last executing test programs: 35m13.332867313s ago: executing program 32 (id=111): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) fstat(r0, &(0x7f0000000040)) (async) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r0, 0x101) (async) r4 = syz_open_pts(r0, 0x101) r5 = dup3(r4, r0, 0x0) write$UHID_INPUT(r5, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 34m26.186846008s ago: executing program 33 (id=213): r0 = fsopen(&(0x7f0000000080)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f0000000100)='\x00\x00\x00\x81\x00\a\x8e\xc5\x80>\xa7', 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 34m22.036610024s ago: executing program 34 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$getown(r0, 0x9) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0xb) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 32m34.238199645s ago: executing program 35 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) times(&(0x7f0000000180)) syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b215f4404c05c10687be00000001090224000100000000"], 0x0) r6 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) 30m4.686203522s ago: executing program 36 (id=1135): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x40}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x3, 0x26, 0x9, 0x64, 0x93e7, 0xf6, 0x6, 0x5, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b1a, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) eventfd2(0x0, 0x800) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x40}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x3, 0x26, 0x9, 0x64, 0x93e7, 0xf6, 0x6, 0x5, @rand_addr=0x64010102, @private=0xa010102}}}}}}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) (async) ioctl$EVIOCGMASK(r4, 0x80015b1a, 0x0) (async) close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) 29m31.4922487s ago: executing program 37 (id=1249): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="31000000000000e4"], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) ioctl$FIBMAP(0xffffffffffffffff, 0x5386, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r5, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/87, 0x57}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000002040)}}], 0x2, 0x10000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 20m57.999560401s ago: executing program 38 (id=2983): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x2, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) close(r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 19m30.035256071s ago: executing program 39 (id=3230): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) fstat(r1, &(0x7f0000000180)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xf) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f0000000440)="67d20fb7adc76c2c7ae93ab2e26a77f37c95f71c5b9f2a8cd8fe9f4971b19f80c1dadfb4af9c45272ab1df4f305053c38d0d8e9f649e67c620") 18m51.715273966s ago: executing program 40 (id=3370): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@gettaction={0x40, 0x32, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x3e, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x28091}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x88c0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000701020000009694000000762b4c22fc4ebe010000080c000340f5ffffffffffff890c00024000000000000000030c00064000000000000000040900010073797a30000000000800000000e6debbe52ccc3dc3b288ef4b2d19675d"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0x10) 17m53.145671341s ago: executing program 41 (id=3585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000271000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f00000006c0), 0x4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706", 0x2, r6) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$link(0x8, r7, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r6, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00004ce3060101ffbff0000000000000000000050001000700000083cee0009dbf14daded09518a796404248478615c4e0fdaed99ae1c60a7b98bf3e96d6d73bb56643bfb0c92dc38796e4960c6a564d92b6af0d5e9a5507ac074d696e993112747665407a48d5d170153507007c"], 0x1c}}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x5) r11 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r11, r10) sendmmsg(r10, &(0x7f0000000280)=[{{&(0x7f0000000440)=@hci={0x1f, 0x4}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4840) 17m45.569586243s ago: executing program 42 (id=3604): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) r1 = fsopen(&(0x7f0000000000)='openpromfs\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup3(r2, r0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x10000, 0x200c, 0x0, 0x9, 0x7, 0x2, 0x5}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3f8, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x36dc24ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x10c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2e01ed3a0f13252a, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13718dd7}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}]}, @NFTA_CHAIN_USERDATA={0x65, 0xc, "f8d2860d0659558bb09d243ba3e621ce276b591da948a49183fc571154ac63677fd730201880b11ddc2c9a43703bc441baa8454bbfe073947c581b126a8bdc2d9d2db5ecaf7915e891b8692f5728cdfa82e50e9ae898d53cd135ad097bb8cf2924"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x17c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "f0aac44debefc5a14ba886602afd1d82ba3e77f6a0bce828d0e2daa28c7bced9e1925155ee3aded45197ba7151561f3b40e4578eb9b7674c224f25b4b06bc3794c9171f8ec7a8b4c8e2730c527fc15faf5baa90b2eaf7738844f6287339fd09958eef4951127ccb510c1a908df6e6bd40cf8fb33105d32e517e3defec35b0b6539b4ee614b2ba47a923635b64938075f7c24c8cb45b378d6be9e446483"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "b1cc18232ecaafe146edadd1254f8c26faf87dae6d9d0561700c33acfb00c1cb5bd4a348bccc4854b16f24a3bc210754aa8a62cc2d3a3a41a8307465c75b24acc0d89fef360e9a7776f527f1eddf3d07c147e6fe381518a7152bd1b530b7e80ac31c0c0742045f1a0d5a62acdb54aaab67894bf5049b0d3687863cac9b7d271d1dcc3260f2ae9c53cf1176b1981ebdfacab4379d8b87c17580317d2772a0b9a1545b"}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6dc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f0000000240)) 17m17.776529513s ago: executing program 43 (id=3634): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000000) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$nfs(&(0x7f0000000000)='g/)R-..\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x40001, &(0x7f00000023c0)={[{'}\']%'}, {'wfdno'}, {'wfdno'}, {'rfdno'}, {'(/#!\xb3]!\xf3^'}, {'/(,'}, {'rfdno'}], [{@fowner_lt={'fowner<', r3}}, {@dont_appraise}]}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x20048044) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 17m3.099783565s ago: executing program 44 (id=3728): landlock_create_ruleset(&(0x7f0000000080)={0x400, 0x0, 0x1}, 0x18, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket(0x5a, 0x6, 0x8) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 11m29.396091705s ago: executing program 45 (id=4984): syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x2, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x18) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x9, 0x0, 0x34565559, 0x0, 0x0, 0x0, 0x2, 0xfeedcafe, 0x3, 0x2, 0x0, 0x6}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) 9m45.593024009s ago: executing program 46 (id=5469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {0x1b}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) socket(0x7, 0x0, 0xffffffff) 7m25.60965738s ago: executing program 6 (id=5731): r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x44) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61d53a0600522f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010081000005000b003e000086dd000988a8880008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_open_dev$video4linux(&(0x7f0000001380), 0xf, 0x400) (async) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x1a64, 0x800, 0xffffffff, 0x298}, &(0x7f0000000040), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x44) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r6, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61d53a0600522f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010081000005000b003e000086dd000988a8880008"], 0x0) (async) 7m24.537577357s ago: executing program 6 (id=5737): keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$cgroup2(0x0, 0x0, &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents']) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) lchown(&(0x7f0000000180)='./file0/../file0\x00', r1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x40b3fb3ac4aafa2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000005740)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x804) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r4, 0x1100}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x3) syz_pidfd_open(0x0, 0x0) 7m23.581635431s ago: executing program 6 (id=5743): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 7m22.521224199s ago: executing program 6 (id=5748): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x10000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6074}]}]}, 0x20}}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x10, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c010}, 0x400d1) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4000000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xa8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004840}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580), 0x48000, 0x0) preadv2(r7, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/80, 0x50}, {&(0x7f0000000640)=""/51, 0x33}, {&(0x7f0000000680)=""/228, 0xe4}], 0x3, 0x4, 0xdd3, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000007c0)=0xa000) sendto$inet6(r0, &(0x7f0000000800)="2dc5ac0d95987fdcbaa2589f3c41f45958d1be6b296b3ba149e4fbf78ea39658af100e4c86bdb696092f432dfad63518fbf3e14e7225f1e1cdc35751273921c9a9d24873a88ade00c4a5ff567cf92eeeb1ac1c6cc887456e38612ee7c303", 0x5e, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000880)={0x4, 0x0, [{}, {}, {}, {}]}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000940), r1) syz_open_dev$loop(&(0x7f0000000980), 0x6, 0x1) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0xc0002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x8, 0x7807, 0x4, 0x80, {{0x8, 0x4, 0x1, 0x6, 0x20, 0x67, 0x0, 0xed, 0x2f, 0x0, @multicast1, @loopback, {[@end, @rr={0x7, 0x7, 0x88, [@multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x921a, 0x8, {{0xd, 0x4, 0x1, 0x5, 0x34, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast2, @private=0xa010100, {[@lsrr={0x83, 0x1f, 0x46, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c00)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x80, 0x0, 0x18, @dev={0xfe, 0x80, '\x00', 0x29}, @loopback, 0x40, 0x10, 0x800, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d00)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x9, 0xc9, {{0x1b, 0x4, 0x1, 0x31, 0x6c, 0x68, 0x0, 0x7a, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0xc6, [@loopback]}, @timestamp_prespec={0x44, 0xc, 0x2e, 0x3, 0x5, [{@loopback, 0x7}]}, @ssrr={0x89, 0x7, 0x47, [@empty]}, @rr={0x7, 0x7, 0xbf, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xbb, 0x1, 0x5, [{@multicast1, 0x6}, {@local, 0x9e9}]}, @rr={0x7, 0x23, 0x21, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e00)={'bond_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0xca6, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80, 0x80}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000001100)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x19c, 0x0, 0x6, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24048084}, 0x4008001) getpeername(r8, &(0x7f0000001140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000011c0)=0x80) 7m22.442505066s ago: executing program 7 (id=5750): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}}, 0x20000034) preadv(r0, &(0x7f0000000040), 0x0, 0x1, 0x0) 7m22.394407099s ago: executing program 7 (id=5751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001840)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 7m21.484565001s ago: executing program 7 (id=5752): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x9, 0x2, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x80000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) r2 = fcntl$dupfd(r0, 0x0, r0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x8a, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000240)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) (async, rerun: 32) r5 = eventfd2(0x42f, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x2, r5}) 7m21.220767274s ago: executing program 7 (id=5754): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a9ac8578bf8011ccb9606da2998936a5ec4899ff961444bf01b91d145a63037b", 0x5, 0x8, 0xfffffffb, 0x7f, 0x0, 0x2, 0x7ff, 0x7f600efd}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r6, &(0x7f0000000300)={0x28, 0x0, r7, {{0xfffffffffffffff9, 0x9, 0x2, r2}}}, 0x28) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a02000000ff00180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1c}, 0x94) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0xc000) 7m19.775915622s ago: executing program 7 (id=5758): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 7m18.638009856s ago: executing program 6 (id=5759): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1000d) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xfffffffffffffffe, 0x448001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, r5, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r5, 0xb) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f0000000680)=@raw=[@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit, @generic={0x7, 0x9, 0x2, 0x6, 0xf0}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m15.964091761s ago: executing program 7 (id=5761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f00000001c0)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000340), r5, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0xffffffff}}, 0x10) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="740266b827008ed0430f0766ba4100ed48b800000000000000000f23d80f21f835c00000800f23f8660f38824e000ff90fc4c3fdcf3838f6cf0b0f841f000000", 0x40}], 0x1, 0x4, &(0x7f0000000180), 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x3, 0x0, 0x400, 0x1, 0x1000000000004, 0x0, 0x3], 0x1, 0x3c4210}) (async) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)=0x2) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r10], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 6m53.191813684s ago: executing program 47 (id=5760): socket(0x10, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x49) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000005c0)=0x7e) (async, rerun: 64) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 64) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 6m52.984279192s ago: executing program 48 (id=5755): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000000801040000000000000000000000000900010073797a30000000000600024000000000040004778005000300010000"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000001080103"], 0x14}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000071c0)=[{{&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000780)=""/98, 0x62}], 0x2, &(0x7f00000000c0)=""/46, 0x2e}, 0x6}, {{&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/65, 0x41}, {&(0x7f0000000900)=""/214, 0xd6}, {&(0x7f0000000a00)=""/110, 0x6e}, {&(0x7f0000000a80)=""/207, 0xcf}], 0x4, &(0x7f0000000b80)=""/242, 0xf2}, 0x8552}, {{&(0x7f0000000c80)=@phonet, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/213, 0xd5}, {&(0x7f0000000e00)=""/122, 0x7a}, {&(0x7f0000000fc0)=""/196, 0xc4}, {&(0x7f0000000280)}, {&(0x7f0000000e80)=""/154, 0x9a}, {&(0x7f00000003c0)=""/46, 0x2e}], 0x6}, 0x4}, {{&(0x7f0000001140)=@x25, 0x80, &(0x7f00000024c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/147, 0x93}, {&(0x7f0000002280)=""/52, 0x34}, {&(0x7f00000022c0)=""/153, 0x99}, {&(0x7f0000002380)=""/215, 0xd7}, {&(0x7f0000002480)=""/7, 0x7}], 0x6, &(0x7f0000002540)=""/100, 0x64}, 0x931}, {{&(0x7f00000025c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002640)=""/88, 0x58}, {&(0x7f00000026c0)=""/153, 0x99}, {&(0x7f0000002780)=""/234, 0xea}, {&(0x7f0000002880)=""/180, 0xb4}, {&(0x7f0000002940)=""/47, 0x2f}, {&(0x7f0000002980)=""/168, 0xa8}, {&(0x7f0000002a40)=""/215, 0xd7}, {&(0x7f0000007400)=""/96, 0x60}], 0x8, &(0x7f0000002c40)=""/222, 0xde}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002b40)=""/120, 0x78}, {&(0x7f0000002dc0)=""/255, 0xff}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/145, 0x91}, {&(0x7f0000002f80)=""/166, 0xa6}, {&(0x7f0000003040)=""/246, 0xf6}, {&(0x7f0000003140)=""/247, 0xf7}, {&(0x7f0000003240)=""/214, 0xd6}, {&(0x7f0000003340)=""/144, 0x90}], 0x9}, 0x1}, {{&(0x7f00000034c0)=@can, 0x80, &(0x7f0000004900)=[{&(0x7f0000003540)=""/144, 0x90}, {&(0x7f0000003600)=""/9, 0x9}, {&(0x7f0000003640)=""/169, 0xa9}, {&(0x7f0000003700)=""/44, 0x2c}, {&(0x7f0000003740)=""/101, 0x65}, {&(0x7f00000037c0)=""/253, 0xfd}], 0x6, &(0x7f0000000280)=""/29, 0x1d}, 0xb}, {{&(0x7f00000059c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000005a40)=""/180, 0xb4}, {&(0x7f0000005b00)=""/54, 0x36}, {&(0x7f0000005b40)=""/250, 0xfa}, {&(0x7f0000005c40)=""/154, 0x9a}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000006d00)=""/185, 0xb9}, {&(0x7f0000006dc0)=""/108, 0x6c}, {&(0x7f0000006e40)=""/212, 0xd4}], 0x8, &(0x7f0000006fc0)=""/30, 0x1e}, 0xa4f}, {{&(0x7f0000007000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000007100)=[{&(0x7f0000007080)=""/69, 0x45}], 0x1, &(0x7f0000007140)=""/87, 0x57}, 0x4}], 0x9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000480)='./file1\x00', 0x0, 0x4000, r2}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB='#\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYRES32=r8, @ANYBLOB, @ANYRES64=0x0], 0x20) readv(r8, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r10, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) unshare(0x64000600) socket$can_j1939(0x1d, 0x2, 0x7) 6m52.824528648s ago: executing program 49 (id=5741): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0xe388}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x35c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {0x0, 0xd}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x330, 0x2, [@TCA_U32_SEL={0x204, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0x9}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x400, 0x4, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x114, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x4, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0x80000001, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x35c}}, 0x24040094) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 6m52.694366262s ago: executing program 50 (id=5759): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1000d) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xfffffffffffffffe, 0x448001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, r5, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r5, 0xb) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f0000000680)=@raw=[@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit, @generic={0x7, 0x9, 0x2, 0x6, 0xf0}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m52.571295723s ago: executing program 51 (id=5761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f00000001c0)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000340), r5, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0xffffffff}}, 0x10) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="740266b827008ed0430f0766ba4100ed48b800000000000000000f23d80f21f835c00000800f23f8660f38824e000ff90fc4c3fdcf3838f6cf0b0f841f000000", 0x40}], 0x1, 0x4, &(0x7f0000000180), 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x3, 0x0, 0x400, 0x1, 0x1000000000004, 0x0, 0x3], 0x1, 0x3c4210}) (async) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)=0x2) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r10], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 4m57.31044988s ago: executing program 4 (id=6126): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0xfffffec1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) prctl$PR_GET_NAME(0x25, &(0x7f0000000000)=""/25) move_pages(0x0, 0x10000000, 0xffffffffffffffff, &(0x7f0000000080)=[0x0], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/time_for_children\x00') 4m56.333388953s ago: executing program 4 (id=6131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f000000a380)=[{{&(0x7f0000000500)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000580)="e285941fb491c22cbcf545fdbe601a88f10d2328fb4290dd87e804c3fc5fb1d5e0de67ed349b26760f3d0e9c46048577e29f6255d5f01401de50858b7488fd79e70c335b173afd0c7e360a93fde094d17e5a25a0c4bb5b861a3e5f710c68eceac2e1ffd68a2a2aca0cb381ce567679f6522e370bf7658f2a5f7c1241d82a0d39386af1b6b54b5737323e58384373bafa9c3d74250d8e3995bed5c7744e82f9eadaa7170cc190e1377e9475826e0d52c51572f9bc286bcaef668ffa3d619d38a4b099f67e1aa4593d269a79a2efd570993279b444dccab8f61f6f1049c38ca2bd08e649d1455d64a31397", 0xea}, {&(0x7f0000000680)="456d17984529b262c609c946f68c2f78d835ba5b9d763c1577adf9036dd295d2dc83eb524875503bbc06ac99ef72a2de5b0cec2d660a4ddbac882313058a72cacd15d16614abcc5f07f350f68a7db09d3852", 0x52}], 0x2, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)="69aa2d78b3e41c5373393c7213bba781064bc3add5aca285e8e313b7eb549d5989df4061ca12068365f8ae820fa70bd9", 0x30}], 0x1, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r2, r1, r2, r2]}}], 0x30, 0x40000}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000007c0)="7783a37c0f4314e8e91ee29bb94a87f22df1952c3359c37a34e8a2123b73713eafbcd6e51913b9fa3f4ed23cf1c94f70983b1ba6a7c183bcd9740bc09406cb6473a501d5b12f4aeaa73262ea1e159a23f32b090cb06bbcd68135ed9f", 0x5c}, {&(0x7f0000000900)="45fbedd4712909f713d9f165adc6894b820f40c25212423b51e5f3cf9d2da46c7c55e7c0113ce015219eeefa3ee02e1e3098cffe919b6fca80d57a2d6e60c92cba18b3b83711f36db99dadac0e534d9fc1bc2670502f49268487dcb095", 0x5d}, {&(0x7f0000000980)="03d1e43665f86858b966e120d3b5bbf8d59ec879c09ba0ef179ab93ab4203f32003b1f8c6fbdc01e4452dde61052f46a9b542c560ac4c49113d7bbd2e07311a855abb22d2f08e3d0", 0x48}, {&(0x7f0000000a00)="1065031240d32033df29964ea285f5510acd5e9a495e7d581c5f38e6db91d1aa6299646aab7c36154b01459625fad2695b0c755bba0626e49253d9e61abbff4c2e065cd17af17102df969386f6bf392a2b4dc4c62ca6e5840c408a45e03e458e88b3b4eeb2196e66b8c4d8b9033575772a095d5f7fc99cb49a0078adbbdd41ba6368cfa758b158209fb731abf05fe52a91b746c778ef76f6", 0x98}, {&(0x7f0000000ac0)="3248a1d31ae74507a6f2df1cdebc817d087f9c3175e36769f1c3dcd634d36a549d1bbb5664609be75873983f8debe2ffe8dafb97c1ed0d001bc546b14a509dd4a02b61e268ce0c1b34eafe604212dc66483dcee18b30d1996eba6288e28dbcd1a19fc17c82e84b93582efbc9e4eea043c48a51365f5bbd3ab0b4c6bc03479714eaecfb0ed4916c9870a1cdc476069f6fe0f2b4f2691ab6a0aae9e7bd3ffbbf0dcdfa58d03a", 0xa5}, {&(0x7f0000000b80)="6ff032354a6e3f1976fcd23794d2e621902df174147feedaa76fdfdd1cc6e4984cb85a987ab1409a4ec01427e8a1c426262d62d5444cd2d791b3438447b41cd3add01804b85b41c2fb6a94524c7bf86e9b0bcc565af551e77b9698914815b0cde1ea6c1a7f02e40e6209c9d7c1b963fd64ebeeccf150e68a751b598e9723a9f1b5", 0x81}, {&(0x7f0000000840)="9986e6ac90ee01af26028e3f54d4c87f009f27c3140979ea92ffce3b1e", 0x1d}], 0x7, &(0x7f0000002d40)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r1, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @rights={{0x10}}], 0xd0, 0x24040880}}], 0x3, 0x40081) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a3100000000080005400000001b0900020073797a310000000008000a40ffff140000001100010000000000000000000100000a00"/112], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r5, 0x10, 0x0, 0x1062200) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x9, 0x40, 0x2, 0x7, 0x3, 0x3, 0x7, 0x0, 0x4, 0xc, 0x81, 0xb8, 0x0, 0x7, 0x20, 0x6}}) ioctl$KDDELIO(r5, 0x4b35, 0x7fffffffffffffff) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c00d000040000000000000000000000000000005efcc0a9b81933", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) shutdown(r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x43, 0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000140)=""/132, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) 4m54.348677633s ago: executing program 4 (id=6134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) (async, rerun: 64) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setresuid(0xee01, 0x0, 0x0) (async) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xe3eff763673cb699) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m53.594162921s ago: executing program 4 (id=6136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xca5d, 0x5179}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0xf000}, 0x0) 4m53.575133569s ago: executing program 4 (id=6137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r2, 0x0, 0x22001, 0x7f) r3 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x240000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sched_setscheduler(r4, 0x3, &(0x7f0000000140)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a0104000000000000000007"], 0xb0}}, 0x80c4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000340)=0x9, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) fsmount(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000080)={0xa21, 0xfffffffffffffff9, 0x1, 0x3}) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 4m53.296723046s ago: executing program 4 (id=6138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7ab96c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000081a0000200000008ba3d747ab00", 0x0, 0x48) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x2, 0x0, 0x22, 0x2000, 0x0, 0x2004cb, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x2, 0x5], 0x9000, 0x340084}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) openat(r9, &(0x7f0000000240)='./file0\x00', 0x8000, 0xa) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) write$nci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="690302020502060612f5ce2ba893279f5b401f98e63b6db21a505401"], 0x1c) (async) close(r2) 4m36.306835486s ago: executing program 52 (id=6138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7ab96c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000081a0000200000008ba3d747ab00", 0x0, 0x48) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x2, 0x0, 0x22, 0x2000, 0x0, 0x2004cb, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x2, 0x5], 0x9000, 0x340084}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) openat(r9, &(0x7f0000000240)='./file0\x00', 0x8000, 0xa) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) write$nci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="690302020502060612f5ce2ba893279f5b401f98e63b6db21a505401"], 0x1c) (async) close(r2) 3m8.983052878s ago: executing program 8 (id=6487): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x2404c004) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) prlimit64(0x0, 0xe, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100), &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x6, 0x1, 0x4, 0x40, 0x4, {}, {0x3, 0x0, 0x3, 0x3, 0x8b, 0xe, "03a750cf"}, 0x9, 0x3, {0x0}, 0x40, 0x0, r4}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f000001aa40), 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f000001aa80)={0x8, {"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", 0x1000}}, 0x1006) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x02\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000005c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000003c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000000c0)='!+-^}\'\x00', &(0x7f0000000000)='!+-^}\'\x00', &(0x7f00000004c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000002680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000001c0)='!+-^}\'\x00', &(0x7f0000002780)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 3m8.145945422s ago: executing program 8 (id=6493): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200}) fcntl$setstatus(r0, 0x4, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0xfd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x24040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f000056c000/0x3000)=nil, 0x3000, 0x2, 0x4008032, 0xffffffffffffffff, 0xf5735000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, 0x0, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) openat$ppp(0xffffffffffffff9c, 0x0, 0x7c96c0, 0x0) 3m8.047279212s ago: executing program 8 (id=6495): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x95, 0x10}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d541", 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40022142) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x7, &(0x7f0000000180)=@raw=[@ldst={0x0, 0x0, 0x0, 0xc442359a30fd0cee, 0x4, 0x1dcca8f5cf6f9c}, @ldst={0x1, 0x3, 0x1, 0xa, 0xb, 0xc, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x8, 0x2, 0x0, r0}, @jmp={0x5, 0x0, 0x1, 0x8, 0x6, 0x0, 0x9c6e82be9055888f}], &(0x7f0000000000)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x58400, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000200)={r6}) 3m7.899749347s ago: executing program 8 (id=6498): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x204) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff070012004500002c0000000000019078ac1e0001ac1414aa03009078030000004500000000000000002f00800000000000000000557ddf2a177a89500944f57ca0d9a5a0e228bb6b07a6d58123ee4cac8350ca782faefa12cbec2edd55ab2cb0ca61d5e9eb9542f9e884b7a59d856e6419a7fe1e8fcf1c2e80bd52d2587a3f384966840d4093950b271a6b3c8713fd6b839274e58e3c5e401ca40e6ffe54f3dfe43157f8d37d070527e65a169accc7c5777a0c9f210be17fd83445f80b9527101a97a226cbdc8a8751ea795c6bebc991487f0d6091015aecf7"], 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) socket$nl_rdma(0x10, 0x3, 0x14) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000600)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='(\'@\x96\x00']}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x25, 0x1, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000, 0x0, 0xf}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, 0x0}) 3m5.681283143s ago: executing program 8 (id=6503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xca5d, 0x5179}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x300}, 0x0) 3m5.359045726s ago: executing program 8 (id=6505): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000405804105000000000000109022400010000000009040001010300020009210000fa01220700091b81030000060001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022060000007407b59c4f117d58f1a2614513a74a630000000638ce7b754502dea2ef1027c1e6ac3effd72e04a405ebf8"], 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) fdatasync(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 3m4.967746847s ago: executing program 53 (id=6505): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000405804105000000000000109022400010000000009040001010300020009210000fa01220700091b81030000060001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022060000007407b59c4f117d58f1a2614513a74a630000000638ce7b754502dea2ef1027c1e6ac3effd72e04a405ebf8"], 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d03be7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23401000000000000000911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a55200000a8213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f237705763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203cd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327495cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce43356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) fdatasync(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 43.127421559s ago: executing program 0 (id=7040): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000000)=""/196) (async) sysinfo(&(0x7f0000000000)=""/196) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d52a6a16"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x2, 0xa, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x18}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x2, 0xa, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x18}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000100)=0x8000008) (async) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000100)=0x8000008) bind$rds(r0, &(0x7f0000000140)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 42.32404867s ago: executing program 0 (id=7043): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') symlinkat(0x0, r1, &(0x7f0000000100)='./control\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 40.948531942s ago: executing program 0 (id=7048): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 40.70680537s ago: executing program 0 (id=7051): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x5, 0x5c9, &(0x7f0000000ec0)={{0x12, 0x1, 0x310, 0xe0, 0x18, 0xe7, 0xff, 0x2100, 0x9e66, 0x2071, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b7, 0x1, 0x5, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x70, 0x5, 0xd, 0x2d, 0x6a, 0xc1, 0x4, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0xe, "78bf95b294f9e87a"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x3, 0x96, 0x8, "2e02e6faf9a36a5a"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x5, 0x4, '\v'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x180, 0x8000, 0x9, "5eaf1665bf5c"}]}], [{{0x9, 0x5, 0xd, 0x18, 0x3ff, 0x3b, 0x0, 0x9, [@generic={0xfc, 0x21, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x2, 0x0, 0x8, [@generic={0xaa, 0x8, "e36d73490b2727b30886b225f90d11d291e0f8744c68c93e3cde5f99e2bc6c0dce73e4a2374cf8133beb1a02ce006e0bbc631a41c19b73cca36b7b2040f12493b7b3d9330df6d35055fb60448dac00b70521a88f36f42aa8da74e872a9a8bdd94eab62190c3ece44279642261449a3e85863a8607b6091f693aef0a12ac384714de0fa9991f2aca32a65118e5697a9dc6a37bbe5e72c2a6d75191ee829e6bc4bf7596aa1b4184514"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xd6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x8}, @generic={0x41, 0x21, "d7c297eeaf436dd48e00a7a56cb5c8fbe1cf7f9b40540365b4cb00a565448cbb6176c5b0a90cfa2172214032e898c2c3e2ef05f38045a28dda7f91b6c3c574"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x6, 0xff, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x9}, @generic={0x77, 0x0, "9417a4719fa2ca5e27e25018d41bb31eb1e545595013fbfedeea59f96a63aaf64a8b986e2c853adeaa4337624ab24323b4967c40eea2ce1bc23b434359e8ece9e01b5dff00aa8f87ac59da56d27227aee5efe8c843282b375b8c9ed03c22c9cf982ad64e2dc83a91a1889adcf5615020c777aa216e"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x18576f40c04e04e0, 0xf5, 0x5b, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xac, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x8, 0x8, 0x8, [@generic={0xb, 0x3, "fbdb090a424516edf0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0xf, 0x18, 0x20, 0x22, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x53, 0x58d}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0x5, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}, @generic={0xff, 0x0, "aa62c49cc57b9d01ed15983bf788d7402ceb89a797ed83317f2dc3f4921c9b232e2861cc834e2cc44207f0a7b77054145929ffd95cc8e88a1b154c69b7804385c3a0a6810cc81682a76c5f83c98f2d66bbd952a81f92f2dfa22a4d51f4ed420bc3d9ef72906f98a8c4834ccd5d31fb5f44559d666bb8355f4ac00ae9fd412370667f2a4515e22e633e1fc0c6422713c5b2cca231f5595ac5c135a679a45635386a7c4a3a736f574d913f16b5eb76113d8ed55c29470fb4ea37adcfc5275471782438fdfd77334aca30abfbce016675e2c7ebff54b6fdb3fbd0369a1c5a6a426399831d7437b7dac5a579c68804305f447fb4e24b5d928371faa35895b3"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x4, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x10, 0x4, 0x5, [@generic={0x96, 0x0, "dae61fe9f4cf1a4472b158708ee710ae35bd622f016bf9e67bcb3b70d4fd6a91fb2b4c8e0915a314440853697936853be081ba2cc48a91cee18bab59753373ad47110d22c91b3132d496a3221f872dbf3705f5fe66d82734130c21fe90d3777827dfcdd8f5dd3dae9251bd31b54573aeb2bd8775cb496674e2bc57b7c93634d36df67b798775b3fe21fd427fed09311541a730e9"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x9, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xa611698ee00f8869, 0x9, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x6, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x10, 0x8, 0x90, [@generic={0xac, 0x6, "a79cb8efe15dc5608c0317ef6a9835c9eedf28f08f95f9bc5b85981dac93790fe204c80cd64111f4494f25116ef91bb47f755e94b58f299efac202fd5efb72304d512ae59728b42a1c225518e4d77f4607e8bf87915c42aa9bdf8db0028653abdf67e81dd136d53363b5062dbe36f37c4ab69c59b998483cf62535c2f54c8f3b276f9c6cf21fa01e1392bed05d6c79712aa6206d268ef36aeb6d1fc3eb94392299f4b90f8fbcd0540a68"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x4}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x6, 0x1, 0x3, 0x10, 0x9}, 0xd2, &(0x7f00000002c0)={0x5, 0xf, 0xd2, 0x4, [@ptm_cap={0x3}, @generic={0xaf, 0x10, 0x4, "32d52c50af7246ad457f1f9883a6840b81d4e0b68ee099d39f41d9a9909f6715c09dfa9037dbd4d4d83b2382110a7ede403e7a5dcf6942c1216f8f6695478884aa6e11ac1a738b460c21650bb45ae703219aa6e75ec6ece142114132344e90a70057efa332f72a380c8e8c602114e15cc7a414ef6160a2f1aaa1c35cc3bf23d5c97a108cc857e27d794e722c649ad3cb46d53120b4bc6031e3f1990973f96303cca1fc3c2b50793007e7d557"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xb, 0x0, 0x6, [0x0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x7, 0xfff7}]}, 0x1, [{0x9b, &(0x7f00000001c0)=@string={0x9b, 0x3, "999cc0f2b596b433c61b16d1948f49743ddc1ef12300af71034f3f0f2974ad1e6fd028a217d6eee3a5f84c3fd1863e3e8f4d05f091c8376785cf7b9d1f8c517f313caffc847cca7df19ec0d66cbbf784484ab3bc022ee91c41d68e4c7cd10af51dfa1137b10f3d074fa145148fbd3b5c9fa0cfa3d4b3bd1dfa96b7ac63ae9dbdd6c95f22ab31f16922c3e38a645bdc88c0df8aa347ee93556c"}}]}) syz_usb_control_io(r1, &(0x7f00000015c0)={0x2c, &(0x7f0000000400)={0x0, 0xd, 0xeb, {0xeb, 0x5, "4c73c43c1389275354adc6a09d11fcc287f562f887389894e077ead958900556a5ae67808aed2dd7ccdbe74ebd744c65b10c87fb3ef37ea59f981dce29ca7513da64bc77da11673332b5389dc5418dc90c354fca9ee50f061c81028d07a8f66fdbb1b0ffcd638430f9154f8a6e4356d8e7269ef80055237a62109e40b17db66193937ca414d4dfb0408a4540af5417c548964f44e9b3676fb50ead03ca731895163d38c82f642b9f60ac92ebd793344f3ada76376d5c176ba9b433afd1039caf3a09c798e5052b9a7a1820139ef2545078eabc0deacfe64d1522f44c41c47ea1388043642c9e709cff"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f00000014c0)={0x0, 0xf, 0xc7, {0x5, 0xf, 0xc7, 0x4, [@generic={0x5, 0x10, 0x1, "a343"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0xda, 0x3, 0xe46, 0xf000, 0x9, [0xc000, 0x30, 0x1fe0000]}, @generic={0xa2, 0x10, 0xa, "775c9f967050405c7992e8ed4add5575494032f4e5ad8128650260155810e1676f7e5b4641e90d1a0c00010bfa3b7daeed2a1edcb538e1eaa6069d1f2ffb2c5e64b86f013f4d799d0ffb2d0fdf26e538cc17fb7759c26eb31bda5abf2e00807664f6845677489cf5e8d2ab5c605ba8ecd762cb241e55f760c6b2f2aa05e4c924ea744a7a098ea964a5b22042acd9afb7e608b62eceb2500704b8973e9321fe"}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe2, 0x18, 0xa, 0xeb, "1fc96045", "345f1651"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x4, 0x58, 0x6, 0x0, 0x9}}}, &(0x7f0000001a80)={0x84, &(0x7f0000001600)={0x20, 0x9, 0xb7, "2508e2233fd28aab11b2d925cc920cbbacd3eebdb4672749f93e495a782cf954167a577e6a0b3739bda29188d2688548927422c577fe239c4e72daefa717ef26b9d4e7739d0557b1a8a3fd38da57f5a8911f30a71b5303d03c82279c583715a0d86a47c6d97040ea44e35d12de7e2faa0ffb0c795c6823cb644f4a144a068a72f94b29fc90c81b38110ca7ba3be7fc1e34a482cf0a08ca912c82c1244098c4dc1a2dea16226981d53f5554ccbbe7666e58f890b659d05c"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001740)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001780)={0x20, 0x0, 0x8, {0x1c60, 0x40, [0xf000]}}, &(0x7f00000017c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001800)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001840)={0x40, 0xb, 0x2, "75f5"}, &(0x7f0000001880)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000018c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001900)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001940)={0x40, 0x19, 0x2, "2cc9"}, &(0x7f0000001980)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000019c0)={0x40, 0x1c, 0x1}, &(0x7f0000001a00)={0x40, 0x1e, 0x1, 0x2c}, &(0x7f0000001a40)={0x40, 0x21, 0x1, 0x3}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@empty, @in6=@local, 0x200, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x4d2, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, {}, 0x0, 0x3501, 0x2, 0x0, 0xfd}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {r4, 0x2}}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x2004c840) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="002207e30830f443000000a1c0c310b6d5f5"], 0x0}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x4}, 0xcf, 0x1, 0xfcd, 0x1, 0xb, 'syz1\x00', "f0eb9137c91236365cde9be697b0c4e48fa92a40c870036257aad2cc3aa95635", "3e9de49cbbf0ccfe829e761bac0024713801ee29e2ea841665a8d2130f38842a", [{0x0, 0xa, {0x0, 0x5}}, {0xfffc, 0x6, {0x0, 0xfffffbff}}, {0x7, 0xf001, {0x0, 0x2}}, {0xcbf, 0x53, {0x3, 0x10}}, {0x1ff, 0x0, {0x3, 0x5}}, {0xa, 0x70b, {0x1, 0x8}}, {0x4859, 0x400, {0x0, 0x6}}, {0x3, 0x9, {0x2, 0xffffffff}}, {0x9, 0xbadf, {0x0, 0x6}}, {0xc9a, 0x5, {0x2, 0xfff}}, {0x4, 0x706, {0x1, 0xff}}, {0xff, 0x8, {0x0, 0x7fff}}, {0x1, 0xff, {0x0, 0x40}}, {0x0, 0x3ff, {0x1, 0x6}}, {0x8, 0x0, {0x0, 0x5}}, {0x2, 0x1, {0x0, 0x1}}, {0x1ff, 0x800, {0x2, 0x6}}, {0x7f, 0x0, {0x2, 0x7}}, {0x0, 0xdd8c, {0x3, 0x401}}, {0xc, 0x1ff, {0x3, 0x2}}, {0x7, 0x7, {0x0, 0xfe0}}, {0x2, 0x800, {0x3, 0x2}}, {0x6, 0xfff4, {0x3, 0xfff}}, {0x1, 0x5, {0x3a43003e10af97b2, 0x6}}, {0x9, 0x2, {0x0, 0xd0}}, {0x4, 0x4, {0x0, 0x2}}, {0xed1, 0x100, {0x3, 0x6}}, {0x401, 0xff91, {0x2, 0x2}}, {0xd529, 0x0, {0x3}}, {0xff, 0x4, {0x0, 0x6}}, {0xfff9, 0x8, {0x1, 0x21}}, {0xb, 0x3, {0x0, 0x5}}, {0x9, 0x1, {0x0, 0x800}}, {0x9d, 0x3, {0x3, 0x9}}, {0xfe00, 0x7, {0x2, 0x7}}, {0x7fff, 0x4, {0x1, 0x1}}, {0x100, 0x101, {0x3, 0x9}}, {0x0, 0xffff, {0x3, 0x587f}}, {0x7, 0xffff, {0x3, 0xfffffc00}}, {0x2, 0x3, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x6, 0x9, 0xfffc, 0x80, 0x28, 'syz1\x00', "bf9ffa0223fe1f3879bd4545e2b717cc6c8682dc91f084cb18dfdf42b470f3f5", "597434405c2c92df601e186b36ddb7cdab7912cdd61a4b899f78ddbaac13fa50", [{0x8, 0xfff8, {0x0, 0x2}}, {0x5, 0xfff8, {0x2, 0xf}}, {0x9, 0x8, {0x1}}, {0x90c2, 0x4, {0x2, 0x8}}, {0x9, 0x1, {0x3, 0x4}}, {0x9, 0x6, {0x2, 0x40}}, {0xffff, 0x2, {0x2, 0x8ca}}, {0x2, 0x800, {0x2, 0x7}}, {0x7, 0x0, {0x0, 0x9}}, {0x2, 0xfff5, {0x1, 0x2}}, {0xc, 0x4, {0x3, 0x200}}, {0x5, 0x3, {0x2, 0x2}}, {0x579e, 0x2, {0x3, 0x1}}, {0x5, 0xfffe, {0x0, 0x5}}, {0x7, 0x401, {0x0, 0xb85}}, {0xec, 0xf82, {0x1, 0x7}}, {0x4, 0x4, {0x0, 0x101}}, {0xb7f9, 0x2, {0x2, 0xffffffff}}, {0x0, 0x7, {0x0, 0x7}}, {0x8, 0x3, {0x1, 0x492a}}, {0x7, 0x5, {0x1, 0x8}}, {0x9, 0x2, {0x2, 0x4}}, {0x8, 0x9, {0x0, 0x4}}, {0x6, 0x8, {0x1, 0x9}}, {0x206e, 0x97e8, {0x3, 0x1}}, {0x7, 0x7, {0x3, 0xff}}, {0x68, 0xe, {0x3, 0x81}}, {0x5, 0xb, {0x3, 0x9}}, {0x5, 0xffff, {0x3, 0x7e}}, {0x9, 0x8001, {0x1, 0x3}}, {0x8, 0xe, {0x0, 0x7}}, {0x0, 0x4, {0x3, 0x8}}, {0xec3, 0x5d, {0x2, 0x7}}, {0x7, 0xf, {0x0, 0x2}}, {0x0, 0xa211, {0x0, 0x10001}}, {0x9, 0x7f0c, {0x1, 0x9}}, {0x8, 0x7, {0x3, 0x64}}, {0x6, 0xe233, {0x1, 0x1}}, {0x3ff, 0x5, {0x2, 0x6}}, {0x2, 0x1ff, {0x3, 0xba4}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x0, 0x40, 0xfff9, 0xb, 0x27, 'syz1\x00', "746b04bf18b599957a87e5364cf6b0b814850c35fd7ecea494bec2db6d8bbfa4", "b7b860124f5f694137f66ad001556115fb505649c4a9bc40217a3711380aed15", [{0x1, 0x800, {0x2, 0x6}}, {0x401, 0x53c, {0x1, 0x10f2f4d6}}, {0xe, 0x4, {0x3, 0x75}}, {0x6, 0x0, {0x0, 0x7fff}}, {0xbeee, 0x697, {0x3, 0x5}}, {0x7, 0xc9, {0x3, 0x80}}, {0x4, 0x200, {0x2, 0x9}}, {0x5, 0xffff, {0x3}}, {0xf, 0xf000, {0x3, 0x2f7}}, {0x5, 0xff}, {0x143a, 0x0, {0x3}}, {0x1, 0x4, {0x3, 0x80000000}}, {0xff, 0xdc0, {0x3, 0x4}}, {0x2, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x0, 0xa}}, {0xf5c8, 0x5807, {0x1, 0x8}}, {0x3, 0x4, {0x1}}, {0x9, 0x8, {0x2, 0x4}}, {0x1ff, 0x7, {0x1, 0xdf}}, {0x8, 0x7af, {0x0, 0x9}}, {0x9, 0x2, {0x0, 0x9}}, {0x3, 0xfff, {0x3, 0x95}}, {0x58, 0x6, {0x1, 0x4}}, {0x5, 0x2, {0x2, 0x7}}, {0x7, 0xb473, {0x1, 0x8}}, {0x4, 0x401, {0x3, 0xd7b}}, {0x5, 0x58, {0x2}}, {0x3, 0x2, {0x3, 0x2}}, {0x80, 0x7, {0x3, 0x7}}, {0x3, 0x5, {0x2, 0x6266}}, {0xfffc, 0x7, {0x2, 0x7}}, {0x551, 0x5, {0x1, 0x8}}, {0x5, 0xffdd, {0x1, 0x6}}, {0x448, 0x9, {0x0, 0x4}}, {0x5, 0x7, {0x3, 0x7}}, {0x3, 0x8, {0x2, 0x80000000}}, {0x19eb, 0x7f, {0x1, 0x2}}, {0x6, 0x7, {0x3, 0x7fff}}, {0x223, 0x6, {0x2, 0x9}}, {0x4, 0x0, {0x0, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0xf9570389e953c196}, 0x8000) 38.299396077s ago: executing program 0 (id=7056): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 38.07922028s ago: executing program 0 (id=7057): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) connect$vsock_stream(r0, 0x0, 0x0) (async) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x6ca080) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x6ca080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) read$ptp(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x60001, 0x0) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x60001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 21.838248723s ago: executing program 54 (id=7057): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) connect$vsock_stream(r0, 0x0, 0x0) (async) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x6ca080) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x6ca080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) read$ptp(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x60001, 0x0) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x60001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 18.804985876s ago: executing program 5 (id=7121): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102400, 0x19000) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff15000e001c"], 0x4c}}, 0x10) 18.662520422s ago: executing program 5 (id=7122): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x853, 0x148, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) 15.967069569s ago: executing program 1 (id=7133): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) (async) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000100)=0x32) (async) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)=0x2) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0xa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) (async) unshare(0x8000000) (async) semget$private(0x0, 0x4000, 0x0) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 15.337892157s ago: executing program 5 (id=7134): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) 12.549926215s ago: executing program 9 (id=7137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000000a40)=[{{&(0x7f0000000540)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)=""/7, 0x7}, {&(0x7f00000005c0)=""/51, 0x33}], 0x2, &(0x7f0000000640)=""/81, 0xfe1a}, 0x4}, {{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/66, 0x42}, {&(0x7f00000007c0)=""/125, 0x7d}, {&(0x7f0000000840)=""/218, 0xda}, {&(0x7f0000000940)=""/78, 0x4e}], 0x4, &(0x7f0000000a00)=""/63, 0x3f}, 0x3}], 0x2, 0x40010080, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"}) sched_setscheduler(0x0, 0x3, &(0x7f0000000140)=0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0xdffffffe, 0x4040040, 0x0, 0x43, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0xffffffffffffffda, 0x8, {0x1, 0x2, 0x2200, 0x1ffff, 0x7, 0x8, {0x4, 0x27, 0x7, 0x7, 0xa, 0xffff, 0x3, 0x1, 0x4, 0x4000, 0x1, 0x0, 0x0, 0x401, 0x1a4d06c0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={r1, 0x0, r6}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a3000"], 0xe8}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="300000002e00030500000000000000002000008008000000ac1414aa08000300d1dd0eccbf8e09922f71483e", @ANYRES32=r1, @ANYBLOB="0b000f007a6f6e65667300002a2c6c2bf53fad3d969216433c355a441c56c1e219cb7e9bb1b5c3ec892e5077ba47304e75c2671b52d1894fd7fe43888aad4d23e7bc15d54433d6563b5b951a9732ff62c2d297a352c94ced2db6e41f4991f4687ffad37223cd5d47e507ce03a51100f160ee32213f655b9696d815287d93c92222671230b9eda748c0eafacc5510c35fa0981648f0fbed11ad1f67bc25cb7612fbff2a72b45b9f29519b4871e05767d938b53dfba36ef65da314c984955d25e4b221abfca9a8aa1f07e9ef17af0fd253b8cb9aff0ba93915d835572dfb16c46886846f01024fdbbe223a4daca6"], 0x30}], 0x1, 0x0, 0x0, 0x8090}, 0x0) 11.937095326s ago: executing program 1 (id=7138): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x40, 0x13, 0x6, "5bb5b780f4c3"}, 0x0, 0x0}) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="420001000000f7"], 0x0, 0x0, 0x0, 0x0, 0x0}) 11.637817239s ago: executing program 9 (id=7142): r0 = socket(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x14020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000005500)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffff", 0x46}], 0x1) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r2, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c00078008001240f5ffffff090002"], 0x54}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000"], 0x38, 0x4855}, 0x24000052) 9.907070559s ago: executing program 9 (id=7143): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) (async) r2 = memfd_secret(0xa51cd372813f45c5) (async, rerun: 64) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) close(0xffffffffffffffff) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg(r6, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x587f20aa2bc1cbd7) (async) r7 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) (async, rerun: 32) r8 = syz_io_uring_setup(0x9f, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) (async, rerun: 32) getpeername$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) (async, rerun: 32) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async, rerun: 32) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x2040) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x38, 0x30, 0x2d, 0x39]}}}}]}) 9.784559574s ago: executing program 9 (id=7144): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7a, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYBLOB="a4fefccc337cbf17af7e662b688cff3b8bbe827544d2787a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20009c90780100000004000000d57e190d001e6e1d16c1711bbd8adbf65bd82b957b378a02340c68117aa1b390b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b01acae6f69ea07000000000000004d4894a87f20c65bfb8e0c8cfb67000000000000000000006f0f9565df74d2653a13d554fee0e7be27c873db314d37f356d77b06e1b89f40faa03fb4c96064384b0a1c982c51ac57a1879ade76d7866e264bc5077081077d600e39566edde2f8205a6c24e606000000000000001cf0481795e46a4c789c63638c437fa196008d421921a1a9d933b5f260b4de1f362295c72e23f192657b0732e91b96ca51667c7b54659c6e06a2843ea1a37ce6cb194c6ce60c8cd84d8f6a8d1cc38f6b6400dbbb029d4a"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x32, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) 9.453757269s ago: executing program 3 (id=7147): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0xe0, 0x30, 0x401, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ct={0x9c, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x59, 0x6, "1d8ec8e8e741676d3b3c5cc5293f1c4fbcd196235cc5a21996eff5b13405016a315abea627ca6a301fe4c29d692032cebc6bcb3e46b3a051d0f4182db1976a5e23c0cc28d1fc58c6a0adaa4ecc5b217f2341f961f8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x8d, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38eb0000031401002dbd7000000000000900020073797a30000000000800410073697700140033007c00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r5, 0x8b22, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 9.453229633s ago: executing program 1 (id=7148): r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) unshare(0xc020680) shmctl$SHM_STAT_ANY(r0, 0xf, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) 8.519455098s ago: executing program 3 (id=7150): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 8.167011718s ago: executing program 3 (id=7151): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1923e97b, 0x0, &(0x7f0000000000)) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r2, r3, 0x2, 0x1, 0x4}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5a13}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000040}, 0x4) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000340)=@attr_other={0x0, 0x2, 0x5, &(0x7f0000000300)}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x4100, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r7, 0x3ba0, &(0x7f00000013c0)={0x48, 0x8, r3, 0x0, 0x6, 0x30a9f, 0x1000, &(0x7f00000003c0)="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", 0x10001}) r8 = syz_io_uring_setup(0x104c, &(0x7f0000001440)={0x0, 0xa96b, 0x10000, 0x0, 0x13b, 0x0, r5}, &(0x7f00000014c0)=0x0, &(0x7f0000001500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x100, &(0x7f0000001540)=0x401, 0x0, 0x4) preadv2(r4, &(0x7f0000001740)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/33, 0x21}, {&(0x7f0000001680)=""/159, 0x9f}], 0x3, 0x0, 0x40, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), &(0x7f0000001800), 0x2, 0x3) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f0000001840)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000001880)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f00000018c0)={0x28, 0x2, r10, r11, 0x2a9a09, 0x6, 0x5, 0xa7420}) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000001900)=0x5, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001940)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001bc0)={{}, r12, 0x1a, @inherit={0x60, &(0x7f0000001b40)={0x1, 0x3, 0x7, 0x80, {0x0, 0x7, 0x1, 0x3, 0x1}, [0x2, 0x7ff, 0x4]}}, @name="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"}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000002c00)={0x8, &(0x7f0000002bc0)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000002c40)={r13, 0x22}) fcntl$setstatus(r7, 0x4, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000002d00)={0x18, r10, 0x7, 0x0, &(0x7f0000002c80)=[{0x8000, 0xf9}, {0xff, 0x8}, {0x2, 0x10001}, {0x10001, 0x9}, {0x40}, {0x9, 0xda7b}, {0x401, 0x8}]}) r14 = accept4(r8, &(0x7f0000002d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000002dc0)=0x80, 0x800) connect$bt_rfcomm(r14, &(0x7f0000002e00)={0x1f, @none}, 0xa) ioctl$sock_kcm_SIOCKCMUNATTACH(r15, 0x89e1, &(0x7f0000002e40)={r14}) 7.985446971s ago: executing program 2 (id=7152): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201010208cab4c508720c140008000000000000002400010b00e0091d04f409054000100040017f"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x42d}}, {0xd4, &(0x7f0000001100)=ANY=[@ANYBLOB="d4030b4e69a04bdc61eb607e22b6d5c410af43023ebec7ca91a6165acc72cfdf31ab724800f2089eaad0bd706de6aa281f0a5a0f0e6278f5dfdf40b8febe4e39fcd98b55e9702f9530f7288d765aed4ad5ad4142704f903954c503f3d7b888025e886d15a4ca7c0e295d088056c9ffc1293a5e427975c4ab7910df0f13da4c6c7721d6c27c0ae81f5ff53c9320b65478ab45e88662699781d93075e9cdb69833923002cc5ecbc3308b4ada72f98135d71cc4c234ddfc51f498a00294b868f563e26abf2ecb2a642b5297a4db"]}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000010c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000010c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x1, 'lc\x00', 0x12, 0x6}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @local, 0x0, 0x1, 'nq\x00', 0x16, 0x6, 0x1}, 0x2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r2], &(0x7f0000001080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), 0x0) (async) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x20080050) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001200)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r9, @ANYBLOB="010100000200000000002b00000018000300", @ANYRESHEX=r7, @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4068805}, 0x0) 7.980600803s ago: executing program 3 (id=7153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x2f) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x9, 0x9, 0x4, {0x7, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb23], [0x7], 0x1}}, 0x20000008}) r5 = socket(0x1d, 0x2, 0x6) socket$xdp(0x2c, 0x3, 0x0) accept$alg(r5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r6 = socket$inet6(0xa, 0x80003, 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000340)={0x200003, 0x2200083, 0x801, 0x4, 0x37d, 0xfffffffe}) setsockopt$sock_linger(r6, 0x1, 0x45, &(0x7f0000000000)={0x1, 0xc}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80001, 0x1f2) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r9, 0x0, &(0x7f0000000400)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xce9dc54468bb77b8}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 7.458598985s ago: executing program 5 (id=7154): getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1f, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r0, 0xff}, &(0x7f0000000080)=0x8) syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400480d}, 0x0) close(0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001d80), 0x2, 0x12022, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'pcl812\x00', [0x3, 0xffffffff, 0x7fffffff, 0xfffffff0, 0x2f, 0x2007, 0x7, 0x5, 0xffe, 0x20000001, 0x1, 0x8500, 0x1003, 0x4, 0xffff, 0x10002, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0xf, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x4, 0x4, 0x8049]}) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'pcl812\x00', [0x3, 0xffffffff, 0x7fffffff, 0xfffffff0, 0x2f, 0x2007, 0x7, 0x5, 0xffe, 0x20000001, 0x1, 0x8500, 0x1003, 0x4, 0xffff, 0x10002, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0xf, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x4, 0x4, 0x8049]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042f"], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042f"], 0x102) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x880) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x42) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 7.314783813s ago: executing program 5 (id=7155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) ioprio_get$pid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000540)={0x20, 0x5, 0x10, {0x10, 0x21, "c08c3d815450990a1385db85f493"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.85020167s ago: executing program 3 (id=7156): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004f370d2047052027e3f00102030109021200010000109565826e00005034a900"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.388692043s ago: executing program 9 (id=7157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000dc4009040000010300000009210900000122a0"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_setup(0xbc4, &(0x7f0000000400)={0x0, 0x74eb, 0x0, 0x4, 0x28c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200), 0x0) shutdown(r7, 0x1) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 6.185026463s ago: executing program 1 (id=7158): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x100) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000140)={0x9, 0x378, 0x8001, 0x3, 0x6, 0x5}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000190a01010000000000000047000000000000"], 0x20}}, 0x8004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000851e0000280000008500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 5.181600889s ago: executing program 1 (id=7159): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=0x0], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0xffffffff80000001}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f0000000140)="0f5bf4b69a516d", 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000004580)="9f4c9e05a31bbe1553ce9fb52b94f138696a5f803c0b98313eeb30592280e84f73d61d52e10ef4e64305c42a0a8f523e2e09000000f5a87eb3f66b6d6749530f45fb980092e2238452b9aa7bffa79a5fee80ba3728f21cdb7ec222002ebd75c6a7dc9a727ee71c949761a1bd478cfb897a056d2c1213799d27353eab077e617be9d64dbebc23be691446195b11b9b15243ce9cc0ee9a98c54b4f9bf6dca257c86e11fa82f2e55dd1ac914831a78a43c32aeeebeb7c68538370b39698e0a6d11975d63a", 0xc3, 0x1d49f087}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000380)="87", 0x1, 0x304f6019}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x8, 0x80000000}) 5.179100916s ago: executing program 1 (id=7160): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) creat(0x0, 0xc2) io_setup(0x7f, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x50]}, 0x2a) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008000000000000010203010902680003010000000904000000010120", @ANYBLOB="0e44427e1cce9f056eea5b6156d71ba1c3fc404ee01a6f0ac80019e299bb70ab52e290d8459ceb5626afdf70c1ecaca67f09ad676dd39f521d05db"], 0x0) 4.787051489s ago: executing program 2 (id=7161): timer_create(0x0, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 4.751174944s ago: executing program 2 (id=7162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) statx(r2, &(0x7f0000000240)='./file0\x00', 0x4000, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f0000000000), &(0x7f0000000200)=@v3={0x3000000, [{0x1, 0x7}, {0x7}], r3}, 0x18, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r3, &(0x7f0000000200)={0xffffffffffffff6b, 0x5, 0x39, 0x9f34, 0x7, 0x7, 0x3, 0x4, 0xb582}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r4, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.081250591s ago: executing program 2 (id=7163): socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffc79) poll(0x0, 0x0, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000043000000", 0x30) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x5, 0x5}}, 0xe8) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f00000003c0)={0x7592, {{0xa, 0x4e20, 0x15e, @remote, 0x9}}}, 0x88) 2.868975028s ago: executing program 5 (id=7164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400001c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a3200000000140000010000000000000000000205000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf406307302079790102030109021200015f6560700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x4, 0x8}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random='\"\x00\x00(\x00', @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000680)={0x40, 0x7}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0xff}, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x1b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ed2000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0xfffff000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.783984578s ago: executing program 3 (id=7165): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x2a) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) getsockname(r5, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x80) 433.265944ms ago: executing program 9 (id=7166): socket(0xa, 0x3, 0x87) (async) fchmodat(0xffffffffffffff9c, 0x0, 0x20) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') (async) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) (async) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') 325.170164ms ago: executing program 2 (id=7167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) (async) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x14, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1f, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x56, 0x1, "17cf44e4a2aa378be9f327ba0af49cd399d4b2941b8f356aef78ffda5689924be11657ae07ee0b95abbfaf58624b7625664e753b7bc6c24a772a38aca7e7043325f7381c9e854560078c588575c60df1e84e"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "f5bfacc2e7b7aaebcef4a04f8af44f44fee3d0e0e473eebca00ee16f78b361c71c142064bc3280dc094298cc91d50b12cd2b12397683659f5c8d480a7d7f29ccbedb56b2cacd50ac5adb80afbd6111fec38aa5c09346a03289cbd4d2ee6ce8ba8d3065e1e992026e8db587de7901bbb773276ca39007105a75418ef5e8331b888e914d5dd1f6f39c5e322a27d5ac3f0a9f148bc30dc4ebaf57568f6ae52038e36b73ceeff962303a6e"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2800}, 0x24008001) 0s ago: executing program 2 (id=7168): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=0xffffbf7f) kernel console output (not intermixed with test programs): =1400 audit(1767292010.625:56090): avc: denied { read } for pid=1149 comm="syz.9.6872" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2132.565818][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.681721][ T30] audit: type=1400 audit(1767292010.625:56091): avc: denied { open } for pid=1149 comm="syz.9.6872" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2132.776387][ T30] audit: type=1400 audit(1767292010.635:56092): avc: denied { recv } for pid=1153 comm="syz.9.6872" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2132.865947][ T30] audit: type=1400 audit(1767292010.878:56093): avc: denied { create } for pid=1149 comm="syz.9.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2132.959172][ T30] audit: type=1400 audit(1767292010.878:56094): avc: denied { bind } for pid=1149 comm="syz.9.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2133.072182][ T30] audit: type=1400 audit(1767292010.878:56095): avc: denied { setopt } for pid=1149 comm="syz.9.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2133.156492][T29298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.185911][ T30] audit: type=1400 audit(1767292010.878:56096): avc: denied { accept } for pid=1149 comm="syz.9.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2133.261804][ T30] audit: type=1400 audit(1767292010.878:56097): avc: denied { write } for pid=1149 comm="syz.9.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2133.358110][ T30] audit: type=1400 audit(1767292010.878:56098): avc: denied { read } for pid=1149 comm="syz.9.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2133.506310][ T1163] overlayfs: overlapping lowerdir path [ 2133.626250][ T8233] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 2133.990664][ T8233] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 2133.998955][ T8233] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2134.031609][ T8233] usb 6-1: config 0 has no interface number 0 [ 2134.164467][ T8233] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2134.190285][ T8233] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2134.258586][ T1189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6880'. [ 2134.705236][T30685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2134.744172][ T8233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.773586][ T8233] usb 6-1: config 0 descriptor?? [ 2134.786261][ T1178] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2134.793536][T30689] usbhid 4-1:0.0: can't add hid device: -71 [ 2134.812655][T30689] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2134.856807][T30689] usb 4-1: USB disconnect, device number 98 [ 2135.306702][ T116] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2135.453529][T30704] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2135.498895][ T1207] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6885'. [ 2135.592361][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 2135.618304][ T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.636569][ T8233] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input115 [ 2135.657645][ T116] usb 1-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 2135.670043][T30704] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2135.700776][ T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.709068][T30704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.738175][ T116] usb 1-1: config 0 descriptor?? [ 2135.743614][T30704] usb 10-1: Product: syz [ 2135.747922][T30704] usb 10-1: Manufacturer: syz [ 2135.753839][T30704] usb 10-1: SerialNumber: syz [ 2135.772738][T30704] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2135.803545][ T8233] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2135.813001][T30685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.821786][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.860100][ T1174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.869597][ T1174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.887567][T30704] usb 6-1: USB disconnect, device number 65 [ 2135.893770][ C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2136.247246][ T116] hid_parser_main: 17 callbacks suppressed [ 2136.247269][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.281344][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.295218][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.317297][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.324450][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.346995][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.364969][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.383030][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.401247][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.417973][ T116] ntrig 0003:1B96:000C.005A: unknown main item tag 0x0 [ 2136.483111][ T116] ntrig 0003:1B96:000C.005A: report_id 0 is invalid [ 2136.489863][ T116] ntrig 0003:1B96:000C.005A: item 0 1 1 8 parsing failed [ 2136.503635][ T116] ntrig 0003:1B96:000C.005A: parse failed [ 2136.509701][ T116] ntrig 0003:1B96:000C.005A: probe with driver ntrig failed with error -22 [ 2136.523003][ T116] usb 1-1: USB disconnect, device number 37 [ 2136.611070][ T1223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.621359][ T1223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.918539][T29298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.919454][ T8233] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2136.976403][ T8233] ath9k_htc: Failed to initialize the device [ 2137.039198][ T8233] usb 10-1: ath9k_htc: USB layer deinitialized [ 2137.117759][ T1229] bond1 (unregistering): Released all slaves [ 2137.153068][ T1228] can0: slcan on ttyS3. [ 2137.213196][ T1233] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 2137.235368][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 2137.235382][ T30] audit: type=1400 audit(1767292015.583:56353): avc: denied { read write } for pid=29124 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2137.286811][ T30] audit: type=1400 audit(1767292015.621:56354): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2137.336723][ T30] audit: type=1400 audit(1767292015.630:56355): avc: denied { read write open } for pid=29124 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2137.404237][ T30] audit: type=1400 audit(1767292015.630:56356): avc: denied { ioctl } for pid=29124 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2137.488804][ T30] audit: type=1400 audit(1767292015.639:56357): avc: denied { ioctl } for pid=1224 comm="syz.5.6890" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=136865 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2137.582940][ T30] audit: type=1400 audit(1767292015.677:56358): avc: denied { create } for pid=1234 comm="syz.1.6892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2137.623254][ T30] audit: type=1400 audit(1767292015.705:56359): avc: denied { ioctl } for pid=1234 comm="syz.1.6892" path="socket:[137791]" dev="sockfs" ino=137791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2137.652674][ T30] audit: type=1400 audit(1767292015.714:56360): avc: denied { module_request } for pid=1234 comm="syz.1.6892" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2137.701629][ T30] audit: type=1400 audit(1767292015.714:56361): avc: denied { recv } for pid=1224 comm="syz.5.6890" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2137.871857][ T30] audit: type=1400 audit(1767292015.723:56362): avc: denied { read write } for pid=32174 comm="syz-executor" name="loop0" dev="devtmpfs" ino=4143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2138.031524][T29298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.226240][T30704] usb 10-1: USB disconnect, device number 77 [ 2138.833785][ T1224] can0 (unregistered): slcan off ttyS3. [ 2139.056786][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.184381][ T1261] netlink: 'syz.3.6899': attribute type 2 has an invalid length. [ 2139.550849][T30685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.979343][ T1267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6900'. [ 2140.001129][ T1271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6903'. [ 2140.018406][ T1267] Unknown options in mask b7f2 [ 2140.077726][ T1267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6900'. [ 2140.480956][ T1286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6905'. [ 2140.607911][ T1288] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1288 comm=syz.3.6905 [ 2140.683082][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.197185][ T1299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6906'. [ 2141.802734][T29298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.081652][T29298] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 2142.274045][T29298] usb 10-1: device descriptor read/64, error -71 [ 2142.739901][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 2142.739917][ T30] audit: type=1400 audit(1767292020.737:56622): avc: denied { recv } for pid=5800 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2142.772953][T30704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.896831][ T1310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6909'. [ 2142.907232][ T1310] Unknown options in mask b7f2 [ 2142.914301][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.939585][ T1325] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6913'. [ 2142.951528][ T1310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6909'. [ 2142.976835][ T1326] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6913'. [ 2142.990513][T30685] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2142.999641][ T1325] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 2143.025262][ T30] audit: type=1400 audit(1767292020.840:56623): avc: denied { ioctl } for pid=1312 comm="syz.0.6911" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2143.043690][T29298] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 2143.051224][ T30] audit: type=1400 audit(1767292020.887:56624): avc: denied { write } for pid=1303 comm="syz.3.6909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2143.106506][ T1329] sctp: [Deprecated]: syz.5.6901 (pid 1329) Use of int in max_burst socket option. [ 2143.106506][ T1329] Use struct sctp_assoc_value instead [ 2143.126730][ T30] audit: type=1400 audit(1767292020.896:56625): avc: denied { ioctl } for pid=1300 comm="syz.9.6908" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2143.152160][ T1325] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2143.153029][ T30] audit: type=1400 audit(1767292020.924:56626): avc: denied { create } for pid=1323 comm="syz.1.6913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2143.240805][ T30] audit: type=1400 audit(1767292020.924:56627): avc: denied { prog_load } for pid=1323 comm="syz.1.6913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2143.242635][ T1326] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 2143.266225][T30685] usb 1-1: Using ep0 maxpacket: 8 [ 2143.286583][ T30] audit: type=1400 audit(1767292020.924:56628): avc: denied { bpf } for pid=1323 comm="syz.1.6913" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2143.329187][ T30] audit: type=1400 audit(1767292020.924:56629): avc: denied { setopt } for pid=1323 comm="syz.1.6913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2143.375147][ T30] audit: type=1400 audit(1767292020.971:56630): avc: denied { ioctl } for pid=1300 comm="syz.9.6908" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2143.428564][ T30] audit: type=1400 audit(1767292021.065:56631): avc: denied { write } for pid=1270 comm="syz.5.6901" name="vlan1" dev="proc" ino=4026532844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2143.556908][T30685] usb 1-1: config 125 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2143.569797][T30685] usb 1-1: config 125 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2143.611337][T29298] usb 10-1: device descriptor read/64, error -71 [ 2143.627257][T30685] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2143.638060][T30685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.713669][ T1326] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2143.731595][T29298] usb usb10-port1: attempt power cycle [ 2144.018894][ T6741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.091456][T29298] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2144.117863][T29298] usb 10-1: device descriptor read/8, error -71 [ 2144.332999][ T1341] netlink: 'syz.1.6917': attribute type 4 has an invalid length. [ 2144.346040][ T1321] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 2144.362218][T30685] usbhid 1-1:125.0: can't add hid device: -71 [ 2144.371458][T30685] usbhid 1-1:125.0: probe with driver usbhid failed with error -71 [ 2144.390048][T30685] usb 1-1: USB disconnect, device number 38 [ 2144.444825][T29298] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2144.467758][T29298] usb 10-1: device descriptor read/8, error -71 [ 2144.625172][T29298] usb usb10-port1: unable to enumerate USB device [ 2144.751793][ T1350] netlink: 'syz.5.6921': attribute type 5 has an invalid length. [ 2144.862295][ T1353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6920'. [ 2145.322451][ T6741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.919493][ T6741] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2145.987644][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.994298][T29298] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2146.080176][ T6741] usb 1-1: device descriptor read/64, error -71 [ 2146.186940][T29298] usb 2-1: Using ep0 maxpacket: 16 [ 2146.241264][T29298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.310571][T29298] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2146.332143][T29298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.365807][T29298] usb 2-1: config 0 descriptor?? [ 2146.370965][ T6741] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 2146.412698][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2146.581559][ T6741] usb 1-1: device descriptor read/64, error -71 [ 2146.668701][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2146.829379][ T6741] usb usb1-port1: attempt power cycle [ 2147.231745][T29298] hkems 0003:2006:0118.005B: item fetching failed at offset 4/5 [ 2147.246843][T29298] hkems 0003:2006:0118.005B: parse failed [ 2147.252720][T29298] hkems 0003:2006:0118.005B: probe with driver hkems failed with error -22 [ 2147.301106][ T1375] netlink: 'syz.5.6928': attribute type 1 has an invalid length. [ 2147.323928][ T1375] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6928'. [ 2147.533464][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.609449][ T6741] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 2147.643388][ T6741] usb 1-1: device descriptor read/8, error -71 [ 2147.746009][ T1404] overlayfs: missing 'lowerdir' [ 2147.850531][T12070] usb 2-1: USB disconnect, device number 112 [ 2147.878924][ T1405] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6932'. [ 2147.904498][ T1405] Unknown options in mask b7f2 [ 2147.911601][ T6741] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 2147.934858][ T1407] delete_channel: no stack [ 2147.953407][ T6741] usb 1-1: device descriptor read/8, error -71 [ 2147.981050][ T1410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6932'. [ 2148.079952][ T6741] usb usb1-port1: unable to enumerate USB device [ 2148.098986][ T30] kauditd_printk_skb: 363 callbacks suppressed [ 2148.099002][ T30] audit: type=1400 audit(1767292025.751:56995): avc: denied { read } for pid=1406 comm="syz.9.6934" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2148.145817][ T30] audit: type=1400 audit(1767292025.788:56996): avc: denied { open } for pid=1406 comm="syz.9.6934" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2148.180860][ T30] audit: type=1400 audit(1767292025.798:56997): avc: denied { read write } for pid=30869 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2148.234938][ T30] audit: type=1400 audit(1767292025.798:56998): avc: denied { open } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2148.282332][ T30] audit: type=1400 audit(1767292025.798:56999): avc: denied { ioctl } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2148.342520][ T30] audit: type=1400 audit(1767292025.835:57000): avc: denied { allowed } for pid=1406 comm="syz.9.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2148.373392][ T30] audit: type=1400 audit(1767292025.835:57001): avc: denied { create } for pid=1406 comm="syz.9.6934" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2148.446725][ T30] audit: type=1400 audit(1767292025.835:57002): avc: denied { map } for pid=1406 comm="syz.9.6934" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=137140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2148.471422][ T30] audit: type=1400 audit(1767292025.835:57003): avc: denied { read write } for pid=1406 comm="syz.9.6934" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=137140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2148.530093][ T30] audit: type=1400 audit(1767292025.873:57004): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2148.738958][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.186509][ T1437] Invalid source name [ 2149.190574][ T1437] UBIFS error (pid: 1437): cannot open "./file0", error -22 [ 2149.235587][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.319258][ T5896] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2149.447423][T29298] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2149.479473][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 2149.488371][ T5896] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2149.508753][ T5896] usb 2-1: config 0 has no interface number 0 [ 2149.524306][ T5896] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2149.546747][ T5896] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2149.559059][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.567461][ T5896] usb 2-1: Product: syz [ 2149.584486][ T5896] usb 2-1: Manufacturer: syz [ 2149.595029][ T5896] usb 2-1: SerialNumber: syz [ 2149.609061][ T5896] usb 2-1: config 0 descriptor?? [ 2149.629298][T29298] usb 6-1: Using ep0 maxpacket: 32 [ 2149.636568][T29298] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2149.658116][T29298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.681827][T29298] usb 6-1: config 0 descriptor?? [ 2149.834566][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.907205][T30685] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2150.262132][T29298] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2150.277683][T29298] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2150.292783][T29298] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2150.413733][ T5896] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2150.423825][ T1462] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6946'. [ 2150.437194][ T5896] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2150.444538][ T5896] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2150.452557][ T5896] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2150.462256][T30685] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 2150.516323][T30685] usb 4-1: config 0 has no interface number 0 [ 2150.524040][ T5896] usb 2-1: USB disconnect, device number 113 [ 2150.530398][T30685] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 2150.543500][T30685] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2150.589116][T30685] usb 4-1: config 0 interface 153 has no altsetting 0 [ 2150.612077][T30685] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 2150.624750][ T1469] Bluetooth: MGMT ver 1.23 [ 2150.645938][T30685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.671662][T30685] usb 4-1: Product: syz [ 2150.692849][T30685] usb 4-1: Manufacturer: syz [ 2150.704114][T30685] usb 4-1: SerialNumber: syz [ 2150.735366][T30685] usb 4-1: config 0 descriptor?? [ 2150.744555][T30685] hub 4-1:0.153: bad descriptor, ignoring hub [ 2150.762330][T30685] hub 4-1:0.153: probe with driver hub failed with error -5 [ 2150.793156][T30685] sierra 4-1:0.153: Sierra USB modem converter detected [ 2150.984950][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.011221][ T116] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2151.211435][ T116] usb 10-1: Using ep0 maxpacket: 32 [ 2151.668150][ T116] usb 10-1: config 0 has an invalid interface number: 48 but max is 0 [ 2151.698370][ T116] usb 10-1: config 0 has no interface number 0 [ 2151.718529][ T116] usb 10-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 2151.889091][ T116] usb 10-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 2151.992722][ T1488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6953'. [ 2152.299744][ T116] usb 10-1: config 0 interface 48 has no altsetting 0 [ 2152.306612][ T116] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2152.313228][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.316626][ T116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.337048][ T116] usb 10-1: config 0 descriptor?? [ 2152.484335][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.523528][ T1487] loop6: detected capacity change from 0 to 2640 [ 2152.540450][ T1487] buffer_io_error: 6 callbacks suppressed [ 2152.540465][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.555130][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.561911][ T116] usb 10-1: string descriptor 0 read error: -32 [ 2152.564100][T30685] usb 4-1: USB disconnect, device number 99 [ 2152.571213][ T116] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2152.575929][T30685] sierra 4-1:0.153: device disconnected [ 2152.589178][ T116] gspca_vc032x: reg_r err -32 [ 2152.594074][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.594109][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.594134][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.594174][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.594209][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.603838][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.611620][ T1489] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.636184][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.648409][ T1487] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.661923][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661938][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661947][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661955][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661963][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661972][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661979][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661987][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.661995][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.662003][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.731174][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.736548][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.742422][ T1486] Buffer I/O error on dev loop6, logical block 0, async page read [ 2152.752040][ T1487] ldm_validate_partition_table(): Disk read failed. [ 2152.782984][ T1487] Dev loop6: unable to read RDB block 0 [ 2152.788679][ T1487] loop6: unable to read partition table [ 2152.798728][ T1487] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2152.807567][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.813164][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.825747][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.834797][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 2152.851153][ T116] gspca_vc032x: Unknown sensor... [ 2152.861995][ T116] vc032x 10-1:0.48: probe with driver vc032x failed with error -22 [ 2152.908161][ T116] usb 10-1: USB disconnect, device number 82 [ 2153.509124][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.676307][ T30] kauditd_printk_skb: 293 callbacks suppressed [ 2153.676324][ T30] audit: type=1400 audit(1767292030.970:57298): avc: denied { recv } for pid=2993 comm="kworker/u8:11" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2153.798510][ T30] audit: type=1400 audit(1767292030.989:57299): avc: denied { read write } for pid=30869 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2153.908735][ T1504] input: syz1 as /devices/virtual/input/input117 [ 2153.927176][ T30] audit: type=1400 audit(1767292030.989:57300): avc: denied { open } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2154.057141][ T30] audit: type=1400 audit(1767292030.989:57301): avc: denied { ioctl } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2154.618345][ T30] audit: type=1400 audit(1767292031.036:57302): avc: denied { recv } for pid=8741 comm="kworker/u8:25" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2154.645340][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.654298][ T30] audit: type=1400 audit(1767292031.148:57303): avc: denied { recv } for pid=1499 comm="syz.5.6957" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2154.710613][ T30] audit: type=1400 audit(1767292031.148:57304): avc: denied { recv } for pid=1499 comm="syz.5.6957" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2154.793088][ T30] audit: type=1400 audit(1767292031.158:57305): avc: denied { prog_load } for pid=1503 comm="syz.3.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2154.886284][ T30] audit: type=1400 audit(1767292031.158:57306): avc: denied { bpf } for pid=1503 comm="syz.3.6958" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2154.953145][ T30] audit: type=1400 audit(1767292031.158:57307): avc: denied { perfmon } for pid=1503 comm="syz.3.6958" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2155.135153][ T5819] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 2155.319111][ T5819] usb 10-1: config 0 has an invalid interface number: 15 but max is 0 [ 2155.330692][ T5819] usb 10-1: config 0 has no interface number 0 [ 2155.345039][ T5819] usb 10-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 2155.366591][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.374963][ T5819] usb 10-1: Product: syz [ 2155.380331][ T5819] usb 10-1: Manufacturer: syz [ 2155.386911][ T5819] usb 10-1: SerialNumber: syz [ 2155.403129][ T5819] usb 10-1: config 0 descriptor?? [ 2155.416327][ T5819] usb 10-1: disable ehci-hcd to run US-144 [ 2155.551732][T30707] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2155.660365][ T1532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6966'. [ 2156.063736][T30685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.098811][T29447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.131851][T12070] usb 10-1: USB disconnect, device number 83 [ 2156.198008][T30707] usb 1-1: Using ep0 maxpacket: 32 [ 2156.208240][T30707] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2156.222150][ T1534] netlink: 'syz.3.6967': attribute type 30 has an invalid length. [ 2156.238637][T30707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.271458][T30707] usb 1-1: config 0 descriptor?? [ 2156.277003][ T1535] netlink: 'syz.3.6967': attribute type 30 has an invalid length. [ 2156.294111][T30707] usb 1-1: selecting invalid altsetting 3 [ 2156.300648][T30707] comedi comedi5: could not set alternate setting 3 in high speed [ 2156.311701][T30707] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 2156.331607][T30707] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 2156.513304][ T1523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.522356][ T1523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.534203][T30707] usb 1-1: USB disconnect, device number 43 [ 2156.655277][ T1542] openvswitch: netlink: IP tunnel dst address not specified [ 2157.194197][T30685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2157.337049][ T5896] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 2157.400915][ T1552] netlink: 'syz.0.6972': attribute type 10 has an invalid length. [ 2157.455559][ T1552] hsr0: entered promiscuous mode [ 2157.466680][ T1552] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2157.478175][ T1552] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2157.490732][ T1552] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2157.582937][ T5896] usb 10-1: Using ep0 maxpacket: 32 [ 2157.590491][ T5896] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2157.620433][ T5896] usb 10-1: config 247 has an invalid descriptor of length 159, skipping remainder of the config [ 2157.657786][ T5896] usb 10-1: config 247 has 0 interfaces, different from the descriptor's value: 2 [ 2157.698091][ T5896] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=4f.04 [ 2157.711210][ T5896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.719332][ T5896] usb 10-1: Product: syz [ 2157.726441][ T5896] usb 10-1: Manufacturer: syz [ 2157.731147][ T5896] usb 10-1: SerialNumber: syz [ 2157.876222][ T1571] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 2157.975565][ T1576] netlink: 7 bytes leftover after parsing attributes in process `syz.5.6978'. [ 2158.437949][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2158.607163][ T1582] netlink: 'syz.3.6980': attribute type 10 has an invalid length. [ 2158.617823][ T1582] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6980'. [ 2159.055500][ T30] kauditd_printk_skb: 329 callbacks suppressed [ 2159.055511][ T30] audit: type=1400 audit(1767292035.994:57637): avc: denied { read write } for pid=30869 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.114220][ T30] audit: type=1400 audit(1767292036.031:57638): avc: denied { open } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.140284][ T30] audit: type=1400 audit(1767292036.040:57639): avc: denied { ioctl } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.218359][ T30] audit: type=1400 audit(1767292036.040:57640): avc: denied { recv } for pid=30869 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2159.245491][T17739] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2159.264107][ T30] audit: type=1400 audit(1767292036.050:57641): avc: denied { ioctl } for pid=1586 comm="syz.0.6982" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2159.291358][ T30] audit: type=1400 audit(1767292036.115:57643): avc: denied { ioctl } for pid=1586 comm="syz.0.6982" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2159.318880][ T30] audit: type=1400 audit(1767292036.106:57642): avc: denied { read write } for pid=29124 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.347145][T30707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.347314][ T30] audit: type=1400 audit(1767292036.115:57644): avc: denied { read write open } for pid=29124 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.381752][ T1591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6984'. [ 2159.392874][ T30] audit: type=1400 audit(1767292036.115:57645): avc: denied { ioctl } for pid=29124 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.419807][ T30] audit: type=1400 audit(1767292036.181:57646): avc: denied { create } for pid=1589 comm="syz.3.6984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2159.480965][T17739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2159.508591][T17739] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 2159.519498][T17739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.527549][T17739] usb 1-1: Product: syz [ 2159.532040][T17739] usb 1-1: Manufacturer: syz [ 2159.536687][T17739] usb 1-1: SerialNumber: syz [ 2159.573019][T17739] usb 1-1: config 0 descriptor?? [ 2159.583960][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.678604][ T1601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6986'. [ 2159.934911][T29447] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 2160.011077][ T5896] usb 10-1: USB disconnect, device number 84 [ 2160.107662][T29447] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 2160.115913][T29447] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.126122][T29447] usb 4-1: config 0 has no interface number 0 [ 2160.134429][T29447] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2160.143586][T29447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.152102][T29447] usb 4-1: Product: syz [ 2160.156273][T29447] usb 4-1: Manufacturer: syz [ 2160.161014][T29447] usb 4-1: SerialNumber: syz [ 2160.168598][T29447] usb 4-1: config 0 descriptor?? [ 2160.175357][T29447] hub 4-1:0.31: bad descriptor, ignoring hub [ 2160.181870][T29447] hub 4-1:0.31: probe with driver hub failed with error -5 [ 2160.190199][T29447] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2160.197480][T29447] uvcvideo 4-1:0.31: No valid video chain found. [ 2160.514906][ T5896] usb 4-1: USB disconnect, device number 100 [ 2160.695299][ T6741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.783452][ T1626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6992'. [ 2161.795378][ T1626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6992'. [ 2161.807648][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.817129][T29447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.829229][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.362135][ T1633] tmpfs: Bad value for 'mpol' [ 2162.373046][ T1619] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2162.406112][ T1619] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2162.415203][ T1619] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2162.450840][T17739] usb 1-1: USB disconnect, device number 44 [ 2162.519113][ T1619] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 2162.550480][ T1619] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 2162.576898][ T6993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.585800][T29447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.594708][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.633177][ T1619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2163.559702][ T1619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2163.581159][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2163.632230][ T1619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2163.819391][ T1644] netlink: 'syz.0.6998': attribute type 1 has an invalid length. [ 2163.901206][ T5138] Bluetooth: hci5: command 0x0406 tx timeout [ 2164.214491][ T1654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6999'. [ 2164.607593][ T1651] erspan1: entered allmulticast mode [ 2164.632590][ T5138] Bluetooth: hci8: command 0x0406 tx timeout [ 2164.699505][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 2164.699521][ T30] audit: type=1400 audit(1767292041.279:57873): avc: denied { recv } for pid=2993 comm="kworker/u8:11" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2164.737851][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2164.746641][ T5138] Bluetooth: hci9: command 0x0406 tx timeout [ 2164.752822][ T30] audit: type=1400 audit(1767292041.279:57874): avc: denied { read write } for pid=29129 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2164.777374][ T30] audit: type=1400 audit(1767292041.279:57875): avc: denied { open } for pid=29129 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2164.831382][ T5138] Bluetooth: hci1: command 0x0c1a tx timeout [ 2164.838040][ T30] audit: type=1400 audit(1767292041.279:57876): avc: denied { ioctl } for pid=29129 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2164.864481][ T30] audit: type=1400 audit(1767292041.316:57877): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2164.889717][ T30] audit: type=1400 audit(1767292041.391:57878): avc: denied { read write } for pid=29120 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2165.049774][ T30] audit: type=1400 audit(1767292041.391:57879): avc: denied { open } for pid=29120 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2165.117109][ T30] audit: type=1400 audit(1767292041.391:57880): avc: denied { ioctl } for pid=29120 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2165.248225][ T30] audit: type=1400 audit(1767292041.484:57881): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2165.317177][ T30] audit: type=1400 audit(1767292041.587:57882): avc: denied { create } for pid=1655 comm="syz.9.7001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2165.804960][ T8741] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2165.826374][T30707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.499009][T30707] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2166.616523][T30685] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2166.680782][T23804] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 2166.689845][T30707] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2166.701340][T30707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2166.711477][T30707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2166.720622][T30707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2166.732839][T30707] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2166.741919][T30707] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2166.749970][T30707] usb 4-1: Product: syz [ 2166.754109][T30707] usb 4-1: Manufacturer: syz [ 2166.763747][T30707] cdc_wdm 4-1:1.0: skipping garbage [ 2166.770366][T30707] cdc_wdm 4-1:1.0: skipping garbage [ 2166.776758][T30707] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 2166.782779][T30707] cdc_wdm 4-1:1.0: Unknown control protocol [ 2166.784560][ T1673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.797854][ T1673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.807602][T30685] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2166.818615][T30685] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2166.826569][T30685] usb 1-1: can't read configurations, error -71 [ 2166.844388][T23804] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2166.851840][ T5138] Bluetooth: hci8: command 0x0406 tx timeout [ 2166.853687][T23804] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.868558][T23804] usb 10-1: Product: syz [ 2166.872798][T23804] usb 10-1: Manufacturer: syz [ 2166.878590][T23804] usb 10-1: SerialNumber: syz [ 2166.886160][T23804] usb 10-1: config 0 descriptor?? [ 2166.893185][T23804] hso 10-1:0.0: Not our interface [ 2166.898870][T23804] usb-storage 10-1:0.0: USB Mass Storage device detected [ 2166.937615][ T5138] Bluetooth: hci9: command 0x0406 tx timeout [ 2166.943952][ T5819] net_ratelimit: 1 callbacks suppressed [ 2166.943963][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.990030][ T1671] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2166.998347][ T1671] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2167.024468][ T5138] Bluetooth: hci1: command 0x0c1a tx timeout [ 2167.107501][T30707] usb 10-1: USB disconnect, device number 85 [ 2167.342581][ T5819] usb 4-1: USB disconnect, device number 101 [ 2167.963570][T30685] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2168.053045][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.125903][T30685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2168.477951][T30685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2168.490867][T30685] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 2168.500068][T30685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.510466][T30685] usb 1-1: config 0 descriptor?? [ 2168.597970][ T1699] netlink: 'syz.9.7013': attribute type 1 has an invalid length. [ 2168.733299][ T1697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7012'. [ 2168.769586][T30685] usbhid 1-1:0.0: can't add hid device: -71 [ 2168.790965][T30685] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2168.819928][T30685] usb 1-1: USB disconnect, device number 46 [ 2169.075636][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2169.146584][T23804] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2169.259631][ T5138] Bluetooth: hci1: command 0x0c1a tx timeout [ 2169.266173][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2169.322834][ T1715] netlink: 444 bytes leftover after parsing attributes in process `syz.0.7017'. [ 2169.332445][ T1715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7017'. [ 2169.344398][T23804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2169.355757][T23804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2169.374815][T23804] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2169.410896][T23804] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2169.449249][T23804] usb 10-1: Manufacturer: syz [ 2169.479658][T23804] usb 10-1: config 0 descriptor?? [ 2169.717327][ T1722] netlink: 'syz.5.7018': attribute type 30 has an invalid length. [ 2169.732658][T29360] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2169.743951][ T1722] netlink: 'syz.5.7018': attribute type 30 has an invalid length. [ 2169.759778][ T1722] 9pnet_virtio: no channels available for device syz [ 2169.759852][ T1728] 9pnet_virtio: no channels available for device syz [ 2169.773492][T29360] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2169.806771][T29360] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2169.834176][T29360] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2170.049661][ T30] kauditd_printk_skb: 265 callbacks suppressed [ 2170.049677][ T30] audit: type=1400 audit(1767292046.283:58148): avc: denied { open } for pid=29120 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2170.089685][ T30] audit: type=1400 audit(1767292046.283:58149): avc: denied { ioctl } for pid=29120 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2170.120024][ T30] audit: type=1400 audit(1767292046.320:58150): avc: denied { recv } for pid=1723 comm="syz.3.7019" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2170.150803][ T30] audit: type=1400 audit(1767292046.367:58151): avc: denied { unmount } for pid=32174 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2170.179358][ T30] audit: type=1400 audit(1767292046.376:58152): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2170.206728][ T30] audit: type=1400 audit(1767292046.376:58153): avc: denied { create } for pid=1735 comm="syz.5.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2170.240278][ T30] audit: type=1400 audit(1767292046.376:58154): avc: denied { create } for pid=1735 comm="syz.5.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2170.266052][ T30] audit: type=1400 audit(1767292046.376:58155): avc: denied { read } for pid=1735 comm="syz.5.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2170.289764][ T30] audit: type=1400 audit(1767292046.386:58156): avc: denied { read write } for pid=32174 comm="syz-executor" name="loop0" dev="devtmpfs" ino=4143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2170.313873][ T30] audit: type=1400 audit(1767292046.386:58157): avc: denied { open } for pid=32174 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=4143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2170.359419][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.440861][ T1705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.455001][ T1705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.461926][ T1740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7020'. [ 2170.484748][T23804] uclogic 0003:256C:006D.005C: failed retrieving Huion firmware version: -71 [ 2170.494724][ T1740] Unknown options in mask b7f2 [ 2170.499735][T23804] uclogic 0003:256C:006D.005C: failed probing parameters: -71 [ 2170.506654][ T1742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7020'. [ 2170.516417][T17739] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2170.585422][T23804] uclogic 0003:256C:006D.005C: probe with driver uclogic failed with error -71 [ 2170.599185][T23804] usb 10-1: USB disconnect, device number 86 [ 2170.702868][T17739] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 2170.721947][T17739] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 2170.750891][T17739] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2170.785664][ T1744] xt_hashlimit: max too large, truncated to 1048576 [ 2170.792708][T17739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.811872][T17739] usb 1-1: config 0 descriptor?? [ 2171.141898][T30689] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2171.733119][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.768921][T30689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2172.178135][T30689] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2172.190314][T30689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 65401, setting to 1024 [ 2172.223733][T30689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 2172.259599][T30689] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2172.294958][T30689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.316035][T30689] usb 4-1: Product: syz [ 2172.320307][T30689] usb 4-1: Manufacturer: syz [ 2172.324925][T30689] usb 4-1: SerialNumber: syz [ 2172.326013][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2172.371207][T30689] usb 4-1: config 0 descriptor?? [ 2172.377031][ T1746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2172.384417][ T1746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2172.391920][ T1765] comedi comedi4: bad chanlist[0]=0x000007ff chan=2047 range length=2 [ 2172.413968][T30689] usb 4-1: ucan: probing device on interface #0 [ 2172.839807][T30688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2172.889018][ T1746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.898409][ T1746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.949930][T17739] usb 1-1: string descriptor 0 read error: -71 [ 2172.963122][T30689] usb 4-1: ucan: failed to retrieve device info [ 2172.969982][T17739] ath6kl: Failed to submit usb control message: -71 [ 2172.980745][T30689] usb 4-1: ucan: probe failed; try to update the device firmware [ 2172.990342][T17739] ath6kl: unable to send the bmi data to the device: -71 [ 2173.008204][T17739] ath6kl: Unable to send get target info: -71 [ 2173.019371][T30689] usb 4-1: USB disconnect, device number 102 [ 2173.040367][T17739] ath6kl: Failed to init ath6kl core: -71 [ 2173.052639][T17739] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2173.079723][T17739] usb 1-1: USB disconnect, device number 47 [ 2173.123803][ T1777] lo speed is unknown, defaulting to 1000 [ 2173.138232][T30688] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2173.298929][T30688] usb 2-1: Using ep0 maxpacket: 8 [ 2173.307140][T30688] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2173.330321][T30688] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2173.345061][T30688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2173.369415][T30688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2173.390069][T30688] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2173.406533][T30688] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2173.415959][T30688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.424000][T30688] usb 2-1: Product: syz [ 2173.428608][T30688] usb 2-1: Manufacturer: syz [ 2173.433216][T30688] usb 2-1: SerialNumber: syz [ 2173.442081][T30688] usb 2-1: config 0 descriptor?? [ 2173.655979][ T1789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.679862][T30688] iowarrior 2-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior1 [ 2173.701787][ T1789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.739814][T30688] usb 2-1: USB disconnect, device number 114 [ 2173.907612][T12070] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 2173.950909][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.992810][ T1796] IPv6: NLM_F_CREATE should be specified when creating new route [ 2174.068479][T12070] usb 10-1: Using ep0 maxpacket: 32 [ 2174.075587][T12070] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2174.084392][T12070] usb 10-1: config 0 has no interface number 0 [ 2174.092834][T12070] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2174.104100][T12070] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.112661][T12070] usb 10-1: Product: syz [ 2174.117126][T12070] usb 10-1: Manufacturer: syz [ 2174.122004][T12070] usb 10-1: SerialNumber: syz [ 2174.129570][T12070] usb 10-1: config 0 descriptor?? [ 2174.141073][T12070] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2174.357588][T12070] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2174.381806][T12070] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2174.608835][ T1809] $Hÿ: renamed from bond0 (while UP) [ 2174.623254][ T1809] $Hÿ: entered promiscuous mode [ 2174.630092][ T1809] bond_slave_0: entered promiscuous mode [ 2174.636281][ T1809] bond_slave_1: entered promiscuous mode [ 2174.712752][ T1809] netlink: 'syz.0.7040': attribute type 2 has an invalid length. [ 2174.763107][T17739] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2174.948175][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 97 [ 2175.009559][T17739] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2175.018585][T17739] usb 2-1: config 0 has no interface number 0 [ 2175.028555][ T1818] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.7042'. [ 2175.151605][T30688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.185834][T17739] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2175.195190][T17739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.281788][T17739] usb 2-1: Product: syz [ 2175.297841][T17739] usb 2-1: Manufacturer: syz [ 2175.324307][T17739] usb 2-1: SerialNumber: syz [ 2175.370709][T17739] usb 2-1: config 0 descriptor?? [ 2175.388634][T17739] usb 2-1: selecting invalid altsetting 1 [ 2175.402629][T17739] dvb_ttusb_budget: ttusb_init_controller: error [ 2175.418263][T17739] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2175.450992][ T30] kauditd_printk_skb: 346 callbacks suppressed [ 2175.451003][ T30] audit: type=1400 audit(1767292051.334:58504): avc: denied { read write } for pid=1821 comm="syz.0.7043" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2175.507108][ T30] audit: type=1400 audit(1767292051.372:58505): avc: denied { open } for pid=1821 comm="syz.0.7043" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2175.532605][T17739] DVB: Unable to find symbol stv0299_attach() [ 2175.542942][ T30] audit: type=1400 audit(1767292051.418:58506): avc: denied { read write } for pid=1821 comm="syz.0.7043" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2175.682558][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.691104][ T30] audit: type=1400 audit(1767292051.446:58507): avc: denied { open } for pid=1821 comm="syz.0.7043" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2175.718386][T17739] DVB: Unable to find symbol tda8083_attach() [ 2175.724637][T17739] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2175.781318][ T30] audit: type=1400 audit(1767292051.446:58508): avc: denied { ioctl } for pid=1821 comm="syz.0.7043" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2175.850580][T17739] usb 2-1: USB disconnect, device number 115 [ 2175.853651][ T30] audit: type=1400 audit(1767292051.446:58509): avc: denied { create } for pid=1821 comm="syz.0.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2175.919182][ T30] audit: type=1400 audit(1767292051.446:58510): avc: denied { connect } for pid=1821 comm="syz.0.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2175.929443][ T1831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7045'. [ 2176.103272][ T30] audit: type=1400 audit(1767292051.446:58511): avc: denied { execmem } for pid=1821 comm="syz.0.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2176.506994][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2176.542436][ T30] audit: type=1400 audit(1767292051.559:58512): avc: denied { append } for pid=1803 comm="syz.1.7038" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2176.596205][ T30] audit: type=1400 audit(1767292051.559:58513): avc: denied { append open } for pid=1803 comm="syz.1.7038" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2176.811521][ T5948] usb 10-1: USB disconnect, device number 87 [ 2176.811603][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2176.820680][ T5948] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2176.917989][ T5948] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2176.934569][ T5948] quatech2 10-1:0.51: device disconnected [ 2177.231759][ T1852] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7049'. [ 2177.296976][T17739] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2177.362979][ T5948] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2177.499546][T17739] usb 4-1: Using ep0 maxpacket: 32 [ 2177.515574][T17739] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2177.524051][T17739] usb 4-1: config 0 has no interface number 0 [ 2177.530417][T17739] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2177.543658][T17739] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2177.553482][T17739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.562784][T17739] usb 4-1: Product: syz [ 2177.567235][T17739] usb 4-1: Manufacturer: syz [ 2177.571889][T17739] usb 4-1: SerialNumber: syz [ 2177.577121][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2177.589330][ T5948] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 2177.618443][T17739] usb 4-1: config 0 descriptor?? [ 2177.623602][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.632700][T30688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.648739][ T5948] usb 1-1: config 0 descriptor?? [ 2178.175029][ T1853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.250817][ T1853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.609221][T17739] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 2178.641715][T17739] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2178.652548][T17739] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2178.680813][T17739] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2178.727585][T17739] usb 4-1: USB disconnect, device number 103 [ 2178.751583][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2178.840151][ T5948] usbhid 1-1:0.0: can't add hid device: -71 [ 2178.846233][ T5948] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2178.856414][ T5948] usb 1-1: USB disconnect, device number 48 [ 2178.919090][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.071138][T23804] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 2179.272328][T23804] usb 10-1: Using ep0 maxpacket: 16 [ 2179.299011][T23804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2179.310754][T23804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.330654][T23804] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2179.361554][T23804] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2179.379983][T23804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.426871][T23804] usb 10-1: config 0 descriptor?? [ 2179.530833][T30689] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2179.703161][T30689] usb 4-1: Using ep0 maxpacket: 8 [ 2179.710251][T30689] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 2179.719355][T30689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.730010][T30689] usb 4-1: config 0 has no interface number 0 [ 2179.736443][T30689] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x69, changing to 0x9 [ 2179.748743][T30689] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x9 has an invalid bInterval 38, changing to 9 [ 2179.760119][T30689] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x9 has invalid maxpacket 42740, setting to 1024 [ 2179.777854][T30689] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2179.783869][ T1876] random: crng reseeded on system resumption [ 2179.794840][T30689] usb 4-1: config 0 interface 52 has no altsetting 0 [ 2179.814822][T30689] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2179.830174][T30689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.852128][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.873643][T30689] usb 4-1: config 0 descriptor?? [ 2179.896122][T23804] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.005D/input/input118 [ 2179.980598][T23804] appleir 0003:05AC:8241.005D: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 2180.197467][T30707] usb 10-1: USB disconnect, device number 88 [ 2180.903634][T30707] usb 4-1: USB disconnect, device number 104 [ 2180.936011][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 2180.936021][ T30] audit: type=1400 audit(1767292056.469:58761): avc: denied { read write } for pid=29129 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2180.978525][ T30] audit: type=1400 audit(1767292056.507:58762): avc: denied { recv } for pid=1861 comm="syz.1.7053" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2181.011874][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.044848][ T30] audit: type=1400 audit(1767292056.535:58763): avc: denied { open } for pid=29129 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2181.071334][ T30] audit: type=1400 audit(1767292056.535:58764): avc: denied { ioctl } for pid=29129 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2181.098478][ T30] audit: type=1400 audit(1767292056.600:58765): avc: denied { mounton } for pid=1882 comm="syz.9.7058" path="/245" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2181.139857][ T30] audit: type=1400 audit(1767292056.600:58766): avc: denied { mount } for pid=1882 comm="syz.9.7058" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2181.182056][ T30] audit: type=1400 audit(1767292056.694:58767): avc: denied { read write } for pid=1882 comm="syz.9.7058" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2181.238388][ T30] audit: type=1400 audit(1767292056.694:58768): avc: denied { open } for pid=1882 comm="syz.9.7058" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2181.283680][ T30] audit: type=1400 audit(1767292056.694:58769): avc: denied { ioctl } for pid=1882 comm="syz.9.7058" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2181.315007][ T30] audit: type=1400 audit(1767292056.694:58770): avc: denied { create } for pid=1882 comm="syz.9.7058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2181.561310][ T1895] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7059'. [ 2181.594576][ T1895] Unknown options in mask b7f2 [ 2181.792140][ T1901] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7059'. [ 2182.131773][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7066'. [ 2182.161129][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.169228][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.190862][ T1922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7066'. [ 2183.784201][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.277599][ T1951] binder: 1946:1951 unknown command 0 [ 2184.283547][ T1951] binder: 1946:1951 ioctl c0306201 200000000080 returned -22 [ 2185.350755][ T5896] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2185.391150][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.409645][ T1964] netlink: 'syz.9.7077': attribute type 2 has an invalid length. [ 2185.571918][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 2185.573005][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.600916][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2185.627064][ T5896] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 2185.858563][ T5896] usb 2-1: config 4 has no interface number 0 [ 2185.869934][ T5896] usb 2-1: config 4 interface 30 has no altsetting 0 [ 2185.885455][ T5896] usb 2-1: string descriptor 0 read error: -22 [ 2185.897685][ T5896] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 2185.906937][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.385841][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 2186.385858][ T30] audit: type=1400 audit(1767292061.174:59024): avc: denied { map_create } for pid=1967 comm="syz.3.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2186.444462][ T30] audit: type=1400 audit(1767292061.174:59025): avc: denied { bpf } for pid=1967 comm="syz.3.7078" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2186.494159][ T30] audit: type=1400 audit(1767292061.184:59026): avc: denied { map_read map_write } for pid=1967 comm="syz.3.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2186.496560][ T5896] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 2186.524115][ T5896] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2186.530573][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 2186.539665][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2186.582594][ T30] audit: type=1400 audit(1767292061.184:59027): avc: denied { prog_load } for pid=1967 comm="syz.3.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2186.603220][ T30] audit: type=1400 audit(1767292061.193:59028): avc: denied { bpf } for pid=1967 comm="syz.3.7078" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2186.627003][ T30] audit: type=1400 audit(1767292061.193:59029): avc: denied { perfmon } for pid=1967 comm="syz.3.7078" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2186.628102][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2186.659959][ T30] audit: type=1400 audit(1767292061.193:59030): avc: denied { create } for pid=1967 comm="syz.3.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2186.717237][ T1974] dvb-usb: bulk message failed: -22 (3/0) [ 2186.723020][ T1974] dw2102: i2c transfer failed. [ 2186.728456][ T1974] dvb-usb: bulk message failed: -22 (3/0) [ 2186.734187][ T1974] dw2102: i2c transfer failed. [ 2186.839983][ T30] audit: type=1400 audit(1767292061.212:59031): avc: denied { map } for pid=1967 comm="syz.3.7078" path="socket:[140186]" dev="sockfs" ino=140186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2186.864301][ T30] audit: type=1400 audit(1767292061.212:59032): avc: denied { read } for pid=1967 comm="syz.3.7078" path="socket:[140186]" dev="sockfs" ino=140186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2186.896709][ T30] audit: type=1400 audit(1767292061.221:59033): avc: denied { create } for pid=1967 comm="syz.3.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2187.271645][ T5896] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 2187.279183][ T5896] usb 2-1: media controller created [ 2187.286464][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 2187.292438][ T5896] dw2102: i2c transfer failed. [ 2187.300220][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 2187.306477][ T5896] dw2102: i2c transfer failed. [ 2187.311417][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 2187.317609][ T5896] dw2102: i2c transfer failed. [ 2187.322527][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 2187.328551][ T5896] dw2102: i2c transfer failed. [ 2187.333461][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 2187.339313][ T5896] dw2102: i2c transfer failed. [ 2187.345045][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 2187.357545][ T5896] dw2102: i2c transfer failed. [ 2187.363007][ T5896] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2187.405918][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2187.440878][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 2187.452167][ T5896] dw2102: command 0x0e transfer failed. [ 2187.471781][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 2187.483312][ T5896] dw2102: command 0x0e transfer failed. [ 2187.495568][T23804] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2187.522029][ T1982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2187.635241][T30688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2187.644967][T23804] usb 4-1: device descriptor read/64, error -71 [ 2187.826739][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 2187.901592][ T5896] dw2102: command 0x0e transfer failed. [ 2187.907179][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 2187.922843][ T5896] dw2102: command 0x0e transfer failed. [ 2187.923007][T23804] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2187.936397][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 2187.952935][ T5896] dw2102: command 0x51 transfer failed. [ 2187.965716][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 2187.976370][ T5896] dw2102: i2c probe for address 0x68 failed. [ 2187.982524][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 2188.008712][ T5896] dw2102: i2c probe for address 0x69 failed. [ 2188.019065][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 2188.024838][ T5896] dw2102: i2c probe for address 0x6a failed. [ 2188.040852][ T5896] dw2102: probing for demodulator failed. Is the external power switched on? [ 2188.060428][ T5896] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 2188.083356][T23804] usb 4-1: device descriptor read/64, error -71 [ 2188.190190][ T5896] rc_core: IR keymap rc-tt-1500 not found [ 2188.201005][ T5896] Registered IR keymap rc-empty [ 2188.207492][ T5896] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2188.225350][T23804] usb usb4-port1: attempt power cycle [ 2188.239684][ T5896] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input119 [ 2188.263108][ T5896] dvb-usb: schedule remote query interval to 250 msecs. [ 2188.279729][ T5896] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2188.299569][ T2000] overlayfs: failed to resolve './file1': -2 [ 2188.305630][ T5896] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 2188.331699][ T5896] usb 2-1: USB disconnect, device number 116 [ 2188.384800][ T5896] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 2188.458793][ T2009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.470832][ T2009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.480540][ T2009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.596452][T23804] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2188.618344][T23804] usb 4-1: device descriptor read/8, error -71 [ 2188.874840][T23804] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2188.913056][T23804] usb 4-1: device descriptor read/8, error -71 [ 2189.068415][T23804] usb usb4-port1: unable to enumerate USB device [ 2189.134348][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2189.142500][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2189.432735][ T5896] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2189.601338][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 2189.608756][ T5896] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2189.620308][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2189.626958][ T5896] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2189.636260][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.648305][ T5896] usb 2-1: config 0 descriptor?? [ 2189.740372][T30689] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 2189.911485][T30689] usb 10-1: Using ep0 maxpacket: 16 [ 2189.922463][T30689] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2189.932392][T30689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.940793][T30689] usb 10-1: Product: syz [ 2189.945538][T30689] usb 10-1: Manufacturer: syz [ 2189.950264][T30689] usb 10-1: SerialNumber: syz [ 2190.112408][ T5896] nzxt-smart2 0003:1E71:2009.005E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2190.387993][T30689] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2190.402327][T30689] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2190.415637][T30689] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2190.425655][T30689] usb 10-1: media controller created [ 2190.443436][T30689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2190.507103][T30689] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2190.554538][T30689] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2190.577058][ T5896] usb 2-1: USB disconnect, device number 117 [ 2190.592989][T30689] usb 10-1: USB disconnect, device number 89 [ 2191.295783][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7097'. [ 2191.399940][T17739] net_ratelimit: 3 callbacks suppressed [ 2191.399958][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2191.771186][ T30] kauditd_printk_skb: 264 callbacks suppressed [ 2191.771287][ T30] audit: type=1400 audit(1767292066.160:59298): avc: denied { create } for pid=2042 comm="syz.9.7097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2191.809716][ T30] audit: type=1400 audit(1767292066.160:59299): avc: denied { write } for pid=2042 comm="syz.9.7097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2191.832403][ T30] audit: type=1400 audit(1767292066.160:59300): avc: denied { nlmsg_write } for pid=2042 comm="syz.9.7097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2191.854325][ T30] audit: type=1400 audit(1767292066.609:59301): avc: denied { read } for pid=2048 comm="syz.1.7099" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2191.877374][ T30] audit: type=1400 audit(1767292066.609:59302): avc: denied { open } for pid=2048 comm="syz.1.7099" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2192.312254][ T30] audit: type=1400 audit(1767292066.637:59303): avc: denied { ioctl } for pid=2048 comm="syz.1.7099" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2192.427885][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2192.538055][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2192.561524][ T30] audit: type=1400 audit(1767292066.665:59304): avc: denied { set_context_mgr } for pid=2048 comm="syz.1.7099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2192.606422][ T30] audit: type=1400 audit(1767292066.665:59305): avc: denied { read } for pid=2048 comm="syz.1.7099" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2192.648032][ T30] audit: type=1400 audit(1767292066.665:59306): avc: denied { open } for pid=2048 comm="syz.1.7099" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2192.698239][ T30] audit: type=1400 audit(1767292066.665:59307): avc: denied { ioctl } for pid=2048 comm="syz.1.7099" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2192.951430][ T2060] block nbd0: Dead connection, failed to find a fallback [ 2193.539602][ T2060] block nbd0: shutting down sockets [ 2193.545465][ T2060] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.621548][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.727885][ T2060] buffer_io_error: 4808 callbacks suppressed [ 2193.727928][ T2060] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2193.744933][ T2060] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.757164][ T2060] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2193.767493][ T2060] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.777370][ T2060] Buffer I/O error on dev nbd0, logical block 2, async page read [ 2193.787363][ T2060] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.797078][ T2060] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2193.807008][ T2060] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.859552][ T2060] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2193.870198][ T2060] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.882239][ T2060] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2193.896011][ T2060] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.907161][ T2060] Buffer I/O error on dev nbd0, logical block 2, async page read [ 2193.918096][ T2060] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.928403][ T2060] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2193.937385][ T2060] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.946996][ T2060] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2193.955510][ T2060] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2193.967656][ T2060] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2193.984661][ T2060] ldm_validate_partition_table(): Disk read failed. [ 2193.984856][ T116] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2193.992254][ T2060] Dev nbd0: unable to read RDB block 0 [ 2194.013940][ T2060] nbd0: unable to read partition table [ 2194.230577][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 2194.247303][ T116] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 2194.257360][ T116] usb 2-1: config 0 has no interface number 0 [ 2194.263622][ T116] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2194.275444][ T116] usb 2-1: config 0 interface 85 has no altsetting 0 [ 2194.285658][ T116] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2194.298104][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.306527][ T116] usb 2-1: Product: syz [ 2194.310840][ T116] usb 2-1: Manufacturer: syz [ 2194.315470][ T116] usb 2-1: SerialNumber: syz [ 2194.477985][ T116] usb 2-1: config 0 descriptor?? [ 2194.784879][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.042908][T17739] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 2195.070028][ T2089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7108'. [ 2195.544194][ T2088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.560391][ T2088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.569443][ T116] appletouch 2-1:0.85: Geyser mode initialized. [ 2195.576498][ T116] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input120 [ 2195.594769][ C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 2195.674007][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.728360][T17739] usb 10-1: config 0 has an invalid interface number: 168 but max is 0 [ 2195.736771][T17739] usb 10-1: config 0 has no interface number 0 [ 2195.743092][T17739] usb 10-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2195.754978][T17739] usb 10-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 7393, setting to 1024 [ 2195.766363][T17739] usb 10-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 2195.777961][T17739] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 2195.787955][T17739] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.797539][T17739] usb 10-1: config 0 descriptor?? [ 2195.803077][ T2078] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2195.811164][T23804] usb 2-1: USB disconnect, device number 118 [ 2195.821959][T23804] appletouch 2-1:0.85: input: appletouch disconnected [ 2196.014017][T29122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2196.039353][T29122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2196.053985][T29122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2196.064944][T29122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2196.072754][T29122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2196.083666][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.375099][ T2099] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7110'. [ 2196.385424][ T2097] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7110'. [ 2196.483396][ T2099] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7110'. [ 2197.131334][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 2197.131351][ T30] audit: type=1400 audit(1767292071.614:59489): avc: denied { prog_load } for pid=2113 comm="syz.1.7112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2197.249054][ T30] audit: type=1400 audit(1767292071.642:59490): avc: denied { bpf } for pid=2113 comm="syz.1.7112" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2197.313355][T30688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.427731][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7112'. [ 2197.661048][T17739] usb 10-1: string descriptor 0 read error: -71 [ 2197.759807][ T30] audit: type=1400 audit(1767292071.660:59491): avc: denied { execmem } for pid=2113 comm="syz.1.7112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2197.809385][T17739] keyspan 10-1:0.168: Keyspan 2 port adapter converter detected [ 2197.845490][T17739] keyspan 10-1:0.168: found no endpoint descriptor for endpoint 1 [ 2197.867834][T17739] keyspan 10-1:0.168: found no endpoint descriptor for endpoint 84 [ 2197.875942][ T30] audit: type=1400 audit(1767292071.688:59492): avc: denied { create } for pid=2116 comm="syz.3.7114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2197.898233][ T2093] lo speed is unknown, defaulting to 1000 [ 2197.898498][T17739] keyspan 10-1:0.168: found no endpoint descriptor for endpoint 2 [ 2197.905989][T17739] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2197.922358][ T2125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.943451][ T30] audit: type=1400 audit(1767292071.688:59493): avc: denied { create } for pid=2116 comm="syz.3.7114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2197.961694][ T2125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.019655][T17739] keyspan 10-1:0.168: found no endpoint descriptor for endpoint 88 [ 2198.031077][T17739] keyspan 10-1:0.168: found no endpoint descriptor for endpoint 6 [ 2198.041620][ T30] audit: type=1400 audit(1767292071.688:59494): avc: denied { getopt } for pid=2116 comm="syz.3.7114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2198.067745][T17739] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2198.085578][ T30] audit: type=1400 audit(1767292071.688:59495): avc: denied { write } for pid=2116 comm="syz.3.7114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2198.106427][T17739] usb 10-1: USB disconnect, device number 90 [ 2198.116035][T17739] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2198.145047][ T30] audit: type=1400 audit(1767292071.688:59496): avc: denied { read } for pid=2116 comm="syz.3.7114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2198.166360][T17739] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2198.181829][T17739] keyspan 10-1:0.168: device disconnected [ 2198.200218][ T30] audit: type=1400 audit(1767292071.688:59497): avc: denied { read } for pid=2116 comm="syz.3.7114" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2198.225295][ T30] audit: type=1400 audit(1767292071.688:59498): avc: denied { open } for pid=2116 comm="syz.3.7114" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2198.239443][ T5138] Bluetooth: hci3: command tx timeout [ 2198.364686][ T5138] Bluetooth: hci9: unexpected event for opcode 0x2002 [ 2198.419082][T30688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2198.530368][ T2093] chnl_net:caif_netlink_parms(): no params data found [ 2198.532055][T17739] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 2198.745836][T17739] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 2198.755691][T17739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2198.783698][T17739] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2198.806791][T17739] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2198.827271][T17739] usb 10-1: Manufacturer: syz [ 2198.839066][T17739] usb 10-1: config 0 descriptor?? [ 2198.924419][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2198.952334][T29373] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2198.975702][ T2093] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.990392][ T2093] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.997660][ T2093] bridge_slave_0: entered allmulticast mode [ 2199.006075][T17739] rc_core: IR keymap rc-hauppauge not found [ 2199.018685][T17739] Registered IR keymap rc-empty [ 2199.028336][T17739] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2199.048106][ T2093] bridge_slave_0: entered promiscuous mode [ 2199.059723][ T2093] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.071144][T17739] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input121 [ 2199.082959][ T2093] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.093383][ T2093] bridge_slave_1: entered allmulticast mode [ 2199.108569][ T2093] bridge_slave_1: entered promiscuous mode [ 2199.291437][ T116] usb 10-1: USB disconnect, device number 91 [ 2199.301301][ T2093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.322513][ T2093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2199.371719][ T2093] team0: Port device team_slave_0 added [ 2199.379870][ T2093] team0: Port device team_slave_1 added [ 2199.493803][ T2093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2199.501665][ T2093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2199.527859][ T2093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2199.533955][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2199.540680][ T2093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2199.626641][ T2156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2199.635159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.075759][ T2093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.103024][ T2093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2200.114708][ T2156] tipc: New replicast peer: 0.0.0.0 [ 2200.120288][ T2156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.129893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.138673][ T2156] tipc: Enabled bearer , priority 10 [ 2200.173150][ T2093] hsr_slave_0: entered promiscuous mode [ 2200.179411][ T2093] hsr_slave_1: entered promiscuous mode [ 2200.185670][ T2093] debugfs: 'hsr0' already exists in 'hsr' [ 2200.191409][ T2093] Cannot create hsr debugfs directory [ 2200.260394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.269377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.464193][ T5138] Bluetooth: hci3: command tx timeout [ 2200.620050][ T2161] SELinux: policydb string length 0 does not match expected length 8 [ 2200.635641][ T2161] SELinux: failed to load policy [ 2200.966721][ T5138] Bluetooth: hci9: unexpected event for opcode 0x0c05 [ 2201.002585][ T2174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7125'. [ 2201.019429][ T2174] Unknown options in mask b7f2 [ 2201.046464][ T2093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2201.079800][ T2093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2201.274868][ T2166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7125'. [ 2201.302322][ T2093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2201.325622][ T2093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2201.569554][ T2093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2201.612122][ T2093] 8021q: adding VLAN 0 to HW filter on device team0 [ 2201.655326][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.662437][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2201.681037][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.688188][ T8741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2201.788694][ T116] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 2201.909382][ T2198] netlink: 'syz.1.7133': attribute type 1 has an invalid length. [ 2201.963393][ T116] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2201.977050][ T116] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2202.001928][ T116] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2202.022959][ T116] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.038083][ T116] usb 10-1: Product: syz [ 2202.055021][ T116] usb 10-1: Manufacturer: syz [ 2202.062009][ T116] usb 10-1: SerialNumber: syz [ 2202.190210][ T2093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2202.282641][ T2093] veth0_vlan: entered promiscuous mode [ 2202.313673][ T2093] veth1_vlan: entered promiscuous mode [ 2202.362476][ T2093] veth0_macvtap: entered promiscuous mode [ 2202.374732][ T2093] veth1_macvtap: entered promiscuous mode [ 2202.421376][ T2093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2202.505708][ T30] kauditd_printk_skb: 396 callbacks suppressed [ 2202.505723][ T30] audit: type=1400 audit(1767292076.646:59877): avc: denied { prog_load } for pid=2202 comm="syz.5.7134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2202.686854][ T5138] Bluetooth: hci3: command tx timeout [ 2202.914417][ T30] audit: type=1400 audit(1767292076.674:59878): avc: denied { bpf } for pid=2202 comm="syz.5.7134" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2203.169172][ T30] audit: type=1400 audit(1767292076.674:59879): avc: denied { perfmon } for pid=2202 comm="syz.5.7134" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2203.252774][ T2093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2203.315415][ T30] audit: type=1400 audit(1767292076.674:59880): avc: denied { prog_run } for pid=2202 comm="syz.5.7134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2203.350208][ T116] usb 10-1: reset high-speed USB device number 92 using dummy_hcd [ 2203.371063][ C1] net_ratelimit: 9 callbacks suppressed [ 2203.376662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.385265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.403013][ T30] audit: type=1400 audit(1767292076.693:59881): avc: denied { read write } for pid=2189 comm="syz.9.7131" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2203.441042][ T30] audit: type=1400 audit(1767292076.711:59882): avc: denied { open } for pid=2189 comm="syz.9.7131" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2203.495017][ T8400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.539330][ T30] audit: type=1400 audit(1767292076.768:59883): avc: denied { ioctl } for pid=2189 comm="syz.9.7131" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2203.606364][ T8400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.626480][ T30] audit: type=1400 audit(1767292076.805:59884): avc: denied { ioctl } for pid=2189 comm="syz.9.7131" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2203.657702][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.682891][ T8400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.700143][ T30] audit: type=1400 audit(1767292077.020:59885): avc: denied { ioctl } for pid=2189 comm="syz.9.7131" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2203.728274][ T116] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2203.749467][ T8400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2203.815357][ T116] usb 10-1: device firmware changed [ 2203.839139][ T30] audit: type=1400 audit(1767292077.086:59886): avc: denied { ioctl } for pid=2189 comm="syz.9.7131" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2203.899832][ T116] usb 10-1: USB disconnect, device number 92 [ 2204.258255][ T116] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 2204.323540][T17663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2204.345792][T17663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.390725][ T8741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2204.408112][ T8741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.443329][ T116] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2204.464690][ T116] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.483281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.492899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.513328][ T116] usb 10-1: string descriptor 0 read error: -22 [ 2204.563565][ T116] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2204.730379][ T116] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.780221][ T116] usb 10-1: can't set config #3, error -71 [ 2204.812277][ T116] usb 10-1: USB disconnect, device number 93 [ 2205.001241][ T5138] Bluetooth: hci3: command tx timeout [ 2205.348622][T30707] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 2205.469709][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.483879][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.506454][ T2223] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7137'. [ 2205.510186][T30707] usb 3-1: too many configurations: 28, using maximum allowed: 8 [ 2205.543717][T30707] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2205.552505][T30707] usb 3-1: can't read configurations, error -61 [ 2205.594802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.603665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.634043][ T2224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7137'. [ 2205.635989][ T2223] Unknown options in mask b7f2 [ 2205.713073][T30707] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 2205.905265][T30707] usb 3-1: too many configurations: 28, using maximum allowed: 8 [ 2205.930699][T30707] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2205.947987][T30707] usb 3-1: can't read configurations, error -61 [ 2205.969336][T30707] usb usb3-port1: attempt power cycle [ 2206.182586][ T5819] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2206.386061][T30688] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2206.431743][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 2206.450248][ T5819] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2206.461635][ T5819] usb 2-1: config 1 has no interface number 0 [ 2206.488270][ T5819] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2206.498942][ T5819] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2206.518801][ T5819] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2206.538350][ T5819] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2206.706489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.707257][T30707] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 2206.758425][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.760808][T30707] usb 3-1: too many configurations: 28, using maximum allowed: 8 [ 2206.784340][ T5819] usb 2-1: Product: syz [ 2206.784782][T30707] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2206.796211][ T5819] usb 2-1: Manufacturer: syz [ 2206.800914][ T5819] usb 2-1: SerialNumber: syz [ 2206.839188][ T2228] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2206.850579][T30688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2206.866638][ T2228] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2206.874982][T30688] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2206.902519][T30688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2206.906937][T30707] usb 3-1: can't read configurations, error -61 [ 2206.915721][T30688] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2206.930689][T30688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.939775][T30688] usb 4-1: Product: syz [ 2206.948179][T30688] usb 4-1: Manufacturer: syz [ 2206.954333][T30688] usb 4-1: SerialNumber: syz [ 2206.968858][T30688] usb 4-1: config 0 descriptor?? [ 2206.981152][ T2232] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2206.989409][ T2232] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2207.005860][T30688] usb 4-1: ucan: probing device on interface #0 [ 2207.123808][ T2239] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2207.131159][ T2239] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2207.144644][T30707] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2207.179704][T30707] usb 3-1: too many configurations: 28, using maximum allowed: 8 [ 2207.199307][T30707] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2207.224235][T30707] usb 3-1: can't read configurations, error -61 [ 2207.233668][T30707] usb usb3-port1: unable to enumerate USB device [ 2207.268630][T30688] usb 4-1: ucan: device protocol version 1949267045 is not supported [ 2207.277221][T30688] usb 4-1: ucan: probe failed; try to update the device firmware [ 2207.488633][ T116] usb 4-1: USB disconnect, device number 109 [ 2207.579701][ T5819] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2207.600907][ T5819] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2207.612941][ T5819] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2207.650147][ T5819] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2a:6d:33:51:75:54 [ 2207.670519][ T5819] usb 2-1: USB disconnect, device number 119 [ 2207.678110][ T5819] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2207.786189][ T5819] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2207.827698][ T5819] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2207.838797][ T5819] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2207.891926][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 2207.891936][ T30] audit: type=1400 audit(1767292081.678:60067): avc: denied { read write } for pid=29129 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2207.925441][ T30] audit: type=1400 audit(1767292081.707:60068): avc: denied { open } for pid=29129 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2207.978240][ T30] audit: type=1400 audit(1767292081.707:60069): avc: denied { ioctl } for pid=29129 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2208.010686][ T30] audit: type=1400 audit(1767292081.707:60070): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2208.068981][ T30] audit: type=1400 audit(1767292081.735:60071): avc: denied { recv } for pid=17679 comm="kworker/u8:43" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2208.078618][ T2246] netlink: 'syz.9.7144': attribute type 1 has an invalid length. [ 2208.114781][ T30] audit: type=1400 audit(1767292081.828:60072): avc: denied { read write } for pid=30869 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2208.157112][ T2248] netlink: 'syz.3.7145': attribute type 1 has an invalid length. [ 2208.305597][ T30] audit: type=1400 audit(1767292081.828:60073): avc: denied { open } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2208.443406][ T30] audit: type=1400 audit(1767292081.828:60074): avc: denied { ioctl } for pid=30869 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2208.487211][ T30] audit: type=1400 audit(1767292081.837:60075): avc: denied { recv } for pid=5800 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.91 dest=34862 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2208.521631][ T2258] bond4: (slave bridge4): making interface the new active one [ 2208.619914][T17739] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2208.930172][ C1] net_ratelimit: 5 callbacks suppressed [ 2208.930190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.944451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.991856][T30707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2209.017128][ T30] audit: type=1400 audit(1767292081.884:60076): avc: denied { create } for pid=2247 comm="syz.3.7145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2209.039000][ T2258] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 2209.173386][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2209.325918][T17739] usb 2-1: device descriptor read/64, error -71 [ 2209.731806][T17739] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2209.902981][T17739] usb 2-1: device descriptor read/64, error -71 [ 2210.023154][T17739] usb usb2-port1: attempt power cycle [ 2210.041768][ T116] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2210.053485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.061879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.181889][ T116] usb 3-1: device descriptor read/64, error -71 [ 2210.221037][ T2206] Set syz1 is full, maxelem 65536 reached [ 2210.302687][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.338335][ T2278] comedi comedi0: pcl812: I/O port conflict (0x3,16) [ 2210.345990][ T2279] comedi comedi0: pcl812: I/O port conflict (0x3,16) [ 2210.359410][ T5138] Bluetooth: hci8: Malformed Event: 0x2f [ 2210.365215][ T5138] Bluetooth: hci8: Malformed Event: 0x2f [ 2210.394743][T17739] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2210.416833][T17739] usb 2-1: device descriptor read/8, error -71 [ 2210.440046][ T116] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2210.587010][ T116] usb 3-1: device descriptor read/64, error -71 [ 2210.683723][T17739] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2210.705198][ T116] usb usb3-port1: attempt power cycle [ 2210.715730][T17739] usb 2-1: device descriptor read/8, error -71 [ 2210.833251][T17739] usb usb2-port1: unable to enumerate USB device [ 2211.068150][ T116] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2211.078770][T29447] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2211.089893][ T116] usb 3-1: device descriptor read/8, error -71 [ 2211.153671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2211.162106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2211.239141][T29447] usb 4-1: Using ep0 maxpacket: 32 [ 2211.253527][T29447] usb 4-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 2211.280477][T29447] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2211.300899][T29447] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=f0.e3 [ 2211.317092][T29447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.326881][T29447] usb 4-1: Product: syz [ 2211.331229][T29447] usb 4-1: Manufacturer: syz [ 2211.336381][T29447] usb 4-1: SerialNumber: syz [ 2211.343584][T29447] usb 4-1: config 0 descriptor?? [ 2211.356719][ T116] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2211.378586][ T116] usb 3-1: device descriptor read/8, error -71 [ 2211.498819][ T116] usb usb3-port1: unable to enumerate USB device [ 2211.602808][T29447] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 2211.644953][ T2288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7158'. [ 2211.765935][T29447] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.777249][T29447] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2211.786511][T29447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.796978][T29447] usb 10-1: config 0 descriptor?? [ 2212.021179][T29447] usbhid 10-1:0.0: can't add hid device: -71 [ 2212.027968][T29447] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2212.038628][T29447] usb 10-1: USB disconnect, device number 94 [ 2212.490383][T29447] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 2212.549874][ T2293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7160'. [ 2212.684108][T29447] usb 10-1: Using ep0 maxpacket: 16 [ 2212.704790][T29447] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.716691][T29447] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2212.732833][T29447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.880129][T29447] usb 10-1: config 0 descriptor?? [ 2213.131387][ T116] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2213.292519][ T116] usb 2-1: Using ep0 maxpacket: 8 [ 2213.299808][ T116] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.310054][ T116] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2213.322120][T29447] kye 0003:0458:5016.005F: control desc unexpectedly large [ 2213.330898][ T116] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 2213.341727][T29447] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.005F/input/input122 [ 2213.354422][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.363493][ T116] usb 2-1: Product: syz [ 2213.364930][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 2213.364942][ T30] audit: type=1400 audit(1767292086.804:60315): avc: denied { read } for pid=5172 comm="acpid" name="mouse1" dev="devtmpfs" ino=4667 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.368737][ T116] usb 2-1: Manufacturer: syz [ 2213.396861][ T30] audit: type=1400 audit(1767292086.804:60316): avc: denied { read open } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4667 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.403574][T29447] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.005F/input/input123 [ 2213.439939][ T116] usb 2-1: SerialNumber: syz [ 2213.441784][ T30] audit: type=1400 audit(1767292086.879:60317): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4667 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.478084][ T30] audit: type=1400 audit(1767292086.907:60318): avc: denied { ioctl } for pid=2292 comm="syz.1.7160" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.504665][T29447] kye 0003:0458:5016.005F: input,hiddev1,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0 [ 2213.505560][ T30] audit: type=1400 audit(1767292086.907:60319): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=4668 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.554194][ T30] audit: type=1400 audit(1767292086.907:60320): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4668 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.579172][ T30] audit: type=1400 audit(1767292086.907:60321): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4668 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.795416][ T30] audit: type=1400 audit(1767292086.907:60322): avc: denied { ioctl } for pid=2292 comm="syz.1.7160" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2214.489259][ C1] net_ratelimit: 8 callbacks suppressed [ 2214.489278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2214.503351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2214.865869][ T116] gspca_main: spca501-2.14.0 probing 0000:0000 [ 2214.876569][ T116] gspca_spca501: reg write: error -71 [ 2214.881971][ T116] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 2214.890454][ T116] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 2215.611785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.622740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.914778][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.928148][T30689] usb 4-1: USB disconnect, device number 110 [ 2215.968647][ T116] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 2215.999302][ T2305] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7163'. [ 2216.114109][ T2304] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7163'. [ 2216.712794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.721354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.992799][ T30] audit: type=1400 audit(1767292086.973:60323): avc: denied { prog_load } for pid=2285 comm="syz.9.7157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2217.017988][ T30] audit: type=1400 audit(1767292086.973:60324): avc: denied { bpf } for pid=2285 comm="syz.9.7157" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2217.083783][T17739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.195340][T29447] usb 10-1: USB disconnect, device number 95 [ 2217.210232][ T116] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2217.221874][ T116] usb 2-1: USB disconnect, device number 124 [ 2217.439516][ T2325] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 2217.764306][ T2328] [ 2217.766655][ T2328] ====================================================== [ 2217.773648][ T2328] WARNING: possible circular locking dependency detected [ 2217.780641][ T2328] syzkaller #0 Tainted: G L [ 2217.786591][ T2328] ------------------------------------------------------ [ 2217.793579][ T2328] syz.5.7164/2328 is trying to acquire lock: [ 2217.799526][ T2328] ffff888068952088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 2217.808809][ T2328] [ 2217.808809][ T2328] but task is already holding lock: [ 2217.816143][ T2328] ffff88807bbae468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2217.824411][ T2328] [ 2217.824411][ T2328] which lock already depends on the new lock. [ 2217.824411][ T2328] [ 2217.825336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.834788][ T2328] [ 2217.834788][ T2328] the existing dependency chain (in reverse order) is: [ 2217.834796][ T2328] [ 2217.834796][ T2328] -> #2 (&pipe->mutex){+.+.}-{4:4} [ 2217.845978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.851853][ T2328] : [ 2217.851861][ T2328] __mutex_lock+0x1aa/0x1ca0 [ 2217.874614][ T2328] anon_pipe_write+0x15d/0x1bd0 [ 2217.879966][ T2328] __kernel_write_iter+0x720/0xb10 [ 2217.885592][ T2328] __kernel_write+0xf5/0x140 [ 2217.890676][ T2328] autofs_notify_daemon+0x4db/0xd60 [ 2217.896373][ T2328] autofs_wait+0x10f3/0x1ac0 [ 2217.901471][ T2328] autofs_mount_wait+0x132/0x3c0 [ 2217.906904][ T2328] autofs_d_automount+0x4b2/0x960 [ 2217.912421][ T2328] __traverse_mounts+0x1b9/0x830 [ 2217.917857][ T2328] step_into_slowpath+0x772/0xf50 [ 2217.923375][ T2328] path_lookupat+0x627/0xc40 [ 2217.928469][ T2328] filename_lookup+0x224/0x5f0 [ 2217.933731][ T2328] vfs_statx+0x101/0x3f0 [ 2217.938471][ T2328] __do_sys_newstat+0xa8/0x130 [ 2217.943737][ T2328] do_syscall_64+0xcd/0xf80 [ 2217.948738][ T2328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.955138][ T2328] [ 2217.955138][ T2328] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 2217.962834][ T2328] __mutex_lock+0x1aa/0x1ca0 [ 2217.967927][ T2328] autofs_notify_daemon+0x4a6/0xd60 [ 2217.973619][ T2328] autofs_wait+0x10f3/0x1ac0 [ 2217.978701][ T2328] autofs_mount_wait+0x132/0x3c0 [ 2217.984139][ T2328] autofs_d_automount+0x4b2/0x960 [ 2217.989655][ T2328] __traverse_mounts+0x1b9/0x830 [ 2217.995092][ T2328] step_into_slowpath+0x772/0xf50 [ 2218.000611][ T2328] path_lookupat+0x627/0xc40 [ 2218.005698][ T2328] filename_lookup+0x224/0x5f0 [ 2218.011651][ T2328] kern_path+0x35/0x50 [ 2218.016221][ T2328] lookup_bdev+0xd8/0x280 [ 2218.021046][ T2328] resume_store+0x1d6/0x490 [ 2218.026060][ T2328] kobj_attr_store+0x58/0x80 [ 2218.031147][ T2328] sysfs_kf_write+0xf2/0x150 [ 2218.036228][ T2328] kernfs_fop_write_iter+0x3af/0x570 [ 2218.042013][ T2328] vfs_write+0x7d3/0x11d0 [ 2218.046840][ T2328] ksys_write+0x12a/0x250 [ 2218.051664][ T2328] do_syscall_64+0xcd/0xf80 [ 2218.056671][ T2328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2218.063056][ T2328] [ 2218.063056][ T2328] -> #0 (&of->mutex){+.+.}-{4:4}: [ 2218.070231][ T2328] __lock_acquire+0x1669/0x2890 [ 2218.075575][ T2328] lock_acquire+0x179/0x330 [ 2218.080573][ T2328] __mutex_lock+0x1aa/0x1ca0 [ 2218.085658][ T2328] kernfs_fop_write_iter+0x28f/0x570 [ 2218.091462][ T2328] iter_file_splice_write+0xa24/0x12b0 [ 2218.097510][ T2328] do_splice+0x1478/0x1fc0 [ 2218.102429][ T2328] __do_splice+0x32a/0x360 [ 2218.107355][ T2328] __x64_sys_splice+0x187/0x250 [ 2218.112707][ T2328] do_syscall_64+0xcd/0xf80 [ 2218.117709][ T2328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2218.124099][ T2328] [ 2218.124099][ T2328] other info that might help us debug this: [ 2218.124099][ T2328] [ 2218.134310][ T2328] Chain exists of: [ 2218.134310][ T2328] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 2218.134310][ T2328] [ 2218.146698][ T2328] Possible unsafe locking scenario: [ 2218.146698][ T2328] [ 2218.154129][ T2328] CPU0 CPU1 [ 2218.159464][ T2328] ---- ---- [ 2218.164799][ T2328] lock(&pipe->mutex); [ 2218.168925][ T2328] lock(&sbi->pipe_mutex); [ 2218.175917][ T2328] lock(&pipe->mutex); [ 2218.182563][ T2328] lock(&of->mutex); [ 2218.186514][ T2328] [ 2218.186514][ T2328] *** DEADLOCK *** [ 2218.186514][ T2328] [ 2218.194719][ T2328] 2 locks held by syz.5.7164/2328: [ 2218.199806][ T2328] #0: ffff8880358a6420 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 2218.208840][ T2328] #1: ffff88807bbae468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2218.217545][ T2328] [ 2218.217545][ T2328] stack backtrace: [ 2218.223429][ T2328] CPU: 0 UID: 0 PID: 2328 Comm: syz.5.7164 Tainted: G L syzkaller #0 PREEMPT(full) [ 2218.223449][ T2328] Tainted: [L]=SOFTLOCKUP [ 2218.223453][ T2328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2218.223461][ T2328] Call Trace: [ 2218.223465][ T2328] [ 2218.223470][ T2328] dump_stack_lvl+0x116/0x1f0 [ 2218.223488][ T2328] print_circular_bug+0x275/0x340 [ 2218.223503][ T2328] check_noncircular+0x146/0x160 [ 2218.223517][ T2328] __lock_acquire+0x1669/0x2890 [ 2218.223531][ T2328] ? __do_splice+0x32a/0x360 [ 2218.223549][ T2328] ? do_syscall_64+0xcd/0xf80 [ 2218.223564][ T2328] lock_acquire+0x179/0x330 [ 2218.223577][ T2328] ? kernfs_fop_write_iter+0x28f/0x570 [ 2218.223595][ T2328] ? __pfx___might_resched+0x10/0x10 [ 2218.223608][ T2328] __mutex_lock+0x1aa/0x1ca0 [ 2218.223623][ T2328] ? kernfs_fop_write_iter+0x28f/0x570 [ 2218.223641][ T2328] ? kernfs_fop_write_iter+0x28f/0x570 [ 2218.223658][ T2328] ? __asan_memcpy+0x3c/0x60 [ 2218.223670][ T2328] ? _copy_from_iter+0x161/0x16c0 [ 2218.223687][ T2328] ? __pfx___mutex_lock+0x10/0x10 [ 2218.223709][ T2328] ? __pfx__copy_from_iter+0x10/0x10 [ 2218.223726][ T2328] ? trace_kmalloc+0x2b/0xb0 [ 2218.223741][ T2328] ? __kmalloc_noprof+0x35d/0x910 [ 2218.223759][ T2328] ? kernfs_fop_write_iter+0x237/0x570 [ 2218.223777][ T2328] ? kernfs_fop_write_iter+0x28f/0x570 [ 2218.223794][ T2328] kernfs_fop_write_iter+0x28f/0x570 [ 2218.223812][ T2328] iter_file_splice_write+0xa24/0x12b0 [ 2218.223833][ T2328] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2218.223855][ T2328] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2218.223872][ T2328] do_splice+0x1478/0x1fc0 [ 2218.223889][ T2328] ? __lock_acquire+0x436/0x2890 [ 2218.223904][ T2328] ? __pfx_do_splice+0x10/0x10 [ 2218.223920][ T2328] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 2218.223936][ T2328] ? find_held_lock+0x2b/0x80 [ 2218.223954][ T2328] __do_splice+0x32a/0x360 [ 2218.223971][ T2328] ? __pfx___do_splice+0x10/0x10 [ 2218.223987][ T2328] ? __x64_sys_openat+0xf0/0x210 [ 2218.224000][ T2328] __x64_sys_splice+0x187/0x250 [ 2218.224018][ T2328] do_syscall_64+0xcd/0xf80 [ 2218.224033][ T2328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2218.224045][ T2328] RIP: 0033:0x7fd6d598f749 [ 2218.224055][ T2328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2218.224067][ T2328] RSP: 002b:00007fd6d3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2218.224078][ T2328] RAX: ffffffffffffffda RBX: 00007fd6d5be6090 RCX: 00007fd6d598f749 [ 2218.224086][ T2328] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 2218.224092][ T2328] RBP: 00007fd6d5a13f91 R08: 000000000000bfd1 R09: 0000000000000000 [ 2218.224099][ T2328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2218.224107][ T2328] R13: 00007fd6d5be6128 R14: 00007fd6d5be6090 R15: 00007ffdc1e2f468 [ 2218.224118][ T2328] [ 2218.532053][T29298] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2218.571899][T29298] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2218.584553][T29298] usb 6-1: USB disconnect, device number 66 [ 2218.711857][T22861] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2218.809275][ T1876] PM: hibernation: Basic memory bitmaps freed [ 2218.816196][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 2218.816211][ T30] audit: type=1400 audit(1767292091.893:60417): avc: denied { recv } for pid=1873 comm="syz.0.7057" saddr=172.20.20.51 src=20003 daddr=172.20.20.51 dest=20003 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2218.850858][T22861] usb 3-1: device descriptor read/64, error -71 [ 2218.851228][ T30] audit: type=1400 audit(1767292091.940:60418): avc: denied { ioctl } for pid=2319 comm="syz.5.7164" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2218.947124][T29298] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 2219.107454][T22861] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2219.119482][T29298] usb 6-1: not running at top speed; connect to a high speed hub [ 2219.127981][T29298] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 2219.136116][T29298] usb 6-1: config 95 has no interface number 0 [ 2219.142496][T29298] usb 6-1: config 95 interface 1 has no altsetting 0 [ 2219.151214][T29298] usb 6-1: string descriptor 0 read error: -22 [ 2219.157921][T29298] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 2219.167009][T29298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.176635][ T30] audit: type=1400 audit(1767292092.239:60419): avc: denied { ioctl } for pid=2319 comm="syz.5.7164" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2219.257136][T22861] usb 3-1: device descriptor read/64, error -71 [ 2219.375308][T22861] usb usb3-port1: attempt power cycle [ 2219.395240][ T30] audit: type=1400 audit(1767292092.436:60420): avc: denied { map_create } for pid=2319 comm="syz.5.7164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2219.414686][ T30] audit: type=1400 audit(1767292092.436:60421): avc: denied { bpf } for pid=2319 comm="syz.5.7164" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2219.436406][ T30] audit: type=1400 audit(1767292092.464:60422): avc: denied { name_bind } for pid=2319 comm="syz.5.7164" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2219.459550][ T30] audit: type=1400 audit(1767292092.464:60423): avc: denied { recv } for pid=2319 comm="syz.5.7164" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2219.480511][ T30] audit: type=1400 audit(1767292092.464:60424): avc: denied { ioctl } for pid=2319 comm="syz.5.7164" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2219.505628][ T30] audit: type=1400 audit(1767292092.501:60425): avc: denied { ioctl } for pid=2333 comm="syz.2.7168" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2219.634889][ T30] audit: type=1400 audit(1767292092.669:60426): avc: denied { prog_load } for pid=2319 comm="syz.5.7164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2219.738226][T22861] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2219.760002][T22861] usb 3-1: device descriptor read/8, error -71 [ 2220.026814][T22861] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2220.048251][ C1] net_ratelimit: 5 callbacks suppressed [ 2220.048264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2220.048555][T22861] usb 3-1: device descriptor read/8, error -71 [ 2220.054153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2220.176623][T22861] usb usb3-port1: unable to enumerate USB device [ 2220.743514][T30689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2220.759907][T22861] usb 6-1: USB disconnect, device number 67 [ 2221.160266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.168668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.855232][T29298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.271876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.280206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.443194][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.967230][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.618044][ C1] net_ratelimit: 6 callbacks suppressed [ 2225.618061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.632033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.693681][T22861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2226.291812][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2226.719241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2226.727647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2227.406925][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog