697:3942): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1605.353560][T29886] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1605.365490][ T30] audit: type=1800 audit(1785515195.747:3943): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1605.409060][ T30] audit: type=1800 audit(1785515195.787:3944): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524363 res=0 errno=0 [ 1605.456050][ T30] audit: type=1800 audit(1785515195.787:3945): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524373 res=0 errno=0 [ 1605.500345][ T30] audit: type=1800 audit(1785515195.827:3946): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=524195 res=0 errno=0 [ 1606.059098][T29896] No memory to map [ 1606.068467][T29894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5895'. [ 1606.157147][T29898] netlink: 'syz.7.5895': attribute type 10 has an invalid length. [ 1606.188922][T29898] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5895'. [ 1606.230592][T29898] dummy0: left allmulticast mode [ 1606.249358][T29898] bridge5: port 1(dummy0) entered disabled state [ 1607.055157][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.244447][T29937] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1607.638175][T29951] gadgetfs: bound to dummy_udc driver [ 1607.837396][T29960] lo: entered allmulticast mode [ 1607.895488][T29960] lo: left allmulticast mode [ 1608.289638][T24191] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1608.309391][T29958] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1609.320992][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1609.321004][ T30] audit: type=1800 audit(1785515201.237:3984): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1611.303076][T29970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.314699][T24191] usb 1-1: Using ep0 maxpacket: 8 [ 1611.460452][T29970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.497529][ T30] audit: type=1800 audit(1785515202.267:3985): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1611.529802][T24191] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1611.585368][T24191] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1611.619319][T24191] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1611.639306][ T30] audit: type=1800 audit(1785515203.377:3986): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1611.683565][T24191] usb 1-1: Product: syz [ 1611.704340][T29980] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5922'. [ 1611.717506][T24191] usb 1-1: Manufacturer: syz [ 1611.728632][T24191] usb 1-1: SerialNumber: syz [ 1611.753039][ T30] audit: type=1800 audit(1785515203.407:3987): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1611.776362][ T9] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1611.892345][ T30] audit: type=1800 audit(1785515203.597:3988): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1611.964755][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1611.998432][T24191] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 1612.961264][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1612.991371][T24191] visor 1-1:1.0: probe with driver visor failed with error -71 [ 1613.027444][ T9] usb 10-1: config 117 has an invalid interface number: 163 but max is 0 [ 1613.037459][ T30] audit: type=1800 audit(1785515203.747:3989): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1613.082879][T24191] usb 1-1: USB disconnect, device number 93 [ 1613.108786][ T9] usb 10-1: config 117 has no interface number 0 [ 1613.140886][T29990] gadgetfs: bound to dummy_udc driver [ 1613.164133][ T9] usb 10-1: config 117 interface 163 has no altsetting 0 [ 1613.210420][ T9] usb 10-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 1613.227041][ T30] audit: type=1800 audit(1785515205.047:3990): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1613.288881][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.340030][ T9] usb 10-1: Product: syz [ 1613.363732][ T9] usb 10-1: Manufacturer: syz [ 1613.371759][ T30] audit: type=1800 audit(1785515205.077:3991): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1613.403844][ T9] usb 10-1: SerialNumber: syz [ 1613.481944][ T30] audit: type=1800 audit(1785515205.187:3992): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1613.613186][ T30] audit: type=1800 audit(1785515205.457:3993): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1614.058453][ T9] f81534a_ctrl 10-1:117.163: probe with driver f81534a_ctrl failed with error -121 [ 1614.215350][T30019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5934'. [ 1614.261091][T24191] usb 10-1: USB disconnect, device number 49 [ 1614.353698][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1614.353709][ T30] audit: type=1800 audit(1785515206.277:3999): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1614.516128][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1614.529903][ T30] audit: type=1800 audit(1785515206.427:4000): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1614.564446][T30026] FAULT_INJECTION: forcing a failure. [ 1614.564446][T30026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.578514][T30026] CPU: 0 UID: 0 PID: 30026 Comm: syz.7.5937 Tainted: G L syzkaller #0 PREEMPT(full) [ 1614.578532][T30026] Tainted: [L]=SOFTLOCKUP [ 1614.578536][T30026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1614.578544][T30026] Call Trace: [ 1614.578548][T30026] [ 1614.578552][T30026] dump_stack_lvl+0x100/0x190 [ 1614.578570][T30026] should_fail_ex.cold+0x5/0xa [ 1614.578585][T30026] _copy_to_user+0x32/0xd0 [ 1614.578601][T30026] simple_read_from_buffer+0xcb/0x170 [ 1614.578614][T30026] proc_fail_nth_read+0x1af/0x230 [ 1614.578631][T30026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1614.578649][T30026] ? rw_verify_area+0xce/0x6d0 [ 1614.578664][T30026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1614.578680][T30026] vfs_read+0x1e4/0xb40 [ 1614.578698][T30026] ? __pfx_vfs_read+0x10/0x10 [ 1614.578714][T30026] ? __fget_files+0x215/0x3d0 [ 1614.578731][T30026] ? __fget_files+0x21f/0x3d0 [ 1614.578745][T30026] ksys_read+0x12a/0x250 [ 1614.578761][T30026] ? __pfx_ksys_read+0x10/0x10 [ 1614.578782][T30026] do_syscall_64+0x115/0x870 [ 1614.578795][T30026] ? clear_bhb_loop+0x40/0x90 [ 1614.578809][T30026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.578820][T30026] RIP: 0033:0x7ff34395e84e [ 1614.578829][T30026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1614.578840][T30026] RSP: 002b:00007ff3447dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1614.578852][T30026] RAX: ffffffffffffffda RBX: 00007ff3447dc6c0 RCX: 00007ff34395e84e [ 1614.578859][T30026] RDX: 000000000000000f RSI: 00007ff3447dc0a0 RDI: 0000000000000003 [ 1614.578865][T30026] RBP: 00007ff3447dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.578871][T30026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.578878][T30026] R13: 00007ff343c26038 R14: 00007ff343c25fa0 R15: 00007ffee91e9da8 [ 1614.578892][T30026] [ 1614.805055][T30028] gadgetfs: bound to dummy_udc driver [ 1614.846388][ T30] audit: type=1800 audit(1785515206.747:4001): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1614.868888][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1614.878274][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.892151][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1614.905520][ T9] usb 5-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=1e.c2 [ 1614.914622][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.924140][ T9] usb 5-1: config 0 descriptor?? [ 1614.936526][ T30] audit: type=1800 audit(1785515206.847:4002): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=526543 res=0 errno=0 [ 1614.958443][ T30] audit: type=1800 audit(1785515206.847:4003): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=526572 res=0 errno=0 [ 1614.993804][ T9] gspca_main: benq-2.14.0 probing 04a5:3035 [ 1615.110388][ T30] audit: type=1800 audit(1785515206.847:4004): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=526550 res=0 errno=0 [ 1615.187188][ T9] usb 5-1: USB disconnect, device number 28 [ 1615.309273][ T30] audit: type=1800 audit(1785515206.847:4005): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=526551 res=0 errno=0 [ 1615.469079][ T30] audit: type=1800 audit(1785515206.847:4006): pid=25214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=526552 res=0 errno=0 [ 1615.628013][ T30] audit: type=1800 audit(1785515206.927:4007): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=526592 res=0 errno=0 [ 1615.731803][ T30] audit: type=1800 audit(1785515206.937:4008): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1616.104047][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1616.124087][T23976] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1616.260021][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5946'. [ 1616.283997][T23976] usb 1-1: Using ep0 maxpacket: 8 [ 1616.304557][T23976] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.363487][T23976] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1616.405355][T23976] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1616.446667][T30070] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5951'. [ 1616.485014][T23976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.557168][T23976] usb 1-1: config 0 descriptor?? [ 1616.602700][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1616.691884][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1616.740512][ T9] usb 5-1: can't read configurations, error -71 [ 1616.990628][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.022251][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.064707][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.091208][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.114728][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.151870][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.188411][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.231907][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.273988][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.325360][T23976] ryos 0003:1E7D:3138.001F: unknown main item tag 0x0 [ 1617.394719][T23976] ryos 0003:1E7D:3138.001F: hidraw0: USB HID v10.02 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 1617.638645][T24191] usb 1-1: USB disconnect, device number 94 [ 1617.646838][T21042] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1617.791283][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5957'. [ 1617.839853][T21042] usb 10-1: device descriptor read/64, error -71 [ 1617.941545][T30093] syzkaller0: entered promiscuous mode [ 1617.980303][T30093] syzkaller0: entered allmulticast mode [ 1618.105021][T21042] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 1618.264124][T21042] usb 10-1: device descriptor read/64, error -71 [ 1618.429974][T21042] usb usb10-port1: attempt power cycle [ 1619.154025][T21042] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1619.370579][T21042] usb 10-1: device descriptor read/8, error -71 [ 1619.445983][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1619.445993][ T30] audit: type=1400 audit(1785515211.367:4032): avc: denied { cmd } for pid=30110 comm="syz.0.5962" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1619.653393][ T30] audit: type=1800 audit(1785515211.557:4033): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=526955 res=0 errno=0 [ 1619.674923][T21042] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 1619.743054][T21042] usb 10-1: device descriptor read/8, error -71 [ 1619.816601][ T30] audit: type=1800 audit(1785515211.607:4034): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1619.909940][T21042] usb usb10-port1: unable to enumerate USB device [ 1619.952970][ T30] audit: type=1800 audit(1785515211.717:4035): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1620.112780][ T30] audit: type=1800 audit(1785515212.027:4036): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 1620.325457][ T30] audit: type=1800 audit(1785515212.247:4037): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16421 res=0 errno=0 [ 1620.444248][T23976] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 1621.291473][ T30] audit: type=1800 audit(1785515213.207:4038): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1621.352953][T30131] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1621.442736][ T30] audit: type=1800 audit(1785515213.247:4039): pid=30131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5967" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1621.516525][T23976] usb 5-1: config 0 has no interfaces? [ 1621.538204][T23976] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1621.679716][T23976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.690599][ T30] audit: type=1800 audit(1785515213.287:4040): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=527100 res=0 errno=0 [ 1621.732516][T23976] usb 5-1: config 0 descriptor?? [ 1621.762481][ T30] audit: type=1800 audit(1785515213.297:4041): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=527009 res=0 errno=0 [ 1621.784099][ T31] INFO: task kworker/0:2:187 blocked for more than 143 seconds. [ 1621.793186][ T31] Tainted: G L syzkaller #0 [ 1621.802054][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1621.810989][ T31] task:kworker/0:2 state:D stack:21320 pid:187 tgid:187 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1621.824168][ T31] Workqueue: usb_hub_wq hub_event [ 1621.829336][ T31] Call Trace: [ 1621.832671][ T31] [ 1621.836018][ T31] __schedule+0x125c/0x6730 [ 1621.840602][ T31] ? __pfx___schedule+0x10/0x10 [ 1621.845702][ T31] ? find_held_lock+0x2b/0x80 [ 1621.850526][ T31] ? schedule+0x225/0x2c0 [ 1621.855793][ T31] schedule+0xdd/0x2c0 [ 1621.859941][ T31] schedule_timeout+0x1b2/0x280 [ 1621.865330][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1621.870796][ T31] ? mark_held_locks+0x40/0x70 [ 1621.876162][ T31] __wait_for_common+0x2e7/0x4c0 [ 1621.881246][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1621.887051][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1621.892609][ T31] ? __pfx_device_del+0x10/0x10 [ 1621.898062][ T31] ? kobject_put+0xb9/0x640 [ 1621.902689][ T31] i2c_del_adapter+0x1d4/0x2d0 [ 1621.909858][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 1621.914751][ T31] dvb_usb_device_exit+0x313/0x520 [ 1621.920009][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1621.925888][ T31] ? __pfx_rpm_resume+0x10/0x10 [ 1621.930858][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1621.936569][ T31] pctv452e_usb_disconnect+0x1b8/0x220 [ 1621.942200][ T31] ? __pfx_pctv452e_usb_disconnect+0x10/0x10 [ 1621.956797][T21042] usb 5-1: USB disconnect, device number 31 [ 1621.972428][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1621.981590][ T31] ? usb_disable_interface+0x211/0x4c0 [ 1621.987438][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1621.993408][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 1621.998882][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1622.005268][ T31] device_remove+0x12a/0x180 [ 1622.009978][ T31] device_release_driver_internal+0x44e/0x620 [ 1622.018543][ T31] bus_remove_device+0x2bc/0x560 [ 1622.023583][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1622.029497][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 1622.035413][ T31] device_del+0x376/0x9b0 [ 1622.039915][ T31] ? __pfx_device_del+0x10/0x10 [ 1622.045418][ T31] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 1622.051319][ T31] usb_disable_device+0x367/0x810 [ 1622.056610][ T31] ? mark_held_locks+0x40/0x70 [ 1622.061525][ T31] usb_disconnect+0x2e2/0x9a0 [ 1622.066650][ T31] hub_event+0x1c4f/0x4a60 [ 1622.071233][ T31] ? __lock_acquire+0x49f/0x1a40 [ 1622.076523][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 1622.081808][ T31] ? __pfx_hub_event+0x10/0x10 [ 1622.087048][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 1622.092780][ T31] ? rcu_is_watching+0x12/0xc0 [ 1622.097919][ T31] process_one_work+0xa23/0x1940 [ 1622.102920][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1622.108718][ T31] ? __pfx_hub_event+0x10/0x10 [ 1622.113564][ T31] worker_thread+0x5ef/0xe50 [ 1622.118647][ T31] ? kthread+0x13a/0x450 [ 1622.122965][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1622.131064][ T31] kthread+0x370/0x450 [ 1622.135457][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.140138][ T31] ret_from_fork+0x72b/0xd50 [ 1622.145150][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.150354][ T31] ? __switch_to+0x800/0x10f0 [ 1622.155684][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.160409][ T31] ret_from_fork_asm+0x1a/0x30 [ 1622.165567][ T31] [ 1622.181887][ T31] [ 1622.181887][ T31] Showing all locks held in the system: [ 1622.201115][ T31] 1 lock held by khungtaskd/31: [ 1622.206332][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1622.216578][ T31] 5 locks held by kworker/0:2/187: [ 1622.222337][ T31] #0: ffff888021299940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1622.233778][ T31] #1: ffffc90002e6fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1622.247454][ T31] #2: ffff88802b3061d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 1622.257635][ T31] #3: ffff888079ba71d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1622.267571][ T31] #4: ffff888034c361a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1622.278872][ T31] 2 locks held by getty/5364: [ 1622.283699][ T31] #0: ffff8880365d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1622.293934][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1622.304609][ T31] 3 locks held by kworker/u8:10/19279: [ 1622.310165][ T31] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1622.321870][ T31] #1: ffffc90003837d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1622.332877][ T31] #2: ffffffff90a9fc00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1622.342795][ T31] 4 locks held by udevd/25759: [ 1622.347863][ T31] #0: ffff88804e6aa878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1622.359002][ T31] #1: ffff888038e3ec80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1622.369111][ T31] #2: ffff888075a0b008 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1622.379469][ T31] #3: ffff888079ba71d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1622.389391][ T31] 3 locks held by kworker/u8:5/26414: [ 1622.395008][ T31] #0: ffff888033497940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1622.406454][ T31] #1: ffffc90003677d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1622.421275][ T31] #2: ffffffff90a9fc00 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1622.431412][ T31] 2 locks held by syz.6.5958/30091: [ 1622.437553][ T31] #0: ffffffff90a9fc00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1622.447172][ T31] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1622.457694][ T31] 2 locks held by syz.4.5966/30126: [ 1622.463034][ T31] #0: ffffffff9122c2a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1622.477054][ T31] #1: ffffffff90a9fc00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1622.486893][ T31] 1 lock held by syz.9.5967/30130: [ 1622.492093][ T31] #0: ffffffff90a9fc00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1622.503618][ T31] 1 lock held by syz.9.5967/30131: [ 1622.509061][ T31] #0: ffffffff90a9fc00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4e6/0xae0 [ 1622.518508][ T31] 1 lock held by syz.0.5969/30135: [ 1622.523687][ T31] #0: ffffffff90a9fc00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1622.546995][ T31] [ 1622.549687][ T31] ============================================= [ 1622.549687][ T31] [ 1622.582304][ T31] NMI backtrace for cpu 0 [ 1622.582319][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.582335][ T31] Tainted: [L]=SOFTLOCKUP [ 1622.582339][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1622.582346][ T31] Call Trace: [ 1622.582351][ T31] [ 1622.582356][ T31] dump_stack_lvl+0x100/0x190 [ 1622.582376][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1622.582392][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1622.582409][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1622.582429][ T31] sys_info+0x141/0x190 [ 1622.582444][ T31] watchdog+0xcb1/0x1030 [ 1622.582461][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1622.582473][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.582487][ T31] ? __kthread_parkme+0x18c/0x230 [ 1622.582504][ T31] ? kthread+0x13a/0x450 [ 1622.582515][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.582526][ T31] kthread+0x370/0x450 [ 1622.582536][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.582548][ T31] ret_from_fork+0x72b/0xd50 [ 1622.582566][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.582583][ T31] ? __switch_to+0x800/0x10f0 [ 1622.582595][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.582606][ T31] ret_from_fork_asm+0x1a/0x30 [ 1622.582629][ T31] [ 1622.800367][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1622.807262][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.818153][ T31] Tainted: [L]=SOFTLOCKUP [ 1622.822830][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1622.833193][ T31] Call Trace: [ 1622.836914][ T31] [ 1622.839855][ T31] dump_stack_lvl+0x100/0x190 [ 1622.844609][ T31] vpanic+0x552/0x970 [ 1622.848583][ T31] ? __pfx_vpanic+0x10/0x10 [ 1622.853256][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1622.859465][ T31] panic+0xd1/0xe0 [ 1622.863194][ T31] ? __pfx_panic+0x10/0x10 [ 1622.867611][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1622.874166][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1622.880341][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1622.886506][ T31] ? watchdog.cold+0x1ec/0x234 [ 1622.891278][ T31] ? watchdog+0xcc1/0x1030 [ 1622.895707][ T31] watchdog.cold+0x1fd/0x234 [ 1622.900307][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1622.906121][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.910945][ T31] ? __kthread_parkme+0x18c/0x230 [ 1622.916590][ T31] ? kthread+0x13a/0x450 [ 1622.920893][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.925597][ T31] kthread+0x370/0x450 [ 1622.929656][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.935648][ T31] ret_from_fork+0x72b/0xd50 [ 1622.940260][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.945393][ T31] ? __switch_to+0x800/0x10f0 [ 1622.950106][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.954754][ T31] ret_from_fork_asm+0x1a/0x30 [ 1622.959899][ T31] [ 1622.962981][ T31] Kernel Offset: disabled [ 1622.967297][ T31] Rebooting in 86400 seconds..