last executing test programs: 12m48.267909538s ago: executing program 2 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x101940, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r2, @ANYRES64=r2, @ANYRES8=0x0, @ANYRES32=r3, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r5, 0x5453, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40001) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000000000000000000000000000080019"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 12m47.336639003s ago: executing program 2 (id=358): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000700)={0x20, 0x1, 0x6, "a3639dfe8ec5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x20, 0x15, 0x1a, "bc37df7f295ac56b5b09ff6a51df20cc105aa3a07c951678cb2a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6a}, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x8, {0x160, 0x0, [0x0]}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0xfe}, &(0x7f0000000380)={0x40, 0x9, 0x1}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "429c"}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x3}, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x19, 0x2, "ff42"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x4}, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12m43.425337748s ago: executing program 2 (id=372): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010400442139d5aa2e8b2d"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840), 0x0) io_uring_setup(0x7625, &(0x7f00000003c0)={0x0, 0x9678, 0x2, 0x200000, 0xa9}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$netlink(0x10, 0x3, 0x6) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904"], 0x0) 12m38.898990393s ago: executing program 2 (id=385): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000029c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0xffffffff, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xbc8c, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x10001, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x227f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0xfffe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xb87f, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xd0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x0, 0x80]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x5, 0x7fffffff, 0x5, 0x8, 0x0, 0x1, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x4, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x402, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x3, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x0, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x8, 0x5, 0x7, 0x6, 0x0, 0x6, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0xffffc848, 0x5, 0xa, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x8, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x3, 0xffff, 0x4, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x9, 0x7, 0x3, 0xfffffff4, 0x8, 0x4, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x8, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0xc, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0x3845, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x2000006, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000201}, {0x4, 0x2, 0x1, 0xa, 0x1fb, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="f00d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000200)="52832b6f8b5c5d87f125dc135eb93ce0213494818d260380430b8e0ee8448b354dc8ed5c4a3c8e888a171776df84da42fda6660e73802b407e9e0d4d80248c80d0519be6a8bbac2f04873135f5f0c2602c27256aeee1d67a2b4b5a10b04333c03779f45c41526ca494321ab426e19f221df8cb6e09cb53b396640579456842", 0x7f}, {&(0x7f0000000280)="df1704671882543fcfb5f887490a791c92939cf095db2ee50dc30ea786a4d9997b31f39a0735f9ea5ef381b1c0b8dd56072e91491413b692efe146ca19777acc3f58c5bfc34a1ca1c7003cfbdfd0b462e14cfedb0a3e595d794718734b23ee8fc11295ccab16d03a43cd98edfbf81d31710d4b832ee6", 0x76}, {&(0x7f0000000300)="a9435171a84845f052ee8fc565940e599160aaceddfd105c3a5892dda2c9a8592213b050e794121dc3373ac815c27ab02e8f721eb13dd29729d4ca4400a5c7697fd45edf0bf13b0320567a6dd02e1590fa78330c90ca976d654e2b1d13b5d43ba27854c12a32be5d769af0e6590bbb79f68833fef151b38fab6352be4fbb6204c188a58aad6f4c7db853be620bd7ee6ba02badb406481e385fae4f402d6afc09dcd5b1cb52034751940f508bf5ec724cfb23d67512afc3e006fc8a428656b0ce44cbbcfda44cb89227da9c52d44ca3", 0xcf}, {&(0x7f0000000400)="7b8757f5a4aae50fa32a845e4712715d538c96f0272e1afb761b674af7812e669707e62525681804", 0x28}], 0x4) write(r4, &(0x7f0000000180)='b', 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000a40)={0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="802117000000170b56cfb258f408f07f07ee01000000e560f7bdc3ab86"], &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000c00)={0x60, 0x16, 0x82, "be3b179dfed968cf2c15368dc3f8e65e3c5d319a5b094d822dcb6644acdd210dc9bccc91939a72673603809fce1f8547ab4e3bff3b7bfdd447fb50679f976de7a19dd62cba3895f1d1e33eaa559153996569cf72f011bce59fbe5cfdc1197476af49852d1cedc7b0894a365a8fe121f38834b1ecfb6a5720682b13724b284b75ebf1"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x10}}) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x9, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 12m37.401385202s ago: executing program 2 (id=391): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000084000000000000000700030006000004200000000000000084000000020000", @ANYRES32=0x0, @ANYBLOB="18"], 0x50, 0x4014}, 0x2c0408d0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000080)={0xc}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000084000000000000000700030006000004200000000000000084000000020000", @ANYRES32=0x0, @ANYBLOB="18"], 0x50, 0x4014}, 0x2c0408d0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000080)={0xc}) (async) 12m36.948757564s ago: executing program 2 (id=396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095000000000000003f0c54cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752688300000000dbc2777df150b7cdd77b85b941092314fd085f1b1b2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c830fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b8498aa787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28179f09943b1b0452d1b72183aacf4a84f9130b701b81675dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fd80f3876acb45821d0c48fb657c29b309c73f0977e7cde65a89d9458aac2795b2b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d2665016ac59dd20fde0745db06753a7ac7fe13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2084bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304fff0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bdb539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572ac45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af00200f900cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee78ebf9ef40662d7836961a8de6f2d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408816eae08cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb7819441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005391577f480000ea65559eb00e2b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e710d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d4ac534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f0300000000000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca396eeec1f53bb0bc1bc9ce45bb671f2dea5eafc74551cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b847e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fde46ad265983eb1b1c6adb1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0c5605000063902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f617396c18cc7130000fc000000210000006e00002000000000000027c9a46157a3ffff6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4472b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc4c860495b240e80063bde261fd000000000072f6df342f3e7071e28ef6806b6b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2b3a113e47edf76f7d116d2b0976cf2ec447c0309316d1dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a80500e92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949c68b7a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273061fc5c0e0a33db7f2d43ea8086cf059f40fa2645944cd9e7f2e6ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858e13e8f0ba9d1dec469dc71e998d99ebf7cfda638d7ce859acfec3f14ec2aa98b53cd68a0d99d62a5620b7c0f61dc386c449664a94bca09859a35760b7b818087347697c239990daec8384a12d973d5470efe5dae887be689c6b1551f4c5a649d9dc563d7049c91453facecbee789a1d5a4896b2b7bec3ec5e60c4916e5561888502a12f4985f9c7dab41cbf31c26cd12d5116de95b521a57408adbbac278be82fef3f9d8a51385b376b57e20be83e7b27460729a626250ccd7982eba588f86195e15119eca569bebba8514e5bfcbe51f1a628793b4ed4424c95a731628fa38e167b79affcd50b561d3a9cb4bea872d9e5a06a4201fd09eecfe283854837a65ecf8cd6cdaad4bf223db323de9d4854d66d324a0d125e3ebe2ed3c78e47392962860de6bb86759406e74335443407d9ee7d4a4430b60b6ef369604e1282b0c1aa8d4b18e8db32a0eeaaabc7f7b5c49bd88cfe860f69f5510179d867970f975169591908282cd4367f82e62e3fa37876f30934c23dc2d02a0c25839f008ec099503c8d1b3169aa9c5a7db7f0116d203ac6503596c3a5b063c28f84c9eb4200000000000000000000000000000000000009f491210abc6ed14c49e22898d449d435f7e0e94a6b8b37924f725c47d17471ea258133681ff4dca50beba02eacfe0910c1676bdff06e737e0d12878ab5366985c0e8245864b3abd02e81ba0638e4de4b2f62098108535546b58ae8baee1fcc301a3b4101588e60f6f7678b82aa80e37832a2f49744d23e3a11bd2282ec7ff3400e8748f91e247b80e1b65400"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = dup(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r4, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000480)={@broadcast, @empty, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x16, 0x3, 0x0, 0x0, "c6a8659a105198189d872d7d7cfa7d6869fcc4030b1a63908aedec905ee3e0e4e85407809b1d030f76341e03d587eed2b5c389dc6ae13bd77b952d8b19d1a938"}}}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1000000000000000, 0x7, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x200000010000, 0x6, 0x5, 0x20000001], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m21.376873316s ago: executing program 32 (id=396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = dup(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r4, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000480)={@broadcast, @empty, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x16, 0x3, 0x0, 0x0, "c6a8659a105198189d872d7d7cfa7d6869fcc4030b1a63908aedec905ee3e0e4e85407809b1d030f76341e03d587eed2b5c389dc6ae13bd77b952d8b19d1a938"}}}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1000000000000000, 0x7, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x200000010000, 0x6, 0x5, 0x20000001], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m16.183375548s ago: executing program 0 (id=687): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 11m15.985345448s ago: executing program 0 (id=689): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0xc0c0128e, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff02000000000000000000000000000100000000000000000000ffff000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000010000000000000000000000000ff07000000000000000000000002000000000000000000000100000000000000070000000000000000000000000000000000040000000000e80a0000000000000000000002000200700000000000000014000e006401010100"/188], 0x104}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0xd, "e80ee304ecb784ec4655260cec"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x70, 0x29, 0x36, {0x5e, 0xa, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x158}}], 0x1, 0x810) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r9, 0x11, 0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 11m15.438247415s ago: executing program 0 (id=691): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002180)={0x5, 0x1ff, {0xffffffffffffffff}, {}, 0xc}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002340)) getgroups(0x2, &(0x7f0000002380)=[0xffffffffffffffff, 0xffffffffffffffff]) lstat(0x0, &(0x7f0000002480)) stat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002800)) r0 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x0, 0x22, 0x4e, {0x4e, 0xc, "a76a0c68af0f8d34fd4b0e88c614453f1a2dd34822d6b2ceffe21c53f5e74a061eed0a887f3c030e1494d31b596becfe6e3cb7d953e8f07c8176ffb9f24ab94f08ffdb15d588d168d6bc2d26"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f1f20753e1e33cd61000000050302030300"/28], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x71, 0x2, 0x8, "cf9b2114", "048859f6"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xa, 0x5, 0x8, 0x7, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x0, 0x14}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4}, &(0x7f0000000a80)=ANY=[@ANYBLOB="20000400000000000800312a117cf6d5a26404d716897fa7ebd9322b7c859901b79b8f25c88ee4a62e1a2ef8"], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "411f"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d121"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) io_setup(0x7, &(0x7f0000004200)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 11m12.314757537s ago: executing program 0 (id=701): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_clone(0x4200, &(0x7f00000003c0)="fe16b22896e0ae3ea27ce84ddb9dde984f767aebc90a988c403eeaeb75a691eba613ba90f87af4094fbc7c79d3be7e30b75411e48a4d106adeecb7a2a67620d70d3349f587b9d77f8514439026577637f3513a3b7967c6fdb13daa8d3ed470a3479bb335267fb40f1d2e6a0ba7c10b3e0de9485e9342749e5122c872f258f797679a98", 0x83, &(0x7f00000002c0), &(0x7f0000000480), &(0x7f00000005c0)="80f3ff0e949d941819829cc6b72eae775556026c112ac043ff9cbb00d9c6fbb4847447dca6b8befcec7e7e9a457447141ed500eedfb6a4b6f622ac75355a4f33fcab2b60ef2eca4ece90df17b7e680753eb24512ce73fac3b9f522fd") kcmp(r1, 0x0, 0x6, r0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delchain={0x24, 0x65, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x8}, {0xa, 0xf}, {0x4, 0x5}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6020}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1001, 0x24ff87199961d6af, 0xdcf, 0x4004, 0xb, 0xdc1, 0x0, 0x0, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x9, {0x20000000000000, 0x0, 0x0, {0x5, 0xfffffffffffffffc, 0x15, 0x80000001, 0x0, 0xa0, 0x9e9, 0x0, 0xb877, 0xc000, 0x7, 0x0, 0xee01, 0x3d, 0x86}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) getpeername(r3, &(0x7f0000000640)=@ax25={{0x3, @default}, [@rose, @null, @bcast, @rose, @bcast, @remote, @remote, @bcast]}, &(0x7f00000004c0)=0x80) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r6, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000380), 0x1000a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000040)={r11, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={r11, @in6={{0xa, 0x4e22, 0xff, @private1, 0x40}}, 0x5, 0xac9, 0xffff, 0x104, 0x90, 0x6, 0x2a}, &(0x7f0000000100)=0x9c) fallocate(r8, 0x0, 0xeffb, 0x9) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x808010, &(0x7f0000000380)=ANY=[@ANYBLOB='nr_ocks=t,\x00\x00\x00']) 11m10.111309535s ago: executing program 0 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xffff, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x800, @none, 0x69, 0x1}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380), 0x2, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r7 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000440)={0x0, @bt={0x5, 0x80, 0x1, 0x1, 0x3a5aacfc, 0x3, 0x800, 0x1000, 0x7, 0x8, 0x0, 0x1, 0x1, 0x0, 0x16, 0x10, {0x3, 0xb}, 0x6, 0x80}}) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r9, &(0x7f0000000340), 0x8) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='+\bPu '], 0x5) 11m9.783539403s ago: executing program 0 (id=717): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000000000000000000000009c19f7779ba5df72f0000000e0100000000000000000000000000000d02000000000000000000000d0000000000000000000000020300ffff200000000000005f0000"], 0x0, 0x61}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12011003a8aa4140720500a9d78187711c72b91ac9d69609021b001109000009090440704e634d139d3c900100"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x8, 0x200000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000700)={0x53, 0xfffffffffffffffc, 0x17b, 0xa, @buffer={0x0, 0x82, &(0x7f0000000440)=""/130}, &(0x7f00000007c0)="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", &(0x7f0000000280)=""/93, 0x2, 0x0, 0x5, &(0x7f0000000600)}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f00000002c0)) r3 = accept(r2, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xf0fe, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}], 0x20}}], 0x1, 0x9d1157c41ea9e7ea) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b40)={0x188, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "1db4ffdab247ee366b995436b46cf74234ba8d0df5251f9fcf4eb4ae7afee7314b9de57de65f152a9595b94f7d5ac1cbdbcb500726af47becfd51c0456776be7433bd7f0b7d4cbf0e7736df7c04062a0f2a9fa99f4a75ecefd0f488645f369773bc17e49c2805749bc92ddbdf68af03bb91acf904bee1522f8428f9b5f60bd199de6dc1190841f0cb2da59a1afb8692c03e8f1b809be456a8a3d5ce93321af99be3ad89723cc5654da9c0667c78a92b73388fca4bdf4ffdf4346d81bc74164ff249de842bfc32343415ed1fc1170283e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d30}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$*\x00'}]}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000580)="05ac6168d1a5f74beadcff4bae8a1da7033748f0891eb0bf015a15425c5a07f9267e93f0370b7c15840ca1c5176509099c5cf0d32b18ed9a1a8712254fda1bd75e947f7b26caccee29400f8483b8f45409ab02d61d3ff465b5e9b4cc09e7e391f978dbbfc09d287987cfd936a68da017474a7ba039d18a023ef19c24b7b0464254a74dfdbd5161d830568ab8ce61a002e01ff1f6fec453", 0x0}, 0x4c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg\x00', {0x2}, 0x5}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB='mpol=prefer:0,obj']) socket$nl_netfilter(0x10, 0x3, 0xc) 11m9.686940887s ago: executing program 33 (id=717): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000000000000000000000009c19f7779ba5df72f0000000e0100000000000000000000000000000d02000000000000000000000d0000000000000000000000020300ffff200000000000005f0000"], 0x0, 0x61}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12011003a8aa4140720500a9d78187711c72b91ac9d69609021b001109000009090440704e634d139d3c900100"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x8, 0x200000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000700)={0x53, 0xfffffffffffffffc, 0x17b, 0xa, @buffer={0x0, 0x82, &(0x7f0000000440)=""/130}, &(0x7f00000007c0)="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", &(0x7f0000000280)=""/93, 0x2, 0x0, 0x5, &(0x7f0000000600)}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f00000002c0)) r3 = accept(r2, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xf0fe, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}], 0x20}}], 0x1, 0x9d1157c41ea9e7ea) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b40)={0x188, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "1db4ffdab247ee366b995436b46cf74234ba8d0df5251f9fcf4eb4ae7afee7314b9de57de65f152a9595b94f7d5ac1cbdbcb500726af47becfd51c0456776be7433bd7f0b7d4cbf0e7736df7c04062a0f2a9fa99f4a75ecefd0f488645f369773bc17e49c2805749bc92ddbdf68af03bb91acf904bee1522f8428f9b5f60bd199de6dc1190841f0cb2da59a1afb8692c03e8f1b809be456a8a3d5ce93321af99be3ad89723cc5654da9c0667c78a92b73388fca4bdf4ffdf4346d81bc74164ff249de842bfc32343415ed1fc1170283e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d30}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$*\x00'}]}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000580)="05ac6168d1a5f74beadcff4bae8a1da7033748f0891eb0bf015a15425c5a07f9267e93f0370b7c15840ca1c5176509099c5cf0d32b18ed9a1a8712254fda1bd75e947f7b26caccee29400f8483b8f45409ab02d61d3ff465b5e9b4cc09e7e391f978dbbfc09d287987cfd936a68da017474a7ba039d18a023ef19c24b7b0464254a74dfdbd5161d830568ab8ce61a002e01ff1f6fec453", 0x0}, 0x4c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg\x00', {0x2}, 0x5}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB='mpol=prefer:0,obj']) socket$nl_netfilter(0x10, 0x3, 0xc) 7m24.227113693s ago: executing program 5 (id=1580): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40200, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10b301) ioctl$USBDEVFS_RESET(r6, 0x5514) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, {0x5, 0x5}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', r9, 0x700, 0x20, 0x2, 0x7fff, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x2a, [@broadcast, @remote, @local, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@loopback, 0x2}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdd, [@broadcast]}]}}}}}) mknodat$null(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xc000, 0x103) 7m22.447136549s ago: executing program 5 (id=1586): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) (async) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x48, &(0x7f0000000000)=0x1, 0x0, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x5, 0x17, 0x1, 0xffffffff, 0x8, 0x5, 0x6}, 0x9c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet(0x2, 0x80000, 0x7) (async) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = gettid() sched_setscheduler(r5, 0x6, &(0x7f0000000180)=0x8) (async) connect$unix(r4, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x7fffffff) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000002c0)={{0x1, 0x8, 0x2, 0x5}, 'syz0\x00', 0x4c}) (async) preadv2(r2, &(0x7f0000000540)=[{&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/170, 0xaa}], 0x3, 0x400, 0x3, 0x13) (async) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000580)=0x1, 0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000005c0)={0x0, r0, 'id1\x00'}) ioctl$SIOCNRDECOBS(r8, 0x89e2) (async) get_robust_list(r5, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000680)={&(0x7f0000000640)}, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)}}, &(0x7f00000007c0)=0x18) fcntl$setsig(r6, 0xa, 0x36) (async) ptrace$ARCH_SET_CPUID(0x1e, r5, 0x1, 0x1012) (async) r9 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) poll(&(0x7f0000000800)=[{r2, 0x8}, {r2, 0x4}, {r3, 0x300}, {r8, 0x1000}, {r9, 0x2080}], 0x5, 0x9) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000840)={'\x00', 0x7f, 0x8, 0x1020000, 0x836, 0x9, r5}) get_robust_list(r10, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) (async) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r8) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) (async) ptrace$setopts(0x4206, r5, 0x7fffffffffffffff, 0x61) 7m22.284306251s ago: executing program 5 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad03010000000000bf000000000000006916a00000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 7m22.047108955s ago: executing program 5 (id=1590): fsopen(&(0x7f0000000100)='exfat\x00', 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peek(0x3, r0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000010000000100000044040000148a030021d1848e6135e8a45ec56203e3b4dd2cb584040098c0076faa6c37981a61661f1b662e5da9e3bfa2ea35f4574ed425943e9ad33bc7d766344f4d5aca17ca111885fdddb8aa409270ee2575debfdef413ca73da1971c366837a13700d3d7347184cfe943c3c28252736fb7ed02222b30a8efa9a9cb2d50f987aef5ea3146ab0357e965a6c334bafcbe0b4ab0faaa2916aefd1acd3c63468e8d480ea4c91f8491f4807", @ANYRES32=r1, @ANYBLOB="4142060600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000020000000400"/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="18250000", @ANYRES32=r2, @ANYBLOB="00000000ff9dae5a0116e261c95630a67b300000006d180c00de2928158d2510541f4e0907ca080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000faffffff000000001000000018470000070000000000000000000000186300000a000000000000000500000085000000620000006509f0ff08000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c32900008500000006000000"], &(0x7f0000000d80)='GPL\x00', 0x4, 0x53, &(0x7f0000000dc0)=""/83, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000e40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x7, 0x9, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[r1], 0x0, 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x2800) r3 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0x304e, 0x80, 0x2, 0xb5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 7m21.780074776s ago: executing program 5 (id=1594): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x68, 0x27, 0x49, 0x10, 0x4f1, 0x1001, 0xa85e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0xc3, 0x0, 0x0, 0x90, 0x4a, 0x16}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r0, 0x0, 0x0, 0x26c) 7m21.192153003s ago: executing program 5 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200900) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000880)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x4, 0xd}, {0x1, 0x6}]}, 0x14, 0x1) mount$overlay(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x0) 7m20.861744303s ago: executing program 34 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200900) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000880)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x4, 0xd}, {0x1, 0x6}]}, 0x14, 0x1) mount$overlay(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x0) 12.201588551s ago: executing program 4 (id=3389): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x80) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001e40)=0x5) (async) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 11.839520531s ago: executing program 4 (id=3391): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) sendmmsg(r3, &(0x7f0000000fc0), 0x0, 0x10014) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffc83, 0x0, 0x0, 0x4000005}, 0x844) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 9.481966542s ago: executing program 4 (id=3403): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={0x0, 0x0, 0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x23c101, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) 8.321669146s ago: executing program 7 (id=3405): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20040000) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00'}) io_uring_enter(r4, 0x3516, 0x4, 0x20, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000001240)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="a64f"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 7.381142112s ago: executing program 4 (id=3406): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="e00100001200000429bd7000ffdbdf2525000a7f4e244e24feffffff06000000e7fe00000f00000007000000a100000007000000fdffffff", @ANYRES32=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x2000005c) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x24) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000380)=0x2, &(0x7f00000005c0)=r0}, 0xfffffd83) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r0}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="0101ecfd82"]) socket$inet6(0xa, 0x1, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000359497400a115014c6c2000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) 6.271861474s ago: executing program 3 (id=3410): r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 64) r2 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) timer_create(0x0, 0x0, 0x0) (async) close_range(r2, r2, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r3 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) (rerun: 32) r8 = dup3(r1, r0, 0x0) recvmmsg$unix(r8, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/4120, 0x1018}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000001c0)=""/19, 0x13}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/99, 0x63}, {&(0x7f0000000b80)=""/201, 0xc9}, {&(0x7f0000000c80)=""/236, 0xec}], 0x8}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000f80)=""/124, 0x7c}, {&(0x7f0000001000)=""/246, 0xf6}, {&(0x7f0000001100)=""/194, 0xc2}, {&(0x7f0000002300)=""/130, 0x82}, {&(0x7f0000002480)=""/242, 0xf2}], 0x5}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)=""/189, 0xbd}], 0x1}}], 0x5, 0x58ca2280, 0x0) 5.919900228s ago: executing program 3 (id=3411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d0009054effffff00000009050f"], 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x735, 0x0, 0x0) 4.410856523s ago: executing program 7 (id=3417): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/ip_mr_cache\x00') bind$inet6(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f4047050102641101020301090212e71dd4d29364233607050000000100"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000300)={&(0x7f0000000280)=[{0x1000, 0x9010, 0x1, &(0x7f0000000180)="e0"}, {0x8, 0x7010, 0x0, 0x0}], 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0xcc, &(0x7f0000000bc0)=""/204, 0x82100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x1, 0xb0, 0x1ff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000d00)=[0xffffffffffffffff, r1, r1, r6, 0xffffffffffffffff, r1, r1, r1, r6], 0x0, 0x10, 0x401}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x1a0, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0010007800010600000000000000008a7c61070000000700000004"], 0x1c}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}]}}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.279436277s ago: executing program 4 (id=3418): syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x565, 0x0, 0x105, 0x3, 0xe, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004004580201101801c111c800c11ed800c00000006000000000000009c0b8bd2bb1c3ec5ba48e0313e9d5414d60ff602b727086afd9f9f5d4df30320ce245f70a6dbda1c3547fd4f2a808c50b6ad16529c648e5323"], 0x1138}}, 0xc000) 3.763993907s ago: executing program 6 (id=3421): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x62, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xa7, 0x7f, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000002c0)) (async) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000002c0)) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f00000000c0)={0x0, 0x1b, 0x81, {0x81, 0xd, "127f032d9bb3db97fb6a2cbf1606d69e5893208c3791596f178ff738986b4b45fddb4c36ca2af473c5ba30e5a0c5f6de5549071c84580e1c95f6b56fd7ae105aa280ea2877d45e6240315b20f7a1a69c1cddc02e560fc6262c19bd1d2ec0c833c1b74181e77c721e9f6db950a1b39592c696be7e8108dde740c05df2fa16bb"}}, 0x0, 0x0, 0x0}, 0x0) 3.129642871s ago: executing program 6 (id=3422): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003], [0x1, 0x83a, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x28000232, 0x200006, 0x0, 0x6, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff, 0x6}, {0x0, 0x1}, {0x400000}, {0xe}, {0x3, 0x4}, {0x6}, {0x0, 0x3}, {0x40, 0x7fffffff}, {0x5}, {0x804000}]}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c460800b86669"], 0x58) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 3.008329674s ago: executing program 6 (id=3423): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40000) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81"}}}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r0, 0x8910, &(0x7f0000001580)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000228500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40000) (async) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81"}}}}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TCGETS(r0, 0x8910, &(0x7f0000001580)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000228500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 2.955927321s ago: executing program 7 (id=3424): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r2, 0x400, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f00003dc000/0x2000)=nil, 0x2000, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000491000/0x3000)=nil, 0x1000, 0x1000002, 0x50, 0xffffffffffffffff, 0x83000000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@phonet={0x23, 0xfc, 0x6, 0x5}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@generic={0xa, "f11977bb81e227d3532f26f2878a85b8efc357d57aee3db3425335985b5447989d781a56bc16a5192a38f4ab65ca3f09ce8fcf4a833fbc6611e9d6f995af63e6f63a340188f81274cc6a78a68b6903cd34fae54c5d5ebcac7129fa5b73b3c6245139a914b9fe4563b5968aa412812a417a7a8afbeed72f84756079624f1e"}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4008004) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001140)='fdinfo/3\x00') 2.868961032s ago: executing program 1 (id=3425): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000014290000000b000000000800000000000018751fd528b60fd5c2000000040000002f00000000000000"], 0x30}}], 0x1, 0x810) 2.79566467s ago: executing program 3 (id=3426): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x4, 0x3c, {0x3c, 0x38a0f559e5ec68c6, "462c68bfd8dac8dd17aadaa16d9f120d17d7d78119ae67067fe9aa552e453c10c6eac1ab042b96a21de18bb5b25b2aa29973507a3b921567e396"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0x30, 0x91, "a9982980f24a7c0a29aabeda7f4c38e614436a32e9c550a194453c17ef6cc7d7363217aa34af9960d7b6fb568f16010d6dff55740f7176e4aa66d0424adbfebab049db14f8ffa3fdb63fc9daf40596a1a7102c42e4f6bdb1a51bc6a3a4d56d970a5a782f406ca3bcf1ad9b699a9eaaf3e1b0ee9f37b91589c497b103be423c472c9c54418331165961f835f676b1ba7acb"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x81, 0x3, "888944"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "c66e1b"}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20a3030000007b6745"], &(0x7f0000000400)={0x20, 0x84, 0x4, "cbe768ea"}, &(0x7f0000000440)={0x20, 0x85, 0x3, 'u*O'}}) r1 = syz_io_uring_setup(0x7149, &(0x7f0000000600)={0x0, 0x8cc6, 0x8000, 0x1, 0x131}, &(0x7f0000000680), &(0x7f00000006c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000740)={0x7, 0x8, 0xfa00, {r3, 0x6}}, 0x10) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000700)=[0xc0000000, 0x36b], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000000)) getsockopt$inet6_int(r4, 0x29, 0x48, 0x0, &(0x7f0000000180)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401602"], 0x0, 0x0, 0x0, 0x0}) 2.789108657s ago: executing program 1 (id=3427): r0 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f0000000040)=@v3={0x3000000, [{0x8, 0x8000}, {0x1ff, 0x2}], 0xee00}, 0x18, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0xffffffffffffffff, 0x3d) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000006ef2885a92523adf5bc6f5b4504f71f1f73d7f000000e33d2b2df85c901e83"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r9], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.007769465s ago: executing program 7 (id=3428): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0xffffffffffffffff], 0x0, 0x0}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB], 0x8) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffddb) socket$inet6_tcp(0xa, 0x1, 0x0) 1.999491891s ago: executing program 6 (id=3429): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r3) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x20040080) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 1.838746412s ago: executing program 1 (id=3430): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = socket$inet6(0xa, 0x3, 0x3) r1 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r2 = syz_clone(0x801000, &(0x7f00000000c0)="70a5433c152f01f1c76d84b02464a7b5ec53c56afdf22f3b0eb2e74bcc4f999d91a4209c8be673806f883b4cc538fb23afe1dc6d27b60899f50a590d549575c1f5544d2fe5fd123e20429ef46e3bf50c2b5ef9a7bc1fdc38181ab135ef9117820aa949408e4a611c261d688e5f7f34519f72e6646cd75550ada6eb80d607382ca9393b02fa901050c79c69f377aa779cfa791ed14c971d45dd588809db13ed24717715064cc1a35e0d716c3e58878881f3952436d2d3e967a288", 0xba, &(0x7f0000000180), 0x0, &(0x7f00000001c0)="d7f38e9ba1e02758506a24ed96dd8a9628c3e2e7abc0772632af5a176cbd9f52b868f8255275e91b") (async, rerun: 32) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000200)={0xecd6, 0x8, 0x7, 0x8, 0x0, 0x9}) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x2, &(0x7f0000000240)) (async, rerun: 64) prlimit64(r2, 0x8, 0x0, &(0x7f0000000280)) (async, rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x2}, 0x4) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40814}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x8001, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x3, 0x9}, {0xe999, 0xff}]}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x18) (rerun: 64) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000600)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000640)={0x3, r5, 0xa3, 0xca, 0x7, 0x7, 0x2, 0x3, 0x7}) (async) io_uring_enter(r4, 0x355c, 0x8b0f, 0x0, &(0x7f0000000680)={[0x4]}, 0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000006c0), &(0x7f0000000700)=0xe) (async) bpf$BPF_BTF_LOAD(0x12, 0xfffffffffffffffd, 0x0) (async) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000740)={0x7, 0x4, [{0x80, 0x0, 0xffffffff}, {0x6, 0x0, 0x4}, {0x5, 0x0, 0x9}, {0x2d3e, 0x0, 0x4}, {0x7, 0x0, 0x2}, {0x7f, 0x0, 0x5}, {0x7, 0x0, 0xfffffffffffffff7}, {0x5, 0x0, 0x4}, {0x6}, {0x9, 0x0, 0x8000000000000000}, {0x2, 0x0, 0x7da}, {0x3, 0x0, 0xf}, {0xf23, 0x0, 0x1}, {0x8f, 0x0, 0x180000000000}, {0x1, 0x0, 0x7}, {0x7, 0x0, 0x9}]}) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) (async, rerun: 64) renameat2(r1, &(0x7f0000000940)='./file0\x00', r1, &(0x7f0000000980)='./file0\x00', 0x0) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040801}, 0x4) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x7d7, 0x9, {{0x1d, 0x4, 0x3, 0x4, 0x74, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "73c2"}]}, @timestamp={0x44, 0x10, 0xa1, 0x0, 0x4, [0x5, 0x6c50, 0xfffffff1]}, @timestamp_addr={0x44, 0x24, 0x92, 0x1, 0x1, [{@private=0xa010100, 0x800}, {@multicast1, 0x5}, {@empty, 0x6}, {@private=0xa010101, 0x44}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x98, [@dev={0xac, 0x14, 0x14, 0x38}, @empty, @multicast2]}, @noop, @generic={0x44, 0xc, "195c1c45c36940c5b405"}]}}}}}) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c80)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000d80)=0xe8) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@private=0xa010100, @in=@empty, 0x4e22, 0x6, 0x4e20, 0x7df8, 0xa, 0x80, 0xa0, 0x3c, r8, r9}, {0x0, 0x9272, 0x2, 0x10000, 0x9, 0xd2f, 0x200}, {0x4, 0xd, 0x9, 0x9}, 0x5, 0x6e6bba, 0x2, 0x0, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x4, 0x3, 0xc, 0x3, 0x9, 0x6}}, 0xe8) 1.731644356s ago: executing program 6 (id=3431): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0xfff7fffc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000012b98b5ca03facd63f72455df4092d2f3b3a645635b9fccbdd85082d5620a4bc37717142f744de187d20b6", @ANYRES16, @ANYBLOB="0100000000000000000039000000", @ANYRES32, @ANYBLOB="04005a80"], 0x20}}, 0x0) (async) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (rerun: 64) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f00000003c0)=0x3ff, 0xd, 0x0) (async) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) 1.619015768s ago: executing program 1 (id=3432): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x9, [@multicast, @remote, @random="3dd4e472216c", @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @broadcast, @remote, @multicast]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140), &(0x7f0000000400)) 1.585455294s ago: executing program 4 (id=3433): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$kcm(0x21, 0x2, 0x2) r3 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) 1.199096269s ago: executing program 6 (id=3434): socket$inet(0x10, 0xa, 0x7) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x10) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000002000000b703000008000000850000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000ff0f0001081000"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000800", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) (async, rerun: 64) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (rerun: 64) r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) (async, rerun: 64) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) (rerun: 64) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) (async, rerun: 32) r8 = socket(0x11, 0x800000002, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 1.194716297s ago: executing program 1 (id=3435): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() socket(0x26, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x1, 0x90, 0x8, 0x7, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010102, @multicast2}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 1.129774697s ago: executing program 7 (id=3436): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040081}, 0x44001) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x72, "14047cd8384ef5e59a5eb97583953e09aa8bbe5da83902593dddf99a4b5905c51b36d292452386ed0e26d0d1305072fa9fe636472bb8d89281cac9502997bd4d303553646b3e65027602d7d5762c539c23a796db151ac171dc90e9f82cbd4a52a1304625dcc6ef3caa5b9c82e44fe71c4e40"}, &(0x7f00000001c0)=0x7a) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000200)={0x91b, 0xfff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000dcc0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f000000ddc0)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r2, &(0x7f000000de00)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f000000de80)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f000000df40)={0x48, 0x3, r3, 0x0, 0x7, 0x0, &(0x7f000000df00)}) r4 = syz_open_dev$ndb(&(0x7f000000dfc0), 0x0, 0x20000) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f000000e000)={0x1, 0x6, 0x0, 'queue0\x00', 0x5f4}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f000000f0c0)={&(0x7f000000e0c0)=""/4096, 0x1000, 0x3, 0xffffffff}) timer_create(0x2, &(0x7f000000f280)={0x0, 0x1c, 0x1, @thr={&(0x7f000000f100)="3fad94d9fcfbdce6453f838d31c6a13e32a7d8dbc412700d1f941f677938f5fa319ce6399b71ba2802ff7b18900a1ae491a168aba6ddce5368cad914d6bc6c72cf837bf4f108692221b6e3824861ef0d52128d34eeb37d074201d8951f1d1ac7abbfd88342de9eac1e8cd06bb61602f5eb", &(0x7f000000f180)="5bd9a09c24e060f5d3f8d169acd4129cca933fd0e70a95ae20da44af304c3293af1cd90814ed210621714e0a42c77bb442123411862347a4e03ed07a75cd893f681d0a61eedc1bd1d46e5c3ba01074217478e01883995e86b49813ca95096b10b73aeab19aadaeec602f179d9e1e5a4ac1cddcab822443d3bbf1f2b83037cc54d2aaaf91a53ef0b70cf5cf18a1cae97767e8569a69f7066db8faf8fc4c7578a65a7c0aa743d7de33bc78b3bc5f5979902e2a5657ef36609b12d8913652125236cb8730958d118872d877c1f9d05360a90269de5580e6c36216b66dd0200b73d362a46ca5a730e468c7"}}, &(0x7f000000f2c0)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f000000f380)=@nat={'nat\x00', 0x1b, 0x5, 0x5a8, 0x398, 0x0, 0xffffffff, 0x148, 0x148, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, &(0x7f000000f300), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@hl={{0x28}}, @common=@srh={{0x30}, {0xff, 0x6, 0xf8, 0x9, 0x9, 0x50, 0x1400}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv6=@local, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id=0x64, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x2, 0x79, 0x4, 0x2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xa}, @remote, [0xffffff00, 0xffffffff, 0xff, 0xff], [0xffffff00], [0xffffffff, 0xff000000], 0x1686}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, @ipv4=@rand_addr=0x64010102, @port=0x4e23, @icmp_id=0x68}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff], 'nr0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0xb, 0x2, 0x1}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"de3a"}}, @common=@mh={{0x28}, {"558a"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv4=@multicast1, @icmp_id=0x65, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) r5 = eventfd(0x5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f000000f9c0)=r5, 0x1) mount$tmpfs(0x0, &(0x7f000000fa00)='./file0\x00', &(0x7f000000fa40), 0x810000, &(0x7f000000fa80)={[{@huge_advise}, {@quota}, {@uid={'uid', 0x3d, r2}}, {@huge_within_size}], [{@smackfshat}, {@fowner_lt={'fowner<', r2}}, {@subj_type}, {@pcr={'pcr', 0x3d, 0x5}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_hash}, {@dont_hash}]}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f000000fb40)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f000000fb80)) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f000000fbc0)={0x5, 0x0, [{0x80000008, 0x200000, 0x0, 0xd, 0x1, 0x20000000, 0xed}, {0x1, 0x5, 0x5, 0x6ca, 0x800, 0x2, 0x5}, {0x80000000, 0xd, 0x6, 0x9, 0x0, 0x1000, 0x3}, {0x80000007, 0x81, 0x2, 0x1, 0xfffffff9, 0x6, 0x2}, {0x40000000, 0x5, 0x5, 0xf, 0x2a5a, 0x1000, 0x3}]}) r6 = syz_open_dev$hidraw(&(0x7f000000fcc0), 0x2, 0x1fa200) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f000000fd00)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f000000fd40), 0x2, 0x0) read$FUSE(r7, &(0x7f000000fd80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = mq_open(&(0x7f0000011dc0)='%\x00', 0x800, 0x8, &(0x7f0000011e00)={0x2, 0xe2c5, 0x0, 0x9}) mq_getsetattr(r9, &(0x7f0000011e40)={0xc, 0x6, 0x4, 0x9}, &(0x7f0000011e80)) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000011ec0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000012100)={0x2, "201e0241faca93ad1ddf651266959d49aa81cfa018e862bb6e61c3bee553b22d", 0xffffffffffffffff}) quotactl_fd$Q_SYNC(r10, 0xffffffff80000100, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000201, r8, &(0x7f0000012140)='./file0\x00') 1.114345526s ago: executing program 3 (id=3437): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x180) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) chown(&(0x7f0000000400)='./file0/file0\x00', 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010828bd7000fcdbdf14001462726f6164636173742d6c696e6b0000000000000000000000000000000097e156cdecee4860c4044c01ea1773f8e6c7da55af288016a9fb009864bce86e29df61256fb9ff098c03a3790adc32a44f910ae3b658a95bdc97e3f1e171432867f142ee60cef1b48629b2d02743323beab54b95c69d808f1148b5dd224c1e6add1f2f021ce12aa1d279622978e29e992b1a6948e39923f041f81cc7968274e2448dbc6d7e9841cbf6832cb152c2b954926bf1ffc72656b5ab021ba5a512d4b75e428a6dc80c44627aeb7baf5ef80a4f71dcff922b5710dace5848f950"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r9, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002640)=0x14) 154.516393ms ago: executing program 1 (id=3438): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x10}) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x1, "bb976eb3f1718b7b6e66e378ffa64715877245516ecb6bf1a28a6b0ac118b23a", 0x20, 0x6, 0xfea, 0x10, 0x3}) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 107.939865ms ago: executing program 3 (id=3439): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setaffinity(r2, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000001c0)="c7a4239e7f9b693a6187609963", 0xd}], 0x3) (async) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) (async, rerun: 32) r5 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)) (async) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xe1) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', '/dev/v4l-subdev#\x00', 0x20, 0x854}, 0x38, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x20e282) ioctl$USBDEVFS_WAIT_FOR_RESUME(r7, 0x5523) close_range(r1, 0xffffffffffffffff, 0x0) 73.039685ms ago: executing program 7 (id=3440): mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x410200, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x4, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x1, 0x10}}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = signalfd(r2, 0x0, 0x0) bind$bt_rfcomm(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdfffffffc16ef2b75cbb379c14bd1dbdf254f0000000e0001006e657464657673696d003000000800ab000000000008000b00000000008d1a5facffff00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000500000000000000080000008520000005000000182b0000", @ANYRES32=r0, @ANYBLOB="0000000063a400009500000000000001"], &(0x7f0000000100)='syzkaller\x00', 0xf818, 0x98, &(0x7f0000000280)=""/152, 0x41000, 0x3, '\x00', r1, 0x1c, r3, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x6, 0xfe}, 0x10, 0x2299, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000400)=[{0x3, 0x4, 0x9, 0xb}, {0x1, 0x4, 0xb, 0x3}], 0x10, 0xb}, 0x94) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'dt282x\x00', [0x8000, 0xb, 0x7, 0x5, 0x4, 0x10001, 0x6, 0x0, 0xc, 0xf, 0x5, 0xfffffffb, 0x6, 0x200003, 0x7, 0x8, 0xff, 0x6, 0x8, 0x7, 0x6b5, 0x7, 0x1, 0x5079, 0x401, 0x4, 0x589, 0x5, 0x7, 0x7d1, 0xfffffff5]}) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r6 = getpid() (async, rerun: 32) pipe(0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000480)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "ae8726ab5188a0f5067e3bd54759496126c86baf237e45829712ce015304b94835019543b83b67ddd04d71425cd7e91c2002d71e8c58555fea7b2b3e9571a19f", 0x23}, 0x48, 0xfffffffffffffffd) keyctl$clear(0x7, r9) (async) keyctl$clear(0x7, r9) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r10 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3441): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101001, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000002, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x2f75, 0x2, 0x3, 0x240024e}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4d, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x628, 0xc88d, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): :0 [ 762.991358][T17419] unevictable:20013 dirty:184 writeback:0 [ 762.991358][T17419] slab_reclaimable:13080 slab_unreclaimable:133295 [ 762.991358][T17419] mapped:40679 shmem:15553 pagetables:1572 [ 762.991358][T17419] sec_pagetables:0 bounce:0 [ 762.991358][T17419] kernel_misc_reclaimable:0 [ 762.991358][T17419] free:1192341 free_pcp:29840 free_cma:0 [ 763.037134][T17419] Node 0 active_anon:81892kB inactive_anon:0kB active_file:68576kB inactive_file:40812kB unevictable:78516kB isolated(anon):0kB isolated(file):0kB mapped:162692kB dirty:736kB writeback:0kB shmem:60676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14080kB pagetables:6148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 763.069390][T17419] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 763.099375][T17419] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.129222][T17419] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 763.134978][T17419] Node 0 DMA32 free:889684kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81892kB inactive_anon:0kB active_file:68576kB inactive_file:40812kB unevictable:78516kB writepending:736kB zspages:0kB present:3129332kB managed:2540840kB mlocked:11500kB bounce:0kB free_pcp:84780kB local_pcp:50120kB free_cma:0kB [ 763.168576][T17419] lowmem_reserve[]: 0 0 1 1 1 [ 763.173271][T17419] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.202840][T17419] lowmem_reserve[]: 0 0 0 0 0 [ 763.207525][T17419] Node 1 Normal free:3864320kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:34580kB local_pcp:16160kB free_cma:0kB [ 763.240271][T17419] lowmem_reserve[]: 0 0 0 0 0 [ 763.244994][T17419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 763.257589][T17419] Node 0 DMA32: 338*4kB (UME) 168*8kB (UME) 433*16kB (UME) 1028*32kB (UME) 916*64kB (UME) 514*128kB (UME) 285*256kB (UM) 93*512kB (UME) 62*1024kB (UM) 35*2048kB (UME) 114*4096kB (UM) = 889624kB [ 763.276621][T17419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 763.288063][T17419] Node 1 Normal: 183*4kB (UME) 11*8kB (UME) 8*16kB (UME) 68*32kB (UME) 46*64kB (UME) 13*128kB (UME) 5*256kB (UE) 4*512kB (UE) 3*1024kB (UM) 2*2048kB (UE) 939*4096kB (M) = 3864372kB [ 763.306030][T17419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.315577][T17419] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 763.324868][T17419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.334399][T17419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 763.343688][T17419] 59280 total pagecache pages [ 763.348334][T17419] 0 pages in swap cache [ 763.352476][T17419] Free swap = 124996kB [ 763.356669][T17419] Total swap = 124996kB [ 763.360810][T17419] 2097051 pages RAM [ 763.364640][T17419] 0 pages HighMem/MovableOnly [ 763.369299][T17419] 429815 pages reserved [ 763.373467][T17419] 0 pages cma reserved [ 763.377770][ T5821] Bluetooth: hci5: command tx timeout [ 763.618097][T17373] team0: Port device team_slave_0 added [ 763.661646][T17373] team0: Port device team_slave_1 added [ 764.117060][T17373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.185245][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 764.185260][ T30] audit: type=1400 audit(1767864343.402:1244): avc: denied { write } for pid=17433 comm="syz.1.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.260529][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.368254][T17373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.467501][T17373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.475531][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.501896][T17373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.953884][T17449] sctp: [Deprecated]: syz.4.2772 (pid 17449) Use of int in max_burst socket option. [ 764.953884][T17449] Use struct sctp_assoc_value instead [ 765.142412][T17373] hsr_slave_0: entered promiscuous mode [ 765.186465][T17373] hsr_slave_1: entered promiscuous mode [ 765.207656][T17373] debugfs: 'hsr0' already exists in 'hsr' [ 765.229796][T17373] Cannot create hsr debugfs directory [ 765.462093][ T5821] Bluetooth: hci5: command tx timeout [ 765.663938][T17373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.939825][T17373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 766.836892][ T7326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.857088][ T7326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.150763][T17373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.192163][T17373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 767.340203][T17373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.360967][T17373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 767.542200][ T5821] Bluetooth: hci5: command tx timeout [ 767.806513][T17489] __nla_validate_parse: 60 callbacks suppressed [ 767.806527][T17489] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2782'. [ 768.168616][T17373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 768.196932][T17373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 768.300128][T17373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 768.365022][T17373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 768.558665][T17373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.582416][T17373] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.599418][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.606530][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.669298][T14353] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.676408][T14353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.712952][T17513] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 768.726905][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 768.779132][ T30] audit: type=1400 audit(1767864347.992:1245): avc: denied { map } for pid=17514 comm="syz.4.2788" path="/559/file0" dev="tmpfs" ino=2995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 769.594703][T17373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.622475][ T5821] Bluetooth: hci5: command tx timeout [ 769.767221][T17373] veth0_vlan: entered promiscuous mode [ 769.804072][T17373] veth1_vlan: entered promiscuous mode [ 769.884282][T17373] veth0_macvtap: entered promiscuous mode [ 770.249245][T17373] veth1_macvtap: entered promiscuous mode [ 770.514768][T17543] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2794'. [ 770.533648][T17373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.565094][T17373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.584263][T17546] No source specified [ 770.604493][ T6012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.635184][ T6012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.655514][ T6012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.685536][ T6012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.003395][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.011293][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.103432][T17032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.112333][T17032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.230866][ T30] audit: type=1400 audit(1767864350.442:1246): avc: denied { mounton } for pid=17373 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 771.617817][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2799'. [ 774.896620][ T6011] kernel read not supported for file /vga_arbiter (pid: 6011 comm: kworker/0:10) [ 775.441333][T17630] 9p: Bad value for 'wfdno' [ 776.542061][T11255] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 777.743488][T11255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.754669][T11255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.764786][T11255] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 777.774548][T11255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.788897][T11255] usb 4-1: config 0 descriptor?? [ 778.216161][T17642] tmpfs: Bad value for 'mpol' [ 778.311439][T17642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 778.893835][T17674] 9p: Bad value for 'rfdno' [ 779.711522][T17684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=17684 comm=syz.7.2833 [ 779.730110][ T30] audit: type=1400 audit(1767864358.942:1247): avc: denied { setopt } for pid=17683 comm="syz.7.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 779.891455][T17686] overlayfs: failed to clone upperpath [ 780.008499][T11255] usbhid 4-1:0.0: can't add hid device: -71 [ 780.031162][T11255] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 780.065357][T11255] usb 4-1: USB disconnect, device number 73 [ 780.921212][T17697] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 781.096813][T17704] FAT-fs (loop13): unable to read boot sector [ 781.376681][T17718] raw_sendmsg: syz.4.2842 forgot to set AF_INET. Fix it! [ 781.922136][ T6438] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 782.667955][ T6438] usb 5-1: Using ep0 maxpacket: 16 [ 782.675059][ T6438] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.687466][ T6438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.702263][ T6438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 782.713829][ T6438] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 782.733624][ T6438] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.752795][ T6438] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 782.820660][ T6438] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 783.525856][ T6438] usb 5-1: Manufacturer: syz [ 783.543428][ T6438] usb 5-1: config 0 descriptor?? [ 784.020526][T17749] netlink: 'syz.3.2849': attribute type 21 has an invalid length. [ 784.034396][ T5979] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.046340][ T6438] rc_core: IR keymap rc-hauppauge not found [ 784.072878][ T6438] Registered IR keymap rc-empty [ 784.082186][ T5979] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.099727][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.117561][ T5979] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.145175][ T5979] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.157637][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.194407][ T6438] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 784.228933][ T6438] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input44 [ 784.260262][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.292360][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.332126][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.362459][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.385696][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.432095][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.452143][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.487023][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.552307][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.572133][ T6438] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.615685][ T6438] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 784.663591][ T6438] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 784.706553][ T6438] usb 5-1: USB disconnect, device number 15 [ 785.217133][T17779] warn_alloc: 1 callbacks suppressed [ 785.222950][T17779] syz.7.2855: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 785.238137][T17779] CPU: 0 UID: 0 PID: 17779 Comm: syz.7.2855 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.238173][T17779] Tainted: [L]=SOFTLOCKUP [ 785.238180][T17779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.238193][T17779] Call Trace: [ 785.238202][T17779] [ 785.238210][T17779] dump_stack_lvl+0x16c/0x1f0 [ 785.238242][T17779] warn_alloc+0x248/0x3a0 [ 785.238266][T17779] ? __pfx_warn_alloc+0x10/0x10 [ 785.238286][T17779] ? rcu_is_watching+0x12/0xc0 [ 785.238305][T17779] ? trace_sched_exit_tp+0xd1/0x110 [ 785.238325][T17779] ? __schedule+0x10b9/0x6150 [ 785.238348][T17779] ? irqentry_exit+0x1dd/0x8c0 [ 785.238383][T17779] ? xskq_create+0xfb/0x1d0 [ 785.238403][T17779] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 785.238434][T17779] ? __pfx___schedule+0x10/0x10 [ 785.238461][T17779] ? xskq_create+0xfb/0x1d0 [ 785.238480][T17779] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.238504][T17779] ? irqentry_exit+0x1dd/0x8c0 [ 785.238527][T17779] ? rcu_is_watching+0x12/0xc0 [ 785.238547][T17779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 785.238577][T17779] ? xskq_create+0xfb/0x1d0 [ 785.238601][T17779] ? xskq_create+0xfb/0x1d0 [ 785.238619][T17779] vmalloc_user_noprof+0x9e/0xe0 [ 785.238646][T17779] ? xskq_create+0xfb/0x1d0 [ 785.238665][T17779] xskq_create+0xfb/0x1d0 [ 785.238686][T17779] xsk_setsockopt+0x932/0xc00 [ 785.238705][T17779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 785.238736][T17779] ? irqentry_exit+0x1dd/0x8c0 [ 785.238766][T17779] ? selinux_socket_setsockopt+0x6a/0x80 [ 785.238790][T17779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 785.238822][T17779] do_sock_setsockopt+0xf3/0x1d0 [ 785.238850][T17779] __sys_setsockopt+0x1a0/0x230 [ 785.238873][T17779] __x64_sys_setsockopt+0xbd/0x160 [ 785.238891][T17779] ? do_syscall_64+0x91/0xf80 [ 785.238914][T17779] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.238939][T17779] do_syscall_64+0xcd/0xf80 [ 785.238964][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.238984][T17779] RIP: 0033:0x7fc379d8f749 [ 785.239007][T17779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.239025][T17779] RSP: 002b:00007fc37ab65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 785.239044][T17779] RAX: ffffffffffffffda RBX: 00007fc379fe6180 RCX: 00007fc379d8f749 [ 785.239057][T17779] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 785.239069][T17779] RBP: 00007fc379e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 785.239082][T17779] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.239095][T17779] R13: 00007fc379fe6218 R14: 00007fc379fe6180 R15: 00007ffd6acc11e8 [ 785.239123][T17779] [ 785.502738][T17779] Mem-Info: [ 785.505920][T17779] active_anon:17195 inactive_anon:0 isolated_anon:0 [ 785.505920][T17779] active_file:17150 inactive_file:10242 isolated_file:0 [ 785.505920][T17779] unevictable:17138 dirty:122 writeback:0 [ 785.505920][T17779] slab_reclaimable:13508 slab_unreclaimable:134815 [ 785.505920][T17779] mapped:37930 shmem:8922 pagetables:1605 [ 785.505920][T17779] sec_pagetables:0 bounce:0 [ 785.505920][T17779] kernel_misc_reclaimable:0 [ 785.505920][T17779] free:1195276 free_pcp:32387 free_cma:0 [ 785.551858][T17779] Node 0 active_anon:68780kB inactive_anon:0kB active_file:68576kB inactive_file:40836kB unevictable:67016kB isolated(anon):0kB isolated(file):0kB mapped:151696kB dirty:488kB writeback:0kB shmem:34152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14544kB pagetables:6280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 785.583724][T17779] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 785.613742][T17779] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.643816][T17779] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 785.649556][T17779] Node 0 DMA32 free:898348kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68780kB inactive_anon:0kB active_file:68576kB inactive_file:40836kB unevictable:67016kB writepending:488kB zspages:0kB present:3129332kB managed:2540840kB mlocked:0kB bounce:0kB free_pcp:97928kB local_pcp:19996kB free_cma:0kB [ 785.682782][T17779] lowmem_reserve[]: 0 0 1 1 1 [ 785.687471][T17779] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.717104][T17779] lowmem_reserve[]: 0 0 0 0 0 [ 785.721785][T17779] Node 1 Normal free:3867396kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31556kB local_pcp:14396kB free_cma:0kB [ 785.754343][T17779] lowmem_reserve[]: 0 0 0 0 0 [ 785.759027][T17779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 785.771679][T17779] Node 0 DMA32: 3299*4kB (UME) 978*8kB (UME) 1339*16kB (UME) 461*32kB (UM) 637*64kB (UME) 483*128kB (UME) 307*256kB (UME) 103*512kB (UME) 67*1024kB (UME) 31*2048kB (UM) 116*4096kB (UM) = 898348kB [ 785.792317][T17779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 785.804307][T17779] Node 1 Normal: 181*4kB (UME) 10*8kB (UME) 24*16kB (UME) 117*32kB (UME) 47*64kB (UME) 14*128kB (UME) 5*256kB (UE) 4*512kB (UE) 4*1024kB (UM) 2*2048kB (UE) 939*4096kB (M) = 3867396kB [ 785.822527][T17779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.832270][T17779] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 785.841533][T17779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.851067][T17779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 785.860353][T17779] 52680 total pagecache pages [ 785.865046][T17779] 0 pages in swap cache [ 785.869167][T17779] Free swap = 124996kB [ 785.873314][T17779] Total swap = 124996kB [ 785.877437][T17779] 2097051 pages RAM [ 785.881208][T17779] 0 pages HighMem/MovableOnly [ 785.885885][T17779] 429815 pages reserved [ 785.890008][T17779] 0 pages cma reserved [ 786.104246][T17778] tipc: Enabled bearer , priority 10 [ 787.412082][T17798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2861'. [ 789.635075][T17830] fuse: Unknown parameter '' [ 790.127075][T17842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2873'. [ 790.332103][ T30] audit: type=1400 audit(1767864369.542:1248): avc: denied { ioctl } for pid=17851 comm="syz.1.2876" path="socket:[58768]" dev="sockfs" ino=58768 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 790.522207][ T9757] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 790.674635][ T9757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 790.694455][ T9757] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.712393][ T9757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.719946][T17875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.729501][ T9757] usb 5-1: Product: syz [ 790.733959][ T9757] usb 5-1: Manufacturer: syz [ 790.738555][ T9757] usb 5-1: SerialNumber: syz [ 792.663862][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2875'. [ 792.884096][ T30] audit: type=1400 audit(1767864372.102:1249): avc: denied { read } for pid=17848 comm="syz.4.2875" path="socket:[58008]" dev="sockfs" ino=58008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 793.084319][ T9757] cdc_ncm 5-1:1.0: bind() failure [ 793.139171][ T9757] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 793.165472][ T9757] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 793.177444][ T9757] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 793.193746][T17915] overlayfs: failed to resolve './file0': -2 [ 793.223706][ T9757] usb 5-1: USB disconnect, device number 16 [ 794.835896][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 794.849940][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.849974][ T5821] Tainted: [L]=SOFTLOCKUP [ 794.849981][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.849994][ T5821] Workqueue: hci5 hci_rx_work [ 794.850019][ T5821] Call Trace: [ 794.850025][ T5821] [ 794.850033][ T5821] dump_stack_lvl+0x16c/0x1f0 [ 794.850059][ T5821] sysfs_warn_dup+0x7f/0xa0 [ 794.850082][ T5821] sysfs_create_dir_ns+0x24b/0x2b0 [ 794.850104][ T5821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 794.850124][ T5821] ? find_held_lock+0x2b/0x80 [ 794.850157][ T5821] ? do_raw_spin_unlock+0x172/0x230 [ 794.850184][ T5821] kobject_add_internal+0x2c4/0x9d0 [ 794.850215][ T5821] kobject_add+0x16e/0x240 [ 794.850241][ T5821] ? __pfx_kobject_add+0x10/0x10 [ 794.850270][ T5821] ? kobject_put+0xaf/0x6f0 [ 794.850292][ T5821] ? _raw_spin_unlock+0x28/0x50 [ 794.850321][ T5821] device_add+0x288/0x1980 [ 794.850345][ T5821] ? __pfx_dev_set_name+0x10/0x10 [ 794.850369][ T5821] ? __pfx_device_add+0x10/0x10 [ 794.850391][ T5821] ? mgmt_send_event_skb+0x2fb/0x460 [ 794.850417][ T5821] hci_conn_add_sysfs+0x1a8/0x260 [ 794.850442][ T5821] le_conn_complete_evt+0x11ed/0x1fa0 [ 794.850467][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 794.850493][ T5821] hci_le_conn_complete_evt+0x23c/0x3a0 [ 794.850517][ T5821] hci_le_meta_evt+0x357/0x610 [ 794.850537][ T5821] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 794.850561][ T5821] hci_event_packet+0x685/0x1210 [ 794.850582][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 794.850606][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 794.850629][ T5821] ? kcov_remote_start+0x399/0x680 [ 794.850648][ T5821] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.850677][ T5821] hci_rx_work+0x2c9/0x1020 [ 794.850701][ T5821] process_one_work+0x9ba/0x1b20 [ 794.850738][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 794.850771][ T5821] ? assign_work+0x1a0/0x250 [ 794.850794][ T5821] worker_thread+0x6c8/0xf10 [ 794.850829][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 794.850854][ T5821] kthread+0x3c5/0x780 [ 794.850891][ T5821] ? __pfx_kthread+0x10/0x10 [ 794.850918][ T5821] ? rcu_is_watching+0x12/0xc0 [ 794.850939][ T5821] ? __pfx_kthread+0x10/0x10 [ 794.850962][ T5821] ret_from_fork+0x983/0xb10 [ 794.850983][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 794.851006][ T5821] ? rcu_is_watching+0x12/0xc0 [ 794.851024][ T5821] ? __switch_to+0x7af/0x10d0 [ 794.851047][ T5821] ? __pfx_kthread+0x10/0x10 [ 794.851068][ T5821] ret_from_fork_asm+0x1a/0x30 [ 794.851112][ T5821] [ 794.851137][ T5821] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 794.859448][ T30] audit: type=1326 audit(1767864374.072:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.3.2899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x0 [ 794.862372][ T5821] Bluetooth: hci5: failed to register connection device [ 795.173547][T17962] netem: incorrect ge model size [ 795.275969][T17962] netem: change failed [ 795.507797][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'. [ 795.542299][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 795.713373][T17983] netlink: 'syz.6.2906': attribute type 29 has an invalid length. [ 795.722054][T17983] netlink: 'syz.6.2906': attribute type 29 has an invalid length. [ 795.730601][T17983] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2906'. [ 795.803544][T17987] befs: (nbd4): No write support. Marking filesystem read-only [ 797.660673][ T30] audit: type=1326 audit(1767864376.872:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.6.2914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f233af8f749 code=0x0 [ 798.757707][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 798.766791][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 798.877209][T18022] bond8: option xmit_hash_policy: invalid value (6) [ 798.929642][T18022] bond8 (unregistering): Released all slaves [ 800.326119][ T30] audit: type=1326 audit(1767864379.542:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 800.381464][ T30] audit: type=1326 audit(1767864379.542:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 800.437815][ T30] audit: type=1326 audit(1767864379.572:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 800.464494][ T30] audit: type=1326 audit(1767864379.572:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 800.791798][ T30] audit: type=1326 audit(1767864379.572:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 800.846449][ T30] audit: type=1326 audit(1767864379.572:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 800.937382][ T30] audit: type=1326 audit(1767864379.572:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 801.052017][ T30] audit: type=1326 audit(1767864379.572:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 801.131753][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2931'. [ 801.149503][ T30] audit: type=1326 audit(1767864379.572:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.3.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 801.175546][T18070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2932'. [ 801.596659][T18093] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2939'. [ 801.682123][ T5826] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 801.842071][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 801.848505][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.858847][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.869930][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 801.879715][ T5826] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 801.889431][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.903827][ T5826] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 801.913542][T18107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2943'. [ 801.926834][ T5826] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 801.936326][ T5826] usb 5-1: Manufacturer: syz [ 801.946105][ T5826] usb 5-1: config 0 descriptor?? [ 802.067577][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 802.079162][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 802.088125][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 802.096176][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 802.105773][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.196314][T18109] lo speed is unknown, defaulting to 1000 [ 802.232956][ T5826] rc_core: IR keymap rc-hauppauge not found [ 802.239115][ T5826] Registered IR keymap rc-empty [ 802.244252][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.262533][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.295585][ T5826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 802.331401][ T5826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 802.358710][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.382911][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.400306][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2945'. [ 802.412223][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.433183][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.462104][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.498969][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.552492][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.564265][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2945'. [ 802.594353][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.628025][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.655486][ T5826] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 802.676755][T18109] chnl_net:caif_netlink_parms(): no params data found [ 802.684534][ T5826] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 802.710640][ T5826] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 802.727471][ T5826] usb 5-1: USB disconnect, device number 17 [ 802.874611][T18128] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2946'. [ 803.180751][T18109] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.189466][T18109] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.217869][T18109] bridge_slave_0: entered allmulticast mode [ 803.233542][T18109] bridge_slave_0: entered promiscuous mode [ 803.246464][T18109] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.253968][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.261071][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 803.261081][ T30] audit: type=1400 audit(1767864382.472:1285): avc: denied { connect } for pid=18134 comm="syz.4.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 803.287366][T18109] bridge_slave_1: entered allmulticast mode [ 803.304478][T18109] bridge_slave_1: entered promiscuous mode [ 803.403643][T18109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.420331][T18109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.582121][ T5826] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 804.138359][ T5826] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 804.148156][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.159496][ T5826] usb 5-1: Product: syz [ 804.165261][ T5826] usb 5-1: Manufacturer: syz [ 804.170491][ T5826] usb 5-1: SerialNumber: syz [ 804.178059][ T5826] usb 5-1: config 0 descriptor?? [ 804.184752][ T5138] Bluetooth: hci4: command tx timeout [ 804.239217][T18109] team0: Port device team_slave_0 added [ 804.313009][T18109] team0: Port device team_slave_1 added [ 804.407300][ T5826] usb 5-1: USB disconnect, device number 18 [ 804.610109][T18135] netlink: 'syz.4.2948': attribute type 1 has an invalid length. [ 805.174349][T18109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.216828][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 805.288719][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.333766][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 805.364694][T18109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.446468][T18135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 805.456168][T18151] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2950'. [ 805.465429][T18151] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2950'. [ 805.623370][T18136] bond3: (slave veth3): Enslaving as an active interface with a down link [ 806.312881][ T5138] Bluetooth: hci4: command tx timeout [ 807.056611][T15283] bond1 (unregistering): Released all slaves [ 807.178183][T15283] bond2 (unregistering): Released all slaves [ 807.289307][T15283] bond0 (unregistering): (slave bond3): Releasing active interface [ 807.298971][T15283] bond0 (unregistering): (slave bond4): Releasing active interface [ 807.307793][T15283] bond0 (unregistering): Released all slaves [ 807.414094][T15283] bond3 (unregistering): Released all slaves [ 807.510243][T15283] bond4 (unregistering): Released all slaves [ 807.521103][T15283] bond5 (unregistering): Released all slaves [ 807.532049][T15283] bond6 (unregistering): Released all slaves [ 807.543278][T15283] bond7 (unregistering): Released all slaves [ 807.563097][T18160] bond3: (slave dummy0): making interface the new active one [ 807.571340][T18160] dummy0: entered promiscuous mode [ 807.577439][T18160] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 807.589746][T18109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.601122][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.627902][T18109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.845874][T18135] bond3 (unregistering): (slave veth3): Releasing active interface [ 807.861140][T18135] bond3 (unregistering): (slave dummy0): Releasing active interface [ 807.875512][T18135] bond3 (unregistering): Released all slaves [ 808.185501][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.342645][ T5138] Bluetooth: hci4: command tx timeout [ 808.654561][ T30] audit: type=1400 audit(1767864387.862:1286): avc: denied { getopt } for pid=18201 comm="syz.6.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 808.695875][T18109] hsr_slave_0: entered promiscuous mode [ 808.737999][T18109] hsr_slave_1: entered promiscuous mode [ 808.765385][T18109] debugfs: 'hsr0' already exists in 'hsr' [ 808.771824][T18109] Cannot create hsr debugfs directory [ 809.372042][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 809.552107][ T9] usb 5-1: device descriptor read/64, error -71 [ 809.604684][T15283] hsr_slave_0: left promiscuous mode [ 809.613104][T15283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.632596][T15283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.838634][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 810.013103][T15283] pim6reg (unregistering): left allmulticast mode [ 810.015083][ T9] usb 5-1: device descriptor read/64, error -71 [ 810.152521][ T9] usb usb5-port1: attempt power cycle [ 810.310451][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2968'. [ 810.352377][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2968'. [ 810.390535][T18249] netlink: 'syz.7.2968': attribute type 14 has an invalid length. [ 810.412089][T18249] netlink: 'syz.7.2968': attribute type 13 has an invalid length. [ 810.422191][ T5138] Bluetooth: hci4: command tx timeout [ 810.532033][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 810.586674][ T9] usb 5-1: device descriptor read/8, error -71 [ 810.852364][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 810.892151][ T9] usb 5-1: device descriptor read/8, error -71 [ 811.028480][ T9] usb usb5-port1: unable to enumerate USB device [ 811.222944][T15283] team0 (unregistering): Port device team_slave_1 removed [ 811.346087][T15283] team0 (unregistering): Port device team_slave_0 removed [ 812.581255][T18275] fuse: Unknown parameter '0x0000000000000009' [ 812.607291][ T30] audit: type=1400 audit(1767864391.822:1287): avc: denied { bind } for pid=18273 comm="syz.7.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 812.825912][T18281] bridge0: port 3(syz_tun) entered blocking state [ 812.853747][T18281] bridge0: port 3(syz_tun) entered disabled state [ 812.870623][T18281] syz_tun: entered allmulticast mode [ 812.919898][T18281] syz_tun: entered promiscuous mode [ 812.932687][T18281] bridge0: port 3(syz_tun) entered blocking state [ 812.939236][T18281] bridge0: port 3(syz_tun) entered forwarding state [ 813.163039][T18290] netlink: 'syz.6.2975': attribute type 4 has an invalid length. [ 813.198455][T15283] IPVS: stop unused estimator thread 0... [ 813.259293][T18272] netlink: 'syz.6.2975': attribute type 4 has an invalid length. [ 813.403910][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 813.572474][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 813.597571][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.642740][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 813.676200][T18109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 813.688679][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 813.704661][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 813.719102][T18109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 814.223970][T18109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 814.230692][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.250397][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 814.259739][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 814.311919][ T9] usb 5-1: Manufacturer: syz [ 814.318871][T18109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 814.327114][ T9] usb 5-1: config 0 descriptor?? [ 814.517377][T18109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.576191][T18109] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.699558][T14561] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.706697][T14561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.999105][T14561] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.006269][T14561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.170981][T18109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 815.181481][T18109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 815.236753][ T9] rc_core: IR keymap rc-hauppauge not found [ 815.258507][ T9] Registered IR keymap rc-empty [ 815.269464][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.292564][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.435058][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 815.466427][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input46 [ 815.484827][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.512767][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.553138][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.592429][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.615282][T18109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.632216][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.683509][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.722216][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.730497][T18109] veth0_vlan: entered promiscuous mode [ 815.776005][T18109] veth1_vlan: entered promiscuous mode [ 815.782083][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.822121][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 815.844690][T18109] veth0_macvtap: entered promiscuous mode [ 815.867987][T18109] veth1_macvtap: entered promiscuous mode [ 815.923313][T18109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.964586][T18109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.992127][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 816.016072][T14561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.019283][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 816.152588][T14561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.337725][T14561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.448643][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 816.463595][ T9] usb 5-1: USB disconnect, device number 23 [ 816.479247][T14561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.515867][T18372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2991'. [ 817.535313][ T30] audit: type=1400 audit(1767864396.732:1288): avc: denied { connect } for pid=18365 comm="syz.3.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 817.657541][ T3892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.668046][ T3892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.193951][ T6454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.228149][ T6454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.908793][T18423] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 820.383249][T18418] Process accounting resumed [ 820.715163][T18444] netlink: 'syz.7.3004': attribute type 21 has an invalid length. [ 820.740852][T18444] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3004'. [ 821.561611][ T30] audit: type=1400 audit(1767864400.672:1289): avc: denied { mounton } for pid=18451 comm="syz.1.3005" path="/proc/10/task" dev="proc" ino=60991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 821.837196][T18467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3006'. [ 822.842061][ T5941] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 823.637061][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 823.783655][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.834831][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.908421][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 823.942488][ T5941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 823.961984][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.005482][ T5941] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 824.020660][ T5941] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 824.055278][ T5941] usb 5-1: Manufacturer: syz [ 824.170545][ T5941] usb 5-1: config 0 descriptor?? [ 824.284279][T18509] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3017'. [ 825.055563][ T5941] rc_core: IR keymap rc-hauppauge not found [ 825.061516][ T5941] Registered IR keymap rc-empty [ 825.171201][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.184925][T18509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.208005][T18509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.219940][T18509] bond0 (unregistering): Released all slaves [ 825.282126][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.373150][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 825.393141][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 825.425469][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.470646][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.503255][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.554087][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.602182][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.634438][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.672672][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.692397][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.738380][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.772101][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 825.811314][ T5941] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 825.830137][ T5941] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 825.870220][ T5941] usb 5-1: USB disconnect, device number 24 [ 826.037999][ T30] audit: type=1400 audit(1767864405.252:1290): avc: denied { ioctl } for pid=18533 comm="syz.1.3020" path="socket:[61079]" dev="sockfs" ino=61079 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 827.749312][T18564] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 827.831378][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 827.852368][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 827.863501][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 827.878908][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 827.893159][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 828.212162][ T5860] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 828.280388][T18568] chnl_net:caif_netlink_parms(): no params data found [ 828.422165][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 828.441091][ T5860] usb 2-1: too many configurations: 228, using maximum allowed: 8 [ 828.503930][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 828.511537][ T5860] usb 2-1: can't read configurations, error -61 [ 829.212606][ T5860] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 829.235658][T17032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.256468][T17032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 829.320106][T18568] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.339369][T18568] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.359776][T18568] bridge_slave_0: entered allmulticast mode [ 829.379881][T18568] bridge_slave_0: entered promiscuous mode [ 829.393125][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 829.409696][ T5860] usb 2-1: too many configurations: 228, using maximum allowed: 8 [ 829.433485][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 829.441081][ T5860] usb 2-1: can't read configurations, error -61 [ 829.472821][ T5860] usb usb2-port1: attempt power cycle [ 829.529589][T17032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.545791][T17032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 829.565324][T18568] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.573369][T18568] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.582262][T18568] bridge_slave_1: entered allmulticast mode [ 829.589386][T18568] bridge_slave_1: entered promiscuous mode [ 830.213512][ T5138] Bluetooth: hci0: command tx timeout [ 830.241395][T17032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.271273][T17032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 830.299647][ T5860] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 830.323643][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 830.329392][ T5860] usb 2-1: too many configurations: 228, using maximum allowed: 8 [ 830.348996][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 830.359297][ T5860] usb 2-1: can't read configurations, error -61 [ 830.467637][T17032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.486564][T17032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 830.502167][ T5860] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 830.523413][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 830.529442][ T5860] usb 2-1: too many configurations: 228, using maximum allowed: 8 [ 830.543476][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 830.547943][T18568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.551105][ T5860] usb 2-1: can't read configurations, error -61 [ 830.592545][ T5860] usb usb2-port1: unable to enumerate USB device [ 830.593469][T18568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.665025][T18568] team0: Port device team_slave_0 added [ 830.694737][T18568] team0: Port device team_slave_1 added [ 830.759270][T18568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.767223][T18568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.794438][T18568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.826791][T18568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.846222][T18568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.897593][T18568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.001116][T17032] bridge_slave_1: left allmulticast mode [ 831.022049][T17032] bridge_slave_1: left promiscuous mode [ 831.029387][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.044957][T17032] bridge_slave_0: left allmulticast mode [ 831.059663][T17032] bridge_slave_0: left promiscuous mode [ 831.071234][T17032] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.191502][T17032] ip6gretap0 (unregistering): left promiscuous mode [ 831.307081][T17032] gretap0 (unregistering): left promiscuous mode [ 831.339728][T17032] bond1 (unregistering): (slave gretap1): Releasing active interface [ 831.451299][ T48] libceph: connect (1)[c::]:6789 error -101 [ 831.457414][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 831.481838][T18637] binder: BINDER_SET_CONTEXT_MGR already set [ 831.498183][T18637] binder: 18634:18637 ioctl 4018620d 200000000040 returned -16 [ 831.563723][T17032] bond1 (unregistering): (slave bridge1): Releasing active interface [ 831.710158][T18635] ceph: No mds server is up or the cluster is laggy [ 831.739638][ T48] libceph: connect (1)[c::]:6789 error -101 [ 831.746697][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 832.066948][T17032] bond0 (unregistering): left promiscuous mode [ 832.074577][T17032] bond_slave_0: left promiscuous mode [ 832.167757][T17032] bond_slave_1: left promiscuous mode [ 832.174637][ T30] audit: type=1326 audit(1767864411.362:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b71f8f749 code=0x7ffc0000 [ 832.235069][ T30] audit: type=1326 audit(1767864411.362:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8b71f8f749 code=0x7ffc0000 [ 832.285421][T17032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.307062][ T5138] Bluetooth: hci0: command tx timeout [ 832.314013][T17032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.354776][ T30] audit: type=1326 audit(1767864411.362:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b71f8f749 code=0x7ffc0000 [ 832.409129][ T30] audit: type=1326 audit(1767864411.362:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8b71f8f749 code=0x7ffc0000 [ 832.453717][ T30] audit: type=1400 audit(1767864411.362:1295): avc: denied { mount } for pid=18647 comm="syz.1.3052" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 832.483360][T17032] bond0 (unregistering): Released all slaves [ 832.511987][ T30] audit: type=1326 audit(1767864411.362:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b71f8f749 code=0x7ffc0000 [ 832.518052][T17032] bond1 (unregistering): Released all slaves [ 832.611372][ T30] audit: type=1326 audit(1767864411.362:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b71f8f749 code=0x7ffc0000 [ 832.871402][T17032] bond2 (unregistering): Released all slaves [ 832.945691][T18568] hsr_slave_0: entered promiscuous mode [ 832.971819][T18568] hsr_slave_1: entered promiscuous mode [ 832.988408][T18568] debugfs: 'hsr0' already exists in 'hsr' [ 833.004369][T18568] Cannot create hsr debugfs directory [ 833.279040][ T30] audit: type=1400 audit(1767864412.492:1298): avc: denied { create } for pid=18657 comm="syz.6.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.372910][ T30] audit: type=1400 audit(1767864412.492:1299): avc: denied { write } for pid=18657 comm="syz.6.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.467150][ T30] audit: type=1400 audit(1767864412.492:1300): avc: denied { read } for pid=18657 comm="syz.6.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.659709][T17032] hsr_slave_0: left promiscuous mode [ 833.667763][T17032] hsr_slave_1: left promiscuous mode [ 833.687209][T17032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.703360][T17032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.721581][T17032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.733239][T17032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.765506][T17032] veth1_macvtap: left promiscuous mode [ 833.779885][T17032] veth0_macvtap: left promiscuous mode [ 833.796357][T17032] veth1_vlan: left promiscuous mode [ 833.802804][ T48] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 833.816089][T17032] veth0_vlan: left promiscuous mode [ 833.963780][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 833.985908][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.027047][ T48] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 834.054000][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.082487][ T48] usb 2-1: config 0 descriptor?? [ 834.342096][ T5138] Bluetooth: hci0: command tx timeout [ 835.977471][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 836.006217][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 836.031876][ T48] usb 2-1: USB disconnect, device number 92 [ 836.739107][T18706] netlink: 'syz.7.3064': attribute type 10 has an invalid length. [ 836.748174][T18706] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3064'. [ 837.062610][ T5138] Bluetooth: hci0: command tx timeout [ 837.456174][T18706] dummy0: entered promiscuous mode [ 837.463500][T18706] batman_adv: batadv0: Interface activated: dummy0 [ 837.470782][T18706] batman_adv: batadv0: Interface deactivated: dummy0 [ 837.477509][T18706] batman_adv: batadv0: Removing interface: dummy0 [ 837.484433][T18706] bridge0: port 3(dummy0) entered blocking state [ 837.490770][T18706] bridge0: port 3(dummy0) entered disabled state [ 837.497206][T18706] dummy0: entered allmulticast mode [ 837.503470][T18706] bridge0: port 3(dummy0) entered blocking state [ 837.509867][T18706] bridge0: port 3(dummy0) entered forwarding state [ 837.559062][T18715] bridge_slave_0: left allmulticast mode [ 837.568068][T18715] bridge_slave_0: left promiscuous mode [ 837.573995][T18715] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.594923][T18715] bridge_slave_1: left allmulticast mode [ 837.600899][T18715] bridge_slave_1: left promiscuous mode [ 837.608422][T18726] xt_HMARK: proto mask must be zero with L3 mode [ 837.608984][T18715] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.627781][T18715] bond0: (slave bond_slave_0): Releasing backup interface [ 837.639637][T18715] bond0: (slave bond_slave_1): Releasing backup interface [ 837.661542][T18715] team0: Port device team_slave_0 removed [ 837.673458][T18715] team0: Port device team_slave_1 removed [ 837.679716][T18715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.690281][T18715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.699234][T18715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.707054][T18715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.717704][T18715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 837.750351][T18716] team0: Mode changed to "loadbalance" [ 837.898627][T18729] wg1 speed is unknown, defaulting to 1000 [ 837.913819][T18729] wg1 speed is unknown, defaulting to 1000 [ 837.969247][T18729] wg1 speed is unknown, defaulting to 1000 [ 838.408499][T18729] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 838.529375][T18729] wg1 speed is unknown, defaulting to 1000 [ 838.605093][T18729] wg1 speed is unknown, defaulting to 1000 [ 838.696947][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3073'. [ 838.713876][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 838.713890][ T30] audit: type=1400 audit(1767864417.932:1303): avc: denied { read } for pid=18753 comm="syz.3.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 838.767737][T18729] wg1 speed is unknown, defaulting to 1000 [ 838.778767][T17032] IPVS: stop unused estimator thread 0... [ 838.788892][T18741] wg1 speed is unknown, defaulting to 1000 [ 838.814915][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 838.826505][T18729] wg1 speed is unknown, defaulting to 1000 [ 838.878544][T18729] wg1 speed is unknown, defaulting to 1000 [ 838.915832][T18729] wg1 speed is unknown, defaulting to 1000 [ 838.924551][T18729] wg1 speed is unknown, defaulting to 1000 [ 839.033807][T18568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 839.074417][T18568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 839.115015][T18568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 839.156154][T18568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 839.370314][T18775] bond1: entered allmulticast mode [ 839.376809][T18775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.631110][T18568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.650309][T18568] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.685958][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.693116][ T529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.735153][ T529] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.742317][ T529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.660114][T18568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.120861][T18568] veth0_vlan: entered promiscuous mode [ 841.156060][T18568] veth1_vlan: entered promiscuous mode [ 841.213902][T18568] veth0_macvtap: entered promiscuous mode [ 841.237878][T18568] veth1_macvtap: entered promiscuous mode [ 841.274945][T18568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.302959][T18568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.314224][ T48] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 841.346430][ T1138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.362616][ T1138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.372892][ T1138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.381835][ T1138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.476164][ T48] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 841.504448][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.544370][ T48] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 841.568486][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.577656][ T48] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 841.594667][ T48] usb 2-1: Manufacturer: syz [ 841.598962][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.617998][ T48] usb 2-1: config 0 descriptor?? [ 841.651454][ T529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.676882][ T529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.762579][ T48] rc_core: IR keymap rc-hauppauge not found [ 841.768503][ T48] Registered IR keymap rc-empty [ 841.790827][ T48] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 841.809142][ T48] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 842.141045][T18857] netlink: 492 bytes leftover after parsing attributes in process `syz.3.3086'. [ 843.171190][T18880] 9p: Bad value for 'rfdno' [ 843.189406][T18880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3090'. [ 844.252702][ T8895] usb 2-1: USB disconnect, device number 93 [ 844.789664][ T30] audit: type=1400 audit(1767864424.002:1304): avc: denied { getopt } for pid=18886 comm="syz.4.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 844.814451][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.051435][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.082608][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.092010][ T48] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 845.105439][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.123879][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.144701][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.169069][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.234879][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.242765][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 845.323195][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.344105][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.042335][T18914] block device autoloading is deprecated and will be removed. [ 846.155350][ T48] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 846.165241][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.179289][ T48] usb 2-1: config 0 has no interface number 0 [ 846.191570][ T48] usb 2-1: New USB device found, idVendor=14b2, idProduct=3c09, bcdDevice=3c.fb [ 846.202443][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.226219][ T48] usb 2-1: Product: syz [ 846.249736][ T48] usb 2-1: Manufacturer: syz [ 846.302985][ T48] usb 2-1: SerialNumber: syz [ 846.318768][ T48] usb 2-1: config 0 descriptor?? [ 846.548496][ T48] usb 2-1: USB disconnect, device number 94 [ 846.574223][ T30] audit: type=1400 audit(1767864425.792:1305): avc: denied { name_bind } for pid=18927 comm="syz.6.3103" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 847.612988][ T30] audit: type=1400 audit(1767864426.822:1306): avc: denied { lock } for pid=18946 comm="syz.6.3107" path="socket:[62114]" dev="sockfs" ino=62114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.398562][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3112'. [ 848.452038][ T5941] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 848.730228][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3112'. [ 848.746908][ T5941] usb 2-1: device descriptor read/64, error -71 [ 849.086283][T18973] lo speed is unknown, defaulting to 1000 [ 849.106450][T18973] lo speed is unknown, defaulting to 1000 [ 849.118802][ T5941] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 849.133035][T18973] lo speed is unknown, defaulting to 1000 [ 849.165390][T18973] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 849.211781][T18973] lo speed is unknown, defaulting to 1000 [ 849.227653][T18973] lo speed is unknown, defaulting to 1000 [ 849.235457][T18973] lo speed is unknown, defaulting to 1000 [ 849.244022][T18973] lo speed is unknown, defaulting to 1000 [ 849.251446][T18973] lo speed is unknown, defaulting to 1000 [ 849.270897][T18973] lo speed is unknown, defaulting to 1000 [ 849.271995][ T5941] usb 2-1: device descriptor read/64, error -71 [ 849.323245][T18973] lo speed is unknown, defaulting to 1000 [ 849.392252][ T5941] usb usb2-port1: attempt power cycle [ 849.752060][T18915] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 849.764091][ T5941] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 849.802710][ T5941] usb 2-1: device descriptor read/8, error -71 [ 850.042011][T18915] usb 5-1: Using ep0 maxpacket: 32 [ 850.042172][ T5941] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 850.048427][T18915] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 850.066582][T18915] usb 5-1: config 0 has no interface number 0 [ 850.072884][T18915] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 850.195978][T18998] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3118'. [ 851.029554][ T5941] usb 2-1: device descriptor read/8, error -71 [ 851.061134][T18915] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 851.073592][T18915] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 851.142254][ T5941] usb usb2-port1: unable to enumerate USB device [ 851.454558][T18915] usb 5-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 851.464052][T18915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.482228][T18915] usb 5-1: Product: syz [ 851.486627][T18915] usb 5-1: Manufacturer: syz [ 851.491226][T18915] usb 5-1: SerialNumber: syz [ 851.497603][T18915] usb 5-1: config 0 descriptor?? [ 851.535738][T18990] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 851.545846][T18990] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 851.580032][T18915] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 851.784805][T18915] usb 5-1: USB disconnect, device number 25 [ 851.971985][ T5941] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 852.122008][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 852.140704][ T5941] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 852.188234][ T5941] usb 2-1: config 254 has no interface number 0 [ 852.205091][ T5941] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 852.272069][ T5941] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 852.305398][ T5941] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 852.331987][ T5941] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 852.360439][ T5941] usb 2-1: config 254 interface 235 has no altsetting 0 [ 852.385092][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 852.409863][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.429236][ T5941] usb 2-1: Product: syz [ 852.437864][ T5941] usb 2-1: Manufacturer: syz [ 852.449259][ T5941] usb 2-1: SerialNumber: syz [ 852.458999][T19005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 852.562292][T19029] syz_tun: left allmulticast mode [ 852.562318][T19029] syz_tun: left promiscuous mode [ 852.562478][T19029] bridge0: port 3(syz_tun) entered disabled state [ 852.604169][T19029] bridge_slave_0: left allmulticast mode [ 852.604195][T19029] bridge_slave_0: left promiscuous mode [ 852.604363][T19029] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.608025][T19029] bridge_slave_1: left allmulticast mode [ 852.608050][T19029] bridge_slave_1: left promiscuous mode [ 852.608221][T19029] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.616644][T19029] bond0: (slave bond_slave_0): Releasing backup interface [ 852.625465][T19029] bond0: (slave bond_slave_1): Releasing backup interface [ 852.636971][T19029] team0: Port device team_slave_0 removed [ 852.653389][T19029] team0: Port device team_slave_1 removed [ 852.654384][T19029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.654407][T19029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.668821][T19005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.669078][T19005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.669976][ T5941] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 852.670014][ T5941] usbtest 2-1:254.235: probe with driver usbtest failed with error -71 [ 852.690635][ T5941] usb 2-1: USB disconnect, device number 99 [ 852.708167][T19029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.821252][ T6015] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 852.829596][T19029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.863096][T19029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 852.891433][T19030] team0: Mode changed to "broadcast" [ 853.012043][ T6015] usb 5-1: Using ep0 maxpacket: 32 [ 853.036976][ T6015] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 200, changing to 11 [ 853.055542][ T6015] usb 5-1: config 0 interface 0 has no altsetting 0 [ 853.072425][ T6015] usb 5-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 853.093867][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.122633][ T6015] usb 5-1: config 0 descriptor?? [ 853.473963][T19046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 853.480498][T19046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 853.488337][T19046] vhci_hcd vhci_hcd.0: Device attached [ 853.782816][ T5941] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 853.857784][ T6015] wacom 0003:056A:002A.0016: unknown main item tag 0x0 [ 853.912369][T19019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.293112][T19019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.616231][T19047] vhci_hcd: connection reset by peer [ 854.687126][ T2975] vhci_hcd vhci_hcd.1: stop threads [ 854.724987][ T2975] vhci_hcd vhci_hcd.1: release socket [ 854.785013][ T2975] vhci_hcd vhci_hcd.1: disconnect device [ 855.095623][ T6015] wacom 0003:056A:002A.0016: unknown main item tag 0x0 [ 855.102597][ T6015] wacom 0003:056A:002A.0016: unknown main item tag 0x0 [ 855.109490][ T6015] wacom 0003:056A:002A.0016: unknown main item tag 0x0 [ 855.116564][ T6015] wacom 0003:056A:002A.0016: unknown main item tag 0x0 [ 855.132823][ T6015] usb 5-1: USB disconnect, device number 26 [ 855.305508][T19058] netlink: 'syz.3.3131': attribute type 12 has an invalid length. [ 856.072065][ T5860] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 856.298326][T19073] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 857.002006][ T6011] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 857.162229][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 857.231649][ T6011] usb 2-1: config 6 has an invalid interface number: 165 but max is 3 [ 857.354947][ T6011] usb 2-1: config 6 has an invalid interface number: 94 but max is 3 [ 857.394327][ T6011] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 857.419312][ T6011] usb 2-1: config 6 has an invalid interface number: 113 but max is 3 [ 857.475746][ T6011] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 857.517187][ T6011] usb 2-1: config 6 has an invalid interface number: 134 but max is 3 [ 857.545704][ T6011] usb 2-1: config 6 has an invalid interface number: 197 but max is 3 [ 857.566182][ T6011] usb 2-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 857.592042][ T6011] usb 2-1: config 6 has no interface number 0 [ 857.605091][ T6011] usb 2-1: config 6 has no interface number 1 [ 857.625893][ T6011] usb 2-1: config 6 has no interface number 2 [ 857.651706][ T6011] usb 2-1: config 6 has no interface number 3 [ 857.678901][ T6011] usb 2-1: config 6 has no interface number 4 [ 857.692223][ T6011] usb 2-1: config 6 interface 165 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 857.721954][ T6011] usb 2-1: config 6 interface 165 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 857.748020][ T6011] usb 2-1: config 6 interface 165 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 857.769850][ T6011] usb 2-1: config 6 interface 165 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 857.800618][ T6011] usb 2-1: config 6 interface 165 altsetting 0 endpoint 0xF has invalid maxpacket 8394, setting to 1024 [ 857.832690][ T6011] usb 2-1: config 6 interface 165 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 857.873403][ T6011] usb 2-1: config 6 interface 165 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 857.899299][ T6011] usb 2-1: config 6 interface 165 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 857.936027][ T6011] usb 2-1: config 6 interface 165 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 857.962345][ T6011] usb 2-1: config 6 interface 165 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 857.990669][ T6011] usb 2-1: config 6 interface 165 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 858.065552][ T6011] usb 2-1: config 6 interface 165 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 858.092014][ T6011] usb 2-1: config 6 interface 165 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 858.113332][ T6011] usb 2-1: config 6 interface 94 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 858.152213][ T6011] usb 2-1: config 6 interface 94 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 858.174070][ T6011] usb 2-1: config 6 interface 94 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 858.286063][ T6011] usb 2-1: config 6 interface 94 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 858.298289][ T6011] usb 2-1: config 6 interface 94 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 858.312698][ T6011] usb 2-1: config 6 interface 113 altsetting 163 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 858.388682][ T6011] usb 2-1: config 6 interface 113 altsetting 163 has an invalid descriptor for endpoint zero, skipping [ 858.502212][ T6011] usb 2-1: config 6 interface 113 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 858.513161][ T6011] usb 2-1: config 6 interface 113 altsetting 163 has a duplicate endpoint with address 0xF, skipping [ 858.528195][ T6011] usb 2-1: config 6 interface 113 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 858.540213][ T6011] usb 2-1: config 6 interface 113 altsetting 163 has 7 endpoint descriptors, different from the interface descriptor's value: 24 [ 858.553697][ T6011] usb 2-1: config 6 interface 134 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 858.588827][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 858.620768][ T6011] usb 2-1: config 6 interface 197 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 858.657236][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 858.690669][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 858.726274][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 858.762272][T19117] can: request_module (can-proto-0) failed. [ 858.769260][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 858.805618][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 858.838474][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0x8F, skipping [ 858.870968][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 858.903423][ T5941] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 858.912186][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 858.951026][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 858.975941][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has an endpoint descriptor with address 0x73, changing to 0x3 [ 858.999065][T19121] TCP: TCP_TX_DELAY enabled [ 859.013945][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 859.043337][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 859.074600][ T6011] usb 2-1: config 6 interface 197 altsetting 2 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 859.101387][ T6011] usb 2-1: config 6 interface 94 has no altsetting 0 [ 859.112365][ T6011] usb 2-1: config 6 interface 113 has no altsetting 0 [ 859.121954][ T6011] usb 2-1: config 6 interface 134 has no altsetting 0 [ 859.137713][ T6011] usb 2-1: config 6 interface 197 has no altsetting 0 [ 859.152238][ T6011] usb 2-1: New USB device found, idVendor=0471, idProduct=0326, bcdDevice=65.73 [ 859.171573][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.201149][ T30] audit: type=1326 audit(1767864438.412:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19125 comm="syz.3.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7fc00000 [ 859.202928][T19129] 9p: Bad value for 'rfdno' [ 859.252360][ T6011] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 859.266310][ T6011] usb 2-1: no configuration chosen from 1 choice [ 859.560744][T19133] macvlan2: entered allmulticast mode [ 859.653757][ T6011] usb 2-1: USB disconnect, device number 100 [ 859.703922][T19134] macvlan3: entered allmulticast mode [ 859.932155][ T48] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 860.195079][ T48] usb 5-1: device descriptor read/64, error -71 [ 860.624768][ T48] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 860.802121][ T48] usb 5-1: device descriptor read/64, error -71 [ 860.912976][ T48] usb usb5-port1: attempt power cycle [ 861.514235][T19156] 9p: Bad value for 'wfdno' [ 861.615333][ T48] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 861.683440][ T48] usb 5-1: device descriptor read/8, error -71 [ 861.972571][ T48] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 862.042647][ T48] usb 5-1: device descriptor read/8, error -71 [ 862.100897][ T30] audit: type=1326 audit(1767864441.312:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19125 comm="syz.3.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7fc00000 [ 862.208854][ T48] usb usb5-port1: unable to enumerate USB device [ 862.724053][T19168] netlink: 'syz.3.3162': attribute type 10 has an invalid length. [ 862.733087][T19168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3162'. [ 862.762348][T19168] batman_adv: batadv0: Adding interface: virt_wifi0 [ 862.769009][T19168] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.801262][T19168] batman_adv: batadv0: Interface activated: virt_wifi0 [ 862.824568][ T30] audit: type=1400 audit(1767864441.922:1309): avc: denied { relabelfrom } for pid=19165 comm="syz.3.3162" name="" dev="pipefs" ino=63345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 862.852436][ T30] audit: type=1400 audit(1767864441.932:1310): avc: denied { shutdown } for pid=19165 comm="syz.3.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 863.138039][T19173] serio: Serial port ptm0 [ 863.214969][ T30] audit: type=1800 audit(1767864442.422:1311): pid=19183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3164" name="bus" dev="overlay" ino=203 res=0 errno=0 [ 863.706572][T19186] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 863.862898][ T48] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 864.196894][ T48] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 864.248992][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.408441][ T48] usb 2-1: Product: syz [ 864.416453][ T48] usb 2-1: Manufacturer: syz [ 864.429333][ T48] usb 2-1: SerialNumber: syz [ 864.445572][ T48] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 864.529734][ T6015] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 864.811658][T19217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3175'. [ 866.312002][ T5879] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 866.513880][ T5924] usb 2-1: USB disconnect, device number 101 [ 866.528523][ T6015] usb 2-1: Service connection timeout for: 256 [ 866.534807][ T6015] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 866.543660][ T6015] ath9k_htc: Failed to initialize the device [ 866.545152][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.549892][ T5924] usb 2-1: ath9k_htc: USB layer deinitialized [ 866.602421][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.621636][ T5879] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 866.650287][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.669414][ T5879] usb 5-1: config 0 descriptor?? [ 867.128506][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 867.138022][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 867.168341][ T5879] usb 5-1: USB disconnect, device number 32 [ 868.617801][T19276] bridge_slave_0: left allmulticast mode [ 868.646901][T19276] bridge_slave_0: left promiscuous mode [ 868.670252][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.727767][T19276] bridge_slave_1: left allmulticast mode [ 868.748117][T19276] bridge_slave_1: left promiscuous mode [ 868.771776][T19276] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.823805][T19276] bond0: (slave bond_slave_0): Releasing backup interface [ 868.857237][T19276] bond0: (slave bond_slave_1): Releasing backup interface [ 868.941488][T19288] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 869.303205][T19276] team0: Port device team_slave_0 removed [ 869.328456][T19276] team0: Port device team_slave_1 removed [ 869.347280][ T30] audit: type=1326 audit(1767864448.554:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.380696][T19276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.399114][ T30] audit: type=1326 audit(1767864448.554:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.425981][T19276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.433591][ T30] audit: type=1326 audit(1767864448.564:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0d58df90 code=0x7ffc0000 [ 869.458692][T19276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.467403][T19276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.477124][ T30] audit: type=1326 audit(1767864448.564:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.569755][T19276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 869.606261][ T30] audit: type=1326 audit(1767864448.564:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.634106][T19296] macsec2: entered promiscuous mode [ 869.635480][ T30] audit: type=1326 audit(1767864448.564:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.648983][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.667472][ T30] audit: type=1326 audit(1767864448.564:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.695766][T19296] bridge0: entered promiscuous mode [ 869.765372][ T30] audit: type=1326 audit(1767864448.564:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.892112][ T30] audit: type=1326 audit(1767864448.564:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 869.892167][ T30] audit: type=1326 audit(1767864448.594:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19290 comm="syz.3.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b0d58f749 code=0x7ffc0000 [ 870.512422][T19304] No control pipe specified [ 871.029672][ T5879] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 871.182295][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 871.192015][ T5879] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 871.200192][ T5879] usb 2-1: config 0 has no interface number 0 [ 871.224584][ T5879] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b0.11 [ 871.242042][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.261973][ T5879] usb 2-1: Product: syz [ 871.267686][ T5879] usb 2-1: Manufacturer: syz [ 871.320413][ T5879] usb 2-1: SerialNumber: syz [ 871.334807][ T5879] usb 2-1: config 0 descriptor?? [ 871.353298][ T5879] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 871.400691][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 871.510977][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 871.888119][T19319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3200'. [ 871.899854][ T5879] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 871.923520][ T5879] usb 2-1: media controller created [ 871.936605][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 871.956027][T19319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3200'. [ 871.970945][ T5879] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 872.142260][ T5879] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 872.878682][ T5879] rc_core: IR keymap rc-dtt200u not found [ 872.904812][ T5879] Registered IR keymap rc-empty [ 872.926860][ T5879] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 872.973651][ T5879] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input49 [ 873.086438][ T5879] dvb-usb: schedule remote query interval to 300 msecs. [ 873.113260][ T5879] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 873.196995][T19350] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 873.422479][ T6011] dvb-usb: bulk message failed: -22 (1/0) [ 873.705407][ T6011] dvb-usb: error -22 while querying for an remote control event. [ 873.724001][ T5879] usb 2-1: USB disconnect, device number 102 [ 873.743361][ T6438] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 873.933661][T19349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 874.051999][ T6438] usb 5-1: Using ep0 maxpacket: 16 [ 874.062929][ T5879] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 874.063534][ T6438] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.305054][ T6438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 874.325764][T19361] overlayfs: failed to clone upperpath [ 874.325764][T19362] overlayfs: failed to clone upperpath [ 874.372077][ T6438] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 874.390895][ T6438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.507294][ T6438] usb 5-1: config 0 descriptor?? [ 874.533505][ T6438] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 874.540180][ T6438] dvb-usb: bulk message failed: -22 (3/0) [ 874.615311][ T6438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 874.660209][ T6438] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 874.683150][ T6438] usb 5-1: media controller created [ 874.718188][ T6438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.823361][ T6438] dvb-usb: bulk message failed: -22 (6/0) [ 874.852068][ T6438] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 874.875167][ T6438] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 874.902202][T12892] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 874.911586][ T6438] dvb-usb: schedule remote query interval to 150 msecs. [ 874.936590][ T6438] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 875.094361][T12892] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 875.115652][T12892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.130711][T19381] wg1 speed is unknown, defaulting to 1000 [ 875.136680][T18915] dvb-usb: bulk message failed: -22 (1/0) [ 875.142738][T18915] dvb-usb: error while querying for an remote control event. [ 875.153506][T12892] usb 2-1: config 0 descriptor?? [ 875.161801][T19381] lo speed is unknown, defaulting to 1000 [ 875.180855][T12892] gspca_main: spca508-2.14.0 probing 8086:0110 [ 875.312947][ T6438] dvb-usb: bulk message failed: -22 (1/0) [ 875.325391][ T6438] dvb-usb: error while querying for an remote control event. [ 875.384518][T12892] gspca_spca508: reg_read err -32 [ 875.395468][T12892] gspca_spca508: reg_read err -32 [ 875.408102][T12892] gspca_spca508: reg_read err -32 [ 875.421505][T12892] gspca_spca508: reg_read err -32 [ 875.427654][T12892] gspca_spca508: reg_read err -32 [ 875.477196][T19386] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 875.512549][ T6438] dvb-usb: bulk message failed: -22 (1/0) [ 875.526753][ T6438] dvb-usb: error while querying for an remote control event. [ 875.737635][ T6438] dvb-usb: bulk message failed: -22 (1/0) [ 875.743706][T12892] gspca_spca508: reg write: error -71 [ 875.754124][T12892] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 875.762525][ T6438] dvb-usb: error while querying for an remote control event. [ 875.835033][T19391] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 876.293715][ T9757] usb 5-1: USB disconnect, device number 33 [ 876.326763][T12892] usb 2-1: USB disconnect, device number 103 [ 876.374547][ T9757] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 876.723569][T19399] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 877.432709][ T9757] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 877.657464][ T9757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.793510][ T9757] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 877.811524][ T5860] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 878.055238][ T9757] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 878.082392][ T9757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.363927][ T9757] usb 5-1: config 0 descriptor?? [ 879.422345][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.118789][ T5860] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 880.134986][ T9757] usb 5-1: can't set config #0, error -71 [ 880.142200][ T5860] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 880.154307][ T9757] usb 5-1: USB disconnect, device number 34 [ 880.160286][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.178190][ T5860] usb 2-1: config 0 descriptor?? [ 880.234860][ T5860] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 880.261249][ T5860] dvb-usb: bulk message failed: -22 (3/0) [ 880.394332][T19223] libceph: connect (1)[c::]:6789 error -101 [ 880.394550][ T5860] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 880.425801][T19223] libceph: mon0 (1)[c::]:6789 connect error [ 880.443748][ T5860] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 880.509920][T19426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3230'. [ 880.984784][ T5860] usb 2-1: media controller created [ 880.992920][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.013843][T12892] libceph: connect (1)[c::]:6789 error -101 [ 881.014243][ T5860] dvb-usb: bulk message failed: -22 (6/0) [ 881.036195][ T5860] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 881.042203][T12892] libceph: mon0 (1)[c::]:6789 connect error [ 881.060227][T19420] ceph: No mds server is up or the cluster is laggy [ 881.083738][ T5860] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 881.125313][ T5860] dvb-usb: schedule remote query interval to 150 msecs. [ 881.161975][ T5860] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 881.240028][ T5860] usb 2-1: USB disconnect, device number 104 [ 881.310960][T19429] overlayfs: failed to clone upperpath [ 881.383592][ T5860] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 881.422411][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 881.422428][ T30] audit: type=1400 audit(1767864460.644:1367): avc: denied { getopt } for pid=19434 comm="syz.3.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 881.586890][T19447] netlink: 336 bytes leftover after parsing attributes in process `syz.7.3237'. [ 881.822086][ T5860] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 881.996009][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 882.027385][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 882.083859][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 882.115787][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 882.145438][ T5860] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 882.257858][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.267886][ T5860] usb 2-1: Product: syz [ 882.287902][ T5860] usb 2-1: Manufacturer: syz [ 882.787088][ T5860] usb 2-1: SerialNumber: syz [ 882.803644][ T5860] usb 2-1: config 0 descriptor?? [ 882.809731][T19433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 883.035711][T12892] usb 2-1: USB disconnect, device number 105 [ 883.661142][T19485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=19485 comm=syz.1.3248 [ 883.695215][ T5860] IPVS: starting estimator thread 0... [ 883.705152][T19485] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 883.761847][ T30] audit: type=1400 audit(1767864462.944:1368): avc: denied { getopt } for pid=19481 comm="syz.7.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 883.766505][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3246'. [ 883.832669][T19490] IPVS: using max 76 ests per chain, 182400 per kthread [ 884.752030][ T5860] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 884.913138][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 884.919788][ T5860] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 884.942624][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 884.995417][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 885.020151][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 885.056269][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 885.142436][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.214001][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 885.248182][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.316538][T19526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16403 sclass=netlink_route_socket pid=19526 comm=syz.3.3259 [ 885.491363][ T5860] usb 2-1: usb_control_msg returned -32 [ 885.513058][ T5860] usbtmc 2-1:16.0: can't read capabilities [ 886.001452][T19541] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 886.267551][T12892] usb 2-1: USB disconnect, device number 106 [ 886.592105][T19555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3264'. [ 887.063897][ T5138] Bluetooth: hci5: command 0x0406 tx timeout [ 887.418693][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'. [ 887.922572][T18915] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 889.943894][T18915] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.955036][T18915] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.971451][T18915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 889.979296][T18915] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 889.991040][T12892] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 889.999818][T18915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.014787][T18915] usb 2-1: config 0 descriptor?? [ 890.451260][T12892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.631135][T12892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.667867][T12892] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 890.677864][T18915] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0017/input/input53 [ 890.888185][T12892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 891.395206][T12892] usb 5-1: SerialNumber: syz [ 891.422174][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3279'. [ 891.476155][T18915] sony 0003:054C:03D5.0017: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 892.413041][T12892] usb 5-1: 0:2 : does not exist [ 892.452167][T12892] usb 5-1: unit 5 not found! [ 892.512953][ T8895] usb 2-1: USB disconnect, device number 107 [ 892.567604][T12892] usb 5-1: USB disconnect, device number 35 [ 892.642277][T18929] udevd[18929]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.655747][T19611] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3282'. [ 892.710168][ T30] audit: type=1400 audit(1767864471.924:1369): avc: denied { write } for pid=19609 comm="syz.3.3280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 892.722737][T19611] cgroup: No subsys list or none specified [ 892.778799][ T30] audit: type=1400 audit(1767864471.924:1370): avc: denied { read } for pid=19609 comm="syz.3.3280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 894.186089][T19620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.222006][T12892] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 894.377458][T12892] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 894.395550][T12892] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 894.409047][T12892] usb 5-1: config 220 has no interface number 2 [ 894.415688][T12892] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 894.429488][T12892] usb 5-1: config 220 interface 0 has no altsetting 0 [ 894.436885][T12892] usb 5-1: config 220 interface 76 has no altsetting 0 [ 894.444262][T12892] usb 5-1: config 220 interface 1 has no altsetting 0 [ 894.459481][T12892] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 894.587182][T12892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.602240][T12892] usb 5-1: Product: syz [ 894.606607][T12892] usb 5-1: Manufacturer: syz [ 894.611202][T12892] usb 5-1: SerialNumber: syz [ 896.154927][T12892] usb 5-1: selecting invalid altsetting 0 [ 896.176524][T19638] random: crng reseeded on system resumption [ 896.191722][T12892] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 896.208997][T12892] uvcvideo 5-1:220.0: No valid video chain found. [ 896.235316][T12892] usb 5-1: selecting invalid altsetting 0 [ 896.241147][T12892] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 896.399115][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'. [ 897.332262][T12892] usb 5-1: USB disconnect, device number 36 [ 897.342952][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'. [ 898.272066][T19659] hfs: can't find a HFS filesystem on dev nullb0 [ 898.283765][T19659] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 898.291505][T19659] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 898.299771][T19659] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 898.307533][T19659] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 898.378051][T19663] overlayfs: failed to resolve './file2': -2 [ 899.775114][T19680] overlayfs: failed to clone upperpath [ 899.822013][ T9757] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 899.995833][ T9757] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.009543][ T9757] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 900.018957][ T9757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.027338][ T9757] usb 2-1: Product: syz [ 900.031704][ T9757] usb 2-1: Manufacturer: syz [ 900.039977][ T9757] usb 2-1: SerialNumber: syz [ 900.053124][ T9757] usb 2-1: config 0 descriptor?? [ 900.068732][ T9757] imon_raw 2-1:0.0: IR endpoint missing [ 900.359736][T19707] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3302'. [ 901.647244][ T30] audit: type=1400 audit(1767864480.864:1371): avc: denied { listen } for pid=19722 comm="syz.7.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 901.922078][ T9757] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 902.062066][ T9757] usb 5-1: device descriptor read/64, error -71 [ 902.213921][ T30] audit: type=1400 audit(1767864481.434:1372): avc: denied { execute } for pid=19739 comm="syz.6.3313" path="/cpuacct.usage_percpu" dev="rootfs" ino=64413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 902.324399][ T9757] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 902.472255][ T9757] usb 5-1: device descriptor read/64, error -71 [ 902.584993][ T9757] usb usb5-port1: attempt power cycle [ 902.670501][ T5826] usb 2-1: USB disconnect, device number 108 [ 903.446382][ T9757] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 903.502948][ T9757] usb 5-1: device descriptor read/8, error -71 [ 903.547406][ T30] audit: type=1326 audit(1767864482.764:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19756 comm="syz.7.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc379d8f749 code=0x7fc00000 [ 903.772055][ T9757] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 903.806307][ T9757] usb 5-1: device descriptor read/8, error -71 [ 903.932563][ T9757] usb usb5-port1: unable to enumerate USB device [ 904.733918][ T30] audit: type=1400 audit(1767864483.954:1374): avc: denied { accept } for pid=19790 comm="syz.6.3328" path="socket:[64472]" dev="sockfs" ino=64472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 904.795564][ T30] audit: type=1400 audit(1767864483.974:1375): avc: denied { getopt } for pid=19790 comm="syz.6.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 905.005652][T19811] tipc: Enabled bearer , priority 10 [ 905.681999][ T5826] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 905.744617][ T30] audit: type=1400 audit(1767864484.964:1376): avc: denied { setattr } for pid=19834 comm="syz.7.3341" name="NETLINK" dev="sockfs" ino=65645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 905.842389][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 905.852771][ T5826] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 905.875583][ T5826] usb 2-1: config 0 has no interface number 0 [ 905.895536][ T5826] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.909866][ T5826] usb 2-1: config 0 interface 85 has no altsetting 0 [ 905.918529][ T5826] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 905.929980][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.939376][ T5826] usb 2-1: Product: syz [ 905.946412][ T5826] usb 2-1: Manufacturer: syz [ 905.962083][ T5826] usb 2-1: SerialNumber: syz [ 905.978997][ T5826] usb 2-1: config 0 descriptor?? [ 906.243574][ T5826] appletouch 2-1:0.85: Failed to request geyser raw mode [ 906.317027][T19851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3344'. [ 906.773435][ T5826] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 906.817512][T19853] overlayfs: failed to clone upperpath [ 906.863297][ T5826] usb 2-1: USB disconnect, device number 109 [ 907.982011][ T6011] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 908.086132][ T30] audit: type=1400 audit(1767864487.304:1377): avc: denied { map } for pid=19872 comm="syz.6.3351" path="socket:[65436]" dev="sockfs" ino=65436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 908.132214][ T6011] usb 2-1: device descriptor read/64, error -71 [ 908.192708][T19879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3353'. [ 908.392019][ T6011] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 908.439292][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 908.466590][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 908.495010][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 908.522902][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 908.550545][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 908.624274][ T6011] usb 2-1: device descriptor read/64, error -71 [ 908.628338][ T30] audit: type=1400 audit(1767864487.844:1378): avc: denied { unmount } for pid=18568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 908.742678][ T6011] usb usb2-port1: attempt power cycle [ 908.808133][ T30] audit: type=1400 audit(1767864488.024:1379): avc: denied { setopt } for pid=19893 comm="syz.4.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 909.509732][ T30] audit: type=1326 audit(1767864488.724:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19898 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233af8f749 code=0x7ffc0000 [ 909.533475][ T6011] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 909.542743][ T30] audit: type=1326 audit(1767864488.724:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19898 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233af8f749 code=0x7ffc0000 [ 909.578747][T19902] wg1 speed is unknown, defaulting to 1000 [ 909.585350][T19902] lo speed is unknown, defaulting to 1000 [ 909.620643][ T6011] usb 2-1: device descriptor read/8, error -71 [ 909.685866][ T30] audit: type=1326 audit(1767864488.724:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19898 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f233af8f749 code=0x7ffc0000 [ 909.713989][ T30] audit: type=1326 audit(1767864488.724:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19898 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233af8f749 code=0x7ffc0000 [ 909.738858][ T30] audit: type=1326 audit(1767864488.724:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19898 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233af8f749 code=0x7ffc0000 [ 909.762676][ T30] audit: type=1326 audit(1767864488.754:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19898 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f233af8f749 code=0x7ffc0000 [ 909.874020][ T30] audit: type=1326 audit(1767864488.754:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19898 comm="syz.6.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233af8f749 code=0x7ffc0000 [ 909.952078][ T6011] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 910.184708][ T6011] usb 2-1: device not accepting address 113, error -71 [ 910.193847][ T6011] usb usb2-port1: unable to enumerate USB device [ 910.404110][T19941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=19941 comm=syz.4.3372 [ 910.502446][ T6011] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 910.652003][ T6011] usb 2-1: Using ep0 maxpacket: 16 [ 910.665446][ T6011] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 910.680567][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.706192][ T6011] usb 2-1: config 0 descriptor?? [ 911.198732][ T6011] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 911.383434][T19947] ceph: No mds server is up or the cluster is laggy [ 912.762892][ T6011] gspca_sonixj: reg_w1 err -110 [ 912.801611][ T6011] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 912.856070][ T6011] usb 2-1: USB disconnect, device number 114 [ 915.094046][T19999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19999 comm=syz.3.3386 [ 915.896964][T19998] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 916.938827][T20032] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 916.949041][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 916.949050][ T30] audit: type=1400 audit(1767864496.164:1427): avc: denied { relabelto } for pid=20031 comm="syz.6.3393" name="file0" dev="tmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0" [ 917.007027][ T30] audit: type=1400 audit(1767864496.204:1428): avc: denied { associate } for pid=20031 comm="syz.6.3393" name="file0" dev="tmpfs" ino=2837 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_console_exec_t:s0" [ 917.198806][T19701] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.220446][T19701] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.241613][T19701] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.260814][T19701] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.286564][T19701] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.312089][T19701] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.380668][T19701] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.584742][T19701] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.688535][T20055] syzkaller0: entered promiscuous mode [ 917.722969][T20055] syzkaller0: entered allmulticast mode [ 917.883169][T20059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3398'. [ 918.092591][ T6011] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 918.135030][T20063] overlayfs: failed to clone upperpath [ 918.262057][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 918.270687][ T6011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 918.289183][ T6011] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 918.315113][ T6011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 918.328144][ T6011] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 918.340059][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.355560][ T6011] usb 2-1: Product: syz [ 918.360543][ T6011] usb 2-1: Manufacturer: syz [ 918.369352][ T6011] usb 2-1: SerialNumber: syz [ 918.378911][ T6011] usb 2-1: config 0 descriptor?? [ 918.388637][ T6011] radioshark 2-1:0.0: Invalid radioSHARK device [ 918.394973][ T6011] radioshark 2-1:0.0: probe with driver radioshark failed with error -22 [ 918.404878][ T6011] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 918.494834][T20070] netlink: 'syz.4.3403': attribute type 2 has an invalid length. [ 918.622364][T20070] !9: entered promiscuous mode [ 918.919183][T11255] usb 2-1: USB disconnect, device number 115 [ 920.710431][T20100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3408'. [ 920.824995][T20082] bond0: (slave team0): Releasing backup interface [ 920.832893][T20082] team0 (unregistering): left promiscuous mode [ 920.839050][T20082] team_slave_0: left promiscuous mode [ 920.845129][T20082] team_slave_1: left promiscuous mode [ 920.850601][T20082] team0 (unregistering): left allmulticast mode [ 920.851990][T19976] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 920.866597][T20082] team_slave_0: left allmulticast mode [ 920.873112][T20082] team_slave_1: left allmulticast mode [ 920.901808][T20082] team0 (unregistering): Port device team_slave_0 removed [ 920.911744][T20082] team0 (unregistering): Port device team_slave_1 removed [ 921.023854][T19976] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 921.042226][T19976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.063369][T19976] usb 5-1: config 0 descriptor?? [ 921.387890][T20105] 9p: Bad value for 'rfdno' [ 921.404892][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3409'. [ 922.096973][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3411'. [ 922.855952][T20107] ceph: No mds server is up or the cluster is laggy [ 923.467268][T19976] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 923.482338][T19976] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 923.500024][T19976] usb 5-1: USB disconnect, device number 41 [ 923.582418][T20137] netlink: zone id is out of range [ 923.593014][T20137] netlink: zone id is out of range [ 923.604398][T20137] netlink: zone id is out of range [ 923.616046][T20137] netlink: zone id is out of range [ 923.621248][T20137] netlink: zone id is out of range [ 923.626758][T20137] netlink: zone id is out of range [ 923.766419][T20135] tipc: Enabling of bearer rejected, already enabled [ 923.793011][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3417'. [ 923.802658][T20135] tipc: Disabling bearer [ 924.238003][T20151] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 925.014968][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3424'. [ 925.274532][ T30] audit: type=1400 audit(1767864504.464:1429): avc: denied { setopt } for pid=20160 comm="syz.1.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 925.949705][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3429'. [ 928.762148][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 928.812089][ T5860] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1034.821862][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1034.828819][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5187/1:b..l P12636/1:b..l [ 1034.838413][ C0] rcu: (detected by 0, t=10502 jiffies, g=89449, q=336 ncpus=2) [ 1034.846099][ C0] task:syz-executor state:R running task stack:23704 pid:12636 tgid:12636 ppid:12616 task_flags:0x400140 flags:0x00080000 [ 1034.860366][ C0] Call Trace: [ 1034.863626][ C0] [ 1034.866536][ C0] ? __schedule+0x10b9/0x6150 [ 1034.871193][ C0] __schedule+0x1139/0x6150 [ 1034.875669][ C0] ? __lock_acquire+0x436/0x2890 [ 1034.880585][ C0] ? __pfx___schedule+0x10/0x10 [ 1034.885406][ C0] ? mark_held_locks+0x49/0x80 [ 1034.890140][ C0] preempt_schedule_irq+0x51/0x90 [ 1034.895137][ C0] irqentry_exit+0x1d8/0x8c0 [ 1034.899700][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.905649][ C0] RIP: 0010:unwind_next_frame+0x19b/0x20b0 [ 1034.911427][ C0] Code: ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 0f 85 5f 17 00 00 4d 8b 7d 48 3c 01 49 83 df 00 4d 85 ff 0f 84 31 09 00 00 <49> 81 ff 00 00 00 81 0f 82 5b 02 00 00 49 81 ff f0 23 7c 8b 0f 83 [ 1034.931005][ C0] RSP: 0018:ffffc90003126e30 EFLAGS: 00000286 [ 1034.937041][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffff92000624ddd [ 1034.944983][ C0] RDX: dffffc0000000000 RSI: ffffffff8bf2b300 RDI: ffffffff8dd7bf20 [ 1034.952931][ C0] RBP: ffffc90003126ee8 R08: 000000009ecfde30 R09: 0000000009ecfde3 [ 1034.960884][ C0] R10: 0000000000000002 R11: ffff888022b954b0 R12: ffffc90003126ef0 [ 1034.968836][ C0] R13: ffffc90003126ea0 R14: ffffc90003126ed5 R15: ffffffff817b7dde [ 1034.976785][ C0] ? copy_process+0x3b9e/0x7430 [ 1034.981639][ C0] ? copy_process+0x3b9f/0x7430 [ 1034.986477][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1034.992619][ C0] arch_stack_walk+0x94/0x100 [ 1034.997284][ C0] ? copy_process+0x3b9f/0x7430 [ 1035.002122][ C0] stack_trace_save+0x8e/0xc0 [ 1035.006776][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1035.012137][ C0] ? mark_held_locks+0x49/0x80 [ 1035.016875][ C0] save_stack+0x160/0x1f0 [ 1035.021178][ C0] ? __pfx_save_stack+0x10/0x10 [ 1035.026001][ C0] ? post_alloc_hook+0x1af/0x220 [ 1035.030915][ C0] ? get_page_from_freelist+0xd0b/0x31a0 [ 1035.036517][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1035.042562][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 1035.047556][ C0] ? alloc_pages_noprof+0x131/0x390 [ 1035.052725][ C0] ? __pmd_alloc+0x3b/0x9c0 [ 1035.057208][ C0] ? copy_page_range+0x4620/0x6780 [ 1035.062300][ C0] ? dup_mmap+0xbea/0x20e0 [ 1035.066689][ C0] ? copy_process+0x3b9f/0x7430 [ 1035.071518][ C0] __set_page_owner+0x91/0x560 [ 1035.076261][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1035.081607][ C0] ? bad_range+0x261/0x4c0 [ 1035.085995][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1035.091169][ C0] post_alloc_hook+0x1af/0x220 [ 1035.095912][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1035.101343][ C0] ? __pfx___might_resched+0x10/0x10 [ 1035.106601][ C0] ? __next_zones_zonelist+0x8b/0x150 [ 1035.111949][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1035.117816][ C0] ? __lock_acquire+0x436/0x2890 [ 1035.122727][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1035.129028][ C0] ? find_held_lock+0x2b/0x80 [ 1035.133689][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1035.138866][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 1035.143606][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1035.149469][ C0] ? policy_nodemask+0xea/0x4e0 [ 1035.154293][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1035.159125][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1035.164483][ C0] alloc_pages_noprof+0x131/0x390 [ 1035.169490][ C0] __pmd_alloc+0x3b/0x9c0 [ 1035.173804][ C0] copy_page_range+0x4620/0x6780 [ 1035.178719][ C0] ? __lock_acquire+0x436/0x2890 [ 1035.183628][ C0] ? __lock_acquire+0x436/0x2890 [ 1035.188542][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1035.194409][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1035.199676][ C0] ? mas_store+0xb4b/0x12f0 [ 1035.204161][ C0] ? __vma_enter_locked+0x1dc/0x770 [ 1035.209337][ C0] ? __pfx_mas_store+0x10/0x10 [ 1035.214082][ C0] dup_mmap+0xbea/0x20e0 [ 1035.218313][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1035.222973][ C0] copy_process+0x3b9f/0x7430 [ 1035.227636][ C0] ? do_wp_page+0x1c04/0x5010 [ 1035.232291][ C0] ? __pfx_copy_process+0x10/0x10 [ 1035.237291][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1035.242293][ C0] kernel_clone+0xfc/0x910 [ 1035.246679][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1035.251677][ C0] __do_sys_clone+0xce/0x120 [ 1035.256236][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1035.261403][ C0] ? count_memcg_events+0x122/0x290 [ 1035.266597][ C0] ? do_user_addr_fault+0x843/0x1370 [ 1035.271864][ C0] do_syscall_64+0xcd/0xf80 [ 1035.276364][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.282235][ C0] RIP: 0033:0x7fc379d85e93 [ 1035.286618][ C0] RSP: 002b:00007ffd6acc1468 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1035.294996][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc379d85e93 [ 1035.302938][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1035.310880][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1035.318821][ C0] R10: 00005555833937d0 R11: 0000000000000246 R12: 0000000000000000 [ 1035.326766][ C0] R13: 00000000000927c0 R14: 00000000000e257f R15: 00007ffd6acc1600 [ 1035.334715][ C0] [ 1035.337714][ C0] task:udevd state:R running task stack:24728 pid:5187 tgid:5187 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1035.351153][ C0] Call Trace: [ 1035.354413][ C0] [ 1035.357317][ C0] ? __schedule+0x10b9/0x6150 [ 1035.361965][ C0] __schedule+0x1139/0x6150 [ 1035.366447][ C0] ? __pfx___schedule+0x10/0x10 [ 1035.371271][ C0] preempt_schedule_irq+0x51/0x90 [ 1035.376278][ C0] irqentry_exit+0x1d8/0x8c0 [ 1035.380841][ C0] ? rcu_is_watching+0x12/0xc0 [ 1035.385576][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1035.391009][ C0] RIP: 0010:lock_release+0x183/0x2d0 [ 1035.396264][ C0] Code: 0f c1 05 f8 00 19 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d b9 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1035.415846][ C0] RSP: 0018:ffffc9000472f590 EFLAGS: 00000206 [ 1035.421884][ C0] RAX: ee650b20a5666e00 RBX: ffffffff8e3c96a0 RCX: ffffc9000472f59c [ 1035.429838][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7f9d RDI: ffffffff8bf2b380 [ 1035.437781][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 00000000ffffffff [ 1035.445721][ C0] R10: 0000000000000002 R11: 0000000000035d4e R12: ffffffff816cb9a4 [ 1035.453663][ C0] R13: 0000000000000206 R14: ffff88807bec4980 R15: 0000000000000001 [ 1035.461609][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 1035.466795][ C0] unwind_next_frame+0x3f9/0x20b0 [ 1035.471799][ C0] ? security_file_alloc+0x34/0x2b0 [ 1035.476972][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1035.483098][ C0] arch_stack_walk+0x94/0x100 [ 1035.487749][ C0] ? init_file+0x93/0x4c0 [ 1035.492054][ C0] stack_trace_save+0x8e/0xc0 [ 1035.496710][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1035.502051][ C0] ? stack_trace_save+0x8e/0xc0 [ 1035.506873][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1035.512214][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 1035.517664][ C0] kasan_save_stack+0x33/0x60 [ 1035.522311][ C0] ? kasan_save_stack+0x33/0x60 [ 1035.527132][ C0] ? kasan_save_track+0x14/0x30 [ 1035.531952][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1035.536958][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1035.542557][ C0] ? security_file_alloc+0x34/0x2b0 [ 1035.547745][ C0] kasan_save_track+0x14/0x30 [ 1035.552393][ C0] __kasan_slab_alloc+0x89/0x90 [ 1035.557215][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 1035.562642][ C0] ? security_file_alloc+0x34/0x2b0 [ 1035.567816][ C0] ? security_file_alloc+0x34/0x2b0 [ 1035.572986][ C0] security_file_alloc+0x34/0x2b0 [ 1035.577984][ C0] init_file+0x93/0x4c0 [ 1035.582113][ C0] alloc_empty_file+0x73/0x1e0 [ 1035.586848][ C0] path_openat+0xde/0x3140 [ 1035.591263][ C0] ? do_syscall_64+0xcd/0xf80 [ 1035.595920][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.601964][ C0] ? __pfx_path_openat+0x10/0x10 [ 1035.606886][ C0] do_filp_open+0x20b/0x470 [ 1035.611363][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1035.616370][ C0] ? alloc_fd+0x471/0x7d0 [ 1035.620677][ C0] do_sys_openat2+0x121/0x290 [ 1035.625330][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1035.630496][ C0] ? __sys_sendmsg+0x18c/0x220 [ 1035.635238][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1035.640325][ C0] __x64_sys_openat+0x174/0x210 [ 1035.645145][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1035.650508][ C0] do_syscall_64+0xcd/0xf80 [ 1035.654984][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.660845][ C0] RIP: 0033:0x7f255dea7407 [ 1035.665237][ C0] RSP: 002b:00007ffe7b894ce0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1035.673618][ C0] RAX: ffffffffffffffda RBX: 00007f255e699880 RCX: 00007f255dea7407 [ 1035.681557][ C0] RDX: 0000000000080141 RSI: 000055913c74202e RDI: ffffffffffffff9c [ 1035.689507][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.697620][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 1035.705561][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 1035.713509][ C0] [ 1035.716504][ C0] rcu: rcu_preempt kthread starved for 10587 jiffies! g89449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1035.727663][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1035.737697][ C0] rcu: RCU grace-period kthread stack dump: [ 1035.743563][ C0] task:rcu_preempt state:R running task stack:28432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1035.757012][ C0] Call Trace: [ 1035.760273][ C0] [ 1035.763179][ C0] ? __schedule+0x10b9/0x6150 [ 1035.767831][ C0] __schedule+0x1139/0x6150 [ 1035.772306][ C0] ? __lock_acquire+0x436/0x2890 [ 1035.777221][ C0] ? __mod_timer+0x8f2/0xd30 [ 1035.781785][ C0] ? __pfx___schedule+0x10/0x10 [ 1035.786604][ C0] ? find_held_lock+0x2b/0x80 [ 1035.791262][ C0] ? schedule+0x2d7/0x3a0 [ 1035.795563][ C0] schedule+0xe7/0x3a0 [ 1035.799605][ C0] schedule_timeout+0x123/0x290 [ 1035.804428][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1035.809768][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1035.815030][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1035.820825][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1035.826257][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1035.830997][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1035.836259][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1035.841431][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1035.846339][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1035.851165][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1035.856944][ C0] rcu_gp_kthread+0x26d/0x380 [ 1035.861596][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1035.866768][ C0] ? rcu_is_watching+0x12/0xc0 [ 1035.871502][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1035.876671][ C0] ? __kthread_parkme+0x19e/0x250 [ 1035.881674][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1035.886851][ C0] kthread+0x3c5/0x780 [ 1035.890891][ C0] ? __pfx_kthread+0x10/0x10 [ 1035.895460][ C0] ? rcu_is_watching+0x12/0xc0 [ 1035.900195][ C0] ? __pfx_kthread+0x10/0x10 [ 1035.904757][ C0] ret_from_fork+0x983/0xb10 [ 1035.909319][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1035.914401][ C0] ? __switch_to+0x7af/0x10d0 [ 1035.919050][ C0] ? __pfx_kthread+0x10/0x10 [ 1035.923612][ C0] ret_from_fork_asm+0x1a/0x30 [ 1035.928357][ C0] [ 1035.931348][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1035.937646][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1035.942827][ C1] NMI backtrace for cpu 1 [ 1035.942847][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.942867][ C1] Tainted: [L]=SOFTLOCKUP [ 1035.942872][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1035.942881][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1035.942899][ C1] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1035.942912][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1035.942924][ C1] RAX: 000000000241fb31 RBX: 0000000000000001 RCX: ffffffff8b7826d9 [ 1035.942933][ C1] RDX: 0000000000000000 RSI: ffffffff8dace031 RDI: ffffffff8bf2b380 [ 1035.942942][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 1035.942951][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 1035.942959][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 1035.942968][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1035.942982][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1035.942992][ C1] CR2: fffffffffffffe70 CR3: 00000000687e3000 CR4: 00000000003526f0 [ 1035.943001][ C1] Call Trace: [ 1035.943007][ C1] [ 1035.943012][ C1] default_idle+0x13/0x20 [ 1035.943031][ C1] default_idle_call+0x6c/0xb0 [ 1035.943049][ C1] do_idle+0x38d/0x510 [ 1035.943071][ C1] ? __pfx_do_idle+0x10/0x10 [ 1035.943093][ C1] cpu_startup_entry+0x4f/0x60 [ 1035.943113][ C1] start_secondary+0x21d/0x2d0 [ 1035.943127][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1035.943143][ C1] common_startup_64+0x13e/0x148 [ 1035.943164][ C1]