last executing test programs: 5m43.681967103s ago: executing program 2 (id=583): syz_emit_vhci(0x0, 0xd) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x329ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap$binder(&(0x7f00006f2000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0xb19) 5m39.027397899s ago: executing program 2 (id=586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f00"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 5m38.122214921s ago: executing program 0 (id=588): syz_emit_vhci(0x0, 0xd) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x329ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00006f2000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0xb19) 5m36.310153225s ago: executing program 2 (id=592): syz_emit_vhci(0x0, 0xd) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x329ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap$binder(&(0x7f00006f2000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0xb19) 5m31.499824408s ago: executing program 0 (id=593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0xffffffffffffff5d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000001070104000000020000000002bdd8000c000244000000000000e4780800054000000002040007800c000240000000000000ffff0900010073797a310000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001780)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000001800)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000001880)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001900)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f00000019c0)='/dev/nullb1', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000001a40)='1', 0x1) close(r5) close(0xffffffffffffffff) 5m31.402912629s ago: executing program 2 (id=594): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000005c0)=ANY=[], 0x44}}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000e"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB="000000001c0000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x008'], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000005f00), 0x0, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r6, 0x0, 0x1002000ff) r8 = fcntl$dupfd(r7, 0x0, r7) close_range(0xffffffffffffffff, r8, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) splice(r9, 0x0, r9, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$UI_END_FF_UPLOAD(r8, 0x406855c9, 0x0) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008000) bind$l2tp6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c47}, 0x20) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000e80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) 5m27.23170899s ago: executing program 2 (id=597): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x4d, 0x4]}}) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sigaltstack(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0x225681, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000bfd000/0x400000)=nil, r1, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000540)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000580)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$cec(&(0x7f00000005c0), 0x0, 0x652c82) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600), 0x2002, 0x0) close(r4) setsockopt(r3, 0x0, 0x482, &(0x7f0000000640), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40141, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) pipe2(&(0x7f0000000240), 0x84000) r6 = syz_io_uring_setup(0x34b9, &(0x7f0000000280)={0x0, 0x4205, 0x8, 0x0, 0x50}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000400)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5435, 0x0) 5m27.231295055s ago: executing program 0 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007e9ee79f48bf33d39c355cbbc65255f8e0e3f097abac291c8d17dc63df1d951989e295bba2394d07a0abce07ea50137a1c547dcfc122c47019464677c2c9b987dea3985a48ec74206f02dbc90ab090d8547fb48850b7952af3bbcb2bb3919cb7e06ff656841c8371839ba5a57b60b95e6c1b432e2227d37622ed2c89d9f95060f38fbc47038c42262cc7df787fcbfd8ea812bb3235103cac93705c6fb8f73703109b82d35613780bb1a591f9d0038a7540ffc963119f4669f267b28e927728050020aaf0d5c259000000"], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2c, 0x3, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000007c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000900)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r6, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="01000000f8040000ffffffff20000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a00)={r0, &(0x7f0000000a40), &(0x7f0000000a80)=@tcp6=r2, 0x2}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000b00)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES16=r7], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x8, 0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001040), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x20, r11, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) epoll_pwait(0xffffffffffffffff, &(0x7f0000001180)=[{}], 0x1, 0xdeb, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r12, &(0x7f0000001240)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="5800cc2e", @ANYRES16=r13, @ANYBLOB="000129bd7000ffdbdf251800000008000300", @ANYRES32=r14, @ANYBLOB="0a001a0008021100000000000a001a0008021100000000000a001a0008021100000000000a000600ffffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001380)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000001440)={0x64, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800) 5m25.302899175s ago: executing program 0 (id=600): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9002}, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4111, 0x100f}], 0x1, 0x91, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c00000300051190"], 0x0) openat$sequencer(0xffffff9c, 0x0, 0x80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000011c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001280), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000012c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001340)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000001380)={{0x101, 0x8}, {0xa1, 0xcb11}, 0xa77, 0x1}) fcntl$notify(r3, 0x402, 0x30) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f0000001400)='./file0\x00', 0x143) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000001440)='./file0\x00', 0x8000, 0x3) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001480), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000014c0)={0xbf48ce7, "1803c8098000f42505f92d975e2ccd9e0003000000e4ff00"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a40), 0x8, 0x10, &(0x7f0000001a80), 0x3f}, 0x16) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r6}}, 0x1c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001b00), 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000001b40)={0xbd2, "8a6035ceeae3ecc42317afad010000000000000400"}) 5m22.01619598s ago: executing program 0 (id=602): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x149}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setxattr(0x0, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x49, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f00003b0000/0x4000)=nil, 0x4000, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x7ff, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, &(0x7f00000005c0)=""/213, &(0x7f00000006c0), &(0x7f0000000700), 0x3, r7}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(r6, &(0x7f00000001c0)="9c2b92daef183ebfeaf8bff55462064c6e842fcea7202ddc6ee90abe77c4f0201f1f0847b31af1035e2a5d61e524b88f8381fcf12335d4e9a2b63884ac702b75156fdbe1611ae3628ffbc8d347fce5175897ede7e99ee4c8535655cd311ec0422b", 0x61) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090936f70e0dd038e7ff7fc6e5539b324c078b089b3934076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) 5m22.015865718s ago: executing program 2 (id=604): socket$netlink(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008050000010b"], 0x97) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5m17.39973207s ago: executing program 0 (id=608): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7fffffd}, 0x1c) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x891b, &(0x7f0000000100)="76657468303a3000100004000000000002") syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x9, 0x0}}, 0x100}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r5 = bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRES8=r4, @ANYRES16=r2, @ANYRES64], 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r5, 0x0, 0x0, 0x2, {0x4110}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2}, &(0x7f0000000400)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000440)={0x1, 0x3, 0x10001, 0x0, 0xffffffffffffffff}) mprotect(&(0x7f0000b10000/0x3000)=nil, 0x3000, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000611994000000000094006f232f16877a"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) timer_settime(r7, 0x1, &(0x7f0000000500)={{}, {0x77359400}}, 0x0) read$char_usb(r1, 0x0, 0x0) 5m6.656904161s ago: executing program 32 (id=604): socket$netlink(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000008050000010b"], 0x97) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5m0.74014059s ago: executing program 33 (id=608): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7fffffd}, 0x1c) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x891b, &(0x7f0000000100)="76657468303a3000100004000000000002") syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x9, 0x0}}, 0x100}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r5 = bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRES8=r4, @ANYRES16=r2, @ANYRES64], 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r5, 0x0, 0x0, 0x2, {0x4110}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2}, &(0x7f0000000400)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000440)={0x1, 0x3, 0x10001, 0x0, 0xffffffffffffffff}) mprotect(&(0x7f0000b10000/0x3000)=nil, 0x3000, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000611994000000000094006f232f16877a"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) timer_settime(r7, 0x1, &(0x7f0000000500)={{}, {0x77359400}}, 0x0) read$char_usb(r1, 0x0, 0x0) 1m24.723780966s ago: executing program 5 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(r0, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2a, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf1, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x9, 0x4}}}}}]}}]}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x2000, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x8, 0xc0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'A~.'}, {0x5, 0x24, 0x0, 0xd8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@country_functional={0x6, 0x24, 0x7, 0x7, 0xd9f}, @mdlm_detail={0x4, 0x24, 0x13, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x0, 0xfa}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2403}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdir(&(0x7f0000000a80)='./file1\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1m19.966105244s ago: executing program 5 (id=840): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000002080)={0x1, 0x1, 0x3, 0xdf57}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v1={0x1000000, [{0xb0}]}, 0xc, 0x2) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) close_range(r0, 0xffffffffffffffff, 0x100000000000000) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000800)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) read$snapshot(r6, &(0x7f0000000140)=""/80, 0x50) socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r10, 0x20, &(0x7f0000000100)={0x2000000, 0x0, 0x6fae, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f00000020c0)="e10f1da8aee3bbde1481e555f1cfac33e5f149dabfd4869c02bc26b36f43d63d75fd49eb9365e070b3a546a6cbeb3c8c8896a6ee395666f58265e75e7a9309dd199bcb9666d65e40feb1a55ebf9e7929fe861d692563abe0bfce57b0082c8686baa334adee47982134b0de54eb53d13431a5c775be95", 0x76}, {}, 0xfffffffc}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r10, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) r11 = openat$cdrom(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r11, 0x5321, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m18.980944782s ago: executing program 5 (id=841): socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) read(r8, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000580)={0x2, 0xf8}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000100), 0x2) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) r9 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r6, 0x0, r9, 0x0, 0x2, 0x5) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) pipe2(&(0x7f0000000040), 0x0) 1m12.952141208s ago: executing program 5 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x404c019}, 0xc080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl(r3, 0x7434, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r7, &(0x7f0000000500)=ANY=[], 0xfdef) sendmmsg(r4, &(0x7f0000001980)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)="311587347f26abbafc92486b5b6f44ae1e987838", 0x14}, {&(0x7f0000000300)="193a26224090e17accbbec967ada4d5fe87c211487a9a4714bc6aa082b504714e2fd527c083649fa8537eef5341167906ef84e706b87ac443c271dd0abf411dc241fe7515d1e116de04479e75e4f71220bd4d8994fe632227f58ebc59b5a492b5b859c7879cbf4b2d59a61e5b754ef3c4bc3610270859a8c54face114913ea05c553971c238df02a0b0801f8b12d0b9899807da5c8aa094059b9fb6894b541465a0a5b18af27561e60d54ed02621db9870b1da9b6e21b1b385dd5ad48c52e8bda0422931026049207b8cad79", 0xcc}, {&(0x7f0000000440)='G', 0x1}, {&(0x7f00000004c0)="180199482e303d53b5f5677a094c", 0xe}, {&(0x7f0000000500)="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", 0x1000}], 0x5}}, {{&(0x7f0000001840)=@nl=@unspec, 0x80, &(0x7f0000001940)=[{&(0x7f00000018c0)="9cfafce9e0c056f1663b52397733309e636ff77c152589ed2fdcdbddc024d0374bc6f909fecdac433c57a5d5a1897ef4e6b8a995604b", 0x36}], 0x1}}], 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r11, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r12, 0x10}}, 0x10) 1m8.233876171s ago: executing program 5 (id=851): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(0x0, r9, 0x2) r13 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r13, 0x1) syz_ublk_setup_queues(r12, r11, &(0x7f00000005c0)={0x0, 0x3e0e, 0x400, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x3, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x4, 0x0, 0xb1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0) prlimit64(r1, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340)) 1m1.190901234s ago: executing program 5 (id=852): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x4, 0x1d, 0xdd, 0x8, 0x1385, 0x5f01, 0x792a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x9, 0x30, 0x9, "", [{{0x9, 0x4, 0xb3, 0x3, 0x0, 0x3c, 0xe9, 0xf5, 0x3}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x800, 0x103) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) io_uring_enter(r0, 0x202cbe, 0x7f66, 0x1b, 0x0, 0x0) gettimeofday(&(0x7f0000000000), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a91a46cab0000010000010000126700000000000000000000f600112233441122334472625aa6443af0de"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c000000100002f1020000000000000000000400f118f5033db59e", @ANYRES32=0x0, @ANYBLOB="00030000000000004c0012800b00010062726964676500003c0002800c001f0001000000000000000500160001000000060027000e00000008000500000000000c001e00a40000000000000008001b00fbffffff"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(r3, 0x119, 0x2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000400)=0x1, 0x4) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r5, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20019054}, 0x400c044) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) 44.400194341s ago: executing program 34 (id=852): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x4, 0x1d, 0xdd, 0x8, 0x1385, 0x5f01, 0x792a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x9, 0x30, 0x9, "", [{{0x9, 0x4, 0xb3, 0x3, 0x0, 0x3c, 0xe9, 0xf5, 0x3}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x800, 0x103) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) io_uring_enter(r0, 0x202cbe, 0x7f66, 0x1b, 0x0, 0x0) gettimeofday(&(0x7f0000000000), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a91a46cab0000010000010000126700000000000000000000f600112233441122334472625aa6443af0de"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c000000100002f1020000000000000000000400f118f5033db59e", @ANYRES32=0x0, @ANYBLOB="00030000000000004c0012800b00010062726964676500003c0002800c001f0001000000000000000500160001000000060027000e00000008000500000000000c001e00a40000000000000008001b00fbffffff"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(r3, 0x119, 0x2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000400)=0x1, 0x4) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r5, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20019054}, 0x400c044) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) 9.988968735s ago: executing program 1 (id=896): socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @private2, 0x9}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xc, 0xe}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x3000c81c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000600)={0x24ed, 0x9, {}, {0xffffffffffffffff}, 0x6, 0x6}) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x3000, &(0x7f00000006c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=r11, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b66736465663d646576746d706673002c009a67bd8ba78e1ae48718236442b03fd3735470748ccfeea308af7a73ea03098ccda7c4866cbaca41eef9cf4f6307171b71c4a24639aca8014884841ecd882a40fb6243f9ea87c22b89771b2d6f0f17bbef34f613d92c1c4ac4e63b33676c3741f321cb97c1abc551e36050b8567d5720e9154aa44e9a054eccac3d56053ef45b79e6425ebab3c1c643750e87e701d302ef5d07f875c365bf32e7"]) r12 = dup(r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8c48, 0x0) syz_ublk_setup_queues(r12, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 9.920360153s ago: executing program 3 (id=897): msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000200)=[{0x3, &(0x7f0000000240)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x0) fcntl$addseals(r1, 0x409, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40010) socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) read$msr(r6, &(0x7f00000005c0)=""/102392, 0x18ff8) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x180000c, 0x2072, 0xffffffffffffffff, 0xd0fbb000) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 9.920148935s ago: executing program 6 (id=870): r0 = socket(0x29, 0xa, 0x1cb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ff) syz_extract_tcp_res(&(0x7f0000000100), 0x3, 0x80000001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) write(r1, &(0x7f0000000180)="0a000300010040", 0x7) fsopen(&(0x7f0000000280)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r3 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x39c4, 0x8000, 0x4, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000004c0)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000500)=[0x2, 0x6], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000580)) close(r4) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, 0x0) mount(0x0, &(0x7f00000005c0)='./gadget\x00', &(0x7f0000000600)='gadgetfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./gadget/dummy_udc\x00', 0x80302, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000680)={0x55, 0x6, 0x6, 0x873e, 0x200}) write(r6, &(0x7f00000006c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) syz_usb_disconnect(0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0xff, 0x7fff0002}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002c8000/0x2000)=nil, 0x2000, 0x2000009, 0x100010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffdffffd}, 0x94) 9.708782874s ago: executing program 6 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r1, 0x8008af26, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) setns(0xffffffffffffffff, 0x24020000) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x2800005, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r7, 0x6, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000c4000/0xc000)=nil, 0x2000, 0x2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090, 0x0, 0x10}]}) 9.576885291s ago: executing program 1 (id=900): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0xa, @pix={0x2, 0x0, 0x30314247, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108f8ffffffffffffff070000000900010073797a30000000004c000000090a01042fbc47e500000000000000001700000008000a4053c154210900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000379534380240000800c00054000000000000000080c0004400000000000000003040002800400018014000000100001000000000000000000"], 0xe8}}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000807bd7009e5dcdf2501000060"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xa}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0x9, 0x7d, 0x0, 0x1, 0x9, 0x3, 0x8, 0x1, 0x2, 0x5, 0x40, 0x0, 0x1, 0x1, 0xc0, 0xfd, 0x9, 0x2, '\x00', 0x5, 0xffffffff}) 9.576525124s ago: executing program 3 (id=901): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x7ffc0001}]}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)={0x2, {{0xa, 0x4620, 0x9, @mcast2, 0x7f}}}, 0x8c) sysfs$3(0x3) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './sys/bus/pci/rescan\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x20000) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='measure #', 0x9) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r5, &(0x7f00000000c0)='1', 0x1) 9.131016319s ago: executing program 6 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x10, 0x0, 0x39555659, 0x1, 0x9, [{0x3, 0x8001}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0xff}, {0x9, 0x80000000}, {0x80000001, 0x80000000}, {0x4, 0x8000}, {0x80000001}], 0xff, 0xff, 0x8, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@generic={&(0x7f0000000f40)='./file0\x00', 0x0, 0x18}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000005000000000000001000e4d50000"], &(0x7f0000000500)='GPL\x00', 0xf872, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x3, 0x5, 0x7fff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000001000)=[{0x5, 0x1, 0x8, 0xa}, {0x0, 0x3, 0xe, 0x8}, {0x0, 0x1, 0x5, 0xc}], 0x10, 0x9}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x36b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x115, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000005c0)={'comedi_parport\x00', [0x4f24, 0x14, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x100, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x6, 0x4, 0x20001e58, 0x3, 0x1, 0x7c, 0x207, 0x6, 0x0, 0xb]}) syz_genetlink_get_family_id$team(&(0x7f0000000480), r5) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x91a1, 0x2000, 0x2000, 0x100da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e94, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367, 0x0, r4}}], 0x1, 0x0, 0x0) getpgrp(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r8 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000340)={0x9000000d}) 9.130661531s ago: executing program 1 (id=903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000080)=@generic={0x8, "ffff0000feff00"}, 0xc) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r2}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x2, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x2ad, r1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r3 = syz_clone(0x40000080, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r3, 0x2, 0x0) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) madvise(&(0x7f0000060000/0x1000)=nil, 0x1000, 0x19) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000a40)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000b80)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000c2c7acb8726cbadb53ef5f52364467da090157594cd3d00c65b6880177649058ab65b0fadcd856ccf6ff92edaad54666bcdacc3bc1b726783a92efd3d3d939b3338dabaf2d9093a340207393a0731193d4643ff77c85df8", @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 9.130082645s ago: executing program 3 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$rnullb(0xffffff9c, &(0x7f0000000540)={'/dev/syzrnull', 0x0}, 0x200, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000580)=0xfffffe00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x24001, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, 0x0, 0x36) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200008d0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x14, r8, 0x800, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x812) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) 7.525766788s ago: executing program 1 (id=906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(0x0, r9, 0x2) r13 = openat$vicodec0(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r13, 0xc0185648, &(0x7f0000000440)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x98f90d, 0x26, '\x00', @p_u32=&(0x7f0000000540)=0xfffffffe}}) r14 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r14, 0x1) syz_ublk_setup_queues(r12, r11, &(0x7f00000005c0)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x807, 0xee3, 0x100104, 0x0}}, 0x0) 6.939805209s ago: executing program 3 (id=907): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x9}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x108, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffffff}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa1}, @CTA_NAT_SRC={0xb0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x400f7981902cef9a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000580)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8000, 0x0, 0x5339, 0x2, 0x9, 0xfa, 0x7ff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x834}, 0x20000000) sendto$packet(r7, &(0x7f0000000d00)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000d40)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000d80)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150010000200142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r13, 0x2000d00, 0xe, 0xaf74d922fc9bf873, &(0x7f0000000ac0)="a06ad876d56a0064d082778c3938", &(0x7f0000000b00)=""/85, 0xfffffffd, 0x4000000, 0x0, 0x0, &(0x7f0000000b80)="abe320678adbafb1c806b647bb74ed129e09672f9bf9dd3b0c687f16fa0ee9a2d8dfabbf7a048645f1c9a075e664cd0d0a8669869222b3763698301ceeb89c3a28dcfccdaf8a9706055013a2cb795809e5d41847408cec52979cc451bfa20cf318bc33bbcd2d5b13646bac791be31192afc6273924a6419b9fbf8543aa744c3822b320b927ef8946bc1514a23a794f0593af847970b9248d17ef1ab222787433188977be6a5873806bea7cdea600"/200, &(0x7f0000000c80), 0x5, 0x0, 0x1002}, 0x28) syz_clone3(&(0x7f0000000000)={0x12800180, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], 0x1}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000300)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x39) 6.17547179s ago: executing program 4 (id=908): unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="c40000001b000100000000000000000000000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0108000800080000003f43491e62d7a882dd0a7d217efc38151de373587aa40ef52a54db76db8e17da1ee99646e138de4fb917b7168ce2d0015e1d602c5d016da25fcc95bd14bdfe2f9856201270f51564953730e80e69f584e4f8ccda9ae5ec55fdc0f913bc4e648d2ebc6d2b6205058229710e8e8cf8be7506e79415c3a5f4ce41ebaa72c14d"], 0xc4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9}, {0x8}, {0x14}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a00000000000000050000001400050020010000000000000000", @ANYRES32=r7], 0x4c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='xfs\x00', 0x2a18005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0043}]}) sendfile64(r8, r8, &(0x7f0000000040)=0x7, 0xfffffff8) close_range(r8, 0xffffffffffffffff, 0x0) 5.552457881s ago: executing program 6 (id=909): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x87, 0x6}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="0c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc00028006000100000000001c0003800a00010000000000000000000c00010000000000000000f23d314e27c400002842000c00020000000000000000000c00020000000000000000001c0004800c00010000000000000000000c0001000000000000000000700004800c00010000000000000000000c00010000000000000000000900010000000000000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c000100000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08001e0000000000"], 0x10c}, 0x1, 0xba01}, 0x0) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000019000100000000000000000023"], 0x24}}, 0x0) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0xd5) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e05fdff0503000003000000fcffffff05010905a10105091901290a150005017501950a8102950175068103c0"], 0x135) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000001700)=ANY=[@ANYBLOB="1201000302000010"], 0x0) write$UHID_INPUT2(r3, &(0x7f0000001740)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00!'], 0xc) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) socket(0x10, 0x80002, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001780)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0xeeef0000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x5, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x3, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x1, 0x1000, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2, 0x0, 0x0, 0x1a}, {0x100000, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x2, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x10, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x1000, 0x0, 0x3]}) openat$ttyprintk(0xffffff9c, &(0x7f00000018c0), 0x240400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001940)={0x7, 0x2, 0x2, r4, 0xb}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000019c0)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.172706895s ago: executing program 3 (id=910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r1, 0x8008af26, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) setns(0xffffffffffffffff, 0x24020000) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x2800005, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r7, 0x6, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000c4000/0xc000)=nil, 0x2000, 0x2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090, 0x0, 0x10}]}) 5.17228668s ago: executing program 4 (id=911): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000000), 0xf02, 0xf0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000400)='7', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e24, 0x773, @dev={0xfe, 0x80, '\x00', 0x1f}}, @in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 3.737210807s ago: executing program 4 (id=912): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000000), 0xf02, 0xf0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000400)='7', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e24, 0x773, @dev={0xfe, 0x80, '\x00', 0x1f}}, @in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 1.89281305s ago: executing program 1 (id=913): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x0, &(0x7f0000000100), &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000000), 0xf02, 0xf0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000400)='7', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e24, 0x773, @dev={0xfe, 0x80, '\x00', 0x1f}}, @in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 1.891914833s ago: executing program 3 (id=914): unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="c40000001b000100000000000000000000000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0108000800080000003f43491e62d7a882dd0a7d217efc38151de373587aa40ef52a54db76db8e17da1ee99646e138de4fb917b7168ce2d0015e1d602c5d016da25fcc95bd14bdfe2f9856201270f51564953730e80e69f584e4f8ccda9ae5ec55fdc0f913bc4e648d2ebc6d2b6205058229710e8e8cf8be7506e79415c3a5f4ce41ebaa72c14d"], 0xc4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a00000000000000050000001400050020010000000000000000", @ANYRES32], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0043}]}) sendfile64(r5, r5, &(0x7f0000000040)=0x7, 0xfffffff8) close_range(r5, 0xffffffffffffffff, 0x0) 1.645022544s ago: executing program 6 (id=915): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000500)='1', 0x1) syz_emit_vhci(&(0x7f0000019a40)=ANY=[@ANYBLOB="02c9001200ddca050014c77b0023004000000500010a00182220323662"], 0x17) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps\x00') mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000480), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, 0x0) chdir(&(0x7f00000005c0)='./file0\x00') r5 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r5, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10) unlink(&(0x7f0000000640)='./file0\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0xa}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x1}, {0x7, 0x3}, {0x80000001, 0x203}, {0xffffff01, 0x8000}, {0x1, 0x104}], 0x8, 0x8, 0x2, 0x0, 0x7}}) link(&(0x7f00000007c0)='./file1\x00', &(0x7f0000000800)='./file0\x00') pread64(r4, &(0x7f0000000840)=""/102400, 0x19000, 0xffffffff8) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) sendmsg$nl_route(r3, &(0x7f0000019840)={0x0, 0x500, &(0x7f0000019880)={&(0x7f00000198c0)=ANY=[@ANYBLOB="5400000010000104fdffffff0000002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00feffff7f056530000000020000010000"], 0x54}}, 0x0) sendmsg$key(r2, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980)={&(0x7f00000199c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x2}, 0x10}}, 0x0) nanosleep(&(0x7f00000004c0)={0x0, 0x5f5e100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c001}, 0x4004) ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f00000002c0)={'veth0_virt_wifi\x00', @remote}) mq_open(&(0x7f0000000000)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0xcf, 0x0, 0x6, 0x800}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 1.61848597s ago: executing program 4 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r1, 0x8008af26, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) setns(0xffffffffffffffff, 0x24020000) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x2800005, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.2174818s ago: executing program 1 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x84) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000a00)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20004000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000a40)=[{{&(0x7f0000000a80)={0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffff0001}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}}}}], 0x20}}], 0x1, 0x4010) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="600602"], 0x8) openat$make_it_fail(0xffffff9c, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x14, 0x27, 0x301, 0x270bda7, 0x25dfdbfa, {0x13}}, 0x14}}, 0x10) sendmsg$inet(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) sendmsg$inet(r8, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) sendmsg$inet(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="9d", 0x1}], 0x1}, 0x10) r10 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3, 0x0, 0x8}, 0x30, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x40, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x1022, 0x0, 0x1, [@nested={0x20, 0xd9, 0x0, 0x1, [@nested={0x1c, 0x77, 0x0, 0x1, [@typed={0x4, 0x61}, @nested={0x14, 0x7, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x12a, 0x0, 0x0, @u32=0x7}]}]}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r12 = fsopen(&(0x7f0000000800)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r12, 0x8, 0x0, 0x0, 0x0) landlock_restrict_self(r10, 0x9) 477.901711ms ago: executing program 6 (id=918): unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="c40000001b000100000000000000000000000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0108000800080000003f43491e62d7a882dd0a7d217efc38151de373587aa40ef52a54db76db8e17da1ee99646e138de4fb917b7168ce2d0015e1d602c5d016da25fcc95bd14bdfe2f9856201270f51564953730e80e69f584e4f8ccda9ae5ec55fdc0f913bc4e648d2ebc6d2b6205058229710e8e8cf8be7506e79415c3a5f4ce41ebaa72c14d"], 0xc4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9}, {0x8}, {0x14}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a00000000000000050000001400050020010000000000000000", @ANYRES32=r8], 0x4c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='xfs\x00', 0x2a18005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0043}]}) sendfile64(r9, r9, &(0x7f0000000040)=0x7, 0xfffffff8) close_range(r9, 0xffffffffffffffff, 0x0) 421.112224ms ago: executing program 4 (id=919): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000680)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000006c0)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000a00)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000a40)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x3, "bd981f9114e31e3316e5c206bb0d89c5f40b4d60956dfac159b4005aa6abb923", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"765b7eebbb3ba34a49714c5be1f44000ffb37714cd1208cb623b2981a58b7734"}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0x40) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r7, 0x1}}, 0x18) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000005c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000005000000fd29000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x10020005, r9}, 0x38) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000780)={'syzkaller1\x00', @broadcast}) 0s ago: executing program 4 (id=920): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x5b) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f00009e1000)='./file0\x00', 0x32840, 0x188) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r6, r8) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) kernel console output (not intermixed with test programs): udit: type=1800 audit(1792913772.020:5527): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239480 res=0 errno=-22 [ 619.501492][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 619.502311][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'. [ 619.504215][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.504428][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.525230][ T42] audit: type=1800 audit(1792913772.070:5528): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34646 res=0 errno=-22 [ 619.525301][ T42] audit: type=1800 audit(1792913772.080:5529): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34669 res=0 errno=-22 [ 619.620969][ T42] audit: type=1800 audit(1792913772.200:5530): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239498 res=0 errno=-22 [ 619.622047][ T42] audit: type=1326 audit(1792913772.200:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x7ffc0000 [ 619.622567][ T42] audit: type=1326 audit(1792913772.200:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x7ffc0000 [ 619.623021][ T42] audit: type=1326 audit(1792913772.200:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x7ffc0000 [ 619.654233][ T42] audit: type=1326 audit(1792913772.210:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x7ffc0000 [ 619.654265][ T42] audit: type=1326 audit(1792913772.210:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10304 comm="syz.3.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x7ffc0000 [ 619.725589][ T9162] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 619.935042][T10306] netlink: 'syz.4.757': attribute type 19 has an invalid length. [ 620.296366][T10281] Console: switching to colour frame buffer device 160x50 [ 620.507695][T10281] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 624.131908][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.155316][T10307] Console: switching to colour dummy device 80x25 [ 625.188551][ T42] kauditd_printk_skb: 348 callbacks suppressed [ 625.188565][ T42] audit: type=1800 audit(1792913777.770:5884): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34796 res=0 errno=-22 [ 625.235656][ T42] audit: type=1800 audit(1792913777.820:5885): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.762" name="algorithm_params" dev="sysfs" ino=21869 res=0 errno=-13 [ 625.540158][ T10] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 625.546096][ T42] audit: type=1400 audit(1792913778.120:5886): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=10323 comm="syz.3.763" name="p" offset=33 [ 625.727831][ T10] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 625.733106][ T10] usb 9-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 625.733162][ T10] usb 9-1: config 1 interface 0 altsetting 32 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 625.733265][ T10] usb 9-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 625.733324][ T10] usb 9-1: config 1 interface 0 has no altsetting 0 [ 625.743393][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 625.743491][ T10] usb 9-1: SerialNumber: syz [ 625.858271][T10322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 625.859006][T10322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 625.876010][ T42] audit: type=1800 audit(1792913778.450:5887): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239557 res=0 errno=-22 [ 625.876076][ T42] audit: type=1800 audit(1792913778.450:5888): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.760" name="n_vclocks" dev="sysfs" ino=134514 res=0 errno=-22 [ 625.913048][T10318] ptp ptp0: guarantee physical clock free running [ 625.961541][ T42] audit: type=1800 audit(1792913778.540:5889): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=239587 res=0 errno=-22 [ 625.970549][ T42] audit: type=1800 audit(1792913778.550:5890): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=239564 res=0 errno=-22 [ 626.018809][ T42] audit: type=1800 audit(1792913778.590:5891): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=239565 res=0 errno=-22 [ 626.031136][ T42] audit: type=1800 audit(1792913778.610:5892): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=239566 res=0 errno=-22 [ 626.240831][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.763'. [ 626.912369][ T42] audit: type=1326 audit(1792913779.490:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.5.765" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x0 [ 628.479805][ T10] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 628.727143][ T10] usb 9-1: USB disconnect, device number 9 [ 629.748708][ T9162] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 630.063089][ T9162] usb 10-1: unable to get BOS descriptor or descriptor too short [ 630.077034][ T9162] usb 10-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 630.077057][ T9162] usb 10-1: no configurations [ 630.077063][ T9162] usb 10-1: can't read configurations, error -22 [ 630.260636][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 630.260653][ T42] audit: type=1800 audit(1792913782.840:5898): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34819 res=0 errno=-22 [ 630.436328][ T42] audit: type=1800 audit(1792913783.010:5899): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.766" name="bind" dev="sysfs" ino=13116 res=0 errno=-13 [ 630.486100][ T42] audit: type=1800 audit(1792913783.070:5900): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.766" name="driver_override" dev="sysfs" ino=2034 res=0 errno=-22 [ 631.205066][ T42] audit: type=1800 audit(1792913783.780:5901): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34796 res=0 errno=-22 [ 631.214296][ T42] audit: type=1800 audit(1792913783.790:5902): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34819 res=0 errno=-22 [ 631.435210][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 631.469552][ T42] audit: type=1800 audit(1792913784.050:5903): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.776" name="idVendor" dev="configfs" ino=30007 res=0 errno=-22 [ 631.517792][ T42] audit: type=1800 audit(1792913784.100:5904): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.776" name="qw_sign" dev="configfs" ino=30014 res=0 errno=-22 [ 631.523690][ T42] audit: type=1800 audit(1792913784.100:5905): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.776" name="compatible_id" dev="configfs" ino=30015 res=0 errno=-22 [ 631.524946][ T42] audit: type=1800 audit(1792913784.100:5906): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.776" name="UDC" dev="configfs" ino=30016 res=0 errno=-22 [ 631.542331][ T42] audit: type=1326 audit(1792913784.120:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.3.769" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x0 [ 631.595360][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 631.596045][ T24] usb 9-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 631.597271][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.601842][ T24] usb 9-1: config 0 descriptor?? [ 631.617609][ T24] as10x_usb: device has been detected [ 631.619825][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 631.643116][ T24] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 631.661968][ T24] as10x_usb: error during firmware upload part1 [ 631.662386][ T24] Registered device nBox DVB-T Dongle [ 631.832461][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 631.850161][T10346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.767'. [ 631.853163][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.853553][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.740709][T10372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 632.897852][ T24] usb 9-1: USB disconnect, device number 10 [ 632.989892][ T24] Unregistered device nBox DVB-T Dongle [ 632.999942][ T24] as10x_usb: device has been disconnected [ 633.288032][T10374] netlink: 'syz.5.771': attribute type 19 has an invalid length. [ 635.155769][T10388] random: crng reseeded on system resumption [ 635.563802][T10257] syz.3.746 (10257) used greatest stack depth: 18512 bytes left [ 635.657960][T10391] bond0: Error: Cannot enslave bond to itself. [ 638.391080][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.777'. [ 641.029135][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 641.029172][ T42] audit: type=1800 audit(1792913793.600:5921): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16013 res=0 errno=-22 [ 641.036989][ T42] audit: type=1800 audit(1792913793.620:5922): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16013 res=0 errno=-22 [ 641.629030][ T42] audit: type=1326 audit(1792913794.210:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 641.644129][ T42] audit: type=1326 audit(1792913794.220:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 641.653560][ T42] audit: type=1326 audit(1792913794.230:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 641.653596][ T42] audit: type=1326 audit(1792913794.230:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 641.653629][ T42] audit: type=1326 audit(1792913794.230:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 641.673039][ T42] audit: type=1326 audit(1792913794.250:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 641.704210][ T42] audit: type=1326 audit(1792913794.280:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 641.735747][ T42] audit: type=1326 audit(1792913794.310:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.5.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x7ffc0000 [ 642.118851][ T7658] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 642.300323][ T7658] usb 10-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 642.348100][ T7658] usb 10-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 642.722024][T10419] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 642.783702][T10419] exFAT-fs (nbd4): unable to read boot sector [ 642.785013][T10419] exFAT-fs (nbd4): failed to read boot sector [ 642.786456][T10419] exFAT-fs (nbd4): failed to recognize exfat type [ 642.982322][ T7658] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.982346][ T7658] usb 10-1: Product: syz [ 642.982358][ T7658] usb 10-1: Manufacturer: syz [ 642.982370][ T7658] usb 10-1: SerialNumber: syz [ 643.321483][ T7658] sisusb 10-1:1.0: Invalid USB2VGA device [ 643.321528][ T7658] sisusb 10-1:1.0: probe with driver sisusb failed with error -22 [ 644.679443][T10424] input: syz1 as /devices/virtual/input/input22 [ 648.108462][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 648.108557][ T42] audit: type=1326 audit(1792913800.690:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.3.785" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x0 [ 648.357986][ T2329] usb 10-1: USB disconnect, device number 7 [ 648.432148][ T24] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0009/input/input23 [ 648.466182][ T42] audit: type=1800 audit(1792913801.030:5964): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240284 res=0 errno=-22 [ 648.466268][ T42] audit: type=1800 audit(1792913801.030:5965): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34746 res=0 errno=-22 [ 648.574046][ T42] audit: type=1800 audit(1792913801.100:5966): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240304 res=0 errno=-22 [ 648.574123][ T42] audit: type=1800 audit(1792913801.110:5967): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=240328 res=0 errno=-22 [ 648.592885][ T42] audit: type=1800 audit(1792913801.170:5968): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=240331 res=0 errno=-22 [ 648.593838][ T42] audit: type=1800 audit(1792913801.170:5969): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=240330 res=0 errno=-22 [ 648.594490][ T42] audit: type=1800 audit(1792913801.170:5970): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=240329 res=0 errno=-22 [ 648.622018][ T24] hid-generic 0005:FFFD057E:0305.0009: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 648.630015][ T42] audit: type=1800 audit(1792913801.200:5971): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=240320 res=0 errno=-22 [ 648.630965][ T42] audit: type=1800 audit(1792913801.200:5972): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=240323 res=0 errno=-22 [ 648.801778][T10446] bridge0: port 1(syz_tun) entered blocking state [ 648.802019][T10446] bridge0: port 1(syz_tun) entered disabled state [ 648.803822][T10446] syz_tun: entered allmulticast mode [ 649.114095][T10447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 649.262679][T10452] rxe_eth0 speed is unknown, defaulting to 1000 [ 649.364987][T10452] lo speed is unknown, defaulting to 1000 [ 649.600206][T10455] fuse: Bad value for 'fd' [ 650.005592][T10460] jffs2: notice: (10460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 650.178771][T10462] ucma_write: process 191 (syz.4.789) changed security contexts after opening file descriptor, this is not allowed. [ 650.481389][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.790'. [ 650.701902][T10469] fuse: Unknown parameter '0x0000000000000003' [ 651.607701][T10473] Invalid ELF header type: 3 != 1 [ 653.448026][T10477] input: syz0 as /devices/virtual/input/input24 [ 653.567876][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 653.568829][ T42] audit: type=1800 audit(1792913806.030:5981): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244401 res=0 errno=-22 [ 653.829474][ T42] audit: type=1800 audit(1792913806.030:5982): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=244416 res=0 errno=-22 [ 653.830531][ T42] audit: type=1800 audit(1792913806.410:5983): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=244419 res=0 errno=-22 [ 653.857785][ T42] audit: type=1800 audit(1792913806.430:5984): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=244418 res=0 errno=-22 [ 653.857817][ T42] audit: type=1800 audit(1792913806.430:5985): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=244417 res=0 errno=-22 [ 653.857836][ T42] audit: type=1800 audit(1792913806.430:5986): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=244408 res=0 errno=-22 [ 653.857855][ T42] audit: type=1800 audit(1792913806.430:5987): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=244411 res=0 errno=-22 [ 653.857874][ T42] audit: type=1800 audit(1792913806.440:5988): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=244404 res=0 errno=-22 [ 653.898089][ T42] audit: type=1800 audit(1792913806.450:5989): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244432 res=0 errno=-22 [ 653.908736][ T42] audit: type=1800 audit(1792913806.470:5990): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=244405 res=0 errno=-22 [ 654.427925][ T2329] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000A/input/input25 [ 654.482281][ T2329] hid-generic 0005:FFFD057E:0305.000A: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 655.215833][ T24] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 656.363276][T10488] ptp ptp0: new virtual clock ptp3 [ 656.853876][T10488] ptp ptp0: new virtual clock ptp4 [ 656.877899][T10488] ptp ptp0: new virtual clock ptp5 [ 656.985779][T10488] ptp ptp0: new virtual clock ptp6 [ 656.985803][T10488] ptp ptp0: guarantee physical clock free running [ 656.985966][T10485] ptp ptp0: delete virtual clock ptp6 [ 657.195505][ T2329] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 657.354892][T10485] ptp ptp0: delete virtual clock ptp5 [ 657.365817][ T2329] usb 6-1: Using ep0 maxpacket: 32 [ 657.368098][ T2329] usb 6-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 657.372434][ T2329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.403817][ T2329] usb 6-1: config 0 descriptor?? [ 657.442329][T10485] ptp ptp0: delete virtual clock ptp4 [ 657.460752][ T2329] as10x_usb: device has been detected [ 657.470404][ T2329] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 657.549330][ T2329] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 657.624022][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 657.629902][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.796'. [ 657.633871][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.634501][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.679470][T10485] ptp ptp0: delete virtual clock ptp3 [ 657.699296][ T2329] as10x_usb: error during firmware upload part1 [ 657.700612][ T2329] Registered device nBox DVB-T Dongle [ 657.727058][ T2329] usb 6-1: USB disconnect, device number 19 [ 657.732982][T10485] ptp ptp0: delete virtual clock ptp2 [ 657.787339][T10485] ptp ptp0: only physical clock in use now [ 657.828578][ T2329] Unregistered device nBox DVB-T Dongle [ 657.859106][ T2329] as10x_usb: device has been disconnected [ 658.765650][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 658.765701][ T42] audit: type=1800 audit(1792913811.250:6027): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244766 res=0 errno=-22 [ 659.367544][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 659.368504][ T24] usb 9-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 659.368536][ T24] usb 9-1: no configurations [ 659.368547][ T24] usb 9-1: can't read configurations, error -22 [ 659.391549][T10511] nvme nvme1: rdma connection establishment failed (-512) [ 659.491039][ T42] audit: type=1326 audit(1792913812.070:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.5.799" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6fbc code=0x0 [ 660.076198][ T42] audit: type=1326 audit(1792913812.590:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fbc code=0x7ffc0000 [ 660.076250][ T42] audit: type=1326 audit(1792913812.590:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fbc code=0x7ffc0000 [ 660.076288][ T42] audit: type=1326 audit(1792913812.600:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc5fbc code=0x7ffc0000 [ 660.076325][ T42] audit: type=1326 audit(1792913812.600:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fbc code=0x7ffc0000 [ 660.076360][ T42] audit: type=1326 audit(1792913812.600:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc5fbc code=0x7ffc0000 [ 660.076395][ T42] audit: type=1326 audit(1792913812.610:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fbc code=0x7ffc0000 [ 660.076460][ T42] audit: type=1326 audit(1792913812.610:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fbc code=0x7ffc0000 [ 660.076497][ T42] audit: type=1326 audit(1792913812.650:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.1.800" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b77ab code=0x7ffc0000 [ 660.325265][ T2329] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 660.522564][ T2329] usb 6-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 660.532872][ T2329] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 661.583195][ T2329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.583214][ T2329] usb 6-1: Product: syz [ 661.583222][ T2329] usb 6-1: Manufacturer: syz [ 661.583230][ T2329] usb 6-1: SerialNumber: syz [ 662.132817][ T2329] sisusb 6-1:1.0: Invalid USB2VGA device [ 662.132881][ T2329] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 663.270616][ T2329] usb 6-1: USB disconnect, device number 20 [ 664.917075][T10546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 665.194892][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 665.194906][ T42] audit: type=1800 audit(1792913817.770:6077): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244993 res=0 errno=-22 [ 665.359137][ T42] audit: type=1800 audit(1792913817.930:6078): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244993 res=0 errno=-22 [ 665.393607][ T42] audit: type=1800 audit(1792913817.970:6079): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245003 res=0 errno=-22 [ 665.515362][ T42] audit: type=1800 audit(1792913818.080:6080): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245003 res=0 errno=-22 [ 668.033656][ T42] audit: type=1326 audit(1792913820.610:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.3.809" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x0 [ 668.095249][ T42] audit: type=1800 audit(1792913820.670:6082): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34796 res=0 errno=-22 [ 668.116097][ T42] audit: type=1800 audit(1792913820.700:6083): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34819 res=0 errno=-22 [ 668.180454][ T42] audit: type=1326 audit(1792913820.760:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.5.815" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x0 [ 668.276664][ T42] audit: type=1800 audit(1792913820.860:6085): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34746 res=0 errno=-22 [ 668.299148][ T42] audit: type=1800 audit(1792913820.880:6086): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34769 res=0 errno=-22 [ 668.332438][ T10] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000B/input/input26 [ 668.348401][ T7658] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 668.383330][ T10] hid-generic 0005:FFFD057E:0305.000B: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 668.503197][ T10] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000C/input/input27 [ 668.595706][ T10] hid-generic 0005:FFFD057E:0305.000C: input,hidraw2: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 668.637292][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.807'. [ 668.820634][ T5872] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 669.494953][ T7658] usb 9-1: New USB device found: idVendor=1385, idProduct=5f01, bcdDevice=79.2a [ 669.498100][ T7658] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 669.498363][ T7658] usb 9-1: can't read configurations, error -71 [ 669.732332][T10587] syzkaller0: entered allmulticast mode [ 669.741058][T10587] tipc: Started in network mode [ 669.741082][T10587] tipc: Node identity b67d1978855b, cluster identity 4711 [ 669.741235][T10587] tipc: Enabled bearer , priority 0 [ 670.370659][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'. [ 670.958301][ T24] tipc: Node number set to 858134904 [ 671.844968][T10595] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 672.104427][T10594] FAULT_INJECTION: forcing a failure. [ 672.104427][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 672.104584][T10594] CPU: 2 UID: 0 PID: 10594 Comm: syz.1.813 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 672.104603][T10594] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 672.104608][T10594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 672.104622][T10594] Call Trace: [ 672.104649][T10594] [ 672.104654][T10594] dump_stack_lvl+0x100/0x190 [ 672.104766][T10594] should_fail_ex.cold+0x5/0xa [ 672.104789][T10594] should_failslab+0xc2/0x120 [ 672.104826][T10594] __kmalloc_noprof+0xfc/0x840 [ 672.104841][T10594] ? lsm_blob_alloc+0x68/0x90 [ 672.104857][T10594] lsm_blob_alloc+0x68/0x90 [ 672.104869][T10594] security_task_alloc+0x2a/0x260 [ 672.104888][T10594] copy_process+0x2c48/0x84c0 [ 672.104922][T10594] ? __pfx_copy_process+0x10/0x10 [ 672.104941][T10594] ? __pfx_get_futex_key+0x10/0x10 [ 672.104962][T10594] kernel_clone+0x176/0x9d0 [ 672.104979][T10594] ? find_held_lock+0x2b/0x80 [ 672.104994][T10594] ? __pfx_kernel_clone+0x10/0x10 [ 672.105046][T10594] ? ksys_write+0x190/0x250 [ 672.105073][T10594] __do_compat_sys_ia32_clone+0xd4/0x120 [ 672.105104][T10594] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 672.105124][T10594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 672.105183][T10594] ? __might_fault+0xc5/0x140 [ 672.105195][T10594] ? __might_fault+0xc5/0x140 [ 672.105210][T10594] __do_fast_syscall_32+0x14b/0x8c0 [ 672.105232][T10594] ? lockdep_hardirqs_on+0x7d/0x110 [ 672.105248][T10594] do_fast_syscall_32+0x32/0x70 [ 672.105265][T10594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.105282][T10594] RIP: 0023:0xf7fc5fbc [ 672.105299][T10594] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 672.105310][T10594] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 672.105339][T10594] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 672.105346][T10594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.105353][T10594] RBP: 00000000f54765ec R08: 0000000000000000 R09: 0000000000000000 [ 672.105360][T10594] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 672.105367][T10594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.105382][T10594] [ 672.592473][ T5872] usb 10-1: unable to get BOS descriptor or descriptor too short [ 672.609842][ T5872] usb 10-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 672.610103][ T5872] usb 10-1: no configurations [ 672.610201][ T5872] usb 10-1: can't read configurations, error -22 [ 675.008237][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 675.008372][ T42] audit: type=1326 audit(1792913827.590:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.5.816" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x0 [ 677.145465][ T2329] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 678.931381][ T2329] usb 10-1: unable to get BOS descriptor or descriptor too short [ 678.932014][ T2329] usb 10-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 678.932034][ T2329] usb 10-1: no configurations [ 678.932040][ T2329] usb 10-1: can't read configurations, error -22 [ 679.237860][ T42] audit: type=1800 audit(1792913831.820:6120): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=87493 res=0 errno=-22 [ 679.238778][ T42] audit: type=1800 audit(1792913831.820:6121): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179682 res=0 errno=-22 [ 679.709145][T10622] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 679.709171][T10622] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 679.897963][ T42] audit: type=1800 audit(1792913832.480:6122): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205848 res=0 errno=-22 [ 679.983852][ T42] audit: type=1800 audit(1792913832.560:6123): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206252 res=0 errno=-22 [ 680.074540][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.5.820'. [ 680.247051][ T42] audit: type=1800 audit(1792913832.800:6124): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.821" name="bus" dev="tmpfs" ino=285 res=0 errno=-22 [ 680.503239][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 680.504503][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 680.516765][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.517002][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.735453][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 680.844621][T10639] /dev/sr0: Can't open blockdev [ 680.916560][T10641] gadgetfs: bound to dummy_udc driver [ 680.922716][ T42] audit: type=1800 audit(1792913833.500:6125): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34646 res=0 errno=-22 [ 680.946436][ T42] audit: type=1800 audit(1792913833.510:6126): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34669 res=0 errno=-22 [ 681.185686][ T5872] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 681.186048][ C0] gadgetfs: connected [ 681.186882][ T5872] gadgetfs: disconnected [ 681.336047][ C0] gadgetfs: connected [ 681.336455][ T5872] usb 6-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 681.339046][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.357463][ T42] audit: type=1800 audit(1792913833.940:6127): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245357 res=0 errno=-22 [ 681.364148][ T42] audit: type=1800 audit(1792913833.940:6128): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245386 res=0 errno=-22 [ 681.364241][ T42] audit: type=1800 audit(1792913833.940:6129): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245364 res=0 errno=-22 [ 681.364409][ T42] audit: type=1800 audit(1792913833.940:6130): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245365 res=0 errno=-22 [ 681.365617][ T42] audit: type=1800 audit(1792913833.950:6131): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=245366 res=0 errno=-22 [ 681.440369][ C0] gadgetfs: configuration #1 [ 681.488996][T10636] gadgetfs: suspended from state 3 [ 681.502620][T10636] gadgetfs: disconnected [ 681.546867][ T5872] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input28 [ 681.601325][ T42] audit: type=1800 audit(1792913834.180:6132): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245406 res=0 errno=-22 [ 681.818392][ T42] audit: type=1800 audit(1792913834.400:6133): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245501 res=0 errno=-22 [ 681.923247][ T5872] usb 6-1: USB disconnect, device number 21 [ 683.336590][T10655] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 683.574346][T10655] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 683.574645][T10655] pci 0000:00:01.0: BAR 2 [mem 0x80084000-0x80084fff] [ 683.578969][T10655] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 683.658404][T10655] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 684.155329][T10655] pci 0000:00:01.0: Adding to iommu group 1 [ 684.708054][T10655] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 684.708070][T10655] pci 0000:00:01.0: vgaarb: bridge control possible [ 684.708078][T10655] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 684.713390][T10655] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 684.713546][T10655] pci 0000:00:01.0: BAR 2 [mem 0x80084000-0x80084fff]: assigned [ 684.732738][T10655] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 684.750702][T10655] [drm] Found bochs VGA, ID 0xb0c5. [ 684.750714][T10655] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80084000. [ 684.763924][T10655] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 684.893074][T10655] Console: switching to colour frame buffer device 160x50 [ 685.187132][T10655] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 685.324776][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 685.324825][ T42] audit: type=1800 audit(1792913837.900:6155): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245666 res=0 errno=-22 [ 685.470805][ T42] audit: type=1800 audit(1792913838.050:6156): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245680 res=0 errno=-22 [ 685.573195][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.779670][T10664] bridge0: port 3(syz_tun) entered blocking state [ 685.780291][T10664] bridge0: port 3(syz_tun) entered disabled state [ 685.781736][T10664] syz_tun: entered allmulticast mode [ 686.580638][T10669] rxe_eth0 speed is unknown, defaulting to 1000 [ 686.939274][T10669] lo speed is unknown, defaulting to 1000 [ 687.701145][T10678] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 687.701145][T10678] [ 687.701278][T10678] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 687.702032][T10678] CIFS: Attempting to mount //172.20.20.170/share [ 688.525876][ T7658] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 689.920506][ T42] audit: type=1800 audit(1792913842.500:6157): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.828" name="eject" dev="sysfs" ino=1816 res=0 errno=-13 [ 690.048750][T10678] CIFS: VFS: Error connecting to socket. Aborting operation. [ 690.068705][T10678] CIFS: VFS: cifs_mount failed w/return code = -4 [ 690.895950][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 691.571986][ T42] audit: type=1800 audit(1792913844.150:6158): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249695 res=0 errno=-22 [ 691.966492][ T7658] usb 6-1: New USB device found: idVendor=1385, idProduct=5f01, bcdDevice=79.2a [ 692.047131][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 692.065843][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.834'. [ 692.066605][T10695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.066814][T10695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.079606][ T7658] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 692.079739][ T7658] usb 6-1: can't read configurations, error -71 [ 692.191382][T10695] /dev/sr0: Can't open blockdev [ 692.285405][ T2329] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 692.899228][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.835'. [ 692.960993][ T42] audit: type=1800 audit(1792913845.540:6159): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249762 res=0 errno=-22 [ 695.527561][ T5582] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 696.146308][ T5582] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 696.153153][ T5582] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 696.153254][ T5582] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 696.181403][ T5582] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.181459][ T5582] usb 10-1: Product: syz [ 696.181467][ T5582] usb 10-1: Manufacturer: á°‰ [ 696.181533][ T5582] usb 10-1: SerialNumber: syz [ 696.234588][ T42] audit: type=1800 audit(1792913848.810:6160): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249789 res=0 errno=-22 [ 696.295867][ T42] audit: type=1800 audit(1792913848.880:6161): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=249821 res=0 errno=-22 [ 696.311429][ T42] audit: type=1800 audit(1792913848.880:6162): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=249796 res=0 errno=-22 [ 696.380929][ T42] audit: type=1800 audit(1792913848.960:6163): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=249797 res=0 errno=-22 [ 698.940261][ T42] audit: type=1326 audit(1792913851.520:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.838" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe3fbc code=0x0 [ 699.322110][ T5582] cdc_ncm 10-1:1.0: bind() failure [ 699.532358][ T5582] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 699.532523][ T5582] cdc_ncm 10-1:1.1: bind() failure [ 699.553037][ T5582] usb 10-1: USB disconnect, device number 12 [ 699.600291][ T42] audit: type=1800 audit(1792913852.180:6165): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=249818 res=0 errno=-22 [ 699.603666][ T42] audit: type=1800 audit(1792913852.180:6166): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=249819 res=0 errno=-22 [ 699.627193][ T42] audit: type=1800 audit(1792913852.210:6167): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=249798 res=0 errno=-22 [ 699.658680][ T42] audit: type=1800 audit(1792913852.240:6168): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=249820 res=0 errno=-22 [ 700.175262][ T2329] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 700.333948][T10729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.843'. [ 700.335368][ T2329] usb 10-1: Using ep0 maxpacket: 8 [ 700.336172][ T2329] usb 10-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 700.337033][ T2329] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 700.337052][ T2329] usb 10-1: config 2 has no interface number 0 [ 700.337080][ T2329] usb 10-1: config 2 interface 31 has no altsetting 0 [ 700.338704][ T2329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.338715][ T2329] usb 10-1: Product: syz [ 700.338722][ T2329] usb 10-1: Manufacturer: syz [ 700.338729][ T2329] usb 10-1: SerialNumber: syz [ 700.345153][ T42] audit: type=1800 audit(1792913852.920:6169): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249932 res=0 errno=-22 [ 700.345225][ T42] audit: type=1800 audit(1792913852.920:6170): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=249964 res=0 errno=-22 [ 700.348056][ T42] audit: type=1800 audit(1792913852.930:6171): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=249939 res=0 errno=-22 [ 700.349097][ T42] audit: type=1800 audit(1792913852.930:6172): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=249940 res=0 errno=-22 [ 700.796012][T10737] lo: left promiscuous mode [ 700.797341][T10737] tunl0: left promiscuous mode [ 700.798216][T10737] gre0: left promiscuous mode [ 700.800213][T10737] gretap0: left promiscuous mode [ 700.801266][T10737] erspan0: left promiscuous mode [ 700.802228][T10737] ip_vti0: left promiscuous mode [ 700.802970][T10737] ip6_vti0: left promiscuous mode [ 700.803846][T10737] sit0: left promiscuous mode [ 700.807156][T10737] ip6tnl0: left promiscuous mode [ 700.808085][T10737] ip6gre0: left promiscuous mode [ 700.809594][T10737] syz_tun: left promiscuous mode [ 700.810666][T10737] ip6gretap0: left promiscuous mode [ 700.811808][T10737] bridge0: left promiscuous mode [ 700.812522][T10737] vcan0: left promiscuous mode [ 700.813241][T10737] bond0: left promiscuous mode [ 700.814249][T10737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.814799][T10737] team0: left promiscuous mode [ 700.815473][T10737] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.816063][T10737] dummy0: left promiscuous mode [ 700.817268][T10737] nlmon0: left promiscuous mode [ 700.818345][T10737] batadv0: left promiscuous mode [ 700.819155][T10737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.819641][T10737] vxcan0: left promiscuous mode [ 700.820356][T10737] vxcan1: left promiscuous mode [ 700.820993][T10737] veth0: left promiscuous mode [ 700.821654][T10737] veth1: left promiscuous mode [ 700.858083][T10737] wg0: left promiscuous mode [ 700.864013][T10737] wg1: left promiscuous mode [ 700.866969][T10737] wg2: left promiscuous mode [ 700.867853][T10737] veth0_to_bridge: left promiscuous mode [ 700.869387][T10737] veth1_to_bridge: left promiscuous mode [ 700.870871][T10737] veth0_to_bond: left promiscuous mode [ 700.872047][T10737] bond_slave_0: left promiscuous mode [ 700.872633][T10737] veth1_to_bond: left promiscuous mode [ 700.874162][T10737] veth0_to_team: left promiscuous mode [ 700.875326][T10737] team_slave_0: left promiscuous mode [ 700.876523][T10737] veth1_to_team: left promiscuous mode [ 700.877276][T10737] team_slave_1: left promiscuous mode [ 700.877878][T10737] veth0_to_batadv: left promiscuous mode [ 700.878557][T10737] batadv_slave_0: left promiscuous mode [ 700.878997][T10737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.879196][T10737] veth1_to_batadv: left promiscuous mode [ 700.879942][T10737] batadv_slave_1: left promiscuous mode [ 700.880544][T10737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.880731][T10737] xfrm0: left promiscuous mode [ 700.881762][T10737] veth0_to_hsr: left promiscuous mode [ 700.886282][T10737] veth1_to_hsr: left promiscuous mode [ 700.887971][T10737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.887986][T10737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.888015][T10737] hsr0: left promiscuous mode [ 700.888894][T10737] veth1_virt_wifi: left promiscuous mode [ 700.889672][T10737] veth0_virt_wifi: left promiscuous mode [ 700.890602][T10737] virt_wifi0: left promiscuous mode [ 700.891426][T10737] veth1_vlan: left promiscuous mode [ 700.893911][T10737] vlan0: left promiscuous mode [ 700.894690][T10737] vlan1: left promiscuous mode [ 700.895468][T10737] veth1_vlan: entered promiscuous mode [ 700.895624][T10737] macvlan0: left promiscuous mode [ 700.896727][T10737] macvlan1: left promiscuous mode [ 700.898181][T10737] ipvlan0: left promiscuous mode [ 700.900550][T10737] ipvlan1: left promiscuous mode [ 700.901450][T10737] veth1_macvtap: left promiscuous mode [ 700.902114][T10737] veth0_macvtap: left promiscuous mode [ 700.903931][T10737] veth0_macvtap: entered promiscuous mode [ 700.904118][T10737] macvtap0: left promiscuous mode [ 700.908131][T10737] veth1_macvtap: entered promiscuous mode [ 700.908290][T10737] macsec0: left promiscuous mode [ 700.910142][T10737] geneve0: left promiscuous mode [ 700.911861][T10737] geneve1: left promiscuous mode [ 700.914383][T10737] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 700.914576][T10737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.915283][T10737] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 700.915498][T10737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.916083][T10737] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 700.916329][T10737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.916972][T10737] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 700.917258][T10737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.918739][T10737] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 700.919351][T10737] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 700.919913][T10737] bond_slave_1.4: left promiscuous mode [ 700.919923][T10737] bond_slave_1: left promiscuous mode [ 700.920892][T10737] veth0_to_team: entered promiscuous mode [ 700.921048][T10737] macvlan2: left promiscuous mode [ 701.053458][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.053726][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.063485][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.063817][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.156653][ T42] audit: type=1800 audit(1792913853.740:6173): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.844" name="group_addr" dev="sysfs" ino=94896 res=0 errno=-22 [ 702.015343][ T5906] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 702.069131][ T2329] ch9200 10-1:2.31: probe with driver ch9200 failed with error -32 [ 702.165294][ T5906] usb 9-1: Using ep0 maxpacket: 32 [ 702.170729][ T5906] usb 9-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 702.173199][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.174824][ T5906] usb 9-1: config 0 descriptor?? [ 702.205606][ T5906] as10x_usb: device has been detected [ 702.208334][ T5906] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 702.214687][ T5906] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 702.336400][ T5906] as10x_usb: error during firmware upload part1 [ 702.337062][ T5906] Registered device nBox DVB-T Dongle [ 702.407308][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 702.421270][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'. [ 702.426419][T10740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.426916][T10740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.758637][T10740] /dev/sr0: Can't open blockdev [ 703.482575][ T5906] usb 9-1: USB disconnect, device number 17 [ 703.503450][ T5906] Unregistered device nBox DVB-T Dongle [ 703.514829][ T5906] as10x_usb: device has been disconnected [ 703.740756][T10750] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 703.744214][T10750] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 703.753037][T10750] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 703.762605][T10750] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 703.993105][ T9346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.006901][ T5884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.007063][ T5884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.007193][ T5884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.474875][ T2329] usb 10-1: USB disconnect, device number 13 [ 705.387315][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 705.387334][ T42] audit: type=1800 audit(1792913857.960:6197): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250414 res=0 errno=-22 [ 705.393290][T10755] gadgetfs: bound to dummy_udc driver [ 705.599224][T10753] gadgetfs: suspended from state 2 [ 705.625545][ T50] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 706.878088][ T42] audit: type=1800 audit(1792913859.460:6198): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.856" name="wakeup_count" dev="sysfs" ino=580 res=0 errno=-22 [ 708.516409][ T42] audit: type=1800 audit(1792913861.070:6199): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250442 res=0 errno=-22 [ 708.920413][ T42] audit: type=1800 audit(1792913861.500:6200): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250457 res=0 errno=-22 [ 709.804878][T10767] bridge0: port 3(syz_tun) entered blocking state [ 709.807408][T10767] bridge0: port 3(syz_tun) entered disabled state [ 709.808257][T10767] syz_tun: entered allmulticast mode [ 710.133410][T10767] syz_tun: entered promiscuous mode [ 710.134079][T10767] bridge0: port 3(syz_tun) entered blocking state [ 710.134238][T10767] bridge0: port 3(syz_tun) entered forwarding state [ 710.491625][T10767] bridge0: port 3(syz_tun) entered disabled state [ 710.492773][T10767] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.494436][T10767] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.635381][ T9162] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 710.785170][ T9162] usb 10-1: Using ep0 maxpacket: 8 [ 710.785675][ T9162] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 710.786552][ T9162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.786574][ T9162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.790245][ T9162] usb 10-1: config 0 descriptor?? [ 710.791958][ T42] audit: type=1800 audit(1792913863.370:6201): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250517 res=0 errno=-22 [ 710.793493][ T42] audit: type=1800 audit(1792913863.370:6202): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=250546 res=0 errno=-22 [ 710.795790][ T42] audit: type=1800 audit(1792913863.380:6203): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=250524 res=0 errno=-22 [ 710.796542][ T42] audit: type=1800 audit(1792913863.380:6204): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=250525 res=0 errno=-22 [ 710.797315][ T42] audit: type=1800 audit(1792913863.380:6205): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=250526 res=0 errno=-22 [ 710.834783][ T42] audit: type=1800 audit(1792913863.410:6206): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250566 res=0 errno=-22 [ 711.005641][ T9162] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 711.009996][ T42] audit: type=1800 audit(1792913863.590:6207): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250583 res=0 errno=-22 [ 711.102027][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.850'. [ 711.214241][ T42] audit: type=1800 audit(1792913863.790:6208): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.851" name="cmci_disabled" dev="sysfs" ino=56852 res=0 errno=-22 [ 711.244329][T10771] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.725942][T10771] lo speed is unknown, defaulting to 1000 [ 711.854824][ T42] audit: type=1800 audit(1792913864.430:6209): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254545 res=0 errno=-22 [ 717.523984][ T7652] usb 10-1: USB disconnect, device number 14 [ 718.015748][ T7652] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 718.020548][ T42] audit: type=1326 audit(1792913870.600:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.1.853" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc5fbc code=0x0 [ 718.046025][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 718.222914][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 718.225628][ T10] usb 9-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 718.241296][ T10] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 718.241354][ T10] usb 9-1: config 0 has no interface number 0 [ 718.241525][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 718.241621][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 718.241719][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 718.241817][ T10] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 718.241948][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.268354][ T42] audit: type=1800 audit(1792913870.840:6211): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254590 res=0 errno=-22 [ 718.293820][ T10] usb 9-1: config 0 descriptor?? [ 718.347889][ T42] audit: type=1800 audit(1792913870.930:6213): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254625 res=0 errno=-22 [ 718.353856][ T42] audit: type=1800 audit(1792913870.910:6212): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254595 res=0 errno=-22 [ 718.392001][ T5872] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 718.411693][ T10] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 718.420671][ T42] audit: type=1800 audit(1792913870.980:6214): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=254639 res=0 errno=-22 [ 718.446590][ T42] audit: type=1800 audit(1792913871.020:6215): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=254602 res=0 errno=-22 [ 718.500990][ T42] audit: type=1800 audit(1792913871.050:6216): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=254603 res=0 errno=-22 [ 718.553519][ T42] audit: type=1800 audit(1792913871.130:6217): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=254604 res=0 errno=-22 [ 718.564531][ T42] audit: type=1800 audit(1792913871.140:6218): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254661 res=0 errno=-22 [ 718.690067][ T5872] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 718.720704][ T5872] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.720770][ T5872] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 718.720866][ T5872] usb 6-1: config 0 interface 0 has no altsetting 0 [ 718.820454][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 718.820554][ T5872] usb 6-1: Product: syz [ 718.820813][ T5872] usb 6-1: Manufacturer: syz [ 718.820883][ T5872] usb 6-1: SerialNumber: syz [ 718.888454][ T42] audit: type=1800 audit(1792913871.470:6219): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254755 res=0 errno=-22 [ 718.891333][ T5872] usb 6-1: config 0 descriptor?? [ 718.946866][T10794] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 719.002322][ T5872] usb 6-1: selecting invalid altsetting 0 [ 720.804393][ T9162] usb 9-1: USB disconnect, device number 18 [ 720.816264][ T9162] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 721.511347][ T2329] usb 6-1: USB disconnect, device number 25 [ 721.905966][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 721.917532][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.917733][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.050002][T10819] /dev/sr0: Can't open blockdev [ 722.079073][ T7652] usb 10-1: New USB device found: idVendor=1385, idProduct=5f01, bcdDevice=79.2a [ 722.093913][ T7652] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 722.094179][ T7652] usb 10-1: can't read configurations, error -71 [ 723.161724][ T42] kauditd_printk_skb: 95 callbacks suppressed [ 723.161775][ T42] audit: type=1326 audit(1792913875.690:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.352730][ T42] audit: type=1326 audit(1792913875.790:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.352833][ T42] audit: type=1326 audit(1792913875.850:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.353031][ T42] audit: type=1326 audit(1792913875.880:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.353259][ T42] audit: type=1326 audit(1792913875.880:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.545515][ T42] audit: type=1326 audit(1792913876.070:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.545643][ T42] audit: type=1326 audit(1792913876.070:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.545774][ T42] audit: type=1326 audit(1792913876.080:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.546100][ T42] audit: type=1326 audit(1792913876.080:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 723.546297][ T42] audit: type=1326 audit(1792913876.080:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 728.908954][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 728.908975][ T42] audit: type=1800 audit(1792913881.490:6358): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.865" name="irqmode" dev="configfs" ino=29689 res=0 errno=-22 [ 729.132531][ T42] audit: type=1800 audit(1792913881.710:6359): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.865" name="completion_nsec" dev="configfs" ino=31212 res=0 errno=-22 [ 729.145634][ T42] audit: type=1800 audit(1792913881.720:6360): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.865" name="power" dev="configfs" ino=31213 res=0 errno=-22 [ 731.045173][ T2329] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 731.208530][ T2329] usb 6-1: Using ep0 maxpacket: 8 [ 731.212981][ T2329] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 731.226377][ T2329] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 731.226396][ T2329] usb 6-1: config 0 has no interface number 0 [ 731.226414][ T2329] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 731.226427][ T2329] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 731.226440][ T2329] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 731.226454][ T2329] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 731.226475][ T2329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.229336][ T2329] usb 6-1: config 0 descriptor?? [ 731.248588][ T42] audit: type=1800 audit(1792913883.830:6361): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=254989 res=0 errno=-22 [ 731.249245][ T42] audit: type=1800 audit(1792913883.830:6362): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=255018 res=0 errno=-22 [ 731.249998][ T42] audit: type=1800 audit(1792913883.830:6363): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=254996 res=0 errno=-22 [ 731.316334][ T2329] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 731.332999][ T42] audit: type=1800 audit(1792913883.880:6364): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=254997 res=0 errno=-22 [ 731.333233][ T42] audit: type=1800 audit(1792913883.880:6365): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=254998 res=0 errno=-22 [ 731.366151][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.366470][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.366677][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.366901][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.367358][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.367633][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.368432][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.368674][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.368950][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 731.369243][T10874] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 732.713293][ T42] audit: type=1800 audit(1792913885.290:6366): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255038 res=0 errno=-22 [ 732.894313][ T42] audit: type=1800 audit(1792913885.470:6367): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255055 res=0 errno=-22 [ 733.768838][ T2329] usb 6-1: USB disconnect, device number 26 [ 733.879646][ T2329] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 734.695526][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 734.907905][ T10] usb 9-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 734.919082][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 734.919137][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 734.919536][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.000175][ T42] audit: type=1800 audit(1792913887.580:6368): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255134 res=0 errno=-22 [ 735.006868][ T10] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 735.108023][ T42] audit: type=1800 audit(1792913887.680:6369): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=255163 res=0 errno=-22 [ 735.131087][ T42] audit: type=1800 audit(1792913887.700:6370): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=255141 res=0 errno=-22 [ 735.147479][ T42] audit: type=1800 audit(1792913887.730:6371): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=255142 res=0 errno=-22 [ 735.163788][ T9948] syz_tun (unregistering): left allmulticast mode [ 735.163864][ T9948] bridge0: port 3(syz_tun) entered disabled state [ 735.221308][ T42] audit: type=1800 audit(1792913887.800:6372): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=255143 res=0 errno=-22 [ 735.236591][ T10] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 735.345536][ T42] audit: type=1800 audit(1792913887.910:6373): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255183 res=0 errno=-22 [ 735.487553][ T42] audit: type=1800 audit(1792913888.060:6374): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255199 res=0 errno=-22 [ 735.519503][ T42] audit: type=1800 audit(1792913888.100:6375): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255213 res=0 errno=-22 [ 735.544934][ T42] audit: type=1800 audit(1792913888.120:6376): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=255184 res=0 errno=-22 [ 735.544977][ T42] audit: type=1800 audit(1792913888.120:6377): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=255187 res=0 errno=-22 [ 735.589329][T10873] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 735.590150][T10873] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 735.591951][T10873] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 735.680549][T10873] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 735.800926][T10871] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 735.810488][ T50] usb 9-1: USB disconnect, device number 19 [ 735.826337][ T50] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 735.826876][ T50] spcp8x5 9-1:1.0: device disconnected [ 735.958144][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 735.976252][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 735.979549][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 736.136305][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 736.153897][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.117820][ T9320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 737.127286][ T9320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.127470][ T9320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.129050][ T9320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.129596][ T9320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.787228][ T5884] netdevsim netdevsim5 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.799061][ T13] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.865847][ T5884] netdevsim netdevsim5 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.865902][ T5884] netdevsim netdevsim5 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.195975][ T2329] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 739.272728][ T9320] Bluetooth: hci0: command tx timeout [ 739.345269][ T2329] usb 6-1: Using ep0 maxpacket: 32 [ 739.346104][ T2329] usb 6-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 739.348132][ T2329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.352475][ T2329] usb 6-1: config 0 descriptor?? [ 739.387130][ T9162] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 739.400998][ T2329] as10x_usb: device has been detected [ 739.401550][ T2329] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 739.437923][ T2329] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 739.449538][ T2329] as10x_usb: error during firmware upload part1 [ 739.449957][ T2329] Registered device nBox DVB-T Dongle [ 739.512211][ T9346] bridge_slave_1: left allmulticast mode [ 739.512428][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.545660][ T9162] usb 9-1: Using ep0 maxpacket: 32 [ 739.546390][ T9162] usb 9-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 739.552437][ T9162] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.554282][ T9162] usb 9-1: config 0 descriptor?? [ 739.571130][ T9346] bridge_slave_0: left allmulticast mode [ 739.571308][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.586058][ T9162] as10x_usb: device has been detected [ 739.586602][ T9162] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 739.614061][ T9162] usb 9-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 739.623728][ T9162] as10x_usb: error during firmware upload part1 [ 739.629764][ T9162] Registered device nBox DVB-T Dongle [ 739.630604][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 739.680248][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.706805][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.759284][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 739.769695][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.770037][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.935651][T10908] /dev/sr0: Can't open blockdev [ 740.029191][T10904] /dev/sr0: Can't open blockdev [ 740.037804][ T9346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.051978][ T9346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.067151][ T9346] bond0 (unregistering): Released all slaves [ 740.099292][ T9162] usb 9-1: USB disconnect, device number 20 [ 740.127637][ T13] netdevsim netdevsim10 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.142249][ T9162] Unregistered device nBox DVB-T Dongle [ 740.160614][ T9162] as10x_usb: device has been disconnected [ 740.184662][ T2329] usb 6-1: USB disconnect, device number 27 [ 740.228068][ T2329] Unregistered device nBox DVB-T Dongle [ 740.241957][ T2329] as10x_usb: device has been disconnected [ 740.401113][ T5505] 8021q: adding VLAN 0 to HW filter on device eth12 [ 740.419500][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 740.419550][ T42] audit: type=1800 audit(1792913893.000:6431): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224965 res=0 errno=-22 [ 740.448744][T10888] rxe_eth0 speed is unknown, defaulting to 1000 [ 740.837174][T10888] lo speed is unknown, defaulting to 1000 [ 741.078054][ T9346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.329710][ T9320] Bluetooth: hci0: command tx timeout [ 743.138325][ T7649] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 743.405720][ T9320] Bluetooth: hci0: command tx timeout [ 744.393342][ T36] smbdirect: ib_dev[syz2] removed [ 744.414363][ T5505] 8021q: adding VLAN 0 to HW filter on device eth13 [ 744.903004][ T7649] usb 6-1: device descriptor read/all, error -71 [ 745.043726][ T42] audit: type=1800 audit(1792913897.620:6432): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.883" name="memory_backed" dev="configfs" ino=34257 res=0 errno=-22 [ 745.044075][ T42] audit: type=1800 audit(1792913897.620:6433): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.883" name="zoned" dev="configfs" ino=34258 res=0 errno=-22 [ 745.285547][ T42] audit: type=1800 audit(1792913897.860:6434): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.883" name="power" dev="configfs" ino=34293 res=0 errno=-22 [ 745.483122][T10966] loop5: detected capacity change from 0 to 4095 [ 745.497549][ T9320] Bluetooth: hci0: command tx timeout [ 745.565283][ T42] audit: type=1800 audit(1792913898.080:6435): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16142 res=0 errno=-22 [ 745.597383][T10966] buffer_io_error: 14 callbacks suppressed [ 745.597397][T10966] Buffer I/O error on dev loop5, logical block 511, async page read [ 745.779045][ T5505] 8021q: adding VLAN 0 to HW filter on device eth14 [ 746.044629][ T42] audit: type=1800 audit(1792913898.620:6436): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.885" name="unbind" dev="sysfs" ino=12867 res=0 errno=-13 [ 746.094066][T10888] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.107233][T10888] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.107586][T10888] bridge_slave_0: entered allmulticast mode [ 746.108745][T10888] bridge_slave_0: entered promiscuous mode [ 746.124095][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.124167][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.124271][T10888] bridge_slave_1: entered allmulticast mode [ 746.143135][T10888] bridge_slave_1: entered promiscuous mode [ 746.184248][ T42] audit: type=1800 audit(1792913898.760:6437): pid=10867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262102 res=0 errno=-22 [ 746.245415][T10978] FAULT_INJECTION: forcing a failure. [ 746.245415][T10978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.245531][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.3.885 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 746.245550][T10978] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 746.245554][T10978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.245561][T10978] Call Trace: [ 746.245565][T10978] [ 746.245570][T10978] dump_stack_lvl+0x100/0x190 [ 746.245694][T10978] should_fail_ex.cold+0x5/0xa [ 746.245718][T10978] _copy_from_user+0x2e/0xd0 [ 746.245754][T10978] __sys_bpf+0x2f5/0x4b60 [ 746.245775][T10978] ? __pfx___sys_bpf+0x10/0x10 [ 746.245791][T10978] ? find_held_lock+0x2b/0x80 [ 746.245805][T10978] ? futex_wake+0x4ea/0x5e0 [ 746.245834][T10978] ? find_held_lock+0x2b/0x80 [ 746.245847][T10978] ? ksys_write+0x190/0x250 [ 746.245860][T10978] ? ksys_write+0x190/0x250 [ 746.245883][T10978] ? lock_acquire+0x1d1/0x380 [ 746.245899][T10978] ? __might_fault+0xc5/0x140 [ 746.245910][T10978] ? find_held_lock+0x2b/0x80 [ 746.245926][T10978] ? __ia32_sys_bpf+0xcc/0x170 [ 746.245941][T10978] __ia32_sys_bpf+0xcc/0x170 [ 746.245957][T10978] ? __might_fault+0x111/0x140 [ 746.245968][T10978] __do_fast_syscall_32+0x14b/0x8c0 [ 746.246017][T10978] do_fast_syscall_32+0x32/0x70 [ 746.246032][T10978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.246047][T10978] RIP: 0023:0xf7fe3fbc [ 746.246058][T10978] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 746.246069][T10978] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 746.246081][T10978] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080001b40 [ 746.246088][T10978] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.246095][T10978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.246101][T10978] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.246107][T10978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.246122][T10978] [ 746.270985][T10866] Buffer I/O error on dev loop5, logical block 511, async page read [ 746.306713][T10888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.419689][ T42] audit: type=1800 audit(1792913899.000:6438): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262280 res=0 errno=-22 [ 746.437106][T10888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.562756][T10888] team0: Port device team_slave_0 added [ 746.564211][T10888] team0: Port device team_slave_1 added [ 746.579396][ T42] audit: type=1800 audit(1792913899.160:6439): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262642 res=0 errno=-22 [ 746.614038][T10888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.614053][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.614075][T10888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.634933][ T42] audit: type=1800 audit(1792913899.210:6440): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262856 res=0 errno=-22 [ 746.642227][T10888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.642237][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.642250][T10888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.726895][ T9346] IPVS: stop unused estimator thread 0... [ 746.732073][ T42] audit: type=1800 audit(1792913899.300:6441): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262832 res=0 errno=-22 [ 746.738471][ T42] audit: type=1800 audit(1792913899.320:6442): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262922 res=0 errno=-22 [ 746.761332][T10888] hsr_slave_0: entered promiscuous mode [ 746.769687][T10888] hsr_slave_1: entered promiscuous mode [ 746.770006][T10888] debugfs: 'hsr0' already exists in 'hsr' [ 746.770017][T10888] Cannot create hsr debugfs directory [ 746.793240][ T42] audit: type=1800 audit(1792913899.370:6443): pid=10867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262900 res=0 errno=-22 [ 746.844881][ T42] audit: type=1800 audit(1792913899.420:6444): pid=10888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27008 res=0 errno=-13 [ 747.022374][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.222295][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 747.666183][ T7649] e1000 0000:00:07.0 eth0: Reset adapter [ 747.688414][ T5582] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 747.703373][T10983] rxe_eth0 speed is unknown, defaulting to 1000 [ 747.723661][ T5505] 8021q: adding VLAN 0 to HW filter on device eth15 [ 748.355874][ T7649] e1000 0000:00:07.0 eth0: Reset adapter [ 748.932708][ T7649] e1000 0000:00:07.0 eth0: Reset adapter [ 749.055523][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 749.225759][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 749.227529][ T10] usb 9-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 749.233916][ T10] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 749.234014][ T10] usb 9-1: config 0 has no interface number 0 [ 749.234278][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 749.234374][ T10] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 749.234445][ T10] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.234670][ T10] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.234834][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.259182][ T10] usb 9-1: config 0 descriptor?? [ 749.297260][ T10] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 749.383566][T10888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.417520][T10888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.424253][T10888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.460808][T10888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.465038][T10888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.497042][T10888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.498479][T10888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 749.538580][T10888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.714021][T10888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.739819][T10888] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.752712][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.752762][ T9337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.768443][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.768529][ T9337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.303845][T11019] ALSA: mixer_oss: invalid OSS volume '{ž¤~À/' [ 750.823343][ T5505] 8021q: adding VLAN 0 to HW filter on device eth16 [ 751.329264][ T5582] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 751.521513][T10888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.823927][T10888] veth0_vlan: entered promiscuous mode [ 751.831674][T10888] veth1_vlan: entered promiscuous mode [ 751.848161][T10888] veth0_macvtap: entered promiscuous mode [ 751.850510][T10888] veth1_macvtap: entered promiscuous mode [ 751.861639][T10888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.872191][T10888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.883067][ T5909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.883784][ T5909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.965705][ T5909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.046970][ T5909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.201672][ T50] usb 9-1: USB disconnect, device number 21 [ 752.221677][ T50] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 752.312126][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 752.312138][ T42] audit: type=1800 audit(1792913904.890:6456): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269485 res=0 errno=-22 [ 753.004316][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.004387][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.138276][ T42] audit: type=1800 audit(1792913905.640:6457): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269611 res=0 errno=-22 [ 753.840521][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.840675][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.132901][T11062] rxe_eth0 speed is unknown, defaulting to 1000 [ 756.483076][T11086] gadgetfs: bound to dummy_udc driver [ 756.746158][ T5949] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 756.746555][ C0] gadgetfs: connected [ 756.749634][ T5949] gadgetfs: disconnected [ 756.905994][ C0] gadgetfs: connected [ 756.906810][ T5949] usb 6-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 756.908580][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.960372][ C0] gadgetfs: configuration #1 [ 756.966796][ T42] audit: type=1800 audit(1792913909.530:6458): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273635 res=0 errno=-22 [ 757.008834][ T42] audit: type=1800 audit(1792913909.590:6459): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=273664 res=0 errno=-22 [ 757.026220][ T5949] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input31 [ 757.031903][ T42] audit: type=1800 audit(1792913909.610:6460): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=273642 res=0 errno=-22 [ 757.043918][ T42] audit: type=1800 audit(1792913909.620:6461): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=273643 res=0 errno=-22 [ 757.132141][ T42] audit: type=1800 audit(1792913909.710:6462): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=273644 res=0 errno=-22 [ 757.206597][ C0] usbtouchscreen 6-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 757.242727][ T42] audit: type=1800 audit(1792913909.820:6463): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273684 res=0 errno=-22 [ 757.280161][ T42] audit: type=1800 audit(1792913909.860:6464): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273703 res=0 errno=-22 [ 757.413996][ T42] audit: type=1800 audit(1792913909.990:6465): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=273719 res=0 errno=-22 [ 757.432042][ T42] audit: type=1800 audit(1792913910.010:6466): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=273722 res=0 errno=-22 [ 757.469061][ T42] audit: type=1800 audit(1792913910.040:6467): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=273721 res=0 errno=-22 [ 757.471913][ T42] audit: type=1800 audit(1792913910.050:6468): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=273720 res=0 errno=-22 [ 757.502783][ T42] audit: type=1800 audit(1792913910.070:6469): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=273711 res=0 errno=-22 [ 757.529406][T11082] gadgetfs: suspended from state 3 [ 757.531419][ T5582] usb 6-1: USB disconnect, device number 30 [ 757.534599][T11082] gadgetfs: disconnected [ 757.534695][ T42] audit: type=1800 audit(1792913910.110:6470): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=273714 res=0 errno=-22 [ 757.682550][T11095] netlink: 'syz.4.898': attribute type 2 has an invalid length. [ 757.698217][ T42] audit: type=1800 audit(1792913910.270:6471): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=273707 res=0 errno=-22 [ 757.726427][ T42] audit: type=1800 audit(1792913910.300:6472): pid=10867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=273708 res=0 errno=-22 [ 759.062685][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 759.388298][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 759.472851][ T42] audit: type=1326 audit(1792913912.050:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11111 comm="syz.3.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x7ffc0000 [ 759.485074][ T42] audit: type=1326 audit(1792913912.060:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11111 comm="syz.3.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fbc code=0x7ffc0000 [ 760.186553][T11114] Console: switching to colour dummy device 80x25 [ 761.159325][T11111] ima: policy update completed [ 768.845017][T11160] fuse: Unknown parameter 'fd0x0000000000000003' [ 769.395875][T11172] netlink: 'syz.4.904': attribute type 4 has an invalid length. [ 769.395897][T11172] netlink: 17 bytes leftover after parsing attributes in process `syz.4.904'. [ 771.441813][T11192] syzkaller0: entered promiscuous mode [ 771.441834][T11192] syzkaller0: entered allmulticast mode [ 771.520142][T11198] netlink: 'syz.3.907': attribute type 16 has an invalid length. [ 771.520165][T11198] netlink: 'syz.3.907': attribute type 3 has an invalid length. [ 771.520179][T11198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.907'. [ 772.557251][ T42] kauditd_printk_skb: 730 callbacks suppressed [ 772.557311][ T42] audit: type=1800 audit(1792913925.130:7205): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273872 res=0 errno=-22 [ 772.628983][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 772.631482][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.908'. [ 772.632341][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.632581][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.779558][T11206] /dev/sr0: Can't open blockdev [ 772.836799][ T7193] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 772.949951][ T42] audit: type=1326 audit(1792913925.530:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.6.909" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x0 [ 773.074986][ T42] audit: type=1800 audit(1792913925.650:7207): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273899 res=0 errno=-22 [ 773.089947][ T42] audit: type=1800 audit(1792913925.670:7208): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34896 res=0 errno=-22 [ 773.089987][ T42] audit: type=1800 audit(1792913925.670:7209): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34919 res=0 errno=-22 [ 773.091618][T10922] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000D/input/input32 [ 773.115973][ T42] audit: type=1800 audit(1792913925.700:7210): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273927 res=0 errno=-22 [ 773.126886][ T42] audit: type=1800 audit(1792913925.700:7211): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=273943 res=0 errno=-22 [ 773.126915][ T42] audit: type=1800 audit(1792913925.700:7212): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=273946 res=0 errno=-22 [ 773.145212][ T42] audit: type=1800 audit(1792913925.730:7213): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=273945 res=0 errno=-22 [ 773.145240][ T42] audit: type=1800 audit(1792913925.730:7214): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=273944 res=0 errno=-22 [ 773.147716][T10922] hid-generic 0005:FFFD057E:0305.000D: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 773.325454][T11031] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 774.016293][T11222] FAULT_INJECTION: forcing a failure. [ 774.016293][T11222] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 774.016353][T11222] CPU: 3 UID: 0 PID: 11222 Comm: syz.4.911 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 774.016382][T11222] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 774.016387][T11222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 774.016394][T11222] Call Trace: [ 774.016399][T11222] [ 774.016404][T11222] dump_stack_lvl+0x100/0x190 [ 774.016423][T11222] should_fail_ex.cold+0x5/0xa [ 774.016438][T11222] ? prepare_alloc_pages+0x16d/0x5b0 [ 774.016456][T11222] should_fail_alloc_page+0xeb/0x140 [ 774.016487][T11222] prepare_alloc_pages+0x1f0/0x5b0 [ 774.016506][T11222] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 774.016523][T11222] ? rcu_is_watching+0x13/0xc0 [ 774.016558][T11222] ? trace_mm_page_alloc+0x164/0x1c0 [ 774.016579][T11222] ? __alloc_frozen_pages_noprof+0x33e/0x3190 [ 774.016595][T11222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 774.016608][T11222] ? lock_acquire+0x1d1/0x380 [ 774.016625][T11222] ? is_bpf_text_address+0x25/0x1a0 [ 774.016638][T11222] ? find_held_lock+0x2b/0x80 [ 774.016650][T11222] ? is_bpf_text_address+0x8a/0x1a0 [ 774.016662][T11222] ? is_bpf_text_address+0x8a/0x1a0 [ 774.016675][T11222] ? bpf_ksym_find+0x124/0x1c0 [ 774.016693][T11222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 774.016708][T11222] ? kernel_text_address+0x8d/0x100 [ 774.016736][T11222] ? arch_stack_walk+0xa6/0xf0 [ 774.016765][T11222] alloc_pages_bulk_noprof+0x624/0x14a0 [ 774.016778][T11222] ? lock_acquire+0x1d1/0x380 [ 774.016797][T11222] ? irqentry_exit+0x202/0xab0 [ 774.016812][T11222] ? lockdep_hardirqs_on+0x7d/0x110 [ 774.016825][T11222] ? irqentry_exit+0x202/0xab0 [ 774.016838][T11222] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 774.016861][T11222] __kasan_populate_vmalloc+0xf0/0x210 [ 774.016878][T11222] alloc_vmap_area+0x963/0x2bc0 [ 774.016897][T11222] ? kasan_save_track+0x14/0x30 [ 774.016911][T11222] ? __kasan_kmalloc+0xaa/0xb0 [ 774.016925][T11222] ? __pfx_alloc_vmap_area+0x10/0x10 [ 774.016941][T11222] ? __get_vm_area_node+0x124/0x350 [ 774.016959][T11222] __get_vm_area_node+0x1ed/0x350 [ 774.016977][T11222] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 774.016993][T11222] ? kernel_clone+0x176/0x9d0 [ 774.017017][T11222] ? lock_acquire+0x1d1/0x380 [ 774.017033][T11222] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 774.017046][T11222] ? find_held_lock+0x2b/0x80 [ 774.017066][T11222] ? rcu_read_unlock+0x17/0x60 [ 774.017078][T11222] ? kernel_clone+0x176/0x9d0 [ 774.017096][T11222] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 774.017111][T11222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 774.017130][T11222] ? rcu_is_watching+0x13/0xc0 [ 774.017144][T11222] ? trace_kmem_cache_alloc+0xdd/0x100 [ 774.017162][T11222] ? kernel_clone+0x176/0x9d0 [ 774.017179][T11222] __vmalloc_node_noprof+0xad/0xf0 [ 774.017195][T11222] ? kernel_clone+0x176/0x9d0 [ 774.017214][T11222] copy_process+0x80b/0x84c0 [ 774.017233][T11222] ? __pfx___futex_wait+0x10/0x10 [ 774.017249][T11222] ? futex_hash+0x311/0x400 [ 774.017266][T11222] ? __pfx_copy_process+0x10/0x10 [ 774.017283][T11222] ? __pfx_get_futex_key+0x10/0x10 [ 774.017301][T11222] kernel_clone+0x176/0x9d0 [ 774.017317][T11222] ? find_held_lock+0x2b/0x80 [ 774.017331][T11222] ? __pfx_kernel_clone+0x10/0x10 [ 774.017351][T11222] ? ksys_write+0x190/0x250 [ 774.017368][T11222] __do_compat_sys_ia32_clone+0xd4/0x120 [ 774.017394][T11222] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 774.017417][T11222] ? __might_fault+0xc5/0x140 [ 774.017427][T11222] ? __might_fault+0xc5/0x140 [ 774.017442][T11222] __do_fast_syscall_32+0x14b/0x8c0 [ 774.017459][T11222] do_fast_syscall_32+0x32/0x70 [ 774.017474][T11222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.017488][T11222] RIP: 0023:0xf744efbc [ 774.017498][T11222] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 774.017511][T11222] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 774.017527][T11222] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 774.017538][T11222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.017547][T11222] RBP: 00000000f54665ec R08: 0000000000000000 R09: 0000000000000000 [ 774.017558][T11222] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 774.017568][T11222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.017592][T11222] [ 774.019140][T11222] syz.4.911: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 774.019418][T11222] CPU: 3 UID: 0 PID: 11222 Comm: syz.4.911 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 774.019438][T11222] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 774.019442][T11222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 774.019450][T11222] Call Trace: [ 774.019454][T11222] [ 774.019458][T11222] dump_stack_lvl+0x100/0x190 [ 774.019478][T11222] warn_alloc.cold+0x9e/0xb2 [ 774.019504][T11222] ? __pfx_warn_alloc+0x10/0x10 [ 774.019521][T11222] ? lockdep_hardirqs_on+0x7d/0x110 [ 774.019536][T11222] ? __get_vm_area_node+0x2f0/0x350 [ 774.019555][T11222] ? __get_vm_area_node+0x22b/0x350 [ 774.019574][T11222] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 774.019592][T11222] ? lock_acquire+0x1d1/0x380 [ 774.019610][T11222] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 774.019625][T11222] ? find_held_lock+0x2b/0x80 [ 774.019638][T11222] ? rcu_read_unlock+0x17/0x60 [ 774.019650][T11222] ? kernel_clone+0x176/0x9d0 [ 774.019668][T11222] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 774.019682][T11222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 774.019700][T11222] ? rcu_is_watching+0x13/0xc0 [ 774.019714][T11222] ? trace_kmem_cache_alloc+0xdd/0x100 [ 774.019731][T11222] ? kernel_clone+0x176/0x9d0 [ 774.019747][T11222] __vmalloc_node_noprof+0xad/0xf0 [ 774.019763][T11222] ? kernel_clone+0x176/0x9d0 [ 774.019781][T11222] copy_process+0x80b/0x84c0 [ 774.019799][T11222] ? __pfx___futex_wait+0x10/0x10 [ 774.019815][T11222] ? futex_hash+0x311/0x400 [ 774.019832][T11222] ? __pfx_copy_process+0x10/0x10 [ 774.019849][T11222] ? __pfx_get_futex_key+0x10/0x10 [ 774.019868][T11222] kernel_clone+0x176/0x9d0 [ 774.019889][T11222] ? find_held_lock+0x2b/0x80 [ 774.019909][T11222] ? __pfx_kernel_clone+0x10/0x10 [ 774.019939][T11222] ? ksys_write+0x190/0x250 [ 774.019968][T11222] __do_compat_sys_ia32_clone+0xd4/0x120 [ 774.019986][T11222] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 774.020010][T11222] ? __might_fault+0xc5/0x140 [ 774.020020][T11222] ? __might_fault+0xc5/0x140 [ 774.020034][T11222] __do_fast_syscall_32+0x14b/0x8c0 [ 774.020050][T11222] do_fast_syscall_32+0x32/0x70 [ 774.020072][T11222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.020086][T11222] RIP: 0023:0xf744efbc [ 774.020096][T11222] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 774.020107][T11222] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 774.020118][T11222] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 774.020125][T11222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.020131][T11222] RBP: 00000000f54665ec R08: 0000000000000000 R09: 0000000000000000 [ 774.020137][T11222] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 774.020143][T11222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.020157][T11222] [ 774.020222][T11222] Mem-Info: [ 774.020256][T11222] active_anon:9690 inactive_anon:3432 isolated_anon:0 [ 774.020256][T11222] active_file:2058 inactive_file:15851 isolated_file:0 [ 774.020256][T11222] unevictable:0 dirty:535 writeback:0 [ 774.020256][T11222] slab_reclaimable:6679 slab_unreclaimable:62263 [ 774.020256][T11222] mapped:28753 shmem:2881 pagetables:1876 [ 774.020256][T11222] sec_pagetables:327 bounce:0 [ 774.020256][T11222] kernel_misc_reclaimable:0 [ 774.020256][T11222] free:18641 free_pcp:5258 free_cma:0 [ 774.020324][T11222] Node 0 active_anon:5256kB inactive_anon:120kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5140kB dirty:0kB writeback:0kB shmem:5116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1344kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.020416][T11222] Node 1 active_anon:33504kB inactive_anon:13608kB active_file:8208kB inactive_file:63404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109872kB dirty:2140kB writeback:0kB shmem:6408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:6840kB pagetables:6160kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.020484][T11222] Node 0 DMA free:1664kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:280kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:20kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:496kB local_pcp:52kB free_cma:0kB [ 774.020572][T11222] lowmem_reserve[]: 0 257 257 257 257 [ 774.020713][T11222] Node 0 DMA32 free:5672kB boost:25996kB min:37552kB low:40440kB high:43328kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4976kB inactive_anon:120kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:440kB present:1032196kB managed:263240kB mlocked:0kB bounce:0kB free_pcp:17420kB local_pcp:4752kB free_cma:0kB [ 774.020784][T11222] lowmem_reserve[]: 0 0 0 0 0 [ 774.021407][T11222] Node 1 DMA32 free:67228kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33504kB inactive_anon:13608kB active_file:8208kB inactive_file:63404kB unevictable:0kB writepending:2140kB zspages:5324kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3116kB local_pcp:876kB free_cma:0kB [ 774.021701][T11222] lowmem_reserve[]: 0 0 0 0 0 [ 774.021991][T11222] Node 0 DMA: 146*4kB (UM) 7*8kB (U) 6*16kB (UM) 5*32kB (U) 2*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1664kB [ 774.022848][T11222] Node 0 DMA32: 0*4kB 1*8kB (E) 0*16kB 17*32kB (UE) 28*64kB (UE) 12*128kB (UE) 1*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 5672kB [ 774.023630][T11222] Node 1 DMA32: 2014*4kB (UME) 765*8kB (UME) 217*16kB (UME) 160*32kB (UME) 93*64kB (UME) 63*128kB (UE) 13*256kB (U) 5*512kB (M) 8*1024kB (UM) 4*2048kB (UM) 2*4096kB (M) = 67248kB [ 774.024941][T11222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.025009][T11222] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 774.025165][T11222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.025431][T11222] Node 1 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 774.025499][T11222] 21684 total pagecache pages [ 774.025563][T11222] 905 pages in swap cache [ 774.025594][T11222] Free swap = 75588kB [ 774.025600][T11222] Total swap = 124996kB [ 774.025662][T11222] 524155 pages RAM [ 774.025666][T11222] 0 pages HighMem/MovableOnly [ 774.025728][T11222] 217453 pages reserved [ 774.025824][T11222] 0 pages cma reserved [ 775.191522][T11225] FAULT_INJECTION: forcing a failure. [ 775.191522][T11225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 775.191616][T11225] CPU: 2 UID: 0 PID: 11225 Comm: syz.4.912 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 775.191644][T11225] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 775.191650][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.191660][T11225] Call Trace: [ 775.191667][T11225] [ 775.191674][T11225] dump_stack_lvl+0x100/0x190 [ 775.191704][T11225] should_fail_ex.cold+0x5/0xa [ 775.191741][T11225] ? prepare_alloc_pages+0x16d/0x5b0 [ 775.191769][T11225] should_fail_alloc_page+0xeb/0x140 [ 775.191797][T11225] prepare_alloc_pages+0x1f0/0x5b0 [ 775.191825][T11225] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 775.191847][T11225] ? __pfx_get_page_from_freelist+0x10/0x10 [ 775.191868][T11225] ? rcu_is_watching+0x13/0xc0 [ 775.191890][T11225] ? trace_mm_page_alloc+0x164/0x1c0 [ 775.191914][T11225] ? __alloc_frozen_pages_noprof+0x33e/0x3190 [ 775.191938][T11225] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 775.191963][T11225] ? stack_trace_save+0x8e/0xc0 [ 775.191989][T11225] ? __pfx_stack_trace_save+0x10/0x10 [ 775.192014][T11225] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 775.192040][T11225] ? kasan_save_track+0x14/0x30 [ 775.192061][T11225] ? __kasan_slab_alloc+0x89/0x90 [ 775.192082][T11225] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 775.192102][T11225] ? alloc_vmap_area+0x643/0x2bc0 [ 775.192121][T11225] ? __get_vm_area_node+0x1ed/0x350 [ 775.192142][T11225] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 775.192175][T11225] ? __vmalloc_node_noprof+0xad/0xf0 [ 775.192199][T11225] ? copy_process+0x80b/0x84c0 [ 775.192225][T11225] ? kernel_clone+0x176/0x9d0 [ 775.192249][T11225] ? __do_compat_sys_ia32_clone+0xd4/0x120 [ 775.192274][T11225] ? __do_fast_syscall_32+0x14b/0x8c0 [ 775.192296][T11225] ? do_fast_syscall_32+0x32/0x70 [ 775.192319][T11225] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.192348][T11225] alloc_pages_bulk_noprof+0x624/0x14a0 [ 775.192374][T11225] ? policy_nodemask+0xed/0x4f0 [ 775.192401][T11225] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 775.192434][T11225] __kasan_populate_vmalloc+0xf0/0x210 [ 775.192461][T11225] alloc_vmap_area+0x963/0x2bc0 [ 775.192490][T11225] ? kasan_save_track+0x14/0x30 [ 775.192511][T11225] ? __kasan_kmalloc+0xaa/0xb0 [ 775.192559][T11225] ? __pfx_alloc_vmap_area+0x10/0x10 [ 775.192584][T11225] ? __get_vm_area_node+0x124/0x350 [ 775.192610][T11225] __get_vm_area_node+0x1ed/0x350 [ 775.192638][T11225] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 775.192664][T11225] ? kernel_clone+0x176/0x9d0 [ 775.192689][T11225] ? lock_acquire+0x1d1/0x380 [ 775.192714][T11225] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 775.192735][T11225] ? find_held_lock+0x2b/0x80 [ 775.192757][T11225] ? rcu_read_unlock+0x17/0x60 [ 775.192774][T11225] ? kernel_clone+0x176/0x9d0 [ 775.192794][T11225] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 775.192807][T11225] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 775.192825][T11225] ? rcu_is_watching+0x13/0xc0 [ 775.192839][T11225] ? trace_kmem_cache_alloc+0xdd/0x100 [ 775.192856][T11225] ? kernel_clone+0x176/0x9d0 [ 775.192872][T11225] __vmalloc_node_noprof+0xad/0xf0 [ 775.192888][T11225] ? kernel_clone+0x176/0x9d0 [ 775.192906][T11225] copy_process+0x80b/0x84c0 [ 775.192924][T11225] ? __pfx___futex_wait+0x10/0x10 [ 775.192940][T11225] ? futex_hash+0x311/0x400 [ 775.192957][T11225] ? __pfx_copy_process+0x10/0x10 [ 775.192974][T11225] ? __pfx_get_futex_key+0x10/0x10 [ 775.192993][T11225] kernel_clone+0x176/0x9d0 [ 775.193009][T11225] ? find_held_lock+0x2b/0x80 [ 775.193023][T11225] ? __pfx_kernel_clone+0x10/0x10 [ 775.193043][T11225] ? ksys_write+0x190/0x250 [ 775.193061][T11225] __do_compat_sys_ia32_clone+0xd4/0x120 [ 775.193079][T11225] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 775.193094][T11225] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.193114][T11225] ? __might_fault+0xc5/0x140 [ 775.193125][T11225] ? __might_fault+0xc5/0x140 [ 775.193139][T11225] __do_fast_syscall_32+0x14b/0x8c0 [ 775.193157][T11225] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.193172][T11225] do_fast_syscall_32+0x32/0x70 [ 775.193186][T11225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.193206][T11225] RIP: 0023:0xf744efbc [ 775.193219][T11225] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 775.193235][T11225] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 775.193251][T11225] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 775.193258][T11225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.193265][T11225] RBP: 00000000f54665ec R08: 0000000000000000 R09: 0000000000000000 [ 775.193275][T11225] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 775.193285][T11225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.193306][T11225] [ 776.545473][T11230] FAULT_INJECTION: forcing a failure. [ 776.545473][T11230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 776.545535][T11230] CPU: 0 UID: 0 PID: 11230 Comm: syz.1.913 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 776.545565][T11230] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 776.545570][T11230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 776.545576][T11230] Call Trace: [ 776.545581][T11230] [ 776.545586][T11230] dump_stack_lvl+0x100/0x190 [ 776.545605][T11230] should_fail_ex.cold+0x5/0xa [ 776.545618][T11230] ? prepare_alloc_pages+0x16d/0x5b0 [ 776.545636][T11230] should_fail_alloc_page+0xeb/0x140 [ 776.545654][T11230] prepare_alloc_pages+0x1f0/0x5b0 [ 776.545672][T11230] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 776.545686][T11230] ? __pfx_get_page_from_freelist+0x10/0x10 [ 776.545700][T11230] ? rcu_is_watching+0x13/0xc0 [ 776.545715][T11230] ? trace_mm_page_alloc+0x164/0x1c0 [ 776.545731][T11230] ? __alloc_frozen_pages_noprof+0x33e/0x3190 [ 776.545746][T11230] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 776.545762][T11230] ? stack_trace_save+0x8e/0xc0 [ 776.545779][T11230] ? __pfx_stack_trace_save+0x10/0x10 [ 776.545795][T11230] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 776.545816][T11230] ? kasan_save_track+0x14/0x30 [ 776.545834][T11230] ? __kasan_slab_alloc+0x89/0x90 [ 776.545852][T11230] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 776.545869][T11230] ? alloc_vmap_area+0x643/0x2bc0 [ 776.545888][T11230] ? __get_vm_area_node+0x1ed/0x350 [ 776.545902][T11230] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 776.545918][T11230] ? __vmalloc_node_noprof+0xad/0xf0 [ 776.545932][T11230] ? copy_process+0x80b/0x84c0 [ 776.545948][T11230] ? kernel_clone+0x176/0x9d0 [ 776.545964][T11230] ? __do_compat_sys_ia32_clone+0xd4/0x120 [ 776.545980][T11230] ? __do_fast_syscall_32+0x14b/0x8c0 [ 776.545995][T11230] ? do_fast_syscall_32+0x32/0x70 [ 776.546007][T11230] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.546025][T11230] alloc_pages_bulk_noprof+0x624/0x14a0 [ 776.546039][T11230] ? mark_held_locks+0x40/0x70 [ 776.546063][T11230] ? policy_nodemask+0xed/0x4f0 [ 776.546082][T11230] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 776.546104][T11230] __kasan_populate_vmalloc+0xf0/0x210 [ 776.546123][T11230] alloc_vmap_area+0x963/0x2bc0 [ 776.546143][T11230] ? kasan_save_track+0x14/0x30 [ 776.546157][T11230] ? __kasan_kmalloc+0xaa/0xb0 [ 776.546172][T11230] ? __pfx_alloc_vmap_area+0x10/0x10 [ 776.546187][T11230] ? __get_vm_area_node+0x124/0x350 [ 776.546205][T11230] __get_vm_area_node+0x1ed/0x350 [ 776.546223][T11230] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 776.546240][T11230] ? kernel_clone+0x176/0x9d0 [ 776.546256][T11230] ? lock_acquire+0x1d1/0x380 [ 776.546272][T11230] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 776.546286][T11230] ? find_held_lock+0x2b/0x80 [ 776.546300][T11230] ? rcu_read_unlock+0x17/0x60 [ 776.546312][T11230] ? kernel_clone+0x176/0x9d0 [ 776.546330][T11230] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 776.546344][T11230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 776.546362][T11230] ? rcu_is_watching+0x13/0xc0 [ 776.546375][T11230] ? trace_kmem_cache_alloc+0xdd/0x100 [ 776.546393][T11230] ? kernel_clone+0x176/0x9d0 [ 776.546399][T11031] usb 11-1: unable to get BOS descriptor or descriptor too short [ 776.546410][T11230] __vmalloc_node_noprof+0xad/0xf0 [ 776.546426][T11230] ? kernel_clone+0x176/0x9d0 [ 776.546443][T11230] copy_process+0x80b/0x84c0 [ 776.546462][T11230] ? __pfx___futex_wait+0x10/0x10 [ 776.546478][T11230] ? futex_hash+0x311/0x400 [ 776.546495][T11230] ? __pfx_copy_process+0x10/0x10 [ 776.546511][T11230] ? __pfx_get_futex_key+0x10/0x10 [ 776.546530][T11230] kernel_clone+0x176/0x9d0 [ 776.546546][T11230] ? find_held_lock+0x2b/0x80 [ 776.546560][T11230] ? __pfx_kernel_clone+0x10/0x10 [ 776.546580][T11230] ? ksys_write+0x190/0x250 [ 776.546598][T11230] __do_compat_sys_ia32_clone+0xd4/0x120 [ 776.546617][T11230] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 776.546633][T11230] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 776.546653][T11230] ? __might_fault+0xc5/0x140 [ 776.546663][T11230] ? __might_fault+0xc5/0x140 [ 776.546678][T11230] __do_fast_syscall_32+0x14b/0x8c0 [ 776.546694][T11230] do_fast_syscall_32+0x32/0x70 [ 776.546708][T11230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.546721][T11230] RIP: 0023:0xf7fc5fbc [ 776.546731][T11230] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 776.546742][T11230] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 776.546753][T11230] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 776.546760][T11230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.546767][T11230] RBP: 00000000f54765ec R08: 0000000000000000 R09: 0000000000000000 [ 776.546773][T11230] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 776.546779][T11230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.546793][T11230] [ 776.547588][T11031] usb 11-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 776.547609][T11031] usb 11-1: no configurations [ 776.547615][T11031] usb 11-1: can't read configurations, error -22 [ 777.296080][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.6.915'. [ 777.805660][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 777.805673][ T42] audit: type=1800 audit(1792913930.390:7223): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274169 res=0 errno=-22 [ 777.825250][ T42] audit: type=1800 audit(1792913930.410:7224): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274179 res=0 errno=-22 [ 778.583079][T11249] syzkaller1: entered promiscuous mode [ 778.583176][T11249] syzkaller1: entered allmulticast mode [ 778.775368][T10922] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 778.925268][T10922] usb 11-1: Using ep0 maxpacket: 32 [ 778.926365][T10922] usb 11-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 778.927185][T10922] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.928912][T10922] usb 11-1: config 0 descriptor?? [ 778.930527][ T42] audit: type=1800 audit(1792913931.510:7225): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274360 res=0 errno=-22 [ 778.960576][ T42] audit: type=1800 audit(1792913931.530:7226): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=274389 res=0 errno=-22 [ 778.960774][ T42] audit: type=1800 audit(1792913931.540:7227): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=274367 res=0 errno=-22 [ 778.961227][ T42] audit: type=1800 audit(1792913931.540:7228): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=274368 res=0 errno=-22 [ 778.961395][ T42] audit: type=1800 audit(1792913931.540:7229): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=274369 res=0 errno=-22 [ 778.968075][ T42] audit: type=1800 audit(1792913931.550:7230): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274409 res=0 errno=-22 [ 778.972112][T10922] as10x_usb: device has been detected [ 778.972414][T10922] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 779.017370][T10922] usb 11-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 779.019197][ T42] audit: type=1800 audit(1792913931.590:7231): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274428 res=0 errno=-22 [ 779.019394][ T42] audit: type=1800 audit(1792913931.600:7232): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274442 res=0 errno=-22 [ 779.029581][T10922] as10x_usb: error during firmware upload part1 [ 779.029863][T10922] Registered device nBox DVB-T Dongle [ 779.175587][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.918'. [ 779.193957][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.196004][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.238862][T11255] nvme nvme1: failed to connect socket: -111 [ 779.239472][T11255] [ 779.242629][T11255] ====================================================== [ 779.244965][T11255] WARNING: possible circular locking dependency detected [ 779.247674][T11255] syzkaller #0 Tainted: G L Y [ 779.250218][T11255] ------------------------------------------------------ [ 779.252816][T11255] syz.4.920/11255 is trying to acquire lock: [ 779.254730][T11255] ffff8880443e7b00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 779.258421][T11255] [ 779.258421][T11255] but task is already holding lock: [ 779.260646][T11255] ffffffff91173cc0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 779.263383][T11255] [ 779.263383][T11255] which lock already depends on the new lock. [ 779.263383][T11255] [ 779.266567][T11255] [ 779.266567][T11255] the existing dependency chain (in reverse order) is: [ 779.269822][T11255] [ 779.269822][T11255] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 779.272154][T11255] lock_acquire+0x1d1/0x380 [ 779.273673][T11255] __mutex_lock+0x19f/0x1c10 [ 779.275181][T11255] nvmf_dev_show+0x26/0x210 [ 779.276727][T11255] seq_read_iter+0x32f/0x1270 [ 779.278244][T11255] seq_read+0x344/0x4d0 [ 779.279690][T11255] vfs_read+0x1e4/0xb40 [ 779.281142][T11255] ksys_read+0x12a/0x250 [ 779.282525][T11255] __do_fast_syscall_32+0x14b/0x8c0 [ 779.284167][T11255] do_fast_syscall_32+0x32/0x70 [ 779.285773][T11255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.288215][T11255] [ 779.288215][T11255] -> #3 (&p->lock){+.+.}-{4:4}: [ 779.290653][T11255] lock_acquire+0x1d1/0x380 [ 779.292640][T11255] __mutex_lock+0x19f/0x1c10 [ 779.294708][T11255] seq_read_iter+0xe1/0x1270 [ 779.296865][T11255] kernfs_fop_read_iter+0x46c/0x610 [ 779.299168][T11255] __kernel_read+0x397/0xad0 [ 779.301278][T11255] integrity_kernel_read+0x7e/0xb0 [ 779.303552][T11255] ima_calc_file_hash_tfm+0x25e/0x350 [ 779.305859][T11255] ima_calc_file_hash+0x1e3/0x380 [ 779.308063][T11255] ima_collect_measurement+0x952/0xb30 [ 779.310111][T11255] process_measurement+0xdfe/0x2350 [ 779.312213][T11255] ima_file_check+0xc8/0x120 [ 779.314266][T11255] security_file_post_open+0xc4/0x210 [ 779.316476][T11255] path_openat+0x5d0/0x23f0 [ 779.318575][T11255] do_file_open+0x20e/0x430 [ 779.320612][T11255] do_sys_openat2+0x163/0x1d0 [ 779.322598][T11255] __x64_sys_openat+0x12d/0x210 [ 779.324560][T11255] do_syscall_64+0x121/0x770 [ 779.326140][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.328586][T11255] [ 779.328586][T11255] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 779.331934][T11255] lock_acquire+0x1d1/0x380 [ 779.333991][T11255] __mutex_lock+0x19f/0x1c10 SYZFAIL: failed to recv rpc [ 779.335979][T11255] process_measurement+0x5ab/0x2350 [ 779.338237][T11255] ima_file_check+0xc8/0x120 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 779.340297][T11255] security_file_post_open+0xc4/0x210 [ 779.342707][T11255] path_openat+0x5d0/0x23f0 [ 779.344691][T11255] do_file_open+0x20e/0x430 [ 779.346664][T11255] file_open_name+0x1c3/0x3e0 [ 779.348674][T11255] filp_open+0x2e/0x50 [ 779.350447][T11255] kernel_read_file_from_path_initns+0xec/0x240 [ 779.353053][T11255] _request_firmware+0x6f1/0x1410 [ 779.354841][T11255] request_firmware+0x35/0x50 [ 779.356929][T11255] reg_reload_regdb+0x87/0x540 [ 779.358968][T11255] genl_family_rcv_msg_doit+0x214/0x300 [ 779.361283][T11255] genl_rcv_msg+0x560/0x800 [ 779.363214][T11255] netlink_rcv_skb+0x159/0x420 [ 779.365314][T11255] genl_rcv+0x28/0x40 [ 779.367129][T11255] netlink_unicast+0x668/0x950 [ 779.369188][T11255] netlink_sendmsg+0x9ac/0x10c0 [ 779.371264][T11255] ____sys_sendmsg+0xa99/0xc30 [ 779.373322][T11255] ___sys_sendmsg+0x190/0x1e0 [ 779.375351][T11255] __sys_sendmsg+0x160/0x210 [ 779.377351][T11255] __do_fast_syscall_32+0x14b/0x8c0 [ 779.379548][T11255] do_fast_syscall_32+0x32/0x70 [ 779.381635][T11255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.384184][T11255] [ 779.384184][T11255] -> #1 (cb_lock){++++}-{4:4}: [ 779.386811][T11255] lock_acquire+0x1d1/0x380 [ 779.388725][T11255] down_read+0x94/0x4c0 [ 779.390528][T11255] genl_release+0x7e/0x1d0 [ 779.392423][T11255] netlink_release+0x104e/0x1fc0 [ 779.394470][T11255] __sock_release+0xb3/0x260 [ 779.396446][T11255] sock_close+0x1c/0x30 [ 779.398275][T11255] __fput+0x3fb/0xb50 [ 779.400031][T11255] fput_close_sync+0x118/0x250 [ 779.402048][T11255] filp_close_sync+0x75/0xa0 [ 779.403980][T11255] __x64_sys_close+0x81/0x110 [ 779.405944][T11255] do_syscall_64+0x121/0x770 [ 779.407936][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.410357][T11255] [ 779.410357][T11255] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 779.413630][T11255] check_prev_add+0xeb/0xe60 [ 779.415632][T11255] __lock_acquire+0x1528/0x1f40 [ 779.417719][T11255] lock_acquire+0x1d1/0x380 [ 779.419646][T11255] down_write+0x86/0x1f0 [ 779.421515][T11255] __sock_release+0x86/0x260 [ 779.423534][T11255] sock_close+0x1c/0x30 [ 779.425030][T11255] __fput+0x3fb/0xb50 [ 779.426452][T11255] __fput_sync+0xd7/0x100 [ 779.427910][T11255] nvme_tcp_alloc_queue.isra.0+0xd5a/0x1600 [ 779.429986][T11255] nvme_tcp_configure_admin_queue+0x26/0x530 [ 779.431871][T11255] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 779.433481][T11255] nvme_tcp_create_ctrl+0xacf/0x1080 [ 779.435252][T11255] nvmf_dev_write+0x4ee/0xb60 [ 779.436823][T11255] vfs_write+0x2aa/0x1050 [ 779.438242][T11255] ksys_write+0x12a/0x250 [ 779.439703][T11255] __do_fast_syscall_32+0x14b/0x8c0 [ 779.441367][T11255] do_fast_syscall_32+0x32/0x70 [ 779.442976][T11255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.445184][T11255] [ 779.445184][T11255] other info that might help us debug this: [ 779.445184][T11255] [ 779.448192][T11255] Chain exists of: [ 779.448192][T11255] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 779.448192][T11255] [ 779.452071][T11255] Possible unsafe locking scenario: [ 779.452071][T11255] [ 779.454217][T11255] CPU0 CPU1 [ 779.455898][T11255] ---- ---- [ 779.457507][T11255] lock(nvmf_dev_mutex); [ 779.458889][T11255] lock(&p->lock); [ 779.461297][T11255] lock(nvmf_dev_mutex); [ 779.463761][T11255] lock(&sb->s_type->i_mutex_key#13); [ 779.465573][T11255] [ 779.465573][T11255] *** DEADLOCK *** [ 779.465573][T11255] [ 779.468413][T11255] locks held by syz.4.920/11255: 1, last CPU#2: [ 779.470843][T11255] #0: ffffffff91173cc0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 779.473835][T11255] [ 779.473835][T11255] stack backtrace: [ 779.476203][T11255] CPU: 2 UID: 0 PID: 11255 Comm: syz.4.920 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 779.479379][T11255] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 779.481121][T11255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.484369][T11255] Call Trace: [ 779.485674][T11255] [ 779.486795][T11255] dump_stack_lvl+0x100/0x190 [ 779.488638][T11255] print_circular_bug.cold+0x178/0x1be [ 779.490402][T11255] check_noncircular+0x146/0x160 [ 779.492313][T11255] check_prev_add+0xeb/0xe60 [ 779.494119][T11255] __lock_acquire+0x1528/0x1f40 [ 779.495789][T11255] ? do_fast_syscall_32+0x32/0x70 [ 779.497786][T11255] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.500315][T11255] lock_acquire+0x1d1/0x380 [ 779.502130][T11255] ? __sock_release+0x86/0x260 [ 779.504024][T11255] ? __pfx___might_resched+0x10/0x10 [ 779.506176][T11255] down_write+0x86/0x1f0 [ 779.507871][T11255] ? __sock_release+0x86/0x260 [ 779.509783][T11255] ? __pfx_down_write+0x10/0x10 [ 779.511713][T11255] ? __pfx_locks_remove_file+0x10/0x10 [ 779.513872][T11255] __sock_release+0x86/0x260 [ 779.515718][T11255] ? __pfx_sock_close+0x10/0x10 [ 779.517725][T11255] sock_close+0x1c/0x30 [ 779.519389][T11255] __fput+0x3fb/0xb50 [ 779.520998][T11255] ? kfree+0x22b/0x6d0 [ 779.522650][T11255] __fput_sync+0xd7/0x100 [ 779.524378][T11255] nvme_tcp_alloc_queue.isra.0+0xd5a/0x1600 [ 779.526776][T11255] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 779.529274][T11255] nvme_tcp_configure_admin_queue+0x26/0x530 [ 779.531672][T11255] ? __wake_up+0x3f/0x60 [ 779.533273][T11255] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 779.535170][T11255] ? mark_held_locks+0x40/0x70 [ 779.536699][T11255] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 779.538881][T11255] ? lockdep_hardirqs_on+0x7d/0x110 [ 779.540892][T11255] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 779.543170][T11255] ? nvme_change_ctrl_state+0xc0/0x440 [ 779.545274][T11255] nvme_tcp_create_ctrl+0xacf/0x1080 [ 779.546885][T11255] nvmf_dev_write+0x4ee/0xb60 [ 779.548419][T11255] vfs_write+0x2aa/0x1050 [ 779.550141][T11255] ? __pfx_nvmf_dev_write+0x10/0x10 [ 779.552151][T11255] ? lock_acquire+0x1d1/0x380 [ 779.554052][T11255] ? __fget_files+0x34/0x3d0 [ 779.555821][T11255] ? __pfx_vfs_write+0x10/0x10 [ 779.557581][T11255] ? find_held_lock+0x2b/0x80 [ 779.559224][T11255] ? __fget_files+0x215/0x3d0 [ 779.561084][T11255] ? __fget_files+0x215/0x3d0 [ 779.562957][T11255] ? __fget_files+0x21f/0x3d0 [ 779.564852][T11255] ksys_write+0x12a/0x250 [ 779.566469][T11255] ? __pfx_ksys_write+0x10/0x10 [ 779.568119][T11255] __do_fast_syscall_32+0x14b/0x8c0 [ 779.570044][T11255] do_fast_syscall_32+0x32/0x70 [ 779.571968][T11255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.574425][T11255] RIP: 0023:0xf744efbc [ 779.576007][T11255] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 779.582556][T11255] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 779.585466][T11255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 779.588086][T11255] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.590453][T11255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.592865][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.595980][T11255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.599129][T11255] [ 779.677084][T11251] /dev/sr0: Can't open blockdev [ 779.813184][T10922] usb 11-1: USB disconnect, device number 4 [ 779.827173][T10922] Unregistered device nBox DVB-T Dongle [ 779.828379][T10922] as10x_usb: device has been disconnected [ 780.009084][T11241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.261889][T10741] syz_tun (unregistering): left allmulticast mode [ 780.261914][T10741] syz_tun (unregistering): left promiscuous mode [ 780.261970][T10741] bridge0: port 3(syz_tun) entered disabled state [ 780.379206][T11240] syz_tun (unregistering): left allmulticast mode [ 780.379670][T11240] bridge0: port 1(syz_tun) entered disabled state [ 780.481621][ T9346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.522709][ T9346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.614016][ T9346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.671706][ T9346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.769887][ T5909] netdevsim netdevsim4 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.789743][ T5909] netdevsim netdevsim4 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.816609][ T9346] bridge_slave_1: left allmulticast mode [ 780.816679][ T9346] bridge_slave_1: left promiscuous mode [ 780.817137][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.821489][ T9346] bridge_slave_0: left allmulticast mode [ 780.821589][ T9346] bridge_slave_0: left promiscuous mode [ 780.821850][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.987583][ T9346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.992250][ T9346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.996284][ T9346] bond0 (unregistering): Released all slaves [ 781.005392][ T5909] netdevsim netdevsim4 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.005561][ T5909] netdevsim netdevsim4 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.078275][ T9346] IPVS: stopping backup sync thread 10126 ... [ 781.186021][ T5505] 8021q: adding VLAN 0 to HW filter on device eth17 [ 781.304087][ T9346] hsr_slave_0: left promiscuous mode [ 781.305588][ T9346] hsr_slave_1: left promiscuous mode [ 781.306512][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.306574][ T9346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.309133][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.309195][ T9346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.323908][ T9346] veth0_to_team: left promiscuous mode [ 781.324071][ T9346] veth1_macvtap: left promiscuous mode [ 781.324170][ T9346] veth0_macvtap: left promiscuous mode [ 781.324402][ T9346] veth1_vlan: left promiscuous mode [ 781.324594][ T9346] veth0_vlan: left promiscuous mode [ 781.480617][ T9346] team0 (unregistering): Port device team_slave_1 removed [ 781.483852][ T9346] team0 (unregistering): Port device team_slave_0 removed [ 781.528221][ T5505] 8021q: adding VLAN 0 to HW filter on device eth18 [ 781.779444][ T9346] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.789031][ T5505] 8021q: adding VLAN 0 to HW filter on device eth19 [ 781.837043][ T9346] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.886319][ T9346] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.946386][ T9346] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.018711][ T5909] netdevsim netdevsim6 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.020087][ T5909] netdevsim netdevsim6 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.024577][ T9346] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.024595][ T9346] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 44482 - 0 [ 782.032146][ T5505] 8021q: adding VLAN 0 to HW filter on device eth20 [ 782.045337][ T5843] netdevsim netdevsim6 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.045364][ T5843] netdevsim netdevsim6 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.083259][ T9346] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.083280][ T9346] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 44482 - 0 [ 782.121831][ T9346] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.121931][ T9346] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 44482 - 0 [ 782.180807][ T9346] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.180828][ T9346] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 44482 - 0 [ 782.234442][ T5505] 8021q: adding VLAN 0 to HW filter on device eth21 [ 782.285791][ T5909] netdevsim netdevsim3 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.285815][ T5909] netdevsim netdevsim3 eth27: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.298025][ T5909] netdevsim netdevsim3 eth26: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.298048][ T5909] netdevsim netdevsim3 eth28: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.400862][ T9346] bond0: (slave netdevsim1): Releasing backup interface [ 782.403091][ T9346] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 782.430095][ T5505] 8021q: adding VLAN 0 to HW filter on device eth22 [ 782.540997][ T9346] bridge_slave_1: left allmulticast mode [ 782.541013][ T9346] bridge_slave_1: left promiscuous mode [ 782.541103][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.544154][ T9346] bridge_slave_0: left allmulticast mode [ 782.544166][ T9346] bridge_slave_0: left promiscuous mode [ 782.544228][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.623587][ T9346] bridge_slave_1: left allmulticast mode [ 782.623759][ T9346] bridge_slave_1: left promiscuous mode [ 782.624120][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.631677][ T9346] bridge_slave_0: left allmulticast mode [ 782.631695][ T9346] bridge_slave_0: left promiscuous mode [ 782.631799][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.662851][ T9346] tipc: Resetting bearer [ 782.750062][ T9346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.754421][ T9346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.760765][ T9346] bond0 (unregistering): Released all slaves [ 782.839539][ T9346] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 782.851582][ T78] smbdirect: ib_dev[syz1] removed [ 782.857572][ T9346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.859398][ T9346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.860456][ T9346] bond0 (unregistering): Released all slaves [ 782.904942][ T9346] bond1 (unregistering): Released all slaves [ 783.001141][ T9346] tipc: Disabling bearer [ 783.026952][ T9346] bond0 (unregistering): Released all slaves [ 783.057015][ T5505] 8021q: adding VLAN 0 to HW filter on device eth24 [ 783.075274][ T5843] netdevsim netdevsim1 eth31: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.075305][ T5843] netdevsim netdevsim1 eth30: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.075321][ T5843] netdevsim netdevsim1 eth29: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.075337][ T5843] netdevsim netdevsim1 eth32: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.196588][ T9346] tipc: Left network mode [ 783.211831][ T9346] tipc: Left network mode [ 783.337370][ T5505] 8021q: adding VLAN 0 to HW filter on device eth23 [ 783.595771][ T5505] 8021q: adding VLAN 0 to HW filter on device eth26 [ 783.701496][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 783.701560][ T42] audit: type=1800 audit(1792913936.280:7316): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189149 res=0 errno=-22 [ 783.761755][ T42] audit: type=1800 audit(1792913936.340:7317): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189023 res=0 errno=-22 [ 783.782274][ T5505] 8021q: adding VLAN 0 to HW filter on device eth27 [ 783.947096][ T9346] hsr_slave_0: left promiscuous mode [ 783.948538][ T9346] hsr_slave_1: left promiscuous mode [ 783.949522][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.949534][ T9346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.951130][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.951225][ T9346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.978599][ T9346] hsr_slave_0: left promiscuous mode [ 783.981112][ T9346] hsr_slave_1: left promiscuous mode [ 783.997057][ T9346] veth1_macvtap: left promiscuous mode [ 783.997084][ T9346] veth0_macvtap: left promiscuous mode [ 783.997132][ T9346] veth1_vlan: left promiscuous mode [ 783.997163][ T9346] veth0_vlan: left promiscuous mode [ 783.998949][ T9346] veth1_macvtap: left promiscuous mode [ 783.998967][ T9346] veth0_macvtap: left promiscuous mode [ 783.999012][ T9346] veth1_vlan: left promiscuous mode [ 783.999027][ T9346] veth0_vlan: left promiscuous mode [ 784.059822][ T9346] team0 (unregistering): Port device team_slave_1 removed [ 784.061656][ T9346] team0 (unregistering): Port device team_slave_0 removed [ 784.160585][ T9346] team0 (unregistering): Port device team_slave_1 removed [ 784.162550][ T9346] team0 (unregistering): Port device team_slave_0 removed [ 784.284609][ T5505] 8021q: adding VLAN 0 to HW filter on device eth25 [ 784.405123][ T5505] 8021q: adding VLAN 0 to HW filter on device eth28 [ 784.522847][ T5505] 8021q: adding VLAN 0 to HW filter on device eth30 [ 784.629572][ T5505] 8021q: adding VLAN 0 to HW filter on device eth29 [ 784.722199][ T5505] 8021q: adding VLAN 0 to HW filter on device eth31 [ 784.776316][ T9346] IPVS: stop unused estimator thread 0... [ 784.776606][ T9346] IPVS: stop unused estimator thread 0... [ 784.840977][ T5505] 8021q: adding VLAN 0 to HW filter on device eth32