last executing test programs: 5m32.428740603s ago: executing program 1 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe01000000000000", 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r4, 0x601, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44805}, 0x800) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/203) r5 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000140)=""/255) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) socket(0x10, 0x3, 0x0) (async) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe01000000000000", 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r4, 0x601, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44805}, 0x800) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/203) (async) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) (async) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000140)=""/255) (async) 5m32.15180862s ago: executing program 1 (id=35): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x23e}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='ext4_journal_start\x00', r1, 0x0, 0x85}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x3}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0xff000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}], 0x78) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0x2d0, 0x23e, 0x1, 0x1, 0xdd9f83, 0x8, 0x9, 0x1, 0x2, 0xe, 0x722, 0x13, 0x7, 0x6f, 0x3e, 0xb763599953cb090d, {0x0, 0x6fd8e845}, 0x3, 0xed}}) 5m31.095639316s ago: executing program 1 (id=37): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = dup(r0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b1a, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004044) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x404083, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1f, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x0, r3, &(0x7f0000000000)="98", 0x1, 0x3e7ffffffc, 0x0, 0x10}]) 5m30.717496985s ago: executing program 1 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b702000014000000b7030000700000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x102b, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8001}, {0x9, 0x0, 0x1}], @llc={@snap={0xab, 0xab, "cd24", "0000e3", 0x8847, "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"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100ffff0900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a4f010000000000000000010020000c00024000000000000000010900010092797a310000000004000480140000001100010000000000000000000000000a"], 0xb8}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 5m29.778167105s ago: executing program 1 (id=47): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x3f) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvfrom$ax25(r1, 0x0, 0x0, 0x20, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 5m29.567523085s ago: executing program 1 (id=48): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) semget$private(0x0, 0x20000000102, 0x140) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x178, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x8001}}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x10, 0xde}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x91, 0x8, 0x5, 0x0, 0x4, 0x3, 0x9}}, {0x16, 0x2, [0x3, 0xf6e0, 0x0, 0xff01, 0x8, 0xb, 0x80e5, 0x7, 0x4]}}, {{0x1c, 0x1, {0xe0, 0xe9, 0x1, 0x80000001, 0x1, 0x0, 0xffff, 0x3}}, {0xa, 0x2, [0x5, 0xf, 0xc9d]}}, {{0x1c, 0x1, {0x8, 0x3, 0x0, 0x10, 0x1, 0x3, 0x3, 0x5}}, {0xe, 0x2, [0x5, 0x8, 0x29d5, 0x40, 0xea5d]}}, {{0x1c, 0x1, {0x4, 0x80, 0x2b, 0x400, 0x1, 0x8, 0x5, 0x2}}, {0x8, 0x2, [0x2, 0x9]}}, {{0x1c, 0x1, {0x7, 0x3, 0x0, 0x1, 0x0, 0x7, 0x9, 0x6}}, {0x10, 0x2, [0x3, 0xee00, 0x6947, 0x5, 0x3, 0x8]}}, {{0x1c, 0x1, {0x3, 0x1, 0x7ff, 0x7, 0x2, 0xffffff00, 0xfff, 0x6}}, {0x10, 0x2, [0x2, 0xaa, 0x4, 0x6, 0x1, 0x140]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20041) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x24) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r8}) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) 5m29.427771505s ago: executing program 32 (id=48): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) semget$private(0x0, 0x20000000102, 0x140) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x178, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x8001}}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x10, 0xde}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x91, 0x8, 0x5, 0x0, 0x4, 0x3, 0x9}}, {0x16, 0x2, [0x3, 0xf6e0, 0x0, 0xff01, 0x8, 0xb, 0x80e5, 0x7, 0x4]}}, {{0x1c, 0x1, {0xe0, 0xe9, 0x1, 0x80000001, 0x1, 0x0, 0xffff, 0x3}}, {0xa, 0x2, [0x5, 0xf, 0xc9d]}}, {{0x1c, 0x1, {0x8, 0x3, 0x0, 0x10, 0x1, 0x3, 0x3, 0x5}}, {0xe, 0x2, [0x5, 0x8, 0x29d5, 0x40, 0xea5d]}}, {{0x1c, 0x1, {0x4, 0x80, 0x2b, 0x400, 0x1, 0x8, 0x5, 0x2}}, {0x8, 0x2, [0x2, 0x9]}}, {{0x1c, 0x1, {0x7, 0x3, 0x0, 0x1, 0x0, 0x7, 0x9, 0x6}}, {0x10, 0x2, [0x3, 0xee00, 0x6947, 0x5, 0x3, 0x8]}}, {{0x1c, 0x1, {0x3, 0x1, 0x7ff, 0x7, 0x2, 0xffffff00, 0xfff, 0x6}}, {0x10, 0x2, [0x2, 0xaa, 0x4, 0x6, 0x1, 0x140]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20041) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x24) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r8}) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) 2m41.25145491s ago: executing program 2 (id=629): socket$qrtr(0x2a, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00') exit(0x2) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000040)={"e50d1af80100007edd00ff000000080000f6907ff16b7e000500", r5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2m40.109591618s ago: executing program 2 (id=635): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1fb, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff00000000000000000800450000920000000000019078ac1e0001ac1414bb0c009078000000004500000000000000001d0000e0000002ac1414aa000dee0dd9de36ed4bcc5b4e23540c00030000000000000000890f0000000000ffffffffffffffff440400014414000000000000000000000000000000000000a8cbf2cb43b4269b5a3906063fda96fb17d10e77b60d93732e0659e67d0fbc3474be0d8efd2ca7e66c586464fee24ba7b3279f01e6106b886569bc99b00b233c546b0105000000f4fe09292c6e18fae439102ca4b22437020468c216d2452e85bff9b0060869dff679d78ea4bbb31c5e0ecd886d339de172205980556fda381ee49f1813d0ae9e64f4e13df59449a10698517b769418"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r8, 0xffff) (async) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000001c0)=0x1) (async) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000000c0)=0x7) (async, rerun: 32) syz_open_dev$usbmon(&(0x7f0000002d80), 0x9929, 0x2200) (rerun: 32) 2m37.549557602s ago: executing program 2 (id=647): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7fff, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) close_range(r0, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0xc0b42, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1c}}, 0x5, 0xe6a7, 0x5, 0xfffffffa, 0x2}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x301751de}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in6={0xa, 0x4e22, 0x75a65485, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c}]}, &(0x7f0000000340)=0x10) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000003c0)=@attr_other={0x0, 0x25293800, 0x0, &(0x7f0000000380)=0x9}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000400)) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000500)={0x10, 0x0, "a7da345f8f7a5c6a5984d461690b9155"}) connect$pppl2tp(r1, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x1, {0xa, 0x1, 0x6, @mcast2, 0x7fff}}}, 0x3a) sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x15c, 0x10, 0x400, 0x70bd2b, 0x25dfdbfc, {0x17}, [@typed={0x8, 0x7, 0x0, 0x0, @uid=0xee00}, @generic="6f5137664e7c9e6e3f46bde0bf558f4e6c8f7b08b142fbd4623f0902979d20473f1d8cde8f8be0f0473a12a35356eb85608bf6f9dff0becb899b560f08da1a1c7f24aebd0131c6d2d33f4ba436457241af0f158a82a23d2e92a9cac32beae8cf981fbe33d57225db3b49198d4ae03e52821ea8621868af5e93fd7386bff15d04335cd7267de6a909ab85c76a2139c24bea795611bb9b733de16ea04cbfe086c811a3a9a86ee60b91339952bdce5e12f22195", @generic="aeefd676c88795a817f67899b4498a5d83355889c55ef92f6e088cfa6d39ad12ab6b7f98c8d7cc4b131ec4eb82a9564ef4b2fa6501574202e0435c489efa01801c2674ecfca14047e6b562410efd", @generic="7d009f1911f4899bef4a68ee01cec0005c08285c2fc6335788f142d85b79b1b263a7c68c2c24eb9aeb7b1d4a01d29953e37696be73d4", @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@multicast1}]}, 0x15c}}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xbf1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) preadv(r0, &(0x7f0000001b00)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/243, 0xf3}, {&(0x7f0000001ac0)}], 0x4, 0x3, 0x6) r3 = syz_open_dev$sndmidi(&(0x7f0000001b40), 0x33, 0x80) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000001b80)) prlimit64(0x0, 0x5, &(0x7f0000001bc0)={0x28, 0xfffffffe0000000}, &(0x7f0000001c00)) mount$bind(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0), 0x200004, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001d00), 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) bind$vsock_stream(r1, &(0x7f0000001d40), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r1) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000002040)={0x4, &(0x7f0000001dc0)=[{}, {}, {}, {}]}) preadv2(r0, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/222, 0xde}, {&(0x7f0000003180)=""/21, 0x15}], 0x3, 0x101, 0x1000, 0x17) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x100010, r1, 0x0) syz_io_uring_setup(0x4329, &(0x7f0000003200)={0x0, 0xae5a, 0x1000, 0x3, 0x259, 0x0, r1}, &(0x7f0000003280), &(0x7f00000032c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000003340)=@IORING_OP_FILES_UPDATE={0x14, 0x4c, 0x0, 0x0, 0x2, &(0x7f0000003300)=[r3, r4, r3, r0], 0x4, 0x0, 0x1}) r7 = syz_clone(0x1020000, &(0x7f0000003380)="a966c273d950268d73d9f89110d2c5d434b22d7f115c48db2d82b36af07a5fd9", 0x20, &(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)="071d83116735ce65a4f438b95b554fd581b4250758bed7435d597b0e879a987338b773016f810c748b0d3ad7f0ba5cd6a31093be108dfa4c02") sched_setscheduler(r7, 0x2, &(0x7f0000003480)=0x7f) 2m37.277059303s ago: executing program 2 (id=649): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xfffffffc, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, 0x0, 0x0) sendmmsg(r7, 0x0, 0x0, 0xc040) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000202050018000000000000000a00000533d3b05316895f9f3f71e8c1d83749"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000600000013d949c0bee195000000000000006ccb"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m36.753693323s ago: executing program 2 (id=650): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x268}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES64=0x0, @ANYRES64=r1], 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x20000000, 0x2801e, 0x0, 0x1, {0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_clone3(&(0x7f0000000980)={0x162844200, 0x0, 0x0, 0x0, {0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0}, 0x58) (async) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x6f) (async) r4 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r4, r2, 0xfffffffffffffffb, 0x1) (async) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 2m36.105333631s ago: executing program 2 (id=651): epoll_create1(0x0) (async) r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) syz_usb_connect$uac1(0x0, 0xffffffffffffffc9, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x101, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x0, 0x0, "a5607234c985"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x8, "0b8b75c58add5b44"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x0, 0xffffffffffffffc9, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x101, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x0, 0x0, "a5607234c985"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x8, "0b8b75c58add5b44"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002a0000003f30ced200"/23], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002a0000003f30ced200"/23], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x1, 0x41, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f00000057c0), 0x2, 0x0) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000057c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000005800)={0x2, {0x7f, 0x1, 0x4, 0xffff}, {0x178, 0x49b, 0x2, 0x3}, {0x4, 0xbdec}}) r5 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0xc3b9, &(0x7f00000002c0)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80000000}) close_range(r6, 0xffffffffffffffff, 0x0) 2m21.029628891s ago: executing program 33 (id=651): epoll_create1(0x0) (async) r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) syz_usb_connect$uac1(0x0, 0xffffffffffffffc9, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x101, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x0, 0x0, "a5607234c985"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x8, "0b8b75c58add5b44"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x0, 0xffffffffffffffc9, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x101, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x0, 0x0, "a5607234c985"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x8, "0b8b75c58add5b44"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002a0000003f30ced200"/23], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002a0000003f30ced200"/23], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x1, 0x41, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f00000057c0), 0x2, 0x0) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000057c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000005800)={0x2, {0x7f, 0x1, 0x4, 0xffff}, {0x178, 0x49b, 0x2, 0x3}, {0x4, 0xbdec}}) r5 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0xc3b9, &(0x7f00000002c0)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80000000}) close_range(r6, 0xffffffffffffffff, 0x0) 14.949253719s ago: executing program 4 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000043e6923600000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa88a80900000000000000f7a7001400680000402f90780000000069ffffff"], 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x3, 0x4) (async) sendmsg(r6, &(0x7f00000006c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x80, &(0x7f0000000180)}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) r7 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x8000) fcntl$setlease(r0, 0x400, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) 14.562030624s ago: executing program 4 (id=1234): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4], 0x24}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x3c00, 0x258, 0x800, 0x3f, 0x32, 0x1, 0x8, 0x0, {0x0, 0x1}, {}, {0x0, 0x9}, {0x0, 0xfffeffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x400000, 0x0, 0x9, 0x10011, 0x4, 0x0, 0x3, 0x8}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x40047452, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x60c4e2aeb547948b) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x3f0, 0x35, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x4, 0x142}, @typed={0x8, 0x20, 0x0, 0x0, @fd=r5}, @nested={0x3d0, 0x1e, 0x0, 0x1, [@nested={0x3cc, 0x61, 0x0, 0x1, [@nested={0x3c6, 0x13a, 0x0, 0x1, [@nested={0x120, 0xe7, 0x0, 0x1, [@nested={0x4, 0x1e}, @generic="50ce8c3a66ea3a0162d856eff64cc3ac9aab7885f6f1ec522d52da2b9fb4265fd7c11fbdb494677dece32394b31fa8cfc60d9aebe3fdca6a9137852bfdc3e3e1cebda733ae1019618a358501ff3d2d92f903fc38a99180ccbb193ee8a9a3433fbc32a76d539a85fd121fa797eeb506ed370a66e68a7382ec5d413fabf832f56327c46e082a84696b2f8e734bf636d6c60cd1dfb1ab0ffa4d9bfbadf30912dbea9d03", @typed={0xc, 0x105, 0x0, 0x0, @u64=0x7a8}, @generic="9019a4a335b841382d520e709b11759907d584d926c1ab5f76fe", @generic="cd2b4ab3fefad3513c9353db995523b6180dc5c6a0d139055cf3167371e261157b1fdae2b4b046d0031078baac0955d572ae52e7ebb092a2b5f7426ad3ccb5a59e13e7d2cab6b8ce20b8daf4b1cd57a6"]}, @generic="cd712f0051a4b8e604d7cbcff2535e271760ef82fb689570d50636bac6e6591e400df69896df993cd2c524633183", @nested={0x1c, 0xd8, 0x0, 0x1, [@typed={0x14, 0xb6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0x87}]}, @nested={0xc8, 0x89, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @uid}, @nested={0x4, 0x64}, @generic="653c0901922861021dac9f95f9895c3f07a77731b1c4cbb3e4ea75a1d2464daac10e8d8fdefb46da059d608bdd51cdda46ceae924f96a3c268ff7a4bc7b5539cf7d9dffdc246718b6c560754408ffa6577f5940cf1b0d1f15289f9c669a34feb80de55a7aba186e663da12c8498e98000df27618f0220f2ae840dc80cc8216fa77", @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="5f24ea700b38f0f825fb245041fb156ce3bb4c1926d151a1d0385f7001c896fd60cb7c987684f86fb0909d", @generic, @generic, @nested={0x4, 0x9a}]}, @nested={0x4, 0x119}, @nested={0x18b, 0xcc, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @u32=0x9a25}, @nested={0x4, 0x1f}, @typed={0x8, 0xe4, 0x0, 0x0, @pid}, @typed={0x8, 0xc1, 0x0, 0x0, @uid}, @generic="0fa2707432eda091adfeee8d9a1f2ffca13f069095669cff4e156d6936ef15fb2e8d72baa8c3f0b94b4c1420a61f490a13049eb38e74d4f1fc26382d1e66c69d634786271e0ed9f9b4ffe45493aa1b4a6d9a05daea1bf09bd5c8cbd9ad5a6ad2abfb182b46039a59c6eca42bc8d97ae4188fde674a2602e9efd8099812d77b060546f08ae850982d90d6c8ac34470db5c46edf74ec19f2cb66", @generic="7a762f62732533e8a92314896aaf84e9f84e045a2cd6e9601328383c0111e9c0c4ae730b83d400d5cb91865490ef7407f25182a4a77ba978b41ae8f9b39f5dd9f075afe8916e31e5eba5a5378ffa130c5c8f1cd0bdff15886ee2dd5c3eb282e2f5502fdacbc64e0eef72f2b797f4f5563d21ffcdd2c52cb3b6bada2c1ff3dc98", @generic="66b34f94dbfb6a429a6d9b5e6b5da6dec9a04ddf7642b7da36837fd2431690f62ae836755fec1e26b5d40bf8df8e6f71b1bce77a81028b194a2904d826f4833e8b61f735a241c4ac550a57804253f58cb56b", @generic]}]}]}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4048011}, 0x24000000) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000005180)={0x2c, &(0x7f0000000740)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030d", 0x50}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800) 12.789247269s ago: executing program 6 (id=1246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:cron_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x3, 0x2, {0x0}, {0xffffffffffffffff}, 0xfffffffffffeffff, 0x8}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048040}, 0x8000) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x62}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2fcf3685d973f2b5}, 0x20000810) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600), 0x24000, 0x0) write$cgroup_type(r9, &(0x7f0000000640), 0x9) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000b00)={0xd8, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/91, 0x5b, 0x0, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/162, 0xa2, 0x2, 0x34}}, &(0x7f0000000840)={0x0, 0x18, 0x40}}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fda={0x66646185, 0xa, 0x2, 0x35}, @fda={0x66646185, 0x3, 0x0, 0x12}, @flat=@handle}, &(0x7f0000000900)={0x0, 0x20, 0x40}}}, @increfs={0x40046304, 0x3}, @clear_death={0x400c630f, 0x3}, @release={0x40046306, 0x2}, @release={0x40046306, 0x1}, @request_death, @request_death], 0x94, 0x0, &(0x7f0000000a40)="63c0517a26d48cc2c9c3419629330589b4e03261e53224357b2f5b4ec34edcf5dca4e66058087af9482d7b20d3cb9329eb0ad665bfc9b95e0e3d722baaa6a0db8628da2aac405401edbd2e10c5f97d301cfb351dc41b5c08ad4314e9ff9510c7efb8bb9db7a1e52a1d663cbd563142946f48d07bb159f742ff9af6c63b6a6900788902cf07bc996d888fbe94acc1a48314ceef1e"}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r10, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c1}, 0x20000004) ioctl$KDGETLED(r9, 0x4b31, &(0x7f0000000c40)) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4418500}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x26004044) timer_create(0x4, &(0x7f0000000d80)={0x0, 0x1b, 0x2, @tid=r4}, &(0x7f0000000dc0)) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) ppoll(&(0x7f0000000e00)=[{0xffffffffffffffff, 0x1300}, {r7, 0x2200}, {r9, 0x8062}, {r9, 0x32c0}], 0x4, &(0x7f0000000e80)={r11, r12+60000000}, &(0x7f0000000ec0)={[0x100]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_enter(r13, 0x62aa, 0x26b1, 0x10, &(0x7f0000000f40)={[0x1000]}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0x1c, 0xcf, 0xb6, 0xff, 0x2c7c, 0x122, 0x9a4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x46, 0x10, 0x0, [{{0x9, 0x4, 0xf0, 0xe, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x310, 0x4, 0xbd, 0x8, 0x0, 0x1}, 0x14f, &(0x7f0000001000)={0x5, 0xf, 0x14f, 0x6, [@ptm_cap={0x3}, @generic={0x5a, 0x10, 0x2, "ca1ae4e0673f0f2035ffa7b08088ea463d89d3dd73ead09f2da171759314085dab276adf770a73d2f79ce4c95acec370015cbf74ad7468f2b3f01de083d01759f53c5c08a79d3f438b9be2e55680c62b2e433acd433946"}, @generic={0xcc, 0x10, 0x4, "28df173292b51a666db1c4f7be92792c998ee0d0692a224f436cba7fc6516e73ed65acf0145f574f30e82ca21f52434ae0a724a72c124750b02ed479dfed965bdd4c0e279d1e845461d30df4308badf7fb9626fe559557d1876e0a9482baa53b86ed14378e8a8498d6d91ac618ff6a5da915c68e38aeb6a090da011a5f2562fea6647430cedf4f4982664f687b793541d489711761bc5595f0052e71678f8f80f719e86e36f27cc8145ce44af12be9ccf28e48daba08a83ba75b6808df84d339a0533a8aa85d4673c9"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "480659a1fcea26237713e5926d1d5b39"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfa, 0x5e, 0x101}]}, 0x2, [{0x99, &(0x7f0000001180)=@string={0x99, 0x3, "87a256aec35b670819a1f40e81df0fb96cb93f94062142ac36a60c95a02115ec718cd86ccefd01c467b0f223cc26f5abaecc550fe2069b062d33944164e67f9a5d6a8fb800ed561c85c91decc68695c388c5917dab2636ee55da95db966862b4cc760011101d6c87e6997e89a2332357895a0e068131db7d92f80f41e50ac906661dcc9853a06af2d51d26f258642f7e6afc65f2c4e3a7"}}, {0x89, &(0x7f0000001240)=@string={0x89, 0x3, "a827c898d0c1b59cfb3ddc6b62bfd8c6f0aa6cb5f655ff6b14662a54a3cd0a3ac413d0a627a321b80b14e480ea9dffd58637af51dd67a7781336c0dd29701a2a1fe4401ee5add5011e1e81795921a74c983dc22445badcc3e0cd7a40c57ac867b5eb28e1b8b7935125190181f9801464fa4e4e172d6416407e628808798e340816de8b37244b31"}}]}) sendmsg$NFC_CMD_GET_DEVICE(r10, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}}, 0x4c090) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r14 = fcntl$dupfd(r7, 0x406, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x7, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0xc, 0xa, 0x7, 0x80, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r14}, @jmp={0x5, 0x0, 0x3, 0x4, 0xb, 0x100, 0x4}]}, &(0x7f0000001580)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000015c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000002600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002640)={0x1, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002680)=[r7], &(0x7f00000026c0)=[{0x2, 0x3, 0x9, 0x8}, {0x4, 0x3, 0x1, 0xc}, {0x1, 0x3, 0xb, 0xb}, {0x3, 0x1, 0xb, 0x9}, {0x4, 0x3, 0x3, 0x3}, {0x0, 0x3, 0x1, 0x1}], 0x10, 0xa4d4}, 0x94) 11.835414983s ago: executing program 4 (id=1249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f00008ce000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0xda, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYBLOB, @ANYRES16, @ANYBLOB="0e943d9bf7130db74ce91e04d0f4eb740b7f8dec1dd2027e767bcc4664faa391a3410f8f29bdc15b38a8453f79849b0067a8da1b23072ce34a91812e80d3500acd6aab8b3125de92ce3ac9199b82d9bddf226b55ec21c88048325a688a7ab9023889a78a9dbd168dd36d8d396f44a15d7f9c226c4669b072990349cbedbc6a1eeaf5b1cd3820841bbc2102f34e9efc514216a167564098499b71a1dfd1ed286d94da39e3245b34087ed8fe8fff60be42f017ba69841f3045c123", @ANYRES32=r1, @ANYRES32=r1, @ANYRESHEX=r4, @ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) 10.699363234s ago: executing program 4 (id=1255): memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) read(r0, &(0x7f0000000380)=""/84, 0x54) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000006840)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="201320000000195c04dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r5}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r6, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r6}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 9.447413079s ago: executing program 6 (id=1261): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000700)={0x128, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3fffff) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xfff, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}}, 0x24040084) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb0102030109021b0001000020000904040001fffd0180090582020002"], 0x0) getgroups(0x16, 0xfffffffffffffffe) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffd3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb8}]}]}, 0x9c}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x204, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x100000}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xb4}, {0x8, 0x15, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4138}, {0x8, 0x15, 0xdb47}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfb3}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0xfffffffffffffeed, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x8}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20008800}, 0x8010) 7.702631789s ago: executing program 6 (id=1267): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0a0000010203010902120001000000000904000000ff054900937fb0"], 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000406b1d010140000102030109025f00030188fa4eb0f5d351319bef36803d6b8a06e00e0904000000011800000a240101010402010209040100000102000009040101010102000009050109000208030307250181076448090402000001020000090402010101020000090582090002fffd0707250105010300"], 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20, 0x0, 0x0, 0x41fa}, {0xffffffff, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7ff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') close(0xffffffffffffffff) 6.958508536s ago: executing program 4 (id=1272): alarm(0x8000000000000001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8c080, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x2b9, &(0x7f0000000100)={0x0, 0xb1e9, 0x10100, 0x3, 0x0, 0x0, r7}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0xef92, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r11, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000240)={0x20, 0x2, 0x0, 0x8000, 0x10000}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) (async) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r12) 6.253701381s ago: executing program 5 (id=1275): openat(0xffffffffffffff9c, 0x0, 0x140102, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x59, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04d308170b0102030109024700010000000009046900000e01000008240201020205050724010709"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000200)='xino=auto', &(0x7f0000000240)="05", 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x22, 0x1, 0x3, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x494e4f4b}) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000000)={0x14, &(0x7f0000000340)={0x0, 0x2b, 0x92, {0x92, 0x21, "9b29442135dd709e5a4fcdfc41e532c910213f67a1da257e5a6b4d1d6b8f742aea80a6212570c0fd77c63ece6fb51217c241a0fd14e32a227aae38df3defc655e509ca7f4fcee9e2b1aa6c29f6a6faea00143c8f92d85b4b5ca0d1c864f3ec0af803a12b415e0ed73f6a75f40b2e977830464b072b97bf6ec21672b194741371f00ea2828ae4a1fce305e54a22ff0f14"}}, &(0x7f0000000100)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "e63fe625720f8d7804cae659e348bb175891e615503ee69a8fdc23f11730e50cae41fe349c93e39a9a338470e07224aeb1b337123a20668852a7700e41d27e99fefc6b269abbdb1a3163a0c48e20d38a2309a85572ccad27"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000080)={0x0, 0x18, 0x11, "942f01b24f7ac6bf92782676bd22b7e638"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x87e}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "2037c3918203262f2172e20c55444a77c56b6c575629eb9b0c5759900167e2ca22d166b50a42d97a2fb2f66a5c2f01"}}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x6, 0xfffffffffffffffa, 0x4, 0x0, 0x100000000001, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x30, 0x400000000001, 0x6, 0x40000000000000, 0xf, 0x80000005, 0x2}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) 5.825903447s ago: executing program 4 (id=1277): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000000810000000a0008001e000100002fea161d9260d73357fc070017004e234e23"], 0xfc80}}, 0x0) r3 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffff2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x31}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000200000000002a0000cf37c6884093fc003a2a5e247b00000490d36d630aa8de83ec64f700839035c2c746b1a8551c00186529eac47255aeb0c775a5f7d0681cb5877b9e1c559d50ed1e25"], 0x1c}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @local, 0x5}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r9, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) 5.374308805s ago: executing program 34 (id=1277): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000000810000000a0008001e000100002fea161d9260d73357fc070017004e234e23"], 0xfc80}}, 0x0) r3 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffff2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x31}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000200000000002a0000cf37c6884093fc003a2a5e247b00000490d36d630aa8de83ec64f700839035c2c746b1a8551c00186529eac47255aeb0c775a5f7d0681cb5877b9e1c559d50ed1e25"], 0x1c}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @local, 0x5}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r9, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) 5.367598083s ago: executing program 5 (id=1280): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000051405000000000000000000040003"], 0x50}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x92, 0x20, 0x2c, 0x40, 0x1943, 0x2255, 0x9220, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x81, [{{0x9, 0x4, 0x53, 0x0, 0x0, 0x73, 0xc4, 0x3f}}]}}]}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000051405000000000000000000040003"], 0x50}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x92, 0x20, 0x2c, 0x40, 0x1943, 0x2255, 0x9220, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x81, [{{0x9, 0x4, 0x53, 0x0, 0x0, 0x73, 0xc4, 0x3f}}]}}]}}, 0x0) (async) 4.708034493s ago: executing program 3 (id=1286): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x2000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="0e9925cf4846dea3227321929146e43eab58f96c6a7db2c86a350b096b70b8920d4627a3ac9916982a5999b6678aae78917ff43b9a48da999ec5dcd9b329b02d", 0x40}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f0000000100)={0x34, 0x64f2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.642442721s ago: executing program 5 (id=1287): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11e, 0x1, 0x0, 0xfffffffffffffd61) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0xc00) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000001c0)=0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) 4.314253376s ago: executing program 6 (id=1289): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4a4, &(0x7f00000000c0)={[{0x84, 0x4e00, "fa9abf86198f0d55cba5644159483ed984a2acf89c003f62921fa38d6192cb255505b24bca678ee04d2d6674f655ac104e27d48e259f315cad232114e360ed714a7cc299930dcc55fecee4463ec3cbf80afe03618954b085986cfe85181d77cf5a7bf5e8bfd941280e709d10350df7be7f2723145fe092f4fe1123eb9dec74eaf8a870cd"}, {0xf8, 0x4e00, "8ef6e7c889c8e6e53c4c8c95256b5cf40993d23716e76fe2e91df406087805ad1efb698892b02f03ed207126634c75cc7ce47775e1f59fdfa4e951fffc899dafe77eb03eea8131c22c29040096fb96e55e5060e6492b8419fc9e1a96fdce2e35b1f51d941572c1042978613507ad30f23fcc87fa50b3f788f0271618eb82895837535080606037cde92e6ec81d938416d9047f565fa2e6e92ec84ff772523b3e34d0e306f0cdd73f6352e574abbfbbe438077e168716569c0e3ed895997288aee78968a7fc3fabc2e1d06382ed8a93629a38c9d499ba61ebeee7dbecd8bd747364a6ba08da78795852a56fe02d37e025720cb7322bb1ad36"}, {0x73, 0x4e00, "b2e03219cc42a6cd13af18975c6b981f551e448992ad021b175d4136fe02999cd72dc2b843bd53003d6c6a8a8be759c6ae660e41680ac0f47601127d84964eafc15839d69be3b167e11deda71a43732d6ccc6edffefbcf4db63f1323bfa9f4f1b85a558ec1209a029510b038e7d58757069cf4"}, {0xd0, 0x4e00, "95aa95d04ef39b137b58d70bb96041e7678880a764a1614fbda7c07462cc623acbb50fa0e83d8f1867412f7f06e498be099f6115d6c536988810e7c2e745fd4a374e45fbc09923763bc1be735b10fc72151faa8108702c4009f99e2c4d96c1120b9bd6e31e8194638846dc6b2209061aa1b865dd2d16f203a0c5738988e474bdb4d6f7c65d963c0b457da8ab222bf89f6e05c03a1da6210659471b9b876e58b9fd9f53f035c4fcf849dce39c18b8d7975e0201eafba480fac9faa49bdb8f4c0cf443eb6c3cf182a803b7b341a34fce1b"}, {0x33, 0x4e00, "cf651312478b7c55ced6e56d98b72ed8af7805088b938e2d6cd5dc9af3d88cf1b7153f07f909fcf68087ddc5b283cab36d3aab"}, {0x20, 0x4e00, "1ad0f37c5e0f14fa23ee90141e63fe239e019ccafd6f05d60d644c00f5895941"}, {0xf4, 0x4e00, "a7f8c070eb6a11214a664e8a6a6f514590463016017b7d1c5aff485e01495095272a7ec0b57433fc2c6cd911335b289fb323f47b0940efb2e2a6a5d2bc67b530310fb617d02019495eec56447fb9614db7b5a489b58d1df4a638bb3dcffcdb3269146afcda20b2f184bafdb72a6e7b6e98631d56e2e6dcd77683d7c134fdbe14981fb135f9f707a08707fbec746fbed91a3f6689a34c3a3197cbd684b6056be9b0d690739804c0719bfdf447b46adafba826936fda2ff48db6eb0290c4c07e58ef07af09ff39db5dfbeb5f919d64f62bad838b19662ca0daa80915577605fca398cdae49960970d6cbf1d9a43683087496a1e36c"}, {0x7c, 0x4e00, "04e4e2071530e083baedb05d233746a1b9becb2e1de3307384b52114c42f50ea65e16f00a562ae2918463648a085a5c29b181fef10f997e91fd8ec2dc672368509dd91fdbaccad46d68077bfdc55bcf0a87833890a46340c255cf1a57282790aebcf59ffd593d39720a37d37bb89217396bc55bb0e81746885ec192c"}]}) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2b4, &(0x7f0000000880)=ANY=[@ANYBLOB="dd00004e055a9656d9285b9ba9acd20aacb4df6f320d7efea1bcdf6ebd92eede575a3a660ff6117ac09846d240b398753bf454d94373c7b465dfa43ce7d179ba7e78e1e3d7feb0bddf3c33a9ca9e5a6defa1928f4884f68196924b4eea094a8e71f4f71af766349f5b5479bda35b98ad9d8832c00dacb7628c3238196f20dd4d49b9873cc2632869cfdbad04ca2fc488281ce1f03355e1b773b6c2d412b8ea02cdf89edecc4ad57a25ba670d6e170b1552b9594a915b504ea8835655b37ce3d8a93a6b19394738c3e8f2e9c087fc100d19985e292507eb4918032078529cbfbff9000000b900004e6c625c89efd403415652aefdb81b08dea0a230d6d91fedea4c83fd6b9dc08b069e7de57e8da255781794ef6c14f2a5d05dd32fa3fd229631ae346f99b0d60914fc20cbdfe362d0a18ab297944143328c52596b47fd9f13a3e5ec534084cdec632661aa6829fa8c82fbd765a30b95c373566dad9b8164789a2d71480bd4308dca1392612ef949246eb3fcb68d3e97de097e96150e4ff0d0504c727d58eb3e33bc7b9e713f18194ca55df1b52b23a3cdf1d23a54dbe9e444bf170000002d00004e3244d6101c0599a216f440cb2cd463d8466d6ff3dbad9ff0494b32d9015db319990d43b137dbb9b47e83dabb5e000000d700004e"]) 4.312053297s ago: executing program 3 (id=1290): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) 4.261133414s ago: executing program 5 (id=1291): socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$inet(0x2, 0x1, 0x100) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) poll(0x0, 0x0, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x90) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xc14}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4018000000000700240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) (async) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000380)={0x5, 0xfffffffd, 0x0, 0x3, 0x12, "3e04000000000000000600000000000400"}) (async) socket$inet6(0xa, 0x1, 0x80000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x22040084}, 0x20004000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 4.007656402s ago: executing program 5 (id=1292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x4d5, &(0x7f0000000240)={0x0, 0x404525, 0x80, 0x2, 0xcb}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0xff, 0x400004}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1}) (async, rerun: 64) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newchain={0x44, 0x64, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0xe, 0x4}, {0x9, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_RATE={0x6, 0x5, {0xf8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0xc7}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x22000000}, 0x4060081) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000000c0)={0x34, 0x1, 0x5, 0xc, 0x7fff, 0x81}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.946006187s ago: executing program 3 (id=1293): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0xc890) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000180), &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="1000000000000000280012820b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0x7, 0xb}, {0xfffa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc6010aa00000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.201554095s ago: executing program 0 (id=1295): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r0, &(0x7f0000000440)=""/4090, 0xffa) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x2a0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001500)=0x0, &(0x7f0000001540)=0x4) sendmsg$nl_route(r3, &(0x7f0000001600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@mpls_getroute={0x24, 0x1a, 0xd2e, 0x70bd28, 0x25dfdbfc, {0x1c, 0x80, 0x20, 0x9, 0x9c11bb785221686d, 0x2, 0xff, 0x6, 0x200}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x24) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x28, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x0, 0xffff}, {0xc, 0x15}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048004) socket(0x2000000015, 0x80005, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) io_uring_setup(0x401, &(0x7f0000000300)={0x0, 0x9a87, 0x2, 0x8000005, 0x6}) syz_io_uring_setup(0x7b, 0x0, &(0x7f00000005c0), 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 2.749585179s ago: executing program 3 (id=1296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000000e7ff00000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x8001, 0x402080) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="083fadb6d50a1f73c7c9ca005a2263a3aacf0c46b8c95c92be6f89e1385049660f1735a584b337fb75ef4216e5af83e90d3ff62329fbcb1c8a0d10daa1f419d19dfe75aa4d050fc9b8e02168bd73f69f0a452bb1c34060eaf72257732c97f0a912b3d6e3937a26cd9df85f1e773ce8f9b49b20abf317cc0d10a82e7dd48d872cf61b0454f47cc317afc7292edfc5dc0dc23d4f7b784fbc3b9565353517b98547a3417de4ae38a98b3b0e38d0ed3a55ff8b43317f6209d580d988c89801eb2b74620541d8609997d573976fd14f0fb403e07840e6905b58", 0xd7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 2.648874531s ago: executing program 0 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r2, 0x0, 0x0, 0x80800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005a000100000000000000000b0000000004000380"], 0x18}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x6c, @private=0xa010102, 0x15, 0x3, 'ovf\x00', 0x19, 0x9, 0x78}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x8, @local, 0x4e21, 0x2, 'nq\x00', 0x2, 0xfff, 0x23}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000300)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x40040) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x1b}, 0x440060d4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"/4124], 0x101c}], 0x1}, 0x0) 2.565306937s ago: executing program 0 (id=1298): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') (async) exit(0x800) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') (rerun: 64) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x17c, 0x4, 0x0, {}, {0xffffffff}, {0x0, 0xffffffff}, {}, 0x1, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xf5, 0x0, 0x804, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x1101, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300"}) (async) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000002c0)=0x7) (async) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}], 0x1, 0x20d1) (async) sendto$inet(r2, &(0x7f0000000400)="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", 0xffffffffffffff16, 0xd24bd3bc87767d72, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/4110, 0x100e, 0x1, 0x0}, &(0x7f0000000180)=0x40) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa8, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x99}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) 2.437149021s ago: executing program 3 (id=1299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cac, 0x4000, 0x400005, 0xd8}, &(0x7f0000000100), &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635000100000f300fc73766b9800000c00f326635000400000f30660f2f7c009aded21c000f380356960f011d66b9800000c00f326635010000000f3026d6dc08", 0x49}], 0x1, 0x34, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) r9 = dup3(r7, r8, 0x0) ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, &(0x7f00000000c0)={'\x00', 0x7, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x8, 0x400200cc2, 0xffd, 0x8002, 0x6, 0x8000000000000, 0x400000, 0x20005, 0xfffffffffffffffe, 0x6f, 0x5], 0x8080000, 0x193844}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x18) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0xe) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) 2.297412808s ago: executing program 5 (id=1300): unshare(0x6a040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="110725bd7000fbdb5f2504000000080004000600000024000180060004004e240000080005000100000008000b0073697000060004004e2300000800040005000000540001800c0007002c00000002000000060004004e2400000c000700040000003c61fc00060002002c000000080009006e0000000c000700080000002000000014000300fc0200000000000000000000000000010800060001000000"], 0xa4}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) unshare(0x44060f80) timerfd_create(0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000300)='net/snmp\x00') lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000002bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f00000002c0), &(0x7f0000000280)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000005500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r10, r7, r12) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x202b401, &(0x7f0000000440)=ANY=[@ANYBLOB="66f074", @ANYRESOCT=r8, @ANYRES16=r8, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESDEC=r9, @ANYBLOB="2c616c6c6f775f6f746865722c646566ff0f00005f7065726d697373696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030362c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030303030303030313830302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c736d61636b66736861743d5e21235d242c736d61636b6673726f6f743d5e2d2c666f776e6572", @ANYBLOB="33aea2e90b640e0a7a964e0bfba06ee154168d356a3d0890d6237232cb5550a0f20a0a49457e91e3ca7ad17f447d15715bcc12bb7d4a0c35228c3f108bf4d4021648fa6bb680c04ae082d3d64d93c097e30747f3de746a19e4b4", @ANYRES64=r8]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 2.293651007s ago: executing program 0 (id=1301): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x4000, 0x4f, 0x18}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x4000, 0x4f, 0x18}, 0x18) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)={0x70, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x8000804) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0xc040) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0xc040) sendmsg$nl_xfrm(r5, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x40, 0x1, 0x0, 0x0, "ae0c1414e65063a4e003ceffef744b6db27667f2a2c01af01c80628fead2934b164e998775f5128446bb7e8de139a0c2ec5e333af27b80b8857b27b30d034397"}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x40, 0x1, 0x0, 0x0, "ae0c1414e65063a4e003ceffef744b6db27667f2a2c01af01c80628fead2934b164e998775f5128446bb7e8de139a0c2ec5e333af27b80b8857b27b30d034397"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046f17720fd0b2001adf90102030109021b0001000010000904"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046f17720fd0b2001adf90102030109021b0001000010000904"], 0x0) 1.703186807s ago: executing program 3 (id=1302): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="41f98a9fbde2ea1004231f02a2b3010203010902120401050640010904790000701219ff391fe96466d1e8a204b4a17cb977f11e443c3ea88293e0debe18d043b5a1db38543dfef1a8ec22be75502ea629c81827ac45276403e70a16a654663230210e9597dd5f23f6ab6445ccc492e874e912169c8fc1315f64aed460442270c2bd9653c760a6afd980fb2148bd99ea0923067c3b60df15b794c96dba6281d6ed740b873c2ba75cdba3e1f8a3b6a34de0f5bd28ff4837ca01609acbfd9eccb045a286f587765b3c7da1657d1d072a25d2b94c3e20"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 1.590809396s ago: executing program 6 (id=1303): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x0, 0xfffc, 0x2, 0x4}}, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, &(0x7f00000003c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fd}], 0x18}, 0x28000054) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 1.269943308s ago: executing program 0 (id=1304): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000001c0)={0x9, {{0x2, 0xffff, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010841000000fbdbdf2500000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) vmsplice(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x109000) r2 = socket(0xa, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket(0x2, 0x80805, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x0) sendfile(r8, r1, &(0x7f0000000080), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffedd, 0x20000080, &(0x7f0000000240)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) 307.049103ms ago: executing program 0 (id=1305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010104}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x14, 0x36, 0x107, 0x3, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000001c0)="d48ef5e3183a55b29827c65b508ec1cb98b2d2e60d959c5bd3d8c829e839aa312df51f7d8a56d4b863e8046540e3c8ad2df1bee6be6a370e555d6d66a1aaecf3a49b1516b138e0b5cec46b32516623f26d7b006c78e29ae11c7e", 0x5a}, {&(0x7f0000000340)="fae8ac628eb07092ce1be20d1ea355e19f39add573484aea2319e797d14f269d60f5dd0e8d922b14a66be28740b653200b00000078a74abb196f0105268911cb86b9", 0x42}, {&(0x7f00000004c0)="5d89d3a1b8212fab900a943e952cc0b39f2b38415b32ebea2d797fd5a051593c8b19623c5f727152436ccc99938ba0d4d9ea598d43de034ebca908710ade962fc2d4c21e677ceb24e234991cf8df0ffe022f349a830a0721983a35cbbdf2339a09d6ef19402504f37a04b93a77638c6f0a5a81af04afc27126389032ad17e88bb6be5e26dab8e677b5caaffef0d429ba4e5e5a2378f7267fd51baaeac997dd90fdc503ba7d927e8680b578911990c86c1988972316440091d03f20d61b605b4470eae3fc", 0xc4}, {&(0x7f00000003c0)}, {&(0x7f0000000900)="2604a9ba7c524abbaa2a1c5c63047ced0ff9f81cf66eb69ce103af333631f932e43b6270bd05f16245eaa01abb5c21a4c4b0702ef71554c839c8d1a8e3cce0320db784dac87230a4b13d1fc90fe5e017a73f7d7879023d5aaf4187944ed951c129fc369c126c3cf936f0d1f346073a4e4a80d800958a828852079cdb0fbd6c18131988050040eefcb13f4fccc4e6c7bd69be778e6d4d71a430fd13a3547c9d220288a12ff42c4dd62398247b5a8836d96185554787bbd4487c70dbf31c5a8cea06558affdd852f1fa01c9e06cd8be515743e45fa42440bf9986a56bc76fe926164fa9971c8ad8d0579d307", 0xeb}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000400)="3349095fcebbd646017fc7f55c899bdcd7af19ec834845c6ba91b83194e89c82fda172ee2e26", 0x26}, {&(0x7f0000000680)="52586c0d908ba3c2a808885cbbdf82146cd4c3c804c72c876680e5a64148265b3aab8a93419f7c570486266106954e35eeb500f5601fd3c52c93df4eabacdb9f531e3cbe74098f3c26adfe2717edc1a507d785e50d7ada65ec78e5ba7d76299e76ec8833", 0x8d}, {&(0x7f0000000a00)="f095c1a338ecd710cbf8159e9fef5dc7cfca0568c4262dfe45257b35199170b2fe0dce837597ba3a270dbdf73dcdf85cd4aac15edf8fc11986fb02a4a903c02936ee052a1f46456e783e72671cd76f489a6117ec37f1552a2a1fb3cb4147c0c4736471", 0x63}, {&(0x7f0000000a80)="673daa42ded2b55bf3abedd3d1ab10e89a70bb72bf377a444db533d357c6bfdcd177659b2fab54ea5c1048b0b11cadcf7f6d97b4f4231d73e38f8520ea03dbcfe4525f98cf0c634d41d772bb501b67ebd1df02160c9b6b962a0984debfb797b8b7efdda44523844ad843396f6354a001403176c5a006977d698afbe4526a4c81e26b6f9a081d34845a6dfe207e236c8418b546bcfe26929a65b3f8f4d6d0057deeb41c3037781a9aef6bd8f251de3fa251db62c7d7e22e251c1376dbfb91dffa7ab53e38646a0dfe1a14dc18546e46fd1a3e7f", 0xd3}], 0xa, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x1, 0xc0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r8, &(0x7f00000000c0)=""/105, 0x69, 0xfff) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000000c0)=""/43) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) 0s ago: executing program 6 (id=1306): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0xffffff52, 0x0, 0xc0800000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0xffffff52, 0x0, 0xc0800000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc9}}}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 2425][ T5928] [drm:udl_init] *ERROR* Selecting channel failed [ 289.438790][ T5928] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 289.456228][ T5953] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 289.493094][ T5928] [drm] Initialized udl on minor 2 [ 289.508814][ T30] audit: type=1400 audit(1766728948.667:579): avc: denied { rmdir } for pid=6124 comm="syz-executor" name="146" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 289.546528][ T5928] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 289.574495][ T5928] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 289.595053][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 289.613305][ T5928] usb 6-1: USB disconnect, device number 34 [ 289.620799][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 289.638282][ T5953] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 289.657112][ T5953] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.690070][ T5953] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 289.702491][ T90] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 289.718781][ T5953] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 289.744017][ T5953] usb 7-1: Manufacturer: syz [ 289.760144][ T90] usb 5-1: device descriptor read/8, error -71 [ 289.766871][ T5953] usb 7-1: config 0 descriptor?? [ 289.784617][ T5953] igorplugusb 7-1:0.0: incorrect number of endpoints [ 290.126962][ T90] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 290.228262][ T30] audit: type=1326 audit(1766728949.457:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.6.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7fc00000 [ 290.320826][ T9527] syzkaller0: entered promiscuous mode [ 290.326464][ T9527] syzkaller0: entered allmulticast mode [ 290.352398][ T5928] usb 7-1: USB disconnect, device number 6 [ 290.609399][ T90] usb 5-1: device descriptor read/8, error -71 [ 290.726741][ T90] usb usb5-port1: unable to enumerate USB device [ 291.434688][ T30] audit: type=1400 audit(1766728950.727:581): avc: denied { accept } for pid=9539 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.909839][ T9568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.595247][ T5900] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 293.774314][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 293.816693][ T5900] usb 5-1: config index 0 descriptor too short (expected 2066, got 18) [ 293.855069][ T5900] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 293.884166][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=253, SerialNumber=2 [ 293.903309][ T5900] usb 5-1: Product: syz [ 293.913602][ T5900] usb 5-1: Manufacturer: syz [ 293.943035][ T5900] usb 5-1: SerialNumber: syz [ 293.968186][ T30] audit: type=1400 audit(1766728953.267:582): avc: denied { ioctl } for pid=9587 comm="syz.6.768" path="socket:[23985]" dev="sockfs" ino=23985 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 293.996051][ T5900] usb 5-1: config 0 descriptor?? [ 294.031563][ T9588] ptrace attach of "./syz-executor exec"[9591] was attempted by "./syz-executor exec"[9588] [ 294.230005][ T5953] usb 5-1: USB disconnect, device number 51 [ 294.365510][ T5900] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 294.664041][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 294.792713][ T5900] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 295.228845][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.288328][ T5900] usb 6-1: Product: syz [ 295.403082][ T30] audit: type=1400 audit(1766728954.667:583): avc: denied { append } for pid=9598 comm="syz.0.772" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.727825][ T5900] usb 6-1: Manufacturer: syz [ 295.732494][ T5900] usb 6-1: SerialNumber: syz [ 295.756190][ T5900] usb 6-1: config 0 descriptor?? [ 295.851051][ T5953] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 295.916154][ T30] audit: type=1400 audit(1766728955.217:584): avc: denied { listen } for pid=9617 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 295.955537][ T9618] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 296.027369][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.037438][ T5953] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 296.058901][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.104135][ T5953] usb 7-1: config 0 descriptor?? [ 296.156199][ T9621] netlink: 'syz.5.769': attribute type 1 has an invalid length. [ 296.267057][ T9621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.397457][ T30] audit: type=1400 audit(1766728955.687:585): avc: denied { connect } for pid=9606 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.464011][ T90] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 296.623766][ T90] usb 1-1: Using ep0 maxpacket: 32 [ 296.676821][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.725178][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.763336][ T90] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 296.915015][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.926549][ T5900] snd-usb-6fire 6-1:0.0: unable to receive device firmware state. [ 296.938774][ T90] usb 1-1: config 0 descriptor?? [ 296.954013][ T5900] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 297.299675][ T9641] netlink: 'syz.4.778': attribute type 10 has an invalid length. [ 297.765870][ T5953] usbhid 7-1:0.0: can't add hid device: -71 [ 297.789022][ T90] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 297.797463][ T5953] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 297.830009][ T90] lenovo 0003:17EF:6067.0013: hidraw0: USB HID vff.ff Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 297.842184][ T5953] usb 7-1: USB disconnect, device number 7 [ 297.996786][ T976] usb 1-1: USB disconnect, device number 45 [ 298.020209][ T9641] syz_tun: entered promiscuous mode [ 298.063362][ T9641] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 298.281771][ T976] usb 6-1: USB disconnect, device number 35 [ 298.435491][ T5928] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 298.625481][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 298.660814][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.670347][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.683755][ T6597] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 298.692352][ T9669] siw: device registration error -23 [ 298.702636][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 298.721895][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 298.739749][ T5928] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 298.761921][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.773079][ T5928] usb 7-1: Product: syz [ 298.785909][ T5928] usb 7-1: Manufacturer: syz [ 298.794178][ T5928] usb 7-1: SerialNumber: syz [ 298.825094][ T5928] usb 7-1: config 0 descriptor?? [ 298.856129][ T6597] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.885210][ T6597] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.917254][ T6597] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.938112][ T6597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.968520][ T9661] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.992433][ T6597] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.999640][ T5953] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 299.060363][ T5928] powermate: unknown product id 0240 [ 299.078562][ T5928] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 299.097321][ T5928] powermate 7-1:0.0: probe with driver powermate failed with error -5 [ 299.195215][ T5928] usb 7-1: USB disconnect, device number 8 [ 299.205423][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.231363][ T6597] usb 4-1: USB disconnect, device number 39 [ 299.243139][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.267212][ T5187] udevd[5187]: worker [6621] terminated by signal 33 (Unknown signal 33) [ 299.303248][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.315303][ T5187] udevd[5187]: worker [6621] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3' [ 299.329275][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.353535][ T5953] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.364308][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.379952][ T30] audit: type=1400 audit(1766728958.677:586): avc: denied { mount } for pid=9691 comm="syz.0.787" name="/" dev="pstore" ino=4198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 299.407553][ T5953] usb 5-1: config 0 descriptor?? [ 299.484487][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 299.715332][ T30] audit: type=1400 audit(1766728959.017:587): avc: denied { setopt } for pid=9702 comm="syz.6.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.750101][ T30] audit: type=1400 audit(1766728959.037:588): avc: denied { ioctl } for pid=9702 comm="syz.6.790" path="socket:[24781]" dev="sockfs" ino=24781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.815664][ T30] audit: type=1400 audit(1766728959.117:589): avc: denied { getopt } for pid=9702 comm="syz.6.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.838256][ T9707] netlink: 'syz.5.791': attribute type 1 has an invalid length. [ 299.872137][ T9707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.885225][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.791'. [ 299.907785][ T9707] bond3: (slave dummy0): making interface the new active one [ 299.916359][ T9707] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 299.928441][ T9707] netlink: 'syz.5.791': attribute type 10 has an invalid length. [ 299.936600][ T9707] netlink: 40 bytes leftover after parsing attributes in process `syz.5.791'. [ 299.945874][ T9707] dummy0: entered promiscuous mode [ 299.952175][ T9707] bond3: (slave dummy0): Releasing active interface [ 300.046763][ T30] audit: type=1400 audit(1766728959.347:590): avc: denied { mounton } for pid=9712 comm="syz.3.793" path="/156/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 300.069015][ T5928] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 300.110990][ T30] audit: type=1400 audit(1766728959.407:591): avc: denied { read } for pid=9714 comm="syz.3.794" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 300.134606][ T30] audit: type=1400 audit(1766728959.407:592): avc: denied { open } for pid=9714 comm="syz.3.794" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 300.573883][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 300.641684][ T9725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.276207][ T5928] usb 7-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 301.286236][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.298757][ T5928] usb 7-1: config 0 descriptor?? [ 301.320995][ T5928] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 302.521081][ T5953] usbhid 5-1:0.0: can't add hid device: -71 [ 302.535148][ T5953] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 302.555981][ T5953] usb 5-1: USB disconnect, device number 52 [ 302.657161][ T30] audit: type=1400 audit(1766728961.957:593): avc: denied { mount } for pid=9732 comm="syz.4.799" name="/" dev="ramfs" ino=24824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 302.975426][ T5900] usb 7-1: USB disconnect, device number 9 [ 303.279592][ T9746] lo speed is unknown, defaulting to 1000 [ 303.288169][ T9746] lo speed is unknown, defaulting to 1000 [ 303.556552][ T30] audit: type=1400 audit(1766728962.787:594): avc: denied { map } for pid=9729 comm="syz.0.798" path="socket:[24255]" dev="sockfs" ino=24255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.782898][ T9755] siw: device registration error -23 [ 304.833971][ T90] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 305.023787][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 305.067367][ T90] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.090370][ T90] usb 4-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 305.120653][ T90] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 6 [ 305.157124][ T90] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 305.166459][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.176230][ T90] usb 4-1: Product: syz [ 305.182776][ T90] usb 4-1: Manufacturer: syz [ 305.196774][ T90] usb 4-1: SerialNumber: syz [ 306.216982][ T5953] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 306.344224][ T9770] 9p: Bad value for 'rfdno' [ 306.373714][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 306.392474][ T5953] usb 7-1: config 6 has an invalid interface number: 227 but max is 0 [ 306.410852][ T5953] usb 7-1: config 6 has no interface number 0 [ 306.430825][ T5953] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 306.470495][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.490690][ T5953] usb 7-1: Product: syz [ 306.506779][ T5953] usb 7-1: Manufacturer: syz [ 306.520055][ T5953] usb 7-1: SerialNumber: syz [ 306.546631][ T5953] kalmia 7-1:6.227: probe with driver kalmia failed with error -22 [ 306.773322][ T5953] usb 7-1: USB disconnect, device number 10 [ 307.222650][ T90] usb 4-1: USB disconnect, device number 40 [ 307.288956][ T30] audit: type=1400 audit(1766728966.587:595): avc: denied { connect } for pid=9775 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 307.394147][ T30] audit: type=1400 audit(1766728966.617:596): avc: denied { sys_module } for pid=9775 comm="syz.3.809" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 308.653969][ T90] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 308.793594][ T9788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.863832][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 308.870305][ T90] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.880837][ T90] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 308.889988][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.903511][ T90] usb 4-1: config 0 descriptor?? [ 308.912593][ T90] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 308.929142][ T90] usb 4-1: Detected SIO [ 308.936559][ T90] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 309.254216][ T30] audit: type=1400 audit(1766728968.557:597): avc: denied { connect } for pid=9820 comm="syz.6.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 309.343496][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 309.406054][ T9821] loop3: detected capacity change from 0 to 7 [ 309.490406][ T30] audit: type=1400 audit(1766728968.577:598): avc: denied { write } for pid=9820 comm="syz.6.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 309.497147][ T9821] Dev loop3: unable to read RDB block 7 [ 309.521209][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.818'. [ 309.549484][ T9821] loop3: AHDI p3 p4 [ 309.561491][ T9821] loop3: partition table partially beyond EOD, truncated [ 309.595332][ T9821] loop3: p3 start 1702000233 is beyond EOD, truncated [ 310.066186][ T30] audit: type=1400 audit(1766728969.367:599): avc: denied { watch } for pid=9829 comm="syz.4.820" path="/162/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 310.094936][ T30] audit: type=1400 audit(1766728969.387:600): avc: denied { watch_sb watch_reads } for pid=9829 comm="syz.4.820" path="/162/file0" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.122772][ T30] audit: type=1400 audit(1766728969.417:601): avc: denied { name_bind } for pid=9831 comm="syz.6.822" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 310.453999][ T90] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 310.546989][ T30] audit: type=1400 audit(1766728969.847:602): avc: denied { associate } for pid=9849 comm="syz.5.825" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 310.605746][ T90] usb 7-1: Using ep0 maxpacket: 8 [ 310.616349][ T90] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.630942][ T90] usb 7-1: config 179 has no interface number 0 [ 310.647384][ T90] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 310.673401][ T90] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 310.783596][ T5952] usb 4-1: USB disconnect, device number 41 [ 310.805260][ T90] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.817664][ T5952] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.834138][ T5952] ftdi_sio 4-1:0.0: device disconnected [ 310.863764][ T90] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 310.906609][ T90] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.950844][ T90] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 311.010503][ T90] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.071640][ T9868] fuse: Bad value for 'fd' [ 311.156997][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 311.324473][ T5995] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 311.343925][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 311.355578][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 311.370419][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.453239][ T10] usb 1-1: config 0 descriptor?? [ 311.484339][ T5995] usb 5-1: Using ep0 maxpacket: 16 [ 311.537783][ T5995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.551532][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 311.558182][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.645265][ T5995] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 311.689425][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.713764][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.769665][ T5995] usb 5-1: Product: syz [ 311.777787][ T9840] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 311.778636][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.803206][ T5995] usb 5-1: Manufacturer: syz [ 311.808201][ T5995] usb 5-1: SerialNumber: syz [ 311.816636][ T5995] usb 5-1: config 0 descriptor?? [ 311.843622][ T5995] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 311.856892][ T10] gspca_sonixj: reg_w1 err -71 [ 311.861729][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 311.880926][ T5995] sr9700 5-1:0.0: probe with driver sr9700 failed with error -22 [ 311.918954][ T10] usb 1-1: USB disconnect, device number 46 [ 311.999506][ T90] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input25 [ 312.045743][ T90] usb 5-1: USB disconnect, device number 53 [ 312.125209][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 312.197383][ T5952] usb 7-1: USB disconnect, device number 11 [ 312.203406][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 312.203457][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 312.372757][ T9893] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 312.425623][ T9893] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 312.453265][ T9898] netlink: 'syz.0.838': attribute type 23 has an invalid length. [ 312.530838][ T30] audit: type=1326 audit(1766728971.827:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 312.605070][ T30] audit: type=1326 audit(1766728971.857:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 312.695817][ T30] audit: type=1326 audit(1766728971.857:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 312.753012][ T30] audit: type=1326 audit(1766728971.857:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9900 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 312.903922][ T5995] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 313.113726][ T5928] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 313.468827][ T9915] JFS: discard option not supported on device [ 313.582701][ T9915] Mount JFS Failure: -22 [ 313.587693][ T9915] jfs_mount failed w/return code = -22 [ 313.596326][ T5995] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 313.604507][ T5995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 313.616966][ T5995] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 313.627104][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 313.635959][ T5995] usb 5-1: Product: syz [ 313.640197][ T5995] usb 5-1: Manufacturer: syz [ 313.648595][ T5995] usb 5-1: SerialNumber: syz [ 313.656402][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.665814][ T5928] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 313.684316][ T5928] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 313.694239][ T5995] usb 5-1: config 0 descriptor?? [ 313.815637][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.824880][ T5928] usb 4-1: Product: syz [ 313.829114][ T5928] usb 4-1: Manufacturer: syz [ 313.834084][ T5928] usb 4-1: SerialNumber: syz [ 314.444952][ T5995] usb 5-1: Firmware version (0.0) predates our first public release. [ 314.512594][ T5995] usb 5-1: Please update to version 0.2 or newer [ 314.616554][ T5995] usb 5-1: USB disconnect, device number 54 [ 314.879199][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 314.879214][ T30] audit: type=1400 audit(1766728974.177:639): avc: denied { write } for pid=9944 comm="syz.6.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 315.600900][ T5928] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 315.650040][ T9959] netlink: 'syz.0.851': attribute type 2 has an invalid length. [ 315.658433][ T9959] netlink: 'syz.0.851': attribute type 2 has an invalid length. [ 315.675740][ T30] audit: type=1400 audit(1766728974.977:640): avc: denied { write } for pid=9958 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 315.754386][ T5928] usb 4-1: device descriptor read/64, error -71 [ 316.393799][ T5928] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 316.533337][ T9978] overlayfs: failed lookup in lower (newroot/152, name='bus', err=-40): overlapping layers [ 316.663942][ T5928] usb 4-1: device descriptor read/64, error -71 [ 316.680598][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.687050][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.994571][ T5928] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 317.137781][ T5928] usb 4-1: device descriptor read/8, error -71 [ 317.394597][ T5928] usb 4-1: reset high-speed USB device number 42 using dummy_hcd [ 317.424222][ T5928] usb 4-1: device descriptor read/8, error -71 [ 317.533749][ T5952] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 317.551541][ T5928] usb 4-1: USB disconnect, device number 42 [ 318.193857][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 318.865049][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.875730][ T5928] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 318.877302][ T5952] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 318.983037][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.120489][ T5952] usb 7-1: config 0 descriptor?? [ 319.143965][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 320.000927][T10017] lo speed is unknown, defaulting to 1000 [ 320.059217][T10020] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 320.087381][T10017] lo speed is unknown, defaulting to 1000 [ 320.363978][ T5953] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 320.513940][ T5953] usb 4-1: device descriptor read/64, error -71 [ 320.763754][ T5928] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 320.763797][ T5953] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 320.894022][ T5928] usb 1-1: device descriptor read/64, error -71 [ 320.914694][ T5953] usb 4-1: device descriptor read/64, error -71 [ 321.056047][ T5953] usb usb4-port1: attempt power cycle [ 321.143789][ T5928] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 321.154586][ T5952] usbhid 7-1:0.0: can't add hid device: -71 [ 321.160562][ T5952] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 321.194719][ T5952] usb 7-1: USB disconnect, device number 12 [ 321.357518][ T5928] usb 1-1: device descriptor read/64, error -71 [ 321.424130][ T5953] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 321.454374][ T5953] usb 4-1: device descriptor read/8, error -71 [ 321.478501][ T5928] usb usb1-port1: attempt power cycle [ 321.743863][ T5953] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 321.764330][ T5953] usb 4-1: device descriptor read/8, error -71 [ 321.875030][ T5953] usb usb4-port1: unable to enumerate USB device [ 321.944184][ T5928] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 321.964280][ T5928] usb 1-1: device descriptor read/8, error -71 [ 322.228859][T10059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.258961][ T5928] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 322.271641][T10060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.304429][ T5928] usb 1-1: device descriptor read/8, error -71 [ 322.414120][ T5928] usb usb1-port1: unable to enumerate USB device [ 322.582489][ T30] audit: type=1400 audit(1766728981.877:641): avc: denied { read } for pid=10072 comm="syz.6.879" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 322.584192][T10075] xt_policy: too many policy elements [ 322.607449][ T30] audit: type=1400 audit(1766728981.907:642): avc: denied { open } for pid=10072 comm="syz.6.879" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 322.640683][T10077] netlink: 'syz.5.881': attribute type 11 has an invalid length. [ 322.648689][T10077] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.881'. [ 322.853765][ T5928] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 322.863783][ T5953] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 323.003874][ T5928] usb 7-1: Using ep0 maxpacket: 32 [ 323.016926][ T5928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 323.026297][ T5928] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 323.030093][T10079] loop5: detected capacity change from 0 to 7 [ 323.042017][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 323.047477][ T5928] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 323.051520][ T5953] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 323.068505][ T5928] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 323.069093][ T6000] Dev loop5: unable to read RDB block 7 [ 323.078655][ T5928] usb 7-1: config 128 has no interface number 0 [ 323.084781][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.099200][ T5928] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 323.106844][ T6000] loop5: unable to read partition table [ 323.110948][ T5928] usb 7-1: config 128 interface 127 has no altsetting 0 [ 323.116719][ T6000] loop5: partition table beyond EOD, [ 323.123545][ T5953] usb 5-1: Product: syz [ 323.125567][ T5928] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 323.129296][ T5953] usb 5-1: Manufacturer: syz [ 323.133383][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.142437][ T6000] truncated [ 323.154354][ T5928] usb 7-1: Product: syz [ 323.155793][ T5953] usb 5-1: SerialNumber: syz [ 323.158353][ T5928] usb 7-1: Manufacturer: syz [ 323.172462][T10079] Dev loop5: unable to read RDB block 7 [ 323.179065][T10079] loop5: unable to read partition table [ 323.191249][T10079] loop5: partition table beyond EOD, truncated [ 323.197696][ T5928] usb 7-1: SerialNumber: syz [ 323.204499][T10079] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 323.225219][T10073] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 323.384104][ T5953] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 323.396452][ T5953] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 323.407842][ T5953] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 323.417966][ T5953] usb 5-1: media controller created [ 323.432995][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.456509][ T5953] zl10353_read_register: readreg error (reg=127, ret==-71) [ 323.491445][ T5928] usb 7-1: USB disconnect, device number 13 [ 323.496004][ T5953] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 323.523215][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.553803][ T976] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 323.633882][ T5953] usb 5-1: USB disconnect, device number 55 [ 323.828677][ T30] audit: type=1400 audit(1766728983.117:643): avc: denied { setopt } for pid=10082 comm="syz.5.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 324.077907][ T976] usb 4-1: device descriptor read/64, error -71 [ 324.187423][T10092] CIFS: VFS: Malformed UNC in devname [ 324.776243][ T976] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 324.933698][ T976] usb 4-1: device descriptor read/64, error -71 [ 325.493971][T10107] comedi comedi3: comedi_config --init_data is deprecated [ 325.504173][ T976] usb usb4-port1: attempt power cycle [ 325.516762][T10111] loop5: detected capacity change from 0 to 7 [ 325.524309][T10111] Dev loop5: unable to read RDB block 7 [ 325.529874][T10111] loop5: unable to read partition table [ 325.535862][T10111] loop5: partition table beyond EOD, truncated [ 325.542112][T10111] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 326.157311][ T5953] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 326.214062][ T976] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 326.234392][ T976] usb 4-1: device descriptor read/8, error -71 [ 326.335163][ T5953] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.357706][ T5953] usb 1-1: config 0 has no interface number 0 [ 326.364499][ T5953] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 326.373861][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.385912][ T5953] usb 1-1: config 0 descriptor?? [ 326.403024][ T5953] usb 1-1: selecting invalid altsetting 1 [ 326.414411][ T5928] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 326.420769][ T5953] dvb_ttusb_budget: ttusb_init_controller: error [ 326.431188][ T5953] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 326.473739][ T5953] DVB: Unable to find symbol cx22700_attach() [ 326.496425][ T5953] DVB: Unable to find symbol tda10046_attach() [ 326.502576][ T5953] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 326.574687][ T5928] usb 7-1: too many configurations: 72, using maximum allowed: 8 [ 326.588909][ T5928] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 326.598401][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.607732][ T5858] usb 1-1: USB disconnect, device number 51 [ 326.616385][ T5928] usb 7-1: config 0 descriptor?? [ 326.664395][ T5953] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 326.813830][ T5953] usb 5-1: device descriptor read/64, error -71 [ 327.054971][ T5953] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 327.185118][ T5953] usb 5-1: device descriptor read/64, error -71 [ 327.324242][ T5953] usb usb5-port1: attempt power cycle [ 327.685341][ T5953] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 327.709834][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 327.744627][ T5953] usb 5-1: device descriptor read/8, error -71 [ 327.775630][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 328.003865][ T5953] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 328.055510][ T5953] usb 5-1: device descriptor read/8, error -71 [ 328.130056][T10152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36952 sclass=netlink_route_socket pid=10152 comm=syz.0.901 [ 328.176687][ T5953] usb usb5-port1: unable to enumerate USB device [ 328.282626][ T30] audit: type=1400 audit(1766728987.577:644): avc: denied { write } for pid=10153 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 328.303852][ T30] audit: type=1400 audit(1766728987.577:645): avc: denied { read } for pid=10153 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 328.525054][ T30] audit: type=1800 audit(1766728987.817:646): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.907" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 328.607258][ T5952] usb 7-1: USB disconnect, device number 14 [ 328.809227][T10174] i2c i2c-0: Invalid block write size 34 [ 329.349759][T10179] overlayfs: failed to resolve './file1/file0': -2 [ 329.407900][ T5952] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 329.593692][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 329.603987][ T5952] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 329.620501][ T5952] usb 7-1: config 0 has no interface number 0 [ 329.627092][ T5952] usb 7-1: config 0 interface 12 has no altsetting 0 [ 329.640820][ T5952] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 329.724902][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.737203][ T5952] usb 7-1: Product: syz [ 329.741384][ T5952] usb 7-1: Manufacturer: syz [ 329.753690][ T5952] usb 7-1: SerialNumber: syz [ 329.781598][ T5952] usb 7-1: config 0 descriptor?? [ 329.784168][ T976] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 330.033427][ T976] usb 5-1: device descriptor read/64, error -71 [ 330.208049][T10189] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.913'. [ 330.327567][T10193] overlayfs: failed to clone upperpath [ 330.482204][ T976] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 330.513820][ T90] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 330.613824][ T976] usb 5-1: device descriptor read/64, error -71 [ 330.616164][ T30] audit: type=1400 audit(1766728989.917:647): avc: denied { write } for pid=10202 comm="syz.0.917" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 330.675139][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 330.677261][ T90] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 330.677289][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.692148][ T90] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 330.734098][ T976] usb usb5-port1: attempt power cycle [ 330.768816][ T5952] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 330.792271][ T5952] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 330.802081][ T5952] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 330.810181][ T5952] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 330.835951][ T5952] usb 7-1: USB disconnect, device number 15 [ 331.134734][ T976] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 331.261881][ T30] audit: type=1400 audit(1766728990.537:648): avc: denied { lock } for pid=10215 comm="syz.0.919" path="socket:[26304]" dev="sockfs" ino=26304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.299114][ T90] gspca_nw80x: reg_r err -32 [ 331.309647][ T90] nw80x 4-1:3.0: probe with driver nw80x failed with error -32 [ 331.314568][ T976] usb 5-1: device descriptor read/8, error -71 [ 331.554056][ T976] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 331.574145][ T976] usb 5-1: device descriptor read/8, error -71 [ 331.606339][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 331.606339][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 331.606369][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.615938][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 331.628348][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 331.632695][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 331.642517][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 331.668091][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.676262][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 331.685588][ T976] usb usb5-port1: unable to enumerate USB device [ 331.710027][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.720813][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.728789][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.740137][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.748135][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.755903][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.764068][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.771909][T10224] netlink: 'syz.0.922': attribute type 5 has an invalid length. [ 331.927220][T10229] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 331.942328][T10229] team0: Port device batadv2 added [ 332.143139][T10229] hub 9-0:1.0: USB hub found [ 332.152928][T10229] hub 9-0:1.0: 1 port detected [ 332.643983][ T976] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 332.696744][T10249] 9pnet_fd: p9_fd_create_tcp (10249): problem binding to privport [ 332.877459][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.892956][ T976] usb 1-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.953201][ T976] usb 1-1: config 1 interface 0 has no altsetting 0 [ 332.962228][ T976] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 332.973584][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.996842][ T976] usb 1-1: Product: syz [ 333.003761][ T6460] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 333.020047][ T976] usb 1-1: Manufacturer: syz [ 333.025408][ T976] usb 1-1: SerialNumber: syz [ 333.149395][ T30] audit: type=1400 audit(1766728992.447:649): avc: denied { mounton } for pid=10265 comm="syz.5.934" path="/bus" dev="ramfs" ino=26498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 333.152835][ T5900] usb 4-1: USB disconnect, device number 52 [ 333.182036][T10266] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 333.229365][T10266] overlayfs: failed to set xattr on upper [ 333.254470][T10266] overlayfs: ...falling back to redirect_dir=nofollow. [ 333.260561][ T6460] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 333.273316][T10266] overlayfs: ...falling back to uuid=null. [ 333.275558][ T976] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input27 [ 333.296379][ T6460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 333.346297][ T6460] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 333.378991][ T976] usb 1-1: USB disconnect, device number 52 [ 333.385320][ T6460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.397245][ T6460] usb 5-1: Product: syz [ 333.401421][ T6460] usb 5-1: Manufacturer: syz [ 333.406470][ T6460] usb 5-1: SerialNumber: syz [ 333.422356][ T6460] usb 5-1: config 0 descriptor?? [ 333.447170][ T6460] usb 5-1: no audio or video endpoints found [ 334.539399][ T6460] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 334.703995][ T6460] usb 4-1: Using ep0 maxpacket: 16 [ 334.709988][ T6460] usb 4-1: no configurations [ 334.714899][ T6460] usb 4-1: can't read configurations, error -22 [ 334.846372][ T6460] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 334.903770][ T976] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 335.003913][ T6460] usb 4-1: Using ep0 maxpacket: 16 [ 335.009831][ T6460] usb 4-1: no configurations [ 335.014783][ T6460] usb 4-1: can't read configurations, error -22 [ 335.021451][ T6460] usb usb4-port1: attempt power cycle [ 335.055270][ T976] usb 7-1: config 0 has an invalid interface number: 87 but max is 0 [ 335.064318][ T976] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 335.073400][ T976] usb 7-1: config 0 has no interface number 0 [ 335.080481][ T976] usb 7-1: config 0 interface 87 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 335.096295][ T976] usb 7-1: New USB device found, idVendor=7392, idProduct=b811, bcdDevice=a6.ae [ 335.113817][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.113903][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 335.133784][ T976] usb 7-1: Product: syz [ 335.143802][ T976] usb 7-1: Manufacturer: syz [ 335.148411][ T976] usb 7-1: SerialNumber: syz [ 335.170484][ T976] usb 7-1: config 0 descriptor?? [ 335.391654][ T24] usb 1-1: config 64 has an invalid interface number: 194 but max is 0 [ 335.444476][ T24] usb 1-1: config 64 has an invalid interface number: 58 but max is 0 [ 335.455590][ T24] usb 1-1: config 64 has 2 interfaces, different from the descriptor's value: 1 [ 335.468288][ T24] usb 1-1: config 64 has no interface number 0 [ 335.478191][ T24] usb 1-1: config 64 has no interface number 1 [ 335.774302][ T6460] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 335.785645][ T24] usb 1-1: config 64 interface 194 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 335.798960][ T24] usb 1-1: config 64 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 335.802806][ T976] usb 7-1: USB disconnect, device number 16 [ 335.825978][ T24] usb 1-1: too many endpoints for config 64 interface 58 altsetting 71: 208, using maximum allowed: 30 [ 335.837644][ T24] usb 1-1: config 64 interface 58 altsetting 71 bulk endpoint 0x9 has invalid maxpacket 32 [ 335.847917][ T24] usb 1-1: config 64 interface 58 altsetting 71 endpoint 0xF has invalid maxpacket 1536, setting to 64 [ 335.859466][ T24] usb 1-1: config 64 interface 58 altsetting 71 bulk endpoint 0x2 has invalid maxpacket 32 [ 335.859925][ T6460] usb 4-1: Using ep0 maxpacket: 16 [ 335.870464][ T24] usb 1-1: config 64 interface 58 altsetting 71 has a duplicate endpoint with address 0x9, skipping [ 335.896458][ T6460] usb 4-1: no configurations [ 335.901817][ T5953] usb 5-1: USB disconnect, device number 64 [ 335.904743][ T6460] usb 4-1: can't read configurations, error -22 [ 335.929642][ T24] usb 1-1: config 64 interface 58 altsetting 71 has a duplicate endpoint with address 0x1, skipping [ 335.958422][ T24] usb 1-1: config 64 interface 58 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 335.970938][ T24] usb 1-1: config 64 interface 58 altsetting 71 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 336.043768][ T6460] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 336.085266][ T6460] usb 4-1: Using ep0 maxpacket: 16 [ 336.092381][ T6460] usb 4-1: no configurations [ 336.097481][ T6460] usb 4-1: can't read configurations, error -22 [ 336.112234][ T24] usb 1-1: config 64 interface 58 altsetting 71 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 336.123743][ T24] usb 1-1: config 64 interface 58 altsetting 71 has a duplicate endpoint with address 0x2, skipping [ 336.135459][ T24] usb 1-1: config 64 interface 58 altsetting 71 has 10 endpoint descriptors, different from the interface descriptor's value: 208 [ 336.149596][ T24] usb 1-1: config 64 interface 58 has no altsetting 0 [ 336.158576][ T24] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=7a.21 [ 336.188528][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.200566][ T24] usb 1-1: Product: syz [ 336.345131][ T30] audit: type=1400 audit(1766728995.637:650): avc: denied { module_load } for pid=10297 comm="syz.4.943" path="/sys/power/wakeup_count" dev="sysfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 336.534226][ T24] usb 1-1: Manufacturer: syz [ 336.611798][ T24] usb 1-1: SerialNumber: syz [ 336.627787][ T6460] usb usb4-port1: unable to enumerate USB device [ 336.655802][ T24] asix 1-1:64.194: probe with driver asix failed with error -22 [ 336.717006][ T30] audit: type=1400 audit(1766728995.967:651): avc: denied { create } for pid=10299 comm="syz.6.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 336.852528][ T30] audit: type=1400 audit(1766728995.977:652): avc: denied { ioctl } for pid=10299 comm="syz.6.944" path="socket:[26540]" dev="sockfs" ino=26540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 336.876195][T10285] __nla_validate_parse: 92 callbacks suppressed [ 336.876212][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 337.145519][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.214915][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.231896][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'. [ 337.263973][T10285] bond0: ARP target 170.170.170.170 is already present [ 337.422743][T10285] bond0: option arp_ip_target: invalid value (2863311530) [ 337.444204][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 337.473320][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 337.529901][T10285] bridge0: entered promiscuous mode [ 337.555032][T10285] ip6gretap0: entered promiscuous mode [ 337.778369][T10311] xt_ecn: cannot match TCP bits for non-tcp packets [ 337.799675][ T30] audit: type=1326 audit(1766728997.077:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 337.888817][ T30] audit: type=1326 audit(1766728997.077:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 337.912271][ T30] audit: type=1326 audit(1766728997.077:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 338.028201][ T30] audit: type=1326 audit(1766728997.077:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 338.124297][ T30] audit: type=1326 audit(1766728997.077:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 338.227571][ T30] audit: type=1326 audit(1766728997.077:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 338.277174][T10331] siw: device registration error -23 [ 338.305264][ T30] audit: type=1326 audit(1766728997.087:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8ad8f749 code=0x7ffc0000 [ 338.807238][ T24] asix 1-1:64.58: probe with driver asix failed with error -22 [ 338.881586][T10342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.985602][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.012177][ T24] usb 1-1: USB disconnect, device number 53 [ 340.024344][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.394138][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 340.594248][ T24] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.611090][ T24] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.621984][ T24] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.638069][T10366] netlink: 220 bytes leftover after parsing attributes in process `syz.3.961'. [ 340.638675][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 340.654126][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 340.663241][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.682897][ T24] usb 1-1: config 0 descriptor?? [ 340.980182][T10371] hfsplus: unable to find HFS+ superblock [ 341.159930][ T24] magicmouse 0003:05AC:0265.0014: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 341.190021][ T24] magicmouse 0003:05AC:0265.0014: magicmouse input not registered [ 341.212293][ T24] magicmouse 0003:05AC:0265.0014: probe with driver magicmouse failed with error -12 [ 341.291300][ T24] usb 1-1: USB disconnect, device number 54 [ 341.456810][ T6460] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 341.613818][ T6460] usb 5-1: Using ep0 maxpacket: 16 [ 341.623980][ T5858] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 341.647055][ T6460] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.670363][ T6460] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 341.687853][ T6460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 341.710881][T10387] Process accounting resumed [ 341.731758][ T6460] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.765690][ T6460] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 341.776272][ T6460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.793857][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 341.799061][ T6460] usb 5-1: Product: syz [ 341.803205][ T6460] usb 5-1: Manufacturer: syz [ 341.818139][ T6460] usb 5-1: SerialNumber: syz [ 341.822868][ T5858] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 341.837764][ T6460] usb 5-1: config 0 descriptor?? [ 341.843169][ T5858] usb 7-1: config 0 has no interface number 0 [ 341.857373][ T5858] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 341.878707][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.899368][ T5858] usb 7-1: Product: syz [ 341.906132][ T5858] usb 7-1: Manufacturer: syz [ 341.916193][ T5858] usb 7-1: SerialNumber: syz [ 342.010158][ T6460] rc_core: IR keymap rc-xbox-dvd not found [ 342.016527][ T6460] Registered IR keymap rc-empty [ 342.025375][ T6460] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 342.034228][ T5858] usb 7-1: config 0 descriptor?? [ 342.042750][ T5858] hub 7-1:0.89: bad descriptor, ignoring hub [ 342.052838][ T6460] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 342.063741][ T5858] hub 7-1:0.89: probe with driver hub failed with error -5 [ 342.140097][T10374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.548981][ T5858] option 7-1:0.89: GSM modem (1-port) converter detected [ 342.573160][T10398] ksmbd: Unknown IPC event: 8, ignore. [ 342.622112][ T5858] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 342.681969][T10374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.710895][ T5858] usb 7-1: USB disconnect, device number 17 [ 342.737166][ T5858] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 342.765528][ T5858] option 7-1:0.89: device disconnected [ 342.984527][ T5928] usb 5-1: USB disconnect, device number 65 [ 342.984561][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 343.263047][T10411] validate_nla: 23 callbacks suppressed [ 343.263074][T10411] netlink: 'syz.3.974': attribute type 3 has an invalid length. [ 343.288548][T10411] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.974'. [ 343.413816][ T5928] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 343.588593][ T5928] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 343.620221][ T5928] usb 7-1: config 0 has no interface number 0 [ 343.638866][ T5928] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 343.684057][ T5928] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.700236][ T5928] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 343.711900][ T5928] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 343.725982][ T5928] usb 7-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 343.778224][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.796447][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 343.810178][T10421] xfrm1: entered promiscuous mode [ 343.811471][ T5928] usb 7-1: Product: syz [ 343.815305][T10421] xfrm1: entered allmulticast mode [ 343.841131][ T5928] usb 7-1: Manufacturer: syz [ 343.853690][ T5928] usb 7-1: SerialNumber: syz [ 343.871906][ T5928] usb 7-1: config 0 descriptor?? [ 343.872689][T10426] netlink: 'syz.5.980': attribute type 1 has an invalid length. [ 343.893485][ T5928] xpad 7-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 344.036786][ T5928] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.237/input/input29 [ 344.048601][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 344.048615][ T30] audit: type=1400 audit(1766729003.347:697): avc: denied { bind } for pid=10433 comm="syz.5.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 344.080269][ T6460] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 344.528235][ T6460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.543578][ T6460] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.574060][ T6460] usb 5-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 344.583710][ T6460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.614061][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.615317][ T6460] usb 5-1: config 0 descriptor?? [ 344.637150][T10441] 9p: Bad value for 'rfdno' [ 344.644556][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.656120][ T6597] usb 7-1: USB disconnect, device number 18 [ 344.774955][T10445] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 344.785158][T10440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.832479][T10445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.860225][T10449] bond6: (slave veth5): Enslaving as an active interface with a down link [ 344.888547][T10440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.909267][T10445] vlan0: entered allmulticast mode [ 344.915206][T10445] bond_slave_1: entered allmulticast mode [ 344.921534][T10445] bond_slave_1: entered promiscuous mode [ 344.928303][T10445] bond_slave_1: left promiscuous mode [ 344.936063][T10445] bond6: (slave vlan0): making interface the new active one [ 344.944592][T10445] bond_slave_1: entered promiscuous mode [ 344.951110][T10445] vlan0: entered promiscuous mode [ 344.958665][T10445] bond6: (slave vlan0): Enslaving as an active interface with an up link [ 344.996311][T10440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.043731][ T6597] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 345.079151][T10440] bond0: (slave netdevsim0): Releasing backup interface [ 345.090232][ T6460] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 345.102075][ T6460] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 345.112861][ T6460] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 345.122656][T10440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.133789][ T6460] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 345.140652][ T6460] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 345.153064][ T6460] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 345.165811][ T6460] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 345.180674][ T6460] ntrig 0003:1B96:0005.0015: hidraw0: USB HID v0.00 Device [HID 1b96:0005] on usb-dummy_hcd.4-1/input0 [ 345.195308][ T6597] usb 1-1: Using ep0 maxpacket: 32 [ 345.211904][ T6597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 7 [ 345.230712][ T6597] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 345.248734][ T6597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.276077][ T6597] usb 1-1: config 0 descriptor?? [ 345.281705][ T6460] ntrig 0003:1B96:0005.0015: Firmware version: 1.5.17.50.7 (5643 4726) [ 345.438783][T10453] netlink: 'syz.6.985': attribute type 3 has an invalid length. [ 345.453076][T10453] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.985'. [ 345.527950][ T7052] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.698610][ T6598] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.718131][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.734664][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.758105][ T6460] usb 5-1: USB disconnect, device number 66 [ 345.836438][ T6432] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.862483][ T7052] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.892593][ T6597] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 345.947752][ T6597] usb 1-1: USB disconnect, device number 55 [ 346.114115][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 346.183820][ T5900] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 346.263754][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 346.272560][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 346.282885][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.291039][ T24] usb 4-1: Product: syz [ 346.295368][ T24] usb 4-1: Manufacturer: syz [ 346.299972][ T24] usb 4-1: SerialNumber: syz [ 346.309784][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 346.316204][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 346.343775][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 346.350561][ T5900] usb 7-1: config 254 has an invalid interface number: 235 but max is 0 [ 346.359483][ T5900] usb 7-1: config 254 has no interface number 0 [ 346.365970][ T5900] usb 7-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 346.376352][ T5900] usb 7-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.387698][ T5900] usb 7-1: config 254 interface 235 has no altsetting 0 [ 346.396819][ T5900] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 346.423722][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 346.436307][ T5900] usb 7-1: Product: syz [ 346.440659][ T5900] usb 7-1: Manufacturer: syz [ 346.451467][ T5900] usb 7-1: SerialNumber: syz [ 346.460223][T10462] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 346.486753][ T5900] usbtest 7-1:254.235: couldn't get endpoints, -22 [ 346.486940][T10468] program syz.0.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.493365][ T5900] usbtest 7-1:254.235: probe with driver usbtest failed with error -22 [ 346.526552][ T24] r8152-cfgselector 4-1: Needed 1 retries to read version [ 346.740422][T10459] netlink: 14 bytes leftover after parsing attributes in process `syz.3.986'. [ 346.827647][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.859232][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.941104][T10487] netlink: 'syz.5.991': attribute type 2 has an invalid length. [ 346.950397][ T5953] usb 7-1: USB disconnect, device number 19 [ 347.116159][T10488] overlayfs: failed to clone upperpath [ 347.648798][T10459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.712161][T10459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.759754][T10459] bond0 (unregistering): Released all slaves [ 347.879554][T10502] Cannot find add_set index 2 as target [ 348.008253][T10503] netlink: 'syz.6.998': attribute type 3 has an invalid length. [ 348.015563][ T7056] bond6: (slave vlan0): link status definitely down, disabling slave [ 348.018881][T10503] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.998'. [ 348.029719][ T6597] r8152-cfgselector 4-1: USB disconnect, device number 57 [ 348.064027][ T5893] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 348.120283][ T7056] vlan0: left promiscuous mode [ 348.239491][ T7056] bond6: now running without any active interface! [ 348.343726][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 348.356467][ T5893] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.384598][ T30] audit: type=1400 audit(1766729007.677:698): avc: denied { setattr } for pid=10506 comm="syz.6.1000" name="" dev="pipefs" ino=27320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 348.388456][ T5893] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.435544][ T5893] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 348.510653][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 348.582411][ T5893] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 348.702385][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.930055][ T5893] usb 5-1: config 0 descriptor?? [ 349.313262][T10515] lo speed is unknown, defaulting to 1000 [ 349.320643][ T30] audit: type=1400 audit(1766729008.617:699): avc: denied { read } for pid=10519 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.360825][T10515] lo speed is unknown, defaulting to 1000 [ 349.617443][T10515] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 349.626988][T10537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.640104][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 349.661246][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 349.671923][T10537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.688763][ T5893] usb 5-1: USB disconnect, device number 67 [ 349.723057][T10538] erspan0: entered promiscuous mode [ 349.732849][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1008'. [ 349.833820][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 349.908497][ T30] audit: type=1400 audit(1766729009.207:700): avc: denied { mount } for pid=10539 comm="syz.6.1009" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 349.934426][ T30] audit: type=1400 audit(1766729009.227:701): avc: denied { mounton } for pid=10539 comm="syz.6.1009" path="/54/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 349.962921][T10543] netlink: 'syz.5.1010': attribute type 3 has an invalid length. [ 349.972274][T10543] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.1010'. [ 350.013676][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 350.019940][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.040003][ T24] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 350.050054][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.058749][ T24] usb 4-1: Product: syz [ 350.062869][T10545] tmpfs: Unknown parameter 'usrquota_inode_h ' [ 350.063190][ T24] usb 4-1: Manufacturer: syz [ 350.080340][ T24] usb 4-1: SerialNumber: syz [ 350.086751][ T24] usb 4-1: config 0 descriptor?? [ 350.093898][ T24] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 350.100134][ T24] usb 4-1: selecting invalid altsetting 1 [ 350.162162][ T30] audit: type=1400 audit(1766729016.454:702): avc: denied { ioctl } for pid=10549 comm="syz.0.1012" path="socket:[27450]" dev="sockfs" ino=27450 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 350.191107][ T30] audit: type=1400 audit(1766729016.484:703): avc: denied { setopt } for pid=10549 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 350.215786][ T30] audit: type=1400 audit(1766729016.514:704): avc: denied { getopt } for pid=10549 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 350.238482][ T30] audit: type=1400 audit(1766729016.514:705): avc: denied { ioctl } for pid=10549 comm="syz.0.1012" path="socket:[27455]" dev="sockfs" ino=27455 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 350.465893][T10558] netlink: 'syz.4.1013': attribute type 30 has an invalid length. [ 350.894377][T10560] netlink: 'syz.4.1013': attribute type 30 has an invalid length. [ 350.939148][T10561] 9pnet_virtio: no channels available for device syz [ 351.113558][ T24] gspca_stk014: reg_r err -110 [ 351.118515][ T24] stk014 4-1:0.0: probe with driver stk014 failed with error -110 [ 351.149532][ T30] audit: type=1400 audit(1766729017.434:706): avc: denied { unmount } for pid=9280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 351.264916][ T30] audit: type=1400 audit(1766729017.564:707): avc: denied { bind } for pid=10566 comm="syz.6.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.709407][ T30] audit: type=1326 audit(1766729018.004:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.6.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 351.954183][ T5900] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 352.112674][T10585] netlink: 'syz.4.1021': attribute type 3 has an invalid length. [ 352.164220][T10585] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1021'. [ 352.252365][T10587] siw: device registration error -23 [ 352.263750][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 352.287033][ T5900] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.299109][ T5900] usb 7-1: config 179 has no interface number 0 [ 352.340608][ T5900] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.360082][T10592] IPVS: length: 149 != 8 [ 352.366322][ T5900] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.466200][ T5900] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.478144][ T5900] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 352.489671][ T5900] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.503124][ T5900] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.512588][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.024922][ T24] usb 4-1: USB disconnect, device number 58 [ 353.101068][T10574] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 353.334065][ T5928] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input31 [ 353.404288][ T24] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 353.520273][T10602] kernel read not supported for file /cpuacct.usage_percpu (pid: 10602 comm: syz.0.1027) [ 353.552997][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.564732][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 353.567965][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.578612][ T24] usb 4-1: config 4 has an invalid interface number: 8 but max is 3 [ 353.589740][ T24] usb 4-1: config 4 has an invalid interface number: 203 but max is 3 [ 353.618992][ T24] usb 4-1: config 4 has an invalid interface number: 4 but max is 3 [ 353.634732][ T24] usb 4-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 353.653053][ T24] usb 4-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 353.671970][ T24] usb 4-1: config 4 has no interface number 0 [ 353.685432][ T24] usb 4-1: config 4 has no interface number 1 [ 353.699272][ T24] usb 4-1: config 4 has no interface number 2 [ 353.711969][ T24] usb 4-1: config 4 interface 8 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 353.728045][ T24] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 353.739348][ T24] usb 4-1: config 4 interface 8 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 353.751931][ T24] usb 4-1: config 4 interface 8 altsetting 1 has a duplicate endpoint with address 0x86, skipping [ 353.763137][ T24] usb 4-1: config 4 interface 8 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 353.774988][ T24] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 353.786657][ T24] usb 4-1: config 4 interface 8 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 353.798113][ T24] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 353.812541][ T5900] usb 7-1: USB disconnect, device number 20 [ 353.814457][ T24] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 353.818849][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 353.837726][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 353.858356][ T24] usb 4-1: config 4 interface 8 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 353.871773][ T24] usb 4-1: config 4 interface 203 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 353.887273][ T24] usb 4-1: config 4 interface 203 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 353.899251][ T24] usb 4-1: config 4 interface 203 altsetting 2 endpoint 0x7 has invalid maxpacket 37131, setting to 64 [ 353.911844][ T24] usb 4-1: config 4 interface 203 altsetting 2 has an endpoint descriptor with address 0x26, changing to 0x6 [ 353.924387][ T24] usb 4-1: config 4 interface 203 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 353.935758][ T24] usb 4-1: config 4 interface 203 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 353.946990][ T24] usb 4-1: config 4 interface 203 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 353.962638][ T24] usb 4-1: config 4 interface 203 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 353.974733][ T24] usb 4-1: config 4 interface 203 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 353.988513][ T24] usb 4-1: config 4 interface 4 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 354.005362][ T24] usb 4-1: config 4 interface 8 has no altsetting 0 [ 354.016942][ T24] usb 4-1: config 4 interface 203 has no altsetting 0 [ 354.024205][ T24] usb 4-1: config 4 interface 4 has no altsetting 0 [ 354.033118][ T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=1d7e, bcdDevice=eb.99 [ 354.043069][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.066839][ T24] usb 4-1: Product: 㓃魷둑ѯ녆鴷냯嶮욷밤蹯翈輨嚋珏輮፬쿒⣬嫀㤵╛ｬ뷶郦沾폔ᇢᴟ銵⨖㜽ꥻ䂬⹙굽⽖뎑灁翪鬤繞⭂蛱뉣띋䙢鳭앀⧷᳸ꗪੑ޶믟蹧嘁＀匥⸱⠲掝㭣ᯩ [ 354.098847][ T24] usb 4-1: Manufacturer: ᬫ䚱篱퀳⳻䙯䥿ૄꎣ㻙㇥䶱侐痥䯉砧퀠࿈弯ᘨ䋝Ś乜⮯﹦䯬꫽௰㽣ⶹꬕ銊ệⵘ年ڵ挀෨鞻䩴嬁ᦪ⣈ʖ荗搁⯁鮎灀ꔿ垿䕫耸ऴ慂⫻좟ป䃆훵㈏찏裋⿟הꨴ乑숀෧ⲗ⑉斓炁רּ눅褽ꫵDžຸ嶢ᵀທ욕윺鶗꽑嗬୿쐮ﲎ퀬 [ 354.132780][ T24] usb 4-1: SerialNumber: ҏι쩔亵崕媷ഗᅔ⊹ﯢ㿴苲痺卄ﱟ⟂﻾ꇑ耘㝷챑ֳට颇⇣샶ꀉꨍ䳟똍鎻淪펊즖鹡䏼蒋剩ꃤ១꼅炸欄퓁௖꺼담总ﭒ噎㦖ꉛ은䁡枼環穤蜸ἒꂿ쾫퀙쭛뭶 [ 354.192179][T10598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.201519][T10598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.873006][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1032'. [ 354.915256][T10624] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 354.998137][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.050137][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.645981][T10635] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.805275][T10642] siw: device registration error -23 [ 355.900472][T10646] netlink: 'syz.0.1037': attribute type 12 has an invalid length. [ 355.923110][T10646] netlink: 'syz.0.1037': attribute type 29 has an invalid length. [ 355.944241][T10646] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1037'. [ 355.980011][T10646] netlink: 'syz.0.1037': attribute type 2 has an invalid length. [ 356.005481][T10646] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1037'. [ 356.177900][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 356.177915][ T30] audit: type=1400 audit(1766729022.474:766): avc: denied { write } for pid=10648 comm="syz.6.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 356.454211][ T5900] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 356.578829][T10659] binfmt_misc: register: failed to install interpreter file ./file0 [ 356.605050][ T5900] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 356.613441][ T5900] usb 7-1: config 0 has no interface number 0 [ 356.619655][ T5900] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 356.648211][ T5900] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 356.673366][ T5900] usb 7-1: config 0 interface 151 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 356.717642][ T5900] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 356.735710][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.772629][ T5900] usb 7-1: Product: syz [ 356.793717][ T5900] usb 7-1: Manufacturer: syz [ 356.821075][ T5900] usb 7-1: SerialNumber: syz [ 356.889246][ T5900] usb 7-1: config 0 descriptor?? [ 357.475221][ T24] option 4-1:4.8: GSM modem (1-port) converter detected [ 357.528762][ T5900] usb 7-1: USB disconnect, device number 21 [ 357.559662][T10461] udevd[10461]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.611770][ T24] usb 4-1: USB disconnect, device number 59 [ 357.651425][ T24] option 4-1:4.8: device disconnected [ 358.043459][ T24] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 358.682036][ T24] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 358.690137][ T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 358.700325][ T24] usb 4-1: config 6 has no interface number 0 [ 358.707718][ T24] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.728141][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 358.749142][ T24] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 358.769147][ T24] usb 4-1: Product: syz [ 358.773422][ T24] usb 4-1: Manufacturer: syz [ 358.843909][ T24] usb 4-1: SerialNumber: syz [ 358.859501][T10692] vcan0: tx address claim with dlc 0 [ 358.895432][ T24] hso 4-1:6.2: Failed to find INT IN ep [ 358.953703][ T6597] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 359.078344][ T24] usb 4-1: USB disconnect, device number 60 [ 359.106878][T10698] overlayfs: failed to resolve './file0': -2 [ 359.132124][ T6597] usb 7-1: Using ep0 maxpacket: 16 [ 359.139489][ T6597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 359.157834][ T6597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 359.181961][ T6597] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.206017][ T6597] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 359.215553][ T6597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.419528][ T30] audit: type=1400 audit(1766729025.704:767): avc: denied { call } for pid=10703 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 359.464260][ T6597] usb 7-1: config 0 descriptor?? [ 359.594095][ T30] audit: type=1400 audit(1766729025.894:768): avc: denied { accept } for pid=10708 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 359.892017][ T6597] shield 0003:0955:7214.0016: unexpected long global item [ 359.907287][ T6597] shield 0003:0955:7214.0016: Parse failed [ 359.915777][ T6597] shield 0003:0955:7214.0016: probe with driver shield failed with error -22 [ 359.924662][ T24] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 359.982880][T10743] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 360.085054][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.098004][ T24] usb 4-1: config 0 has no interface number 0 [ 360.108456][ T6597] usb 7-1: USB disconnect, device number 22 [ 360.125473][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 360.141891][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.156450][ T24] usb 4-1: Product: syz [ 360.163001][ T24] usb 4-1: Manufacturer: syz [ 360.170813][ T24] usb 4-1: SerialNumber: syz [ 360.183955][ T24] usb 4-1: config 0 descriptor?? [ 360.567607][ T24] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 360.590903][ T24] usb 4-1: USB disconnect, device number 61 [ 360.838540][ T30] audit: type=1326 audit(1766729027.134:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 360.870893][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.061786][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.376772][ T30] audit: type=1326 audit(1766729027.134:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 361.400808][ T30] audit: type=1326 audit(1766729027.134:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 361.438949][T10755] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1070'. [ 361.453746][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 361.720828][ T30] audit: type=1326 audit(1766729027.254:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 361.746814][ T30] audit: type=1326 audit(1766729027.254:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 361.797886][ T30] audit: type=1326 audit(1766729027.254:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 361.826737][ T30] audit: type=1326 audit(1766729027.674:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 361.853004][ T30] audit: type=1326 audit(1766729027.674:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48fb8f749 code=0x7ffc0000 [ 361.905364][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 361.915007][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.921012][T10766] overlayfs: failed to clone upperpath [ 361.946020][ T24] usb 5-1: config 0 descriptor?? [ 362.119779][ T24] cp210x 5-1:0.0: cp210x converter detected [ 362.205951][ T30] audit: type=1400 audit(1766729027.505:777): avc: denied { ioctl } for pid=10780 comm="syz.0.1076" path="socket:[28505]" dev="sockfs" ino=28505 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 362.263785][ T6597] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 362.415423][ T6597] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 362.423858][ T6597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.434410][ T6597] usb 4-1: config 0 has no interface number 0 [ 362.442429][ T6597] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 362.451725][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.459837][ T6597] usb 4-1: Product: syz [ 362.464294][ T6597] usb 4-1: Manufacturer: syz [ 362.468998][ T6597] usb 4-1: SerialNumber: syz [ 362.475495][ T6597] usb 4-1: config 0 descriptor?? [ 362.758397][ T24] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 362.766262][ T24] cp210x 5-1:0.0: querying part number failed [ 362.817994][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 362.846001][ T24] usb 5-1: USB disconnect, device number 68 [ 362.949507][ T6597] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 363.052993][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 363.160934][ T6597] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 363.265857][ T24] cp210x 5-1:0.0: device disconnected [ 363.287112][ T6597] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 363.298844][ T6597] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 363.307744][ T6597] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 363.319786][ T6597] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 363.339511][ T30] audit: type=1400 audit(1766729028.635:778): avc: denied { read } for pid=6597 comm="kworker/1:11" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29013 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 363.673727][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 363.823765][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 363.830654][ T24] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 363.838861][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.849068][ T24] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 363.858362][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.868744][ T24] usb 5-1: config 0 descriptor?? [ 363.880114][ T24] pxrc 5-1:0.0: Could not find endpoint [ 364.423140][ T30] audit: type=1400 audit(1766729029.715:779): avc: denied { setopt } for pid=10808 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.910351][T10817] netlink: 'syz.5.1088': attribute type 3 has an invalid length. [ 364.921350][T10817] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.1088'. [ 365.108319][ T976] usb 4-1: USB disconnect, device number 62 [ 365.142973][ T976] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 365.163586][ T976] keyspan 4-1:0.133: device disconnected [ 365.663754][ T976] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 365.833833][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 365.851389][ T976] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 365.877132][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.907235][ T976] usb 4-1: config 0 has no interface number 0 [ 365.913370][ T976] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 365.947536][T10841] netlink: 'syz.0.1095': attribute type 21 has an invalid length. [ 365.975178][ T976] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 365.993798][T10841] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1095'. [ 366.003313][ T976] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.018398][T10841] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 366.043673][ T976] usb 4-1: config 0 interface 52 has no altsetting 0 [ 366.055401][ T976] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 366.079603][T10841] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1095'. [ 366.086851][ T976] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 366.119506][ T976] usb 4-1: Product: syz [ 366.130085][ T976] usb 4-1: SerialNumber: syz [ 366.150444][ T976] usb 4-1: config 0 descriptor?? [ 366.201769][ T5953] usb 5-1: USB disconnect, device number 69 [ 366.360390][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 366.390128][ T976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 366.417560][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 366.417577][ T30] audit: type=1400 audit(1766729031.715:782): avc: denied { getopt } for pid=10849 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 366.437428][ T976] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 366.488343][T10855] netlink: 'syz.0.1099': attribute type 3 has an invalid length. [ 366.501342][T10855] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1099'. [ 366.959093][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.971715][T10857] fuse: Bad value for 'fd' [ 366.978035][T10857] 9p: Bad value for 'wfdno' [ 367.006491][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.032773][ T5928] usb 4-1: USB disconnect, device number 63 [ 367.806046][ T30] audit: type=1400 audit(1766729033.105:783): avc: denied { listen } for pid=10869 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 367.862124][ T30] audit: type=1400 audit(1766729033.135:784): avc: denied { read } for pid=10869 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 369.197957][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 369.235028][T10891] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 369.249535][T10891] nbd: error processing sock list [ 370.352844][T10924] netlink: 'syz.6.1110': attribute type 3 has an invalid length. [ 370.392166][T10924] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.1110'. [ 370.618094][T10929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.756054][ T30] audit: type=1400 audit(1766729036.055:785): avc: denied { accept } for pid=10933 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 370.768840][T10938] netlink: 416 bytes leftover after parsing attributes in process `syz.4.1117'. [ 370.785629][T10938] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1117'. [ 370.802626][T10934] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1120'. [ 370.824177][ T6597] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 370.939827][ T90] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 370.955176][ T90] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.112475][ T6597] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 371.512004][ T6597] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 371.540330][ T6597] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 371.688411][ T6597] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 371.702292][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.719921][ T6597] usb 4-1: Product: syz [ 371.725057][ T6597] usb 4-1: Manufacturer: syz [ 371.729739][ T6597] usb 4-1: SerialNumber: syz [ 371.730434][T10954] netlink: 352 bytes leftover after parsing attributes in process `syz.5.1122'. [ 371.783588][T10954] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1122'. [ 371.851201][ T6597] usb 4-1: config 0 descriptor?? [ 371.861801][T10926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.883903][T10926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.934909][ T6597] usb 4-1: ucan: probing device on interface #0 [ 372.118773][ T6597] usb 4-1: ucan: device protocol version 1949267045 is not supported [ 372.133958][ T6597] usb 4-1: ucan: probe failed; try to update the device firmware [ 372.394158][T10926] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 372.576670][T10966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 372.613200][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1116'. [ 372.681025][T10966] bond0: (slave bond7): making interface the new active one [ 372.789490][T10966] bond0: (slave bond7): Enslaving as an active interface with an up link [ 372.857085][T10926] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 372.903523][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.918430][ T5953] usb 4-1: USB disconnect, device number 64 [ 373.104505][ T30] audit: type=1400 audit(1766729038.395:786): avc: denied { setattr } for pid=10956 comm="syz.5.1124" name="NETLINK" dev="sockfs" ino=29331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.667871][T10990] netlink: 'syz.4.1129': attribute type 3 has an invalid length. [ 373.695728][T10990] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1129'. [ 373.833158][T10995] vlan0: entered promiscuous mode [ 374.818095][ T5953] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 374.853588][T11000] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1134'. [ 374.901322][T11000] 9p: Bad value for 'wfdno' [ 375.025272][ T5953] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 375.034046][ T5953] usb 7-1: config 0 has no interface number 0 [ 375.042203][ T5953] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 375.052586][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.063203][ T5953] usb 7-1: Product: syz [ 375.067701][ T5953] usb 7-1: Manufacturer: syz [ 375.072423][ T5953] usb 7-1: SerialNumber: syz [ 375.077369][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 375.083672][ T976] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 375.101187][ T5953] usb 7-1: config 0 descriptor?? [ 375.223709][ T976] usb 4-1: device descriptor read/64, error -71 [ 375.233694][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 375.242391][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 375.252081][ T24] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 375.268014][ T24] usb 5-1: Product: syz [ 375.272213][ T24] usb 5-1: Manufacturer: syz [ 375.287411][ T24] usb 5-1: SerialNumber: syz [ 375.304082][ T24] usb 5-1: config 0 descriptor?? [ 375.468668][ T976] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 375.515348][ T5953] usb 7-1: Firmware: major: 0, minor: 255, hardware type: UNKNOWN (145) [ 375.521573][ T5893] usb 5-1: USB disconnect, device number 70 [ 375.603781][ T976] usb 4-1: device descriptor read/64, error -71 [ 375.719602][ T976] usb usb4-port1: attempt power cycle [ 375.739125][ T5953] usb 7-1: Read permanent extended address d8:0c:63:07:4c:12:5b:6e from device [ 375.751207][ T5953] usb 7-1: atusb_probe: initialization failed, error = -524 [ 375.763832][ T5953] atusb 7-1:0.128: probe with driver atusb failed with error -524 [ 375.967659][T11019] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 376.466420][ T976] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 376.495401][ T976] usb 4-1: device descriptor read/8, error -71 [ 376.626461][ T30] audit: type=1400 audit(1766729041.905:787): avc: denied { connect } for pid=11021 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 376.765590][ T976] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 376.814120][ T976] usb 4-1: device descriptor read/8, error -71 [ 376.903059][ T30] audit: type=1400 audit(1766729042.195:788): avc: denied { mounton } for pid=11021 comm="syz.5.1141" path="/239/file0" dev="tmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 377.263940][ T976] usb usb4-port1: unable to enumerate USB device [ 377.274268][T11025] netlink: 'syz.0.1142': attribute type 3 has an invalid length. [ 377.283083][T11025] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1142'. [ 377.376334][ T976] usb 7-1: USB disconnect, device number 23 [ 377.673980][ T30] audit: type=1400 audit(1766729042.965:789): avc: denied { create } for pid=11034 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 377.882583][ T30] audit: type=1400 audit(1766729043.165:790): avc: denied { map } for pid=11030 comm="syz.6.1145" path="socket:[29421]" dev="sockfs" ino=29421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 378.167431][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.171864][ T976] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 378.173919][ T5953] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 378.190130][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.356124][ T976] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 378.375642][ T976] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 378.385448][ T5953] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.893267][ T976] usb 4-1: can't read configurations, error -61 [ 378.928242][ T5953] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 378.963769][ T5953] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.975454][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.986951][ T5953] usb 7-1: Product: syz [ 378.995171][ T5953] usb 7-1: Manufacturer: syz [ 379.005270][ T5953] usb 7-1: SerialNumber: syz [ 379.023844][ T976] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 379.194373][ T976] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 379.218211][ T976] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 379.233756][ T976] usb 4-1: can't read configurations, error -61 [ 379.253054][ T976] usb usb4-port1: attempt power cycle [ 379.260867][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.269741][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.547693][T11058] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1151'. [ 379.557218][T11058] unsupported nlmsg_type 40 [ 380.073887][ T976] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 380.171221][T11063] tmpfs: Unknown parameter 'grpquotacrH)Mm|F/ SSgThYxF$҂u2cXyyu_Q1TkMH' [ 380.205652][ T976] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 380.215941][ T976] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 380.331615][ T976] usb 4-1: can't read configurations, error -61 [ 380.547214][ T976] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 380.853679][ T30] audit: type=1400 audit(1766729046.145:791): avc: denied { ioctl } for pid=11067 comm="syz.4.1155" path="socket:[30119]" dev="sockfs" ino=30119 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.871703][ T5953] cdc_ncm 7-1:1.0: bind() failure [ 380.906540][ T5953] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 380.911839][ T976] usb 4-1: device descriptor read/8, error -71 [ 380.913410][ T5953] cdc_ncm 7-1:1.1: bind() failure [ 380.976831][ T5953] usb 7-1: USB disconnect, device number 24 [ 381.023990][ T976] usb usb4-port1: unable to enumerate USB device [ 382.058784][T11072] syzkaller0: entered promiscuous mode [ 382.073578][T11072] syzkaller0: entered allmulticast mode [ 384.095753][T11081] tipc: Started in network mode [ 384.136948][T11081] tipc: Node identity 6a3d4e116099, cluster identity 4711 [ 384.167847][T11081] tipc: Enabled bearer , priority 0 [ 384.269659][T11070] tipc: Resetting bearer [ 384.403562][ T9381] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 384.584806][ T9381] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 384.599904][ T9381] usb 4-1: config 160 has no interface number 0 [ 384.609913][ T9381] usb 4-1: config 160 interface 200 has no altsetting 0 [ 384.632736][ T9381] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 384.649421][ T9381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.664035][ T9381] usb 4-1: Product: syz [ 384.676267][ T9381] usb 4-1: Manufacturer: syz [ 384.682095][ T9381] usb 4-1: SerialNumber: syz [ 384.847481][T11111] overlayfs: failed to clone upperpath [ 384.919172][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.929296][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.951033][ T9381] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.968625][ T9381] usb 4-1: MIDIStreaming interface descriptor not found [ 384.997909][T11122] loop5: detected capacity change from 0 to 7 [ 385.007005][T11122] Dev loop5: unable to read RDB block 7 [ 385.012679][T11122] loop5: unable to read partition table [ 385.021319][T11122] loop5: partition table beyond EOD, truncated [ 385.051316][T11122] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 385.065261][ T9381] usb 4-1: USB disconnect, device number 73 [ 385.171993][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.408183][T11147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17424 sclass=netlink_route_socket pid=11147 comm=syz.3.1176 [ 386.483444][ T5893] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 386.675385][ T5893] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 386.693386][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.786979][ T5893] usb 5-1: config 0 descriptor?? [ 386.794915][ T5893] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 387.199267][ T5893] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 387.881188][T11155] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1173' sets config #0 [ 387.891560][T11155] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1173' sets config #1 [ 388.437802][ T5893] gspca_cpia1: usb_control_msg 02, error -110 [ 388.446343][ T5893] gspca_cpia1: usb_control_msg 05, error -32 [ 388.452736][ T5893] gspca_cpia1: usb_control_msg 05, error -32 [ 388.459225][ T5893] gspca_cpia1: usb_control_msg 05, error -32 [ 388.469399][ T5893] gspca_cpia1: usb_control_msg 05, error -32 [ 388.478194][ T5893] cpia1 5-1:0.0: unexpected systemstate: 00 [ 388.747145][T11070] tipc: Disabling bearer [ 388.755557][ T5928] tipc: Node number set to 178540049 [ 388.765436][T11145] netlink: 'syz.5.1175': attribute type 3 has an invalid length. [ 388.774114][T11157] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1178'. [ 388.984276][ T30] audit: type=1400 audit(1766729054.276:792): avc: denied { ioctl } for pid=11161 comm="syz.3.1179" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 389.724453][ T24] usb 5-1: USB disconnect, device number 71 [ 390.273313][ T90] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 390.280979][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 390.559005][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 390.578237][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.605117][ T24] usb 5-1: Product: syz [ 390.623365][ T90] usb 4-1: Using ep0 maxpacket: 16 [ 390.629635][ T24] usb 5-1: Manufacturer: syz [ 390.636024][ T90] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.652775][ T90] usb 4-1: config 0 has no interfaces? [ 390.661128][ T24] usb 5-1: SerialNumber: syz [ 390.671239][ T90] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 390.685819][ T24] usb 5-1: config 0 descriptor?? [ 390.713221][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.734660][ T90] usb 4-1: config 0 descriptor?? [ 390.761236][ T30] audit: type=1400 audit(1766729056.066:793): avc: denied { create } for pid=11197 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 391.055019][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 391.128999][ T5928] usb 4-1: USB disconnect, device number 74 [ 391.424282][T11211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 391.542705][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'. [ 391.576198][ T5928] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 391.714771][ T5928] usb 7-1: device descriptor read/64, error -71 [ 392.951668][ T24] usb-storage 5-1:0.0: USB Mass Storage device detected [ 393.036879][ T5928] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 393.058799][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 393.151443][ T24] usb 5-1: USB disconnect, device number 72 [ 393.383324][ T5928] usb 7-1: device descriptor read/64, error -71 [ 393.596448][ T5928] usb usb7-port1: attempt power cycle [ 393.944421][T11248] team0 (unregistering): Port device team_slave_0 removed [ 393.951971][ T30] audit: type=1400 audit(1766729059.050:794): avc: denied { connect } for pid=11234 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 393.972973][ T5928] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 393.985873][T11248] team0 (unregistering): Port device team_slave_1 removed [ 394.003697][ T5928] usb 7-1: device descriptor read/8, error -71 [ 394.126255][ T30] audit: type=1400 audit(1766729059.209:795): avc: denied { read } for pid=11262 comm="syz.5.1205" lport=48586 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.179224][T11266] vlan2: entered promiscuous mode [ 394.203137][T11263] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1205'. [ 394.259151][ T5928] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 394.281360][ T5928] usb 7-1: device descriptor read/8, error -71 [ 394.455659][ T5928] usb usb7-port1: unable to enumerate USB device [ 394.595019][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 394.604070][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1207'. [ 394.953941][T11275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=11275 comm=syz.0.1208 [ 395.608163][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 395.714510][T11297] team0: Device gtp0 is of different type [ 397.638529][T11315] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1219'. [ 398.098473][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 398.110555][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.120030][T11319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11319 comm=syz.5.1221 [ 398.149975][T11323] netlink: zone id is out of range [ 398.168256][T11326] overlayfs: failed to clone lowerpath [ 398.175344][T11323] netlink: zone id is out of range [ 398.292219][T11323] netlink: zone id is out of range [ 398.300490][T11324] bridge_slave_1 (unregistering): left allmulticast mode [ 398.322394][T11324] bridge_slave_1 (unregistering): left promiscuous mode [ 398.338025][T11323] netlink: zone id is out of range [ 398.368316][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.428625][T11323] netlink: zone id is out of range [ 398.457625][T11323] netlink: zone id is out of range [ 398.799922][T11323] netlink: zone id is out of range [ 398.902718][T11333] netlink: 'syz.4.1215': attribute type 3 has an invalid length. [ 398.932429][T11333] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1215'. [ 399.187670][T11323] netlink: zone id is out of range [ 399.192921][T11323] netlink: zone id is out of range [ 399.956852][ T30] audit: type=1400 audit(1766729064.662:796): avc: denied { attach_queue } for pid=11341 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 400.689510][T11370] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1234'. [ 400.721821][ T30] audit: type=1400 audit(1766729065.383:797): avc: denied { ioctl } for pid=11368 comm="syz.4.1234" path="socket:[30615]" dev="sockfs" ino=30615 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 401.047837][ T6597] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 401.061911][ T30] audit: type=1400 audit(1766729065.673:798): avc: denied { listen } for pid=11373 comm="syz.5.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 401.293832][ T6597] usb 5-1: Using ep0 maxpacket: 32 [ 401.402561][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 401.420810][ T6597] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 401.447009][ T6597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.473472][ T6597] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 401.956742][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.968862][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.003513][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.014771][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.191559][ T5900] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 402.459690][ T5900] usb 4-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.487425][ T5900] usb 4-1: config 1 interface 0 has no altsetting 0 [ 402.496021][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.505706][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.513830][ T5900] usb 4-1: Product: ⌹戶ޡ௖梈㎱祦㦭㇐깿࡫䴣㟞鍠ᴾ茹覲唲ㅣ㄃쏾浖α䉹뱅츣茫ﺸ䰔佟柄䬈儆ꐓ權ì쫊鿆⮻ꦒ繳┼뜄杢 [ 402.531181][ T5900] usb 4-1: Manufacturer:  [ 402.535946][ T5900] usb 4-1: SerialNumber: syz [ 402.560943][ T6597] gspca_nw80x: reg_w err -71 [ 402.567768][ T6597] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 402.577434][ T6597] usb 5-1: USB disconnect, device number 73 [ 402.587162][ T5858] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 402.736708][ T5858] usb 7-1: device descriptor read/64, error -71 [ 402.771429][ T5900] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 402.788295][ T5900] usb 4-1: USB disconnect, device number 75 [ 402.993283][ T5858] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 403.132276][ T5858] usb 7-1: device descriptor read/64, error -71 [ 403.249063][T11425] 9pnet_fd: p9_fd_create_tcp (11425): problem connecting socket to 127.0.0.1 [ 403.282837][ T5858] usb usb7-port1: attempt power cycle [ 403.551364][T11442] hpfs: Bad magic ... probably not HPFS [ 403.818992][ T5858] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 403.892085][ T5858] usb 7-1: device descriptor read/8, error -71 [ 404.009007][ T6597] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 404.159468][ T5858] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 404.183606][ T5858] usb 7-1: device descriptor read/8, error -71 [ 404.212041][ T6597] usb 4-1: Using ep0 maxpacket: 16 [ 404.249914][ T6597] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 404.277140][ T6597] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 404.292296][ T6597] usb 4-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 404.302991][ T5858] usb usb7-port1: unable to enumerate USB device [ 404.314630][ T6597] usb 4-1: config 0 has no interface number 0 [ 404.324771][ T6597] usb 4-1: config 0 interface 18 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.350982][ T6597] usb 4-1: config 0 interface 18 has no altsetting 0 [ 404.359447][ T6597] usb 4-1: New USB device found, idVendor=19d2, idProduct=0147, bcdDevice= 0.01 [ 404.393793][ T6597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.401797][ T6597] usb 4-1: Product: syz [ 404.415146][ T6597] usb 4-1: Manufacturer: syz [ 404.419744][ T6597] usb 4-1: SerialNumber: syz [ 404.438892][ T6597] usb 4-1: config 0 descriptor?? [ 404.454896][ T6597] option 4-1:0.18: GSM modem (1-port) converter detected [ 404.693193][ T5858] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 404.774011][ T10] usb 4-1: USB disconnect, device number 76 [ 404.783703][ T10] option 4-1:0.18: device disconnected [ 405.274014][T11467] xt_nfacct: accounting object `syz1' does not exist [ 405.287336][ T30] audit: type=1400 audit(1766729069.648:799): avc: denied { listen } for pid=11466 comm="syz.0.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 405.293609][ T5835] Bluetooth: hci1: unexpected event 0x08 length: 11 > 4 [ 405.324411][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 405.339992][ T5858] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 405.350660][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.358875][ T5858] usb 5-1: Product: syz [ 405.363281][ T5858] usb 5-1: Manufacturer: syz [ 405.368831][ T5858] usb 5-1: SerialNumber: syz [ 405.483838][ T5858] r8152-cfgselector 5-1: Unknown version 0x0000 [ 405.490264][ T5858] r8152-cfgselector 5-1: config 0 descriptor?? [ 406.677771][ T30] audit: type=1400 audit(1766729070.948:800): avc: denied { connect } for pid=11448 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 406.832381][T11484] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.515505][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 407.611690][ T5900] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 407.787822][ T5900] usb 7-1: device descriptor read/64, error -71 [ 407.963442][ T10] r8152-cfgselector 5-1: USB disconnect, device number 74 [ 408.056967][ T5900] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 408.670029][ T5900] usb 7-1: device descriptor read/64, error -71 [ 408.671701][T11514] 9p: Bad value for 'rfdno' [ 408.782852][T11516] lo speed is unknown, defaulting to 1000 [ 408.790387][T11516] lo speed is unknown, defaulting to 1000 [ 408.798913][ T5900] usb usb7-port1: attempt power cycle [ 408.963084][ T8752] bond0: (slave syz_tun): Releasing backup interface [ 409.323878][ T5900] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 409.430961][ T5900] usb 7-1: device descriptor read/8, error -71 [ 409.685611][ T5900] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 409.713509][T11530] netlink: 'syz.5.1280': attribute type 3 has an invalid length. [ 409.722268][ T5900] usb 7-1: device descriptor read/8, error -71 [ 409.728969][T11533] netlink: 'syz.5.1280': attribute type 3 has an invalid length. [ 409.829509][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.846210][ T5900] usb usb7-port1: unable to enumerate USB device [ 409.852828][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.861693][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.869507][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.877012][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.938755][T11536] lo speed is unknown, defaulting to 1000 [ 409.950395][T11536] lo speed is unknown, defaulting to 1000 [ 410.142770][T11546] overlayfs: failed to clone upperpath [ 410.189335][T11536] chnl_net:caif_netlink_parms(): no params data found [ 410.234722][ T30] audit: type=1400 audit(1766729074.278:801): avc: denied { ioctl } for pid=11547 comm="syz.0.1285" path="socket:[31905]" dev="sockfs" ino=31905 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 410.712812][T11536] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.719979][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.727360][T11536] bridge_slave_0: entered allmulticast mode [ 410.735189][T11536] bridge_slave_0: entered promiscuous mode [ 410.756224][T11536] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.765877][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.776208][T11536] bridge_slave_1: entered allmulticast mode [ 410.797328][T11536] bridge_slave_1: entered promiscuous mode [ 410.963071][T11536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.004101][T11536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.022109][ T9381] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 411.138596][T11536] team0: Port device team_slave_0 added [ 411.147307][T11536] team0: Port device team_slave_1 added [ 411.221454][ T9381] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.325490][ T9381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.345174][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 411.354388][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 411.378370][ T9381] usb 7-1: Product: syz [ 411.382666][ T9381] usb 7-1: Manufacturer: syz [ 411.425293][ T9381] usb 7-1: SerialNumber: syz [ 411.457556][ T9381] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 411.458811][T11536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.475146][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.500110][ T5953] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 411.534325][T11536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.580064][T11583] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1293'. [ 411.677106][T11536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.684834][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.714062][T11536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.916735][T11589] overlayfs: missing 'lowerdir' [ 411.968972][T11536] hsr_slave_0: entered promiscuous mode [ 411.996173][T11536] hsr_slave_1: entered promiscuous mode [ 412.012708][T11536] debugfs: 'hsr0' already exists in 'hsr' [ 412.048304][ T5835] Bluetooth: hci3: command tx timeout [ 412.055517][T11536] Cannot create hsr debugfs directory [ 412.255249][ T9381] usb 7-1: USB disconnect, device number 37 [ 412.353632][T11598] netlink: 'syz.0.1297': attribute type 3 has an invalid length. [ 412.363317][T11598] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1297'. [ 412.763284][ T5953] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 412.807376][ T5953] ath9k_htc: Failed to initialize the device [ 412.818455][ T9381] usb 7-1: ath9k_htc: USB layer deinitialized [ 412.977428][T11536] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 413.266700][T11536] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 413.426053][T11609] lo speed is unknown, defaulting to 1000 [ 413.455827][T11609] lo speed is unknown, defaulting to 1000 [ 413.467626][T11536] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 413.671438][T11536] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 413.739671][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 413.919434][T11632] trusted_key: syz.6.1303 sent an empty control message without MSG_MORE. [ 414.543839][ T5835] Bluetooth: hci3: command tx timeout [ 414.548156][ T5900] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 414.940039][ T31] INFO: task syz.2.651:9052 blocked for more than 143 seconds. [ 414.961011][ T31] Tainted: G L syzkaller #0 [ 414.998860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.998890][ T5900] usb 4-1: device descriptor read/64, error -71 [ 415.023106][T11639] input: syz0 as /devices/virtual/input/input33 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 415.046722][ T31] task:syz.2.651 state:D stack:28408 pid:9052 tgid:9050 ppid:5817 task_flags:0x400640 flags:0x00080002 [ 415.070939][ T31] Call Trace: [ 415.075448][ T31] [ 415.080018][ T31] ? __schedule+0x10b9/0x6150 [ 415.085747][ T31] __schedule+0x1139/0x6150 [ 415.090335][ T31] ? __lock_acquire+0x436/0x2890 [ 415.095727][ T31] ? __pfx___schedule+0x10/0x10 [ 415.100665][ T31] ? find_held_lock+0x2b/0x80 [ 415.105375][ T31] ? schedule+0x2d7/0x3a0 [ 415.110914][ T31] schedule+0xe7/0x3a0 [ 415.115540][ T31] schedule_timeout+0x257/0x290 [ 415.120976][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.152315][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.168634][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.183382][ T31] __wait_for_common+0x2fc/0x4e0 [ 415.194136][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.210338][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 415.235374][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 415.244855][ T31] wait_for_completion_state+0x1c/0x40 [ 415.250448][ T31] vfs_coredump+0x848/0x55e0 [ 415.255076][ T31] ? should_fail_alloc_page+0xee/0x130 [ 415.260712][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 415.265764][ T31] ? __lock_acquire+0x436/0x2890 [ 415.270774][ T31] ? __lock_acquire+0x436/0x2890 [ 415.275733][ T31] ? lock_acquire+0x179/0x330 [ 415.280504][ T31] ? lock_acquire+0x179/0x330 [ 415.285195][ T31] ? find_held_lock+0x2b/0x80 [ 415.290038][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 415.295254][ T31] ? bpf_ksym_find+0x127/0x1c0 [ 415.298289][ T5900] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 415.330753][ T31] ? arch_stack_walk+0xa6/0x100 [ 415.335656][ T31] ? stack_trace_save+0x8e/0xc0 [ 415.340521][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 415.371914][ T31] ? stack_depot_save_flags+0x29/0x9b0 [ 415.378644][ T31] ? __lock_acquire+0x436/0x2890 [ 415.385035][ T31] ? kasan_save_stack+0x42/0x60 [ 415.391080][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 415.398385][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 415.405621][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.412172][ T31] get_signal+0x22e1/0x26d0 [ 415.417605][ T31] ? __pfx_get_signal+0x10/0x10 [ 415.423579][ T31] ? signal_wake_up_state+0x9e/0x120 [ 415.429015][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.433881][ T31] arch_do_signal_or_restart+0x8f/0x7e0 [ 415.439679][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 415.446786][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 415.453678][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 415.459058][ T31] do_syscall_64+0x4ee/0xf80 [ 415.463651][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.470670][ T31] RIP: 0033:0x7f615d58f749 [ 415.476389][ T31] RSP: 002b:00007f615e4a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.487151][ T31] RAX: 00000000000000ca RBX: 00007f615d7e6098 RCX: 00007f615d58f749 [ 415.495944][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f615d7e609c [ 415.505100][ T31] RBP: 00007f615d7e6090 R08: 00007f615e4ca000 R09: 0000000000000000 [ 415.513246][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.521209][ T31] R13: 00007f615d7e6128 R14: 00007ffe221ea570 R15: 00007ffe221ea658 [ 415.529261][ T31] [ 415.532406][ T31] [ 415.532406][ T31] Showing all locks held in the system: [ 415.540531][ T31] 3 locks held by kworker/0:1/10: [ 415.545779][ T31] 1 lock held by khungtaskd/31: [ 415.550631][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 415.561759][ T31] 2 locks held by getty/5578: [ 415.566646][ T31] #0: ffff8880327b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 415.576579][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 415.586687][ T31] 5 locks held by kworker/0:6/5900: [ 415.591951][ T31] #0: ffff8880206af148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 415.603075][ T31] #1: ffffc900046efc90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 415.614327][ T31] #2: ffff888029c53198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 415.623318][ T31] #3: ffff888029c56518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 415.633457][ T31] #4: ffff888029b29168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 415.644409][ T31] 4 locks held by kworker/1:9/5953: [ 415.649615][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 415.660323][ T31] #1: ffffc900048afc90 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 415.670826][ T31] #2: ffffffff905fa448 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 415.680455][ T31] #3: ffffffff90141ba8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x29/0x50 [ 415.690498][ T31] 3 locks held by kworker/u8:25/6598: [ 415.696166][ T31] #0: ffff888031513948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 415.707372][ T31] #1: ffffc90003d4fc90 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 415.719775][ T31] #2: ffffffff90141ba8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14f0 [ 415.729426][ T31] 6 locks held by kworker/u8:29/7056: [ 415.734905][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 415.744909][ T31] #1: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5e0 [ 415.754532][ T31] #2: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 415.764524][ T31] #3: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5e0 [ 415.774218][ T31] #4: ffffffff8e286b08 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 415.784777][ T31] #5: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x2f/0x380 [ 415.794550][ T31] 4 locks held by syz-executor/9280: [ 415.799824][ T31] #0: ffff888036488ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 415.809436][ T31] #1: ffff8880364880c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 415.819404][ T31] #2: ffffffff903bee08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 415.829478][ T31] #3: ffff888054ab5338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 415.838992][ T31] 3 locks held by kworker/1:13/9381: [ 415.844346][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 415.854829][ T31] #1: ffffc9000434fc90 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 415.867801][ T31] #2: ffffffff905fa448 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 415.879264][ T31] 1 lock held by syz-executor/11536: [ 415.884533][ T31] #0: ffffffff90141ba8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 415.894107][ T31] 3 locks held by syz.5.1300/11609: [ 415.899386][ T31] #0: ffffffff9012b3d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 415.909865][ T31] #1: ffffffff90141ba8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc80 [ 415.919932][ T31] #2: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 415.929982][ T31] 1 lock held by syz.0.1305/11636: [ 415.935276][ T31] #0: ffffffff90146f08 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x38/0xa80 [ 415.946873][ T31] 1 lock held by syz.6.1306/11639: [ 415.952004][ T31] #0: ffffffff8f962ea8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x184/0x4d0 [ 415.962253][ T31] [ 415.983248][ T31] ============================================= [ 415.983248][ T31] [ 416.025872][ T31] NMI backtrace for cpu 1 [ 416.025891][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 416.025913][ T31] Tainted: [L]=SOFTLOCKUP [ 416.025918][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.025927][ T31] Call Trace: [ 416.025932][ T31] [ 416.025938][ T31] dump_stack_lvl+0x116/0x1f0 [ 416.025965][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 416.025992][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.026012][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 416.026040][ T31] sys_info+0x133/0x180 [ 416.026063][ T31] watchdog+0xe66/0x1180 [ 416.026088][ T31] ? rcu_is_watching+0x12/0xc0 [ 416.026105][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.026122][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 416.026145][ T31] ? __kthread_parkme+0x19e/0x250 [ 416.026164][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.026183][ T31] kthread+0x3c5/0x780 [ 416.026204][ T31] ? __pfx_kthread+0x10/0x10 [ 416.026226][ T31] ? rcu_is_watching+0x12/0xc0 [ 416.026242][ T31] ? __pfx_kthread+0x10/0x10 [ 416.026263][ T31] ret_from_fork+0x983/0xb10 [ 416.026282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.026304][ T31] ? __switch_to+0x7af/0x10d0 [ 416.026326][ T31] ? __pfx_kthread+0x10/0x10 [ 416.026348][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.026387][ T31] [ 416.026393][ T31] Sending NMI from CPU 1 to CPUs 0: [ 416.168145][ C0] NMI backtrace for cpu 0 [ 416.168163][ C0] CPU: 0 UID: 0 PID: 11620 Comm: syz.3.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.168185][ C0] Tainted: [L]=SOFTLOCKUP [ 416.168190][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.168198][ C0] RIP: 0010:unwind_next_frame+0x1f6/0x20b0 [ 416.168225][ C0] Code: 89 c3 39 d0 0f 83 17 16 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d 2c 9c dc 91 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c [ 416.168239][ C0] RSP: 0018:ffffc90010af7670 EFLAGS: 00000a02 [ 416.168251][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001 [ 416.168260][ C0] RDX: dffffc0000000000 RSI: 00000000000a7c15 RDI: ffffffff91dc9c30 [ 416.168270][ C0] RBP: ffffc90010af7728 R08: 0000000000000000 R09: 00000000ffffffff [ 416.168279][ C0] R10: 0000000000000002 R11: 0000000000000001 R12: ffffc90010af7730 [ 416.168288][ C0] R13: ffffc90010af76e0 R14: ffffc90010af7715 R15: ffffffff8100012f [ 416.168297][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 416.168312][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.168321][ C0] CR2: 00007f4421317d60 CR3: 00000000202f3000 CR4: 00000000003526f0 [ 416.168331][ C0] Call Trace: [ 416.168335][ C0] [ 416.168340][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.168357][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 416.168375][ C0] arch_stack_walk+0x94/0x100 [ 416.168394][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.168409][ C0] stack_trace_save+0x8e/0xc0 [ 416.168424][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 416.168439][ C0] ? __lock_acquire+0x436/0x2890 [ 416.168456][ C0] ? __lock_acquire+0x436/0x2890 [ 416.168470][ C0] save_stack+0x160/0x1f0 [ 416.168486][ C0] ? __pfx_save_stack+0x10/0x10 [ 416.168500][ C0] ? __free_frozen_pages+0x7df/0x1170 [ 416.168520][ C0] ? vfree+0x1fd/0xb50 [ 416.168537][ C0] ? kcov_close+0x34/0x60 [ 416.168551][ C0] ? __fput+0x402/0xb70 [ 416.168562][ C0] ? task_work_run+0x150/0x240 [ 416.168578][ C0] ? do_exit+0x87f/0x2bd0 [ 416.168591][ C0] ? do_group_exit+0xd3/0x2a0 [ 416.168604][ C0] ? get_signal+0x2671/0x26d0 [ 416.168623][ C0] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 416.168641][ C0] ? exit_to_user_mode_loop+0x8c/0x540 [ 416.168659][ C0] ? do_syscall_64+0x4ee/0xf80 [ 416.168676][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.168689][ C0] ? page_ext_put+0x3e/0xd0 [ 416.168707][ C0] __reset_page_owner+0x84/0x1a0 [ 416.168724][ C0] __free_frozen_pages+0x7df/0x1170 [ 416.168744][ C0] ? ___free_pages+0xcd/0x220 [ 416.168763][ C0] vfree+0x1fd/0xb50 [ 416.168780][ C0] ? find_held_lock+0x2b/0x80 [ 416.168800][ C0] ? rcu_is_watching+0x12/0xc0 [ 416.168814][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 416.168831][ C0] ? __pfx_kcov_close+0x10/0x10 [ 416.168844][ C0] kcov_close+0x34/0x60 [ 416.168857][ C0] __fput+0x402/0xb70 [ 416.168869][ C0] ? cleanup_mnt+0x26b/0x450 [ 416.168888][ C0] task_work_run+0x150/0x240 [ 416.168905][ C0] ? __pfx_task_work_run+0x10/0x10 [ 416.168930][ C0] do_exit+0x87f/0x2bd0 [ 416.168946][ C0] ? __pfx_do_exit+0x10/0x10 [ 416.168959][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 416.168976][ C0] ? find_held_lock+0x2b/0x80 [ 416.168996][ C0] do_group_exit+0xd3/0x2a0 [ 416.169010][ C0] get_signal+0x2671/0x26d0 [ 416.169032][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 416.169048][ C0] ? __pfx_get_signal+0x10/0x10 [ 416.169068][ C0] ? kfree+0x2f8/0x6e0 [ 416.169079][ C0] ? raw_ioctl+0x1371/0x2e60 [ 416.169098][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 416.169117][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 416.169136][ C0] ? raw_ioctl+0x106/0x2e60 [ 416.169154][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 416.169173][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 416.169193][ C0] do_syscall_64+0x4ee/0xf80 [ 416.169210][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.169223][ C0] RIP: 0033:0x7fcd8ad8f34b [ 416.169233][ C0] Code: Unable to access opcode bytes at 0x7fcd8ad8f321. [ 416.169239][ C0] RSP: 002b:00007fcd8bc18f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.169251][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fcd8ad8f34b [ 416.169259][ C0] RDX: 00007fcd8bc19fe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 416.169267][ C0] RBP: 00007fcd8bc19fe0 R08: 0000000000000080 R09: 00007fcd8bc18fd8 [ 416.169276][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 416.169284][ C0] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fcd8ae1f52a [ 416.169298][ C0] [ 416.632791][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 416.639671][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 416.650356][ T31] Tainted: [L]=SOFTLOCKUP [ 416.654679][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.664737][ T31] Call Trace: [ 416.668110][ T31] [ 416.671040][ T31] dump_stack_lvl+0x3d/0x1f0 [ 416.675645][ T31] vpanic+0x640/0x6f0 [ 416.679632][ T31] panic+0xca/0xd0 [ 416.683358][ T31] ? __pfx_panic+0x10/0x10 [ 416.687770][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.693839][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 416.700083][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 416.706238][ T31] ? watchdog+0xe83/0x1180 [ 416.710642][ T31] ? watchdog+0xe76/0x1180 [ 416.715047][ T31] watchdog+0xe94/0x1180 [ 416.719297][ T31] ? rcu_is_watching+0x12/0xc0 [ 416.724047][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.728701][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 416.733888][ T31] ? __kthread_parkme+0x19e/0x250 [ 416.738899][ T31] ? __pfx_watchdog+0x10/0x10 [ 416.743576][ T31] kthread+0x3c5/0x780 [ 416.747650][ T31] ? __pfx_kthread+0x10/0x10 [ 416.752227][ T31] ? rcu_is_watching+0x12/0xc0 [ 416.756973][ T31] ? __pfx_kthread+0x10/0x10 [ 416.761547][ T31] ret_from_fork+0x983/0xb10 [ 416.766133][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 416.771257][ T31] ? __switch_to+0x7af/0x10d0 [ 416.775935][ T31] ? __pfx_kthread+0x10/0x10 [ 416.780529][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.785305][ T31] [ 416.788613][ T31] Kernel Offset: disabled [ 416.792927][ T31] Rebooting in 86400 seconds..