last executing test programs: 10m28.259663352s ago: executing program 2 (id=449): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f0000002640)="16227db2868ab54cf2026d944617aeff41e688b1e5eb37f838e3cd56afbdd757b45f016c59e193084294038aa3189cd0", &(0x7f00000026c0)="878d6303953135fcf851412e7de488b3896566772ad2e6fa0fcb84e0cbc93ffa9ce35ec53a003ca35cacc6b4e57af82f95a7d2d93aca389f353ff5da9e3419f4cd3231e8ab282d986e4f438923e50a60a1fa57d082aeacb1ce6db9535ad499df2b07ca1a0b577b3ce1b07c22551291d23378c9c0c14aa282081e4f17b99ff8eb934cbd97a6e8647b2fa9513a0d0efaebddda8d0b6490024daa7974fe6b5915fc5647b636c09da42d3c372698b8e86beb5bd9") r0 = getpid() process_vm_writev(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x3, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m26.931385539s ago: executing program 2 (id=454): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x4fcb6233, {0x4000000000000000, 0xfffffff7, 0x0, '\x00', {0x2fff, 0x0, 0x8000000000000000, 0x906, 0x0, 0x0, 0xc000, '\x00', 0x6, 0x27efc00000000, 0x81, 0x3, {0x8, 0x8}, {0x4, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa03}, 0x80008001, 0xa, 0xfffffffe, 0x4}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80020, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r10 = accept$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @dev}, &(0x7f0000001240)=0x10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0x40000, 0x0) r12 = getpgrp(0x0) r13 = getegid() r14 = fcntl$getown(0xffffffffffffffff, 0x9) getresgid(&(0x7f00000049c0)=0x0, &(0x7f0000004a00), &(0x7f0000004a40)) r16 = socket$nl_sock_diag(0x10, 0x3, 0x4) r17 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000004a80), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004ac0)={'\x00', 0xe0e, 0x8, 0x0, 0x7, 0x6, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000003c0)="ef55a9224be4e551d25e57cc7f983fbc706a2671b196efc07d7143ff49dd2ca730aa1b8f1668a3791e24efb4600edb4f9419cc451b5efb6e5ad699e1f41fe78f73f8793fa71939a0e24c2d9625aee2f51466619aa1a6aea38c9962a9500fbd6df75805ca1713db1ad8ded1b5971beeab921423f7f3bdcf5f3f2522621fc02604990bd53d2c3cefd756dfb0529e044e0d33daa9fabcbb2717cd4cc22bf70d0551a5882628174160da11b27dacdb98c70bab7db9f0dab6fac8e9ad60cda5ecf00ac8637bed288fc62008e41a5d3c3848279d384ca5390be56ee5bb9db7807828b17a3c9208e0", 0xe5}], 0x1, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x4004}}, {{&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b40)="32f9907c8a19bd793571c20fc2ef00b1b2872bb619a96067e3510ed91e273edb688c2f37a16fc3c4d1928491b221955a98698f8f49d7ddecccc8846468d7cea71a540e979e8451b70369171383634b5f75b13641206ca60119809f125f5c9238406723be1262f20905496622202a20aa230b27407231e6738f43e57c78f9097b0d386c558d7d25bc18fce5e24d048b1d16ccbdf7d0d14190d316900f07b74226fda1a27df06dad6235edf69b13251c390184af2f", 0xb4}], 0x1, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r8}}}], 0x58, 0x40080}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)="a4f44760ffff4b9598ff51e6960f4cca55c2fe9e63a741d3b6c344832e79c40db4f4ea568cee971fd1fb6d7506d58987f9cfa18f351c", 0x36}, {&(0x7f0000000e80)="c428add43fb5cf5ae4803f88b9f9e4", 0xf}, {&(0x7f0000000ec0)="291a23198217a3d84008fc8e9a13e471c2eefc0ca476b211f8577abd32e19cae270cce3a5221f8c30639f6bddfc2f895e365280117d10bf9832df636426f8a7bc9af07ef0cc432445e1a23b6832d54acfd23d752f8daeb886fa53712c08c73b5f6ecaae1ea48b68c6031db2a2ad2cf30611766bc4d37072ee6b666dab82d28768e8d8ab4051f36b87413da1a1cfa8daeffb418a778dda223b761f8f568df685c36e9e05df324", 0xa6}, {&(0x7f0000000f80)="51236a5e120739e57b09db48f7352537fa4f638a3be0db14b943abb64a43d5bddc82c90aacfc7a5124b371b90c41bdaf9ccab13dc92b3433b3ad0b42870be2dcb8c88860457b6ea875b69cbe27ad8d79d71e8ef000d4cacde124bdddc194b53e078508", 0x63}, {&(0x7f0000001000)="63cca5300d83f72583c5b01473b13bcebc366a4bc301b6047312152e5e66ff1ee916b53d8530d5813d4b65ee5af4e3", 0x2f}, {&(0x7f0000001040)="1b0e13ac2c695e21cb5cb94a36be148215029d7c4d06578403131e39af76253445736ed1b09a5d031f74680c9b245c791020c825b95cf5acd304ff2763d105bca65586974f5ef4e3f072b4fea5351c57529b8225a549aa8c90958695647eec218e9b5cd4a01c24b927", 0x69}, {&(0x7f00000010c0)="0e034b7b7930db7126df59a416b3275626f2c983a77e40dc9da6e1438cf3b642bb60cdc57b98f071eb", 0x29}, {&(0x7f0000001100)="f5ed40400405f592249b8106f6743710449cb272f2c064dcf8ddaea85c74597cb42ecdc6cf151daf65ec45d0f2f1d52ec4a4510b72e209e62a235b62d208f5b53d521ba0720615f9dbf2fa6345f6c4e66cf1e729757f51ebb02f5877f6a05a", 0x5f}], 0x8, &(0x7f0000003340)=[@rights={{0x20, 0x1, 0x1, [r9, 0xffffffffffffffff, r10, r11]}}], 0x20, 0x800}}, {{&(0x7f0000003380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000003400)="3a68bc5c549097d73575b2ee3855e5ed676c213aa1ec07e5dd8d2f1593a0d5192dd032feac46595d5c301c3e6bf3c25493b65464b35cfdaf0bb500cd", 0x3c}, {&(0x7f0000003440)="7af79dfc2b9f154c9445e64f466799dc84ae625ce93a9fc65f549bd79d1b066cfd4a86ac0f743a8861d2f08bcb364ce05056246eca710de77d555a4790a4c8c1e2182ded0059a795455e985c9444610b99e5e2c6a7c1ee949e172969bed943da768c579d9519a0b61fe5e91b497b3ff98abf1c7e6424e2c82ac77217b1e5d5c54fbcf72af2334b221bb9745ebb4a067adf9dc471fc717c384a76a5badea69290fad37dd20228dcd01cab59143bbdfda2eb054325069ad383deba3502b1881aaba4", 0xc1}, {&(0x7f0000003540)="279ffff2e91ca6f78435b83459942b44bc0f85883237b5576b6f47ef3231ec85ccafc5bcdd94e1b31702c4760ce8e3655843c2995f0328bd688a879e495ac57ad4d292f12cbd055767e64a9cf38a4b6e13423b6a104b85dd0e27ef2041d3e4cb80c9e373ea008c21e575f224f1ad3125cc8f7b233a2e14a6737258a39862cdba457f1537e69b56aa245d1468f5a407be3f437d25def07f2cf7e5521bacc1a1266f5702011b1ad792720517a94138d0867fe222cf185e4589ede1972ea0a83a4c178eb33c222f006d51db2d46326dda660560ebb327d63b", 0xd7}, {&(0x7f0000003640)="c46076aba9d398f12d2e9e22d298ca26fa93327e57735991cfa2c0329465907f3bfa65b57f200bb43d6ec71fef9677786cce44632fd502181355df9bf5ee6a6f11819d516a08e57e25691afe983507a7c0cfd7f991f444484c48a63c1a077f0691c506f5c5c3a2e05c76bbc1845a9afea9af3ae646c35818a1f8193356dc123c1787d75c46a7c2a3d912a086fd7315640cdc88adf51f6c6cd1c851772fa1b5864b0b", 0xa2}, {&(0x7f0000003700)="30d212e9d8806b4b52116634ac374fb6316ea27cc4429b9b237cdc1f8f5f92a1325e558f126bc43fc59491c2d6c90e1d8b610f1e6155b7f175ad787214f4c8e5dffbb96a84a108e911c039c2e884c41704bd247531927d7791121a9d0f5f605adac0adf53112bf32d0d168ae5d45597151958686cc45c78c90710e00711f8a1cec8df948ef87a94edde0d078c6ba8233e445ee7c67363937a07c4d3ebb8b3b8e22084d3a2e0e54fab13870e9f11f62c3677961b670dfbfb876db9a38baa354cc931d201868f4005056c57da97ccb4a1acc5e75633b31f1c336e2b4a94ec472bd", 0xe0}, {&(0x7f0000003800)="0b8a14c02bda11ca70701b03a002b6472b0c4956de68e25c533f0d7433c1cf3229ae5c332a47a47afc58f43527387394ac49dba828b4dd99057e07fcca8b030193a98248f2030ac7791319ab01b4749ac0a05df0a24eed83", 0x58}, {&(0x7f0000003880)="aed99e5544830862e1d8d7ea9f9d63c226edb16f76dda4b3b6ae5c8319dc5a4a527f5d83d35c5bcde8289bef278293b3661f9a1e3dd2d42191ec2ab623835a1fe77fe1a99788a1e61d59fe9688b841a9f0109bceafc9604dcd333bbe78fe186ef4ce4b73f92b9f9737a7897ba993702965a29382f401620549e10153fdd0609cc9355b59a78f5592b258839cd52d6a39fac72625ecc2d89b8866e1d501770f314b6b26819be42a5b20", 0xa9}, {&(0x7f0000003940)="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", 0x1000}], 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="000000003c0000000000000001000000020000179fca08b5d218fcb7c9f5c878d15aa9ccdc5d85b4b6acffe7dd25ebafc73d3da038b0c545b4ac5aeb7cd51c43cd3fdc22419eca58b0bd45f39df8505a4629ab8dc27e423d7c7e9e8beef4234c9da67418085e0cb9d788071f8006fbab390f9b8ffce2cf90d3b5e4c06a874e98c3246a27292ac56a8ad7e2", @ANYRES32=r14, @ANYRES32=0xee01, @ANYRES32=r15, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4006}}], 0x4, 0x80) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r19, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r20 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r20, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r21, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r21, {0xe4ff, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3ff, 0x9, 0x8, 0xaceb}]}}]}}]}, 0x44}}, 0x0) 10m26.666760561s ago: executing program 2 (id=458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000280), 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/80, 0x50, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5218) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e1e, @local}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x2}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0xce23, 0xffffffff, @local, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000010003b1529bd70c5e10ac30e1a726d00", @ANYRES32=0x0, @ANYBLOB="8a00010000b4010004001400"], 0x24}, 0x1, 0x0, 0x0, 0x24040840}, 0x4050041) 10m24.203187356s ago: executing program 2 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3047c4a, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0xa0800, 0x40) readlinkat(r0, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=""/221, 0xdd) 10m24.113793658s ago: executing program 2 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e30000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x600}, 0x0) 10m22.422608365s ago: executing program 2 (id=471): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "8daf"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x8, 0x2, 0xc}, 'syz0\x00', 0x50}) 10m21.759277207s ago: executing program 32 (id=471): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "8daf"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x8, 0x2, 0xc}, 'syz0\x00', 0x50}) 9m3.455075662s ago: executing program 4 (id=770): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) modify_ldt$read_default(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) landlock_restrict_self(0xffffffffffffffff, 0x5) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 9m2.417196628s ago: executing program 4 (id=776): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a2275363501020301090212000100000000090400000004d72400"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x100, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="130000004e007f049e3ab018a75ab611b87647", 0x13}], 0x1}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 9m0.725036716s ago: executing program 4 (id=784): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) fallocate(r0, 0x0, 0x8, 0x4) sysfs$3(0x3) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}}, 0x0) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7fff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 8m59.771484109s ago: executing program 4 (id=786): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x141a00, 0x100, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0xff, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x100003f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 8m59.638016741s ago: executing program 4 (id=787): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000040)={0x78, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4880}, 0x14048840) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000e40)={r1, &(0x7f0000000d00)="b8b602ce9b5078407162d4a216d29f457755f2658baab5a2830da11c51a5b92d5cd80ca38b8236823f7c2c6e29627c8bfd4dd2e05c2508b3b1d724f6002e1478ef459ccdc8956dfdcbc34a9e62c3c6246d5cf699d0109301b5e2e77e41596330afef6c06677f413251c14691918aebf68606c83a237a4a2b9bfae0f7889c2aec0ab06cc344b74dff35b9d7fb78145936fa937d9bc905297e83c281e863c1e76839080f5f4a401e30b6292b6c9d42e932f36657", &(0x7f0000000dc0)=""/97}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 8m59.514427793s ago: executing program 4 (id=788): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r9, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200, 0x33}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400046f08000600", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x30008010}, 0x24040014) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000080900010073797a31000000002400048020000180070001006374000014000280080002400000000d080001400d0000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xfff3}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r15, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r15, 0x5412, &(0x7f0000000000)=0x7d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x1000, 0x40, {{0x10, 0x4, 0x0, 0x8, 0x40, 0x65, 0x0, 0xb6, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x3, "be"}, {0x5, 0x4, "1421"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x13, 0x7e, [@rand_addr=0x64010100, @loopback, @remote, @loopback]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000f80)={0x2fc, r6, 0x6b0aa9411e4bb1e7, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x164, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x3, 0x7, 0x7}, {0x4, 0x3, 0x0, 0x710}, {0x1, 0xfe, 0xa}, {0x8001, 0xff, 0x81, 0xd}, {0x0, 0xff, 0x0, 0x3}, {0x7, 0x0, 0xe, 0x4}, {0x101, 0x7, 0x8f}, {0x1203, 0x8, 0x81, 0xfffffff8}, {0x4, 0x6, 0x1c, 0xd}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb1}}, {0x8, 0x6, r18}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000}, 0xc90) syz_emit_ethernet(0x30f, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14010000140001002abd7000fddbdf250201"], 0x114}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) 8m43.896516899s ago: executing program 33 (id=788): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0xa01, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r9, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200, 0x33}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400046f08000600", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x30008010}, 0x24040014) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000080900010073797a31000000002400048020000180070001006374000014000280080002400000000d080001400d0000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xfff3}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r15, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r15, 0x5412, &(0x7f0000000000)=0x7d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x1000, 0x40, {{0x10, 0x4, 0x0, 0x8, 0x40, 0x65, 0x0, 0xb6, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x3, "be"}, {0x5, 0x4, "1421"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x13, 0x7e, [@rand_addr=0x64010100, @loopback, @remote, @loopback]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000f80)={0x2fc, r6, 0x6b0aa9411e4bb1e7, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x164, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x3, 0x7, 0x7}, {0x4, 0x3, 0x0, 0x710}, {0x1, 0xfe, 0xa}, {0x8001, 0xff, 0x81, 0xd}, {0x0, 0xff, 0x0, 0x3}, {0x7, 0x0, 0xe, 0x4}, {0x101, 0x7, 0x8f}, {0x1203, 0x8, 0x81, 0xfffffff8}, {0x4, 0x6, 0x1c, 0xd}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb1}}, {0x8, 0x6, r18}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000}, 0xc90) syz_emit_ethernet(0x30f, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14010000140001002abd7000fddbdf250201"], 0x114}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) 2m45.580929784s ago: executing program 0 (id=2367): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, r1, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1000000000000, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000003, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x800000000000000, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9]}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 2m45.447260571s ago: executing program 0 (id=2368): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x118d, &(0x7f00000001c0)={0x0, 0x8d2dc, 0x800, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r5, 0x4004480d, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r5, @ANYRES16=r5], 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @remote}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3ff1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r9, r9, r9}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r11 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r11, 0x6a, 0x2, 0x0, 0xffffffffffffff33) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000000014000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) 2m44.895099469s ago: executing program 0 (id=2369): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$mouse(0x0, 0x940b, 0x141000) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000003c0)={0x6}) r6 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x4, 0x4781c1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0245720, &(0x7f0000000040)={0x1}) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000200)=0x1, 0x4) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 2m43.943335322s ago: executing program 0 (id=2374): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, 0x0, 0x74000020) (async, rerun: 64) r2 = socket$inet6(0xa, 0x3, 0x1) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 64) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async, rerun: 64) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='mm_compaction_begin\x00', r8}, 0x18) r9 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000680)={0x6, 0x4853, {0x0}, {}, 0x9, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000780)={0x20010080, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x35}, &(0x7f0000000340)=""/105, 0x69, &(0x7f00000003c0)=""/119, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, r10, r11], 0x7, {r6}}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 64) sendfile(r7, r6, &(0x7f0000000180)=0x58, 0x3fffff) (async, rerun: 64) r13 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r13, 0x0) (async) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x606c) (async) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) 2m43.267349319s ago: executing program 0 (id=2376): socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 2m42.298935904s ago: executing program 0 (id=2380): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019400)=@newtaction={0xd8, 0x30, 0x1, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x20fc}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x158c, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffffd, 0x2, 0x80000001, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x8000) socket$kcm(0x29, 0x5, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000121000, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r4, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x32dc, 0x0, 0xe, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_procfs$pagemap(r8, &(0x7f0000000000)) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, 0x0, 0x25, 0x6, @void}, 0x10) 2m40.403756223s ago: executing program 5 (id=2384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f100000005"], 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x4}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfdffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB='@\a'], 0x0, 0x0}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x2000040) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@rand_addr=0x64010100, @in6=@private1, 0x4e21, 0x1, 0x4e24, 0x7f, 0xa, 0xa0, 0xa0, 0x29, r3, r6}, {0x8000000000000001, 0x10000, 0x0, 0x8, 0x8, 0x6, 0x401, 0x4}, {0x3, 0x100000001, 0xffffffff, 0x9}, 0x7, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x33}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffff7, 0xf}}, 0xe8) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="12c8812933300401000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581864aa175665bc418569f957d9d4e2815c641a8ece46dae1f493f17584d4dedefdc73e40b0acfbc008bf7c7addc243f0837844eec45a039a115335a1e7bad920f717217284606d2a5d32c9689562730e47aa1af6840a9a18dfa67b2b90e8c991e8132c6f6db0468925c0c0b8e7d9bc05a202e49ee57eb70ccb4d95a00bc7e0542c2aad0dbf097529a0934f0c616e56835bbaaa0ecd85ef5e99945094376f4ba901755e65941b3ef"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 2m39.811680628s ago: executing program 5 (id=2387): syz_io_uring_setup(0x5e9, &(0x7f0000000300)={0x0, 0x2f28, 0x10, 0x2, 0x20}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000080)=0xffffff7c, 0x0, 0x4) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000019400)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="0000fd15b0a579d23d0135c5000000ffff00000000000000000000dcf99112e872bdcfc1e72efd057186f82701f8913609409a89fd363f2e6e1a4304ce6758682acbd5cd7cc429872d6b4aa6e440e4b112ffcdf5a2100ed90d84425895003780eb55b7e21bb59626b372144e93e142bd74e6d0099e8ab1eb208df1426a146ad9ae8a611b875db0b4ae26870ac0e3c354d78df44ef0a2cf095b047e0eea3f6e41d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) socket$l2tp6(0xa, 0x2, 0x73) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x54) r7 = semget$private(0x0, 0x4, 0xe) semctl$GETALL(r7, 0x0, 0xd, &(0x7f00000002c0)=""/82) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r8, 0x5414, 0x0) ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 2m39.808902681s ago: executing program 5 (id=2388): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0xfffffffffffffecc) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x100) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x287e, 0x10000, 0x3, 0x8069}, &(0x7f0000000200), &(0x7f0000000280)) r3 = io_uring_setup(0x3cd4, &(0x7f00000002c0)={0x0, 0x6c00, 0x20, 0x0, 0x20000404, 0x0, r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000040)=0x8) fchmod(r4, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000500)={0x7fffffff, 0x0, 'client0\x00', 0x80000004, "2071ee001600", "27315db9f34dac3d618a687a54bb5de9e391f2f5f18f126cbd0600fc93d96590", 0x9, 0xb}) 2m38.777499868s ago: executing program 5 (id=2391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2m38.535445371s ago: executing program 5 (id=2392): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100)) setrlimit(0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0xc2d, 0x20182) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x44, 0x0, 0x0, 0x20007, 0x7ff0bdc1, 0x0, 0x0, 0x6, 0x0}) r2 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24040000) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'batadv_slave_0\x00', &(0x7f0000000580)=@ethtool_link_settings={0x4d, 0x0, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7, 0x4e, 0xff, [0x5, 0x52, 0x1, 0x2, 0xf, 0x401, 0x3, 0x8], [0x8001, 0x0, 0x598, 0x60c]}}) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24004055}, 0x20048090) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x16842, 0x15b) read$FUSE(r6, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) close(0xffffffffffffffff) setresuid(r7, r7, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write$6lowpan_enable(r6, &(0x7f0000000140)='1', 0x1) 2m38.249369928s ago: executing program 5 (id=2396): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x8, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc9, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = gettid() r2 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000096cb4d575b2956925c824f4b45f19b8e313cf1f3227de1fe51a1acb0e41ab6e0f70291f15da1724ac7364dabe879f96832783a1d6a8433bf6a0d9e67124229ac966bfefb8a5b273310bc14f055aeaf9b7139a7492bae0f61bc1ebde162281e987c40b0b9dd7abb6995f3fac11995cbe8710"], 0x50, 0x40080}, 0x20008080) rt_sigqueueinfo(r1, 0xb, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 2m26.883739964s ago: executing program 34 (id=2380): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019400)=@newtaction={0xd8, 0x30, 0x1, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x20fc}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x158c, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffffd, 0x2, 0x80000001, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x8000) socket$kcm(0x29, 0x5, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000121000, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r4, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x32dc, 0x0, 0xe, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_procfs$pagemap(r8, &(0x7f0000000000)) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, 0x0, 0x25, 0x6, @void}, 0x10) 2m22.966696523s ago: executing program 35 (id=2396): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x8, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc9, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = gettid() r2 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000096cb4d575b2956925c824f4b45f19b8e313cf1f3227de1fe51a1acb0e41ab6e0f70291f15da1724ac7364dabe879f96832783a1d6a8433bf6a0d9e67124229ac966bfefb8a5b273310bc14f055aeaf9b7139a7492bae0f61bc1ebde162281e987c40b0b9dd7abb6995f3fac11995cbe8710"], 0x50, 0x40080}, 0x20008080) rt_sigqueueinfo(r1, 0xb, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 51.805501219s ago: executing program 7 (id=2851): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150186360dd20da0b53810b6f016efa010902"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x14, 0xb9c, 0x2b, 0x0, 0x18) setrlimit(0x6, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x20a100, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r6}, 0x94) 49.627627165s ago: executing program 7 (id=2860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002301040028bd7000ffdbdf25160000000800420092f169eee053c9ad0a61ee2053117d39d6d64f4624fe10faf4beeeb27629b85a28dd32478e37c140ed78d49126e64ae0a28ff2a566532529c8f769201fa1b1c9b98a69548376472c5a57905fb93716d1bed5389fb8f3dee7fa5d6f67aa7db115184a5aeeedd0469b30eb48b1cd04bea4bbb7e493ffc02b610e6787bc13f533efa228b84dda9c57c60716d68e6bf66d27341c731136"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x4000, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000480), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) read$msr(r3, &(0x7f0000001500)=""/102379, 0x18feb) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1e) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x100000000000f7) read$watch_queue(0xffffffffffffffff, &(0x7f00000000c0)=""/16, 0x10) keyctl$revoke(0x3, r4) r5 = accept4$unix(r2, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r5, 0x2000) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dac02\x00', [0x3, 0x8001, 0x7ffffff7, 0x884e1, 0x2f, 0x2007, 0x7, 0x8, 0x80ffe, 0x1, 0x4, 0x8500, 0x1003, 0x1000004, 0xb, 0xffff, 0xffffffa4, 0x7ffffffd, 0x1ff, 0x10000, 0x10, 0x40000, 0x8, 0xe2df, 0xf46f, 0x8, 0x5, 0x3, 0x0, 0x6, 0x7fff]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) r7 = socket(0x10, 0x3, 0xffffffff) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYRESOCT], 0x3c}}, 0x0) 49.29190131s ago: executing program 7 (id=2863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) (async) waitid(0x2, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x101, 0x0, 0x4, 0x1000, 0x4, {r7, r8/1000+10000}, {0x5, 0x2, 0xfc, 0x8, 0x3, 0x71, "10c98856"}, 0x1, 0x4, {&(0x7f00000005c0)=[{0x6, 0x21, {r5}, 0xb}, {0xd2e, 0xff, {}, 0x1ff}]}, 0xb, 0x0, r5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept4(r9, 0x0, 0x0, 0x800) 49.067147794s ago: executing program 7 (id=2865): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)) lseek(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)) (async) lseek(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) (async) 48.463117119s ago: executing program 7 (id=2868): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 47.844567826s ago: executing program 7 (id=2871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000000)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 47.696023781s ago: executing program 36 (id=2871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000000)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 16.631085918s ago: executing program 3 (id=2994): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101d00) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0x21, 0xab, {0xab, 0x7, "fa416347c2dbf4dea59d7849a02ea8b6759a0b13aac927654f8c6f2dd8d9376622c25416222ab35ad9c4349123ee0c0277714ddfa382c47d038929026f4c67137932f680e1a92f66b60ea9c2c0cc37c296b2e3b7f67f32771ddc5cbecdef7293b9477d6eca60d535100b5e6e266b3e45db8465ff93552c7faff120ef3b3f38238091e2c7e1b32d5d3767fa7ecdc7e380120645f77302ee0975b53fdb6bd26969370f304cf7b94023d7"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x12, 0xdb, "5b85611469e1427998b06fb81784c06147acef23b74b32d387252d15f2f3df236feacc4ed84fd12ae0a1d068b593d5e882028cb494811f732218f0ced9d4f910b9e1837d2b0c85b814f3e2cddf476029fb3c7cf245cd693b31094409d52a97ee36c84636cea82f3677974a38ddfa97b34d3a1f59cb61abdb2ff72db6d9bff51a501c8c3c57054ad84952bd93e5cb17f9f33b7c64834c7df4a55468286f4ac1844fdda5296c9de22594fe645f1e806ccd265e81fe00ec719732df5d15ee3f475826d8041ff0e527c9cef886c6a0e336422d4a356260d9c6de99fd14"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x82}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2e}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x400, 0xa, 0x5, 0xc, 0x826d, 0x2, 0x7, 0x400, 0x7, 0x7, 0x8, 0xb}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) unlink(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000600)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x10, 0x1, 0x1a25da79, 0x9, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x67, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0xfc, [@remote]}, @ssrr={0x89, 0x2b, 0x69, [@private=0xa010100, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @local, @multicast1, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r4, 0x20, &(0x7f0000000a80)={&(0x7f0000000980)=""/23, 0x17, 0x0, &(0x7f00000009c0)=""/74, 0x4a}}, 0x10) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x900, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6166, '\x00', 0x0, r4, 0x3, 0x5, 0x5}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000985a968715695e39216b301b0000000000000000000006000079f82013000000000000"], 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x9, 0x1e, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x1, 0x3, 0x8, 0x8, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x1, 0x1, 0x4, 0x1, 0xfffffffffffffff8, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x2, 0x5, 0x1, 0xfffffffffffffff8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x4052, 0x36, &(0x7f0000000800)=""/54, 0x60700, 0x0, '\x00', r6, @cgroup_sock=0xc, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x7, 0x7, 0x705c}, 0x10, r8, r9, 0x5, &(0x7f0000000bc0)=[r10, r11], &(0x7f0000000c00)=[{0x5, 0x5, 0x7}, {0x4, 0x2, 0x9, 0xa}, {0x1, 0x1, 0xf, 0x9}, {0x1, 0x1, 0x8}, {0x4, 0x5, 0xd, 0x4}], 0x10, 0x86}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) signalfd(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xc, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000e00)={0xb, 0x10, 0xfa00, {&(0x7f0000000d40), 0xffffffffffffffff, 0x8}}, 0x18) 13.538088116s ago: executing program 3 (id=3010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, r7, 0x1, 0x0, 0x3, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x540a, 0x3) listen(0xffffffffffffffff, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x6, 0x2}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0x7, 0x0, 0xa0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f00000002c0), &(0x7f0000000300)=r10}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB], 0x70}}, 0x40) socket$kcm(0x10, 0x2, 0x4) 10.699536881s ago: executing program 9 (id=3019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000c13a8908b40402100d62010203010902164bf11c0000000904"], 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x12, r4, {0x0, 0x11}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_etf={{0x16}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0x0, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000010) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00222200000083ddf0f85e870c0000000700000000169eefdb8db570d70b00000000834156ee1208d8e9b7cb49c59a9379"], 0x0}, 0x0) 10.511501887s ago: executing program 3 (id=3021): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101d00) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x0, &(0x7f00000001c0)}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0x21, 0xab, {0xab, 0x7, "fa416347c2dbf4dea59d7849a02ea8b6759a0b13aac927654f8c6f2dd8d9376622c25416222ab35ad9c4349123ee0c0277714ddfa382c47d038929026f4c67137932f680e1a92f66b60ea9c2c0cc37c296b2e3b7f67f32771ddc5cbecdef7293b9477d6eca60d535100b5e6e266b3e45db8465ff93552c7faff120ef3b3f38238091e2c7e1b32d5d3767fa7ecdc7e380120645f77302ee0975b53fdb6bd26969370f304cf7b94023d7"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x12, 0xdb, "5b85611469e1427998b06fb81784c06147acef23b74b32d387252d15f2f3df236feacc4ed84fd12ae0a1d068b593d5e882028cb494811f732218f0ced9d4f910b9e1837d2b0c85b814f3e2cddf476029fb3c7cf245cd693b31094409d52a97ee36c84636cea82f3677974a38ddfa97b34d3a1f59cb61abdb2ff72db6d9bff51a501c8c3c57054ad84952bd93e5cb17f9f33b7c64834c7df4a55468286f4ac1844fdda5296c9de22594fe645f1e806ccd265e81fe00ec719732df5d15ee3f475826d8041ff0e527c9cef886c6a0e336422d4a356260d9c6de99fd14"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x82}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2e}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x400, 0xa, 0x5, 0xc, 0x826d, 0x2, 0x7, 0x400, 0x7, 0x7, 0x8, 0xb}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) unlink(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000600)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x10, 0x1, 0x1a25da79, 0x9, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x67, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0xfc, [@remote]}, @ssrr={0x89, 0x2b, 0x69, [@private=0xa010100, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @local, @multicast1, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r4, 0x20, &(0x7f0000000a80)={&(0x7f0000000980)=""/23, 0x17, 0x0, &(0x7f00000009c0)=""/74, 0x4a}}, 0x10) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x900, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6166, '\x00', 0x0, r4, 0x3, 0x5, 0x5}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000985a968715695e39216b301b0000000000000000000006000079f82013000000000000"], 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x9, 0x1e, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x1, 0x3, 0x8, 0x8, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x1, 0x1, 0x4, 0x1, 0xfffffffffffffff8, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x2, 0x5, 0x1, 0xfffffffffffffff8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x4052, 0x36, &(0x7f0000000800)=""/54, 0x60700, 0x0, '\x00', r6, @cgroup_sock=0xc, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x7, 0x7, 0x705c}, 0x10, r8, r9, 0x5, &(0x7f0000000bc0)=[r10, r11], &(0x7f0000000c00)=[{0x5, 0x5, 0x7}, {0x4, 0x2, 0x9, 0xa}, {0x1, 0x1, 0xf, 0x9}, {0x1, 0x1, 0x8}, {0x4, 0x5, 0xd, 0x4}], 0x10, 0x86}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) signalfd(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xc, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000e00)={0xb, 0x10, 0xfa00, {&(0x7f0000000d40), 0xffffffffffffffff, 0x8}}, 0x18) 8.681292692s ago: executing program 9 (id=3026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, &(0x7f0000000300)) r7 = dup(0xffffffffffffffff) accept4$llc(r7, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0xffffffffffffffc6}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x8880) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xf8, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x5, 0x6, 0xfff4, 0x8, 0x6}}}, 0x14) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r7) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008380)={0x14, 0x12, 0x1, 0x0, 0x8000, "", [@nested={0x4, 0x1d}]}, 0x14}], 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x4000000, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 7.925414162s ago: executing program 1 (id=3027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x1b, 0x8a, 0x4000069}, 0x2c) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x40000, &(0x7f00000001c0)="38456e15768459fe37f79530a27747d55f6c04ec877260c2223d698bb673c85506784992a7dab9d5ec2c1369bc3c3dcffa0fdeeeca783c1cba44af63d1458260bc50e935b9b15b36068ada0e2527a404c3e0ce4753858522c648e8b3720deeb1a5080216b2a6e23b0c70ead9a2558d2409d4430daed887669134f808d01f8f530f53eec0fe6bf1a29d370ba0e940f8543705f244af4bfed62defbcc460dca156e2e07bdf98810067a0c36687d741521fd23e421ba1683ee82b08cc91e1", 0xbd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000500)="13789ec17d6bf343e55c826d94ddd8744b0e7b90b7c215e40d6749cf0c469d4015e28ed8e5454ac2faa1399c9d059337a9dfa7eab0343110c9fb9c7bd5101dbbd0daae57353359e9733aea282d90a1389d6301c62a7d7860d62742978b948d7b5252dbd42ca6c6f0dae474e5b512730b07ae6d0344d8ea30738c9a6f67827cfdd0b01b4dabca9411786eb44b61016adc910a216ba085551267bc49d3e48daab6a9e99f7ca6e9c8860620b0ac731fb241121ef091a451c00bc96323b753fa72e0de147f92524b2660310b125598b2506c8dc841b1da82407dce0609ab99f318b9aa54") r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_BULK(r8, 0xc0105502, &(0x7f0000000080)={{{0xe}}, 0x0, 0x94, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7.419379529s ago: executing program 3 (id=3028): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6.949326058s ago: executing program 1 (id=3029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="013b40261300ffdbdf2504000000"], 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 6.911519697s ago: executing program 1 (id=3030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x6c}}, 0x0) 6.563492625s ago: executing program 1 (id=3031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff1}, 0xfffffe44) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f50000000000000000000000000000450a00460068000000219078ac1414bbac4e214e210401907842b2a9850576d6bdd5747fec8c655ffd3e423224194a6f61f0915d9edb0752f1431a910bbcbbecff4ed4"], 0x58) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) setregid(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x80800) stat(&(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffe61, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) 5.819867294s ago: executing program 8 (id=3033): r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000480)={0x15, 0x110, 0xfa08, {r2, 0x4000, 0x10, 0x10, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4000, @broadcast}}}, 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x143040, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x34242, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 5.416820591s ago: executing program 9 (id=3034): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() syz_emit_ethernet(0x32, &(0x7f0000000580)={@multicast, @random="0df14c0bba99", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) 5.413829102s ago: executing program 1 (id=3035): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x400c) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000001240)=@ready={0x0, 0x0, 0x8, "de384b3d", {0x1, 0xca1e, 0xc000, 0x9, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) fallocate(0xffffffffffffffff, 0x0, 0x7, 0x81) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) umount2(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001c040100010000000000000007000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0xeda9b8c5340e2d7e}, 0x4048080) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7c, 0x2) 5.388510261s ago: executing program 8 (id=3036): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000240)={0x3, 0x100, 0x7, 0x0, 0x6, 0x5, 0x0, 0x3, 0x8, 0x8, 0xc, 0x800, 0x6, 0x70}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x141) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="06", 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003880)=@nat={'nat\x00', 0x62, 0x5, 0x1358, 0x0, 0x1218, 0xffffffff, 0x10c8, 0x10c8, 0x12c0, 0x12c0, 0xffffffff, 0x12c0, 0x12c0, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0xc, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b8) write$FUSE_NOTIFY_STORE(r3, 0x0, 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES8=r1, @ANYBLOB="0000000000008000280012800a00010076ff030000"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x4000084) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) 4.135519523s ago: executing program 3 (id=3037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) (async) socket$caif_stream(0x25, 0x1, 0x4) (async) shutdown(r1, 0x1) (async) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x40000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) sched_setscheduler(r6, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 4.058200068s ago: executing program 9 (id=3038): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/476], 0xf0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) setpgid(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000300)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x18) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24004884) r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xce, 0x0, r0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x5, 0x5c9c, 0x0, @empty, @loopback, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.057284898s ago: executing program 8 (id=3039): socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4a008}, 0xeb64d656001b2f26) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffff"], 0x0) (async) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r7, @ANYBLOB="64f50000000000000000000000df6e79ea636fe7fc00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) (async) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000080)={r10, 0x1, 0x0, @multicast}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x21}}, 0x20}}, 0x0) sendmsg$inet6(r7, &(0x7f0000000380)={&(0x7f0000000200)={0xa, 0x4e21, 0x7a80, @remote}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x62, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf0}, @enc_lim={0x4, 0x1, 0x73}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x100}}, @rthdr={{0x18, 0x29, 0x39, {0x4e, 0x0, 0x2, 0x6}}}, @rthdr={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x0, 0x40, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r10}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x95}, @pad1, @ra={0x5, 0x2, 0x3}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x1, 0xf8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x67, 0xc, 0x2, 0xe2, 0x0, [@empty, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x1b0}, 0x80) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f9", 0x82, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 3.94854594s ago: executing program 9 (id=3040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f00000001c0)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x9, 0x0, 0x2, 0x8, 0x59, 0x81}, &(0x7f0000000240)=0x20) r3 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) 3.890424263s ago: executing program 9 (id=3041): r0 = syz_io_uring_setup(0x839, &(0x7f0000000200)={0x0, 0x679d, 0x1000, 0x2000006, 0x3a6}, &(0x7f0000000040), &(0x7f0000000140)) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x801) (async) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x801) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000100)=0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0, 0x21}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) 3.70355122s ago: executing program 6 (id=3043): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150186360dd20da0b53810b6f016efa010902"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x14, 0xb9c, 0x2b, 0x0, 0x18) setrlimit(0x6, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x20a100, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000600000000000095000000000000009500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r6}, 0x94) 2.947531163s ago: executing program 8 (id=3044): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000a00)) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000580)={0x7, 0x0, [{0xc0000000, 0x1, 0x5, 0x8, 0x2, 0x1, 0x5}, {0x80000001, 0x3b2, 0x4, 0xfffffe01, 0x2, 0x36, 0x4926}, {0x6, 0x5, 0x4, 0x8, 0x4, 0x7}, {0x2, 0x1, 0x4, 0xb7d, 0x7, 0x7, 0xf2}, {0xb, 0xd5, 0x0, 0x5e, 0x2, 0x16, 0x10}, {0x1, 0x9, 0x0, 0x6, 0x1, 0x2, 0x9}, {0xc0000000, 0x200, 0x0, 0x4, 0x1, 0x7fffffff, 0x9}]}) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="80754f36bbad", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "57cd10", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @remote, {[], {{0x4e23, 0x5e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x0, 0x0, 0x3, {[@generic={0x5, 0x5a, "bd1b524c04004bb433149162d04b67"}]}}}}}}}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x10000015}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = dup2(r4, r6) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x4000044) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_any}, {@cache_fscache}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_lt={'uid<', r13}}, {@subj_role}, {@subj_user={'subj_user', 0x3d, '($\''}}, {@smackfsdef={'smackfsdef', 0x3d, '/\''}}, {@obj_type={'obj_type', 0x3d, '-{\'[:/'}}]}}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000980)) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='neigh_update\x00', r14}, 0x18) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.93193392s ago: executing program 6 (id=3045): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x300000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x56) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x40008c0}, 0x6004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r8 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2.28749626s ago: executing program 6 (id=3046): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000706010200000000000000000a00000a080006400000000605000100070000000500010007000000090002007379bae5fe4dbf7cf99896223317130b776af1f85e6bdc38260d7837a57a31000000000800065200007fff"], 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700240000020000"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x1cd700) socket(0xa, 0x800, 0xfffffffb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x13f, 0x3}}, 0x20) 1.873950546s ago: executing program 1 (id=3047): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0xffff}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9d, 0xe6, 0xc0, 0x8, 0x1234, 0x5678, 0xface, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7b, 0xd9, 0xd2, 0x0, [], [{{0x9, 0x5, 0x81, 0xc250193fbc2d6fee, 0x20, 0xd6, 0x2, 0x6}}]}}]}}]}}, 0x0) 1.150458044s ago: executing program 3 (id=3048): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a534871a76d2608fff74588a80a38882f15e0", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.015430611s ago: executing program 8 (id=3049): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() syz_emit_ethernet(0x32, &(0x7f0000000580)={@multicast, @random="0df14c0bba99", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) 879.968045ms ago: executing program 6 (id=3050): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ae0000/0x4000)=nil, 0x4000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 147.374002ms ago: executing program 6 (id=3051): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x2, @raw_data="4dd08a3fbdc0f14cdb048e5f53ba965fa1ea3dab60caeaeffdbf98ee46457dcad5f1298f470b07815a7f32cae038ddb63dd22302d1d1bb97672c1a29d7ec9eaaf7b56612634b13ba72275e87e682dd62ea5832093d6f9b291136728d6dbab4fc715e8fbf667b3e5e0b2cac88c9ab049da2e00aa9567d33df6f1f64e3344c62bf84150536981f03d40f370430e6514c337453daff5209b22a414ce9ab6d5b2d079e345b786cbf6031b4433230ce5cca1e07d0a6fe77ee270c02dd5389d95c9979d258b1de02804f0b"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='ns\x00') (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$I2C(0x0, 0x1, 0x2603) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x20080000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf25310000000c0099"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x23, 0xf, [0x3, 0x9, 0x3, 0xe, 0x2, 0x3, 0x6, 0x1, 0x6, 0x1, 0xba3, 0x1, 0x5, 0x9ff, 0x8, 0x5, 0x80000000, 0x0, 0x2, 0x4d, 0xffffa52e, 0x3c, 0x8, 0xffff, 0x7f, 0x4e3, 0x5, 0x2, 0x0, 0x7fff, 0x20006, 0x7, 0x7, 0x1, 0x4, 0x81, 0xd1a, 0x9, 0x9, 0x8, 0x0, 0x10001, 0x5, 0xfc000000, 0x2, 0x200, 0x5, 0x855e, 0x49, 0x3, 0x5, 0x6, 0xb728, 0x960, 0x8, 0x5, 0x50, 0x6, 0x8001, 0x2a, 0x9, 0x800, 0xfd8, 0xbf29, 0x1d49, 0x1000, 0x1, 0x3, 0x2, 0xffff, 0x3, 0x5, 0x5, 0x6, 0x4e, 0x1, 0x9, 0xffffb9c0, 0x288, 0x1000, 0xca1b, 0x1, 0x8001, 0xfff, 0x3, 0x1e300000, 0x8, 0x80000000, 0x3, 0x40, 0x401, 0x6, 0x6c0c, 0x5, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x8, 0x1, 0x0, 0xc, 0x40, 0x6, 0x8, 0x3, 0x8, 0x101, 0x5, 0xcb3a, 0x80000000, 0x10000, 0x3, 0x7, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x3, 0xfffffff8, 0x2, 0x7dc, 0x4, 0xe6, 0x5, 0x6]}}) (async) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r8 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (rerun: 64) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) exit(0x6) statx(r1, &(0x7f0000000180)='./file0\x00', 0x800, 0x20, 0x0) 87.368128ms ago: executing program 6 (id=3052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000064c0)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)="ace6bff194897e9ecc374dcaa3781762acfce6ef434638d55a9008f9354ce3f179124603b99d5d93149b83e916114fa924422e3aaf291ab229983789fed4239a1614d50e91751d0ceaa12a5115e8bbb98548e8231ed1da01e1907df29805a73ffd3ab7dfda6ab8d45a5328b4912131a481eb094966b093357f8ed87a91f376f860c974fd3b22bba2fbbebed89d363cf22f977b5c76c91147e1782003000ec76e4cc138f33c6f0401bbae97d141d4a46293d5df6f636691160a44abceaabeec633bdc75e95987facad4", 0xc9}, {&(0x7f0000000600)="1042d2a88a0d953a1162fa53c84637ce814393be91f6b82de49f5b32718e9f6ff5dde5b1da35530c413596ebba2e0b7561cdac2c71b6763f1edba88802398e3af3ee47b3185add1cc7226ab65c382b6b0db06332801ed42969b2e87b2edcae808404427d356d0affae926b154de5d9d8b345cf247c6800469e72ea1cf696b3be680870a08ae0f3502a10429343274c9a326c6c3bf0a0285b83eb5cab5250791bf16953218c2dd531dfce43debb279e2e308af8354b91c2b161ea402eddedfbc24374da196418a276448e760f01f19b5bc2c33c00bea4e4", 0xd7}, {&(0x7f00000003c0)="2750aa769a86eaf9552252d8dc7dd09aefa460d721ec051762", 0x19}, {&(0x7f0000000700)="19b170257e42e1324b22d58d02994af173b6270b968282c59d9e4a1f0ad6be854769470ef774585c73a4d0853fccde10df31497d46d785bd870fd0fd574d7a0d18c6a64e6b331f5bffbbc661b4a1d7509559d9239043c93f86aa836acbb9312fcf431b046b71d3c396f0e906f3989195e13e17c0a08503b1e329027f5a7dfad5c629860e0ad0c9cd3cd1ffbeb0960ff4902ec7ba5da00a656c7cda6cd21c874ad288d9a8af0fcb90f1f01349ce1937d68f6ba1bcc0b63b5b49ae68d55acc33d3308fce3d61587a3f11b54080341c787acc71da7c9c6ac61576f996660ff02e392734ec629b61b02c43b1437d7d", 0xed}, {&(0x7f0000000800)="c80359ca1b09e12869328b9139535d0ab8b7e8896e49f7888bb30e37bce41e20377f62035afed0baaddd164c856362bfeeaed9e3ae9141419e3bd58711396d39e2be325856d8ec785f74b397f38b8d17041ca04d7f02861c8ec8e4745fea23597c7b2d38647678cb2aaa79b3c4f07d4d39eee0d3ee646cd31696ec561356c7c669e1a5165734b80a9217337dc4848e49c3c5de73f21113a321d906e83134b24de2085f1cfac5", 0xa6}, {&(0x7f00000008c0)="9d9eacea214c8533af096f425fda989f606b2220ea7665679aab445f0c47f7fcfea1767c4f370b00f91e8a37ee92e9dbceb3aa528f3a3ed2df213953af3d5317c5fa", 0x42}], 0x6, &(0x7f0000000a80)=[@cred={{0x1c}}], 0x20, 0x20040000}}, {{&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b40)="51cbfc75058de8fbcc03bd65d17888cc47fbd972bdfb5dbcda727bb09f1b974de6a20806b8144b9eb24c0545576e2b721d65896802e24db7190432", 0x3b}, {&(0x7f00000009c0)="cc74fd50b487c723fd6a5bc3e40d27883c8b4b3d8296925d9776144b58ac7ff77775f97f5ef8d063822445c8904a174a206b411e3ffb8edac5ac6a455dd6cbad3577a4d4220f6b848eb2792e45b43c83a4c63777434ac7d92c111780f8196f26d152204bf39c5bc18cd5dbb81ec6b532b34e912f2f74ec14fe13f9e274aa1b8fd5529b608d2af07bd3ae7113b87714bb5fcdf611924245ba692bb453", 0x9c}], 0x2, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x80, 0x20008000}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="0650495fcec35385b817394b7b00efdb0a4ced08f6f3c237a6c855ce5f2ca7a350643ee60b5ebb669ddeb548f2a83791fead4497b8e109f0c226732aaf2c457e060e0dcc7269f15e6b04e039f4f6cf9abf4d9d8eb672eb3fa85c57c050c22246fde77b272f503f280509f9ecafffe1039cef23561a3b5397e51588b7abd5a89291fccb8083f9f5b1ea4e8047752769758b8492175b3b980c99a9429b2f5ede4ff642cae6a14ca7a210b17c3687704a0cbac599e05e7e3b61ef6e950c3d44e7a988f7a69280458bef665ead903b82f10b3dd8d358d35e268befe8483a5356add0682546c9055476f1031c51eb23", 0xed}, {&(0x7f0000001f00)="f273d7882f8b76c4ef3e86f306059bf6dfbe9286b3f572d27d831e5ab1021ac7c26cc041063066dccd111bf26b231672ac06be7d35ae79892258221caa2b8ec4a95e1890a3506cd4b0b0e4fdbf19c01a670def55a5", 0x55}, {&(0x7f0000001f80)="07bb51c2434d686dd287fd78ca85557604bd2af2de0ae21364f27dbd08028c78df2ccb72863a86a2095bff2ce6176b26ab70ffe3f43f370fde713a9ee48296e7f43e9d25ab33c27d01cd089d6890cef158278230ebb95ec4323375dcbaa2f3b7a70d194d1e7fffdd5784fd0f04d91a2ba73ee08f994cb337e51505dce567ef3ddec9913fba6272ece8e28485df89cb796f98d8bff81d60f5984f0b5373e2221fbe6a0e041549ff76a9615948fb009aff98da9e6a1597955c54712285cf8798084c9b3caff6fd8435cf76a2dcad60", 0xce}, {&(0x7f0000004100)="95fa52ccdddc8d449efb63c734e2811ce1084a71e9a58a6b6072be572505fceeebfa4ff09179cad5d4c23c45070b3d16bdc7d155fdb2d44a4a65509da38717eba747b6f40b3a6fbe1be7cc3b1d0b0e8d3e09a5f2cde6ed6051fb74b0cb3a324035fa2a9e2eded70748410b8ba27d090461b8f28b2cd035bd2209f27fee72580e67694c51f1b2c98b0e9a7a0659ee39f639607727bb531d11d0c12c4ea5e29c", 0x9f}, {&(0x7f00000041c0)="6a0f40c6fcc5d3ac2c5f44022035a12a8f8e7a505026086b201739fed55266803d1563f503e9b362077ed53ab6c8f0df4de66192eb792a66668e0beebcc900063d63f399f5b97448fa94a2a3aab0151026db5fa44f22ee5281030ae88776e1a879f4dda70d2c75082321384fee214c2536d5bee9196518f7cfc1edc0d16a651c5ba11eba0eafb22a7713ce17081840d71d02e1e66b3eac5df1c8bccbfa7b9db0cdd6f1f49293ddd018450f76049a0902f9b80ed2fcdb7e5dedfca1fad820a83074c9094092f41ecf31232a545d", 0xcd}, {&(0x7f00000042c0)="a5562df2883520d8e55cf7762ebae85f780c4c463743ac78ae984cbc7a135f2aac9aba5f8451888664005bcff3f7212b3f810aceb7108f8dca2fdb1ec2c8df7154a496e3d057c5ff9244cb6aad9034851e", 0x51}, {&(0x7f0000004340)="2ec261a74fa3ae20f214ef8c2b70d7e0f6d1f150cb974dc792dd4b21cb064426c51fef06200982c295c9e24e24bd62d1f07ab6834cd4afce4be891a4a9728e96896528cb37e8f348c750082163dc66ca90efb0fae8acecb2bf87fa0c1e5435b38169716b6ab1e40d7e3c786932a5a195647009fa2577adcdb0e2b7aaecb5973e3bdd60312c7860c418", 0x89}], 0x8, 0x0, 0x0, 0xc081}}, {{&(0x7f0000004480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005700)=[{&(0x7f0000002080)="16ba28f3a15e6f94acf366dd27562826434885b34236cff7c75cf75d1dec67358ceb", 0x22}, {&(0x7f0000004500)="75be219182a8fc15521f63a8225b161eb7d5291d9f3855c1820b6a5d3200c71d0d68f82e080b043e96690e5ef8c3091082826eeb1899d18a34c2d46e0f4926104a9ffb4751cb54273e16072f5a7d3cde1d23a16b046b6c57258686bdcb3dc249865a623896e11b55c6eb1ed694974c5e65845e97c327e3e290d6d003ec13213323c3dfbd92d048e370e7c99a2ed14636c6d16ab34352b879bee6a27ab06647f280e7212cabd0d7f9759fa0d67f43b6cc263e964f", 0xb4}, {&(0x7f00000045c0)="8fc81b", 0x3}, {&(0x7f0000004600)="f3dd854b5ae7602a2fe2353761e83bf93f314084736753391159dbb6c9bcf562bfcc318cc0ad012e93a6a312e2b08d7bd78494c0197e445e1ddef0f56e313f831fa3b5231d3b3674b9e925d9b862b1299c4f8fa66a51b46e53c14225c923feb22454ce2c89d2059bfd2651627ce48a06637591274dfaec4cd83c2868ebc699c14a69603d740ba30bf07e2d82aaf18e566ec1325d91d73ff3c97aec73fb901b8f8429d6987ca7f2f48acf6cb2f57a7edef67d4453551172c723ac4a30e4aee6b606ebf1f448", 0xc5}, {&(0x7f0000004700)="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", 0x1000}], 0x5, 0x0, 0x0, 0x840}}, {{&(0x7f0000005780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000005800)="6388ca723cbc67054cd285c06151d0d75ce5b8a4cce51388b835556ae516b13b24088e572a18fd95f13ec7d38c51ff29a50ff5250f66d26255d3ff8c14e3aa8d0ff4a62aed7dea958ab76df47d99e66a8acf", 0x52}], 0x1, &(0x7f00000058c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005900)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005ac0)=[{&(0x7f0000005980)="f6680febdc4b0902e5d5fc43f09ada677379a30a996f4b018cef9b7fb8f0004eb98b733a7fc97325fa98930f611d5f74c0508a6fce7b7d4cb9b28af8bb4e57f1109affead3c7f94de86432e092c9f486ca8d04fef77a477fac585e5969b31ee8f9a85d49", 0x64}, {&(0x7f0000005a00)="39d2cf71482e3f2705dfed02d49fddc2909469f141a755ad23e87e656320f426469ffe24ab44cee29175e9137dba9fd4642c70d59361318b31864f1b2c6e97a6091a02aecc0d8836df08e047621190303226648d86882a2766d51c941b9320814071df956455364c0e0e6f39cd3341477a298aa90dccff79714926d46aff352aa791b6c850", 0x85}], 0x2, &(0x7f0000005b00)=[@cred={{0x1c}}], 0x20, 0x14000080}}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000005b40)="0c6cb07943a384754f4f5cd01163b4149cd937de985393bf14d152258b0ef6e7a82130", 0x23}, {&(0x7f0000005b80)="b4d1b63a18886b0eb62f153040b77a64a88b461b346053310f3e637b4a9cf6db29909b0b73d0c1109aa49a2ca4fb1ae5f313046dd09526c6770b12a55f1109361a89858bc1fca2ff8dc1b32c4d43b83f5e7c8bc1a7ed0d70cdb3d05dd69367ae07fced127489279b31b3be36403ff4755ab1a1c4f0f873ffd4dbda9a68d252831e78967d04ab25eed85902844b8ec16001a7a83975c64a7a7a077171169dc664e631d739b9f15d365ecb291e803e4be3d1d198807b9042dc3361c606960539920dbbee586ac13e7dcc4ce08a2ef34cd72a34cf69e2072a22", 0xd8}, {&(0x7f0000005c80)="e869fd2ecd27a1848942731d392b96b38eafdd3f470dbf1c77f8cf1ab30d234396ccaeb3e0e453d0a9f130fbf47fe56faae6870706cd54f79c026d952cf857940c9950a356afb28d2cf030a443cce9a6d7f4eea68f4a749128fb0f507a009bf353b8173699ae6639fe0663a488e4d680d3f5ea81d8b297d63f3d4bf45e4ee5b3c4c64c2d8c0657ca7426d9ce9f39c1399bebda925e284e7c996ad2e2904e509cb7de9d88cefcdfeb74936241a13e", 0xae}, {&(0x7f0000005d40)="876aa6f160e0082be6f6edcc44857dea02b1f1e25527ed48379a728e485c98e75a2a1b8004ba9504a98f84bf67e9fdaf6e9c6bb97b78dab282295c50656a41cee6dd674a233eee15bdf747c7a8f3b2b5a7c30fdff7ab744049776b7f599e24bd58a3cb620f6f1cad13eb81ea38a407fdb483483f7c3867ad2dc01fd1ec04c4a1a4713e833ab20624f4f16261697f459dc16c619c0652d01892a344bdbd37a40c40a2f62f5b0566af50da9a0a67d955565138922a059ac4eef8", 0xb9}, {&(0x7f0000005e00)="8f9d742b32", 0x5}, {&(0x7f0000005e40)="59c2388b2491719a6f8cf8b0a2dac235a968d2efc7a959aa8d6415f37c40b0d6184d73ffd5790adddd9d3c8437e1b5bbefc45aef6a2ce27d35e87d40b3f8837ce2004dbc09ba28b8ac51a240cb91a1c07be56cc92788f67b8ef8b2ca2ebbf0505fe0e99436450b404219ba6f7bc1d9227cf1cc098dd12ab572251f3eee6212c56b1d3ccbabf528312b3f04a9a0396085c3b9bbf2c0e2e61f21ab77fe4368241087a0e5ea0793f1e687cb0f3b5a1e07b193e6a8d69e7122dfb661c3883b00671a1014b8e33e709d5333", 0xc9}, {&(0x7f0000005f40)="a6dd044b3f280b71e5336f2fad4a0973910d438cd1d5bcb220bdc696d36c200d0a6f6f1ed0df8ea8236d13c5a11b67053390809fea2111bcbd12c08128d23440d9e5314f1d296c2abb1f85f180de36df37aae0908aa105d45d5d", 0x5a}], 0x7, &(0x7f00000061c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110, 0x448d1}}, {{&(0x7f0000006300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006440)=[{&(0x7f0000006380)="80e9607aa9c82edb06c77983127c446571f2f49d3d4308b27bf2de2cab7d4c251bd35d8e35fa8183c657702bfeab5bacc53338585d830ef7d187ae4a4330fea2993c4a0638e633872c41bd0a96e5ece9a5c6cd811956c6ffe24f349902003f44051fbd5cdae65b1cf643f0ee8121504a54ebbc2c9c694f624a6da14546c97c8d394429", 0x83}], 0x1, &(0x7f0000006480)=[@cred={{0x1c}}], 0x20, 0x8004}}], 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=')', @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES16=r4], 0x50) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="00633a6234824f625e00"/28], 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@deltaction={0x44, 0x31, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0xffffffffffffff91, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb7}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) capget(&(0x7f0000000180), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) 0s ago: executing program 8 (id=3053): syz_open_dev$radio(0x0, 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904000001ff"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x4c000, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000100)=r0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0xc, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x100001, 0x8000}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000), 0x0) kernel console output (not intermixed with test programs): 650.083017][T15156] debugfs: 'hsr0' already exists in 'hsr' [ 650.088756][T15156] Cannot create hsr debugfs directory [ 650.204691][T15156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 650.213704][T15156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 650.223139][T15156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 650.232149][T15156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 650.254828][T15156] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.261928][T15156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.269230][T15156] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.269384][ T9079] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 650.276320][T15156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.322220][T15156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.336311][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.346237][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.373581][T15156] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.385729][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.392815][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.410768][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.417800][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.431568][ T9075] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 650.439141][ T9079] usb 8-1: Using ep0 maxpacket: 32 [ 650.445717][ T9079] usb 8-1: config 0 interface 0 has no altsetting 0 [ 650.455698][ T9079] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 650.473758][ T9079] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.480488][T15156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.492246][ T9079] usb 8-1: Product: syz [ 650.496402][ T9079] usb 8-1: Manufacturer: syz [ 650.501724][ T9079] usb 8-1: SerialNumber: syz [ 650.517098][ T9079] usb 8-1: config 0 descriptor?? [ 650.589628][ T9075] usb 2-1: Using ep0 maxpacket: 32 [ 650.605351][ T9075] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 650.620744][ T5823] Bluetooth: hci6: command tx timeout [ 650.638430][ T9075] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 650.903339][T15156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.944617][ T5823] Bluetooth: hci3: command tx timeout [ 651.143967][ T9075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.155064][ T9079] gs_usb 8-1:0.0: Configuring for 3 interfaces [ 651.164965][ T9075] usb 2-1: New USB device found, idVendor=fa6d, idProduct=830a, bcdDevice=8c.06 [ 651.174142][ T9075] usb 2-1: New USB device strings: Mfr=199, Product=138, SerialNumber=98 [ 651.183712][ T9075] usb 2-1: Product: syz [ 651.187887][ T9075] usb 2-1: Manufacturer: syz [ 651.192886][ T9075] usb 2-1: SerialNumber: syz [ 651.209856][ T9075] usb 2-1: config 0 descriptor?? [ 651.222233][ T9075] hub 2-1:0.0: USB hub found [ 651.306323][T15156] veth0_vlan: entered promiscuous mode [ 651.318546][T15156] veth1_vlan: entered promiscuous mode [ 651.343716][T15156] veth0_macvtap: entered promiscuous mode [ 651.352921][T15156] veth1_macvtap: entered promiscuous mode [ 651.424696][ T9075] hub 2-1:0.0: 1 port detected [ 651.578405][T15156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.594264][T15156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.606725][ T9691] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.615814][ T9691] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.625828][ T9691] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.636363][ T9691] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.699216][ T9688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.714774][ T9688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.737505][ T9691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.746078][ T9691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.768266][ T9079] gs_usb 8-1:0.0: Disabling termination support for channel 1 (-EPROTO) [ 651.794473][ T9079] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 651.901176][ T9079] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 651.919493][ T9079] usb 8-1: USB disconnect, device number 2 [ 652.442744][ T5935] usb 2-1: USB disconnect, device number 18 [ 652.461232][ T9075] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 652.524885][T15222] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 652.536659][T15222] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 652.710382][ T5823] Bluetooth: hci6: command tx timeout [ 652.718171][ T9075] IPVS: starting estimator thread 0... [ 652.859693][T15231] netlink: 'syz.7.2465': attribute type 27 has an invalid length. [ 652.911587][ T30] audit: type=1400 audit(1767343817.112:968): avc: denied { bind } for pid=15229 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 652.934263][T15232] IPVS: using max 46 ests per chain, 110400 per kthread [ 653.015025][ T30] audit: type=1400 audit(1767343817.132:969): avc: denied { listen } for pid=15229 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 653.042569][ T5823] Bluetooth: hci3: command tx timeout [ 653.053638][ T30] audit: type=1400 audit(1767343817.132:970): avc: denied { accept } for pid=15229 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 653.254054][T15240] dns_resolver: Unsupported server list version (0) [ 654.779664][ T5823] Bluetooth: hci6: command tx timeout [ 655.011555][T15260] xt_hashlimit: max too large, truncated to 1048576 [ 655.267320][ T30] audit: type=1400 audit(1767343819.462:971): avc: denied { ioctl } for pid=15268 comm="syz.6.2476" path="socket:[52357]" dev="sockfs" ino=52357 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 655.381089][ T5879] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 655.549530][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 655.561805][ T5879] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 655.573164][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.594365][ T5879] usb 2-1: config 0 descriptor?? [ 655.602736][ T5879] gspca_main: sunplus-2.14.0 probing 041e:400b [ 656.119606][ T5935] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 656.239429][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 656.289391][ T5935] usb 8-1: Using ep0 maxpacket: 16 [ 656.296160][ T5935] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 656.304255][ T5935] usb 8-1: can't read configurations, error -61 [ 656.389431][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 656.396405][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 656.405077][ T10] usb 9-1: config 0 has no interface number 0 [ 656.412593][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 656.423767][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 656.433064][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 656.441219][ T10] usb 9-1: Product: syz [ 656.445389][ T10] usb 9-1: SerialNumber: syz [ 656.451724][ T10] usb 9-1: config 0 descriptor?? [ 656.459087][ T10] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 656.459390][ T5935] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 656.614901][ T5879] gspca_sunplus: reg_w_riv err -71 [ 656.621558][ T5879] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 656.629700][ T5935] usb 8-1: Using ep0 maxpacket: 16 [ 656.636341][ T5879] usb 2-1: USB disconnect, device number 19 [ 656.646250][ T5935] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 656.654753][ T5935] usb 8-1: can't read configurations, error -61 [ 656.663095][ T5935] usb usb8-port1: attempt power cycle [ 656.859991][ T5823] Bluetooth: hci6: command tx timeout [ 657.342187][ T5935] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 657.369895][ T5935] usb 8-1: Using ep0 maxpacket: 16 [ 657.376596][ T5935] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 657.384191][ T5935] usb 8-1: can't read configurations, error -61 [ 657.571523][ T5935] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 657.649784][ T5935] usb 8-1: Using ep0 maxpacket: 16 [ 657.701321][ T5935] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 657.709646][ T5935] usb 8-1: can't read configurations, error -61 [ 657.718368][ T5935] usb usb8-port1: unable to enumerate USB device [ 657.776914][T15299] 9p: Bad value for 'rfdno' [ 657.786281][T15299] 9p: Bad value for 'rfdno' [ 658.249229][T15305] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 658.257304][T15305] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 658.544344][ T30] audit: type=1400 audit(1767343822.742:972): avc: denied { validate_trans } for pid=15309 comm="syz.1.2487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 659.126836][ T9079] usb 9-1: USB disconnect, device number 2 [ 659.260176][T15206] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 659.399677][T15206] usb 8-1: device descriptor read/64, error -71 [ 659.599054][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.606578][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.646388][T15206] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 659.780461][T15206] usb 8-1: device descriptor read/64, error -71 [ 659.809760][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 659.892287][T15206] usb usb8-port1: attempt power cycle [ 659.933304][ T30] audit: type=1400 audit(1767343824.112:973): avc: denied { listen } for pid=15329 comm="syz.1.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 659.970390][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 659.977652][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 659.987270][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.996949][ T10] usb 2-1: config 0 descriptor?? [ 660.050598][T15336] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.2493'. [ 660.060000][T15336] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 660.208882][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 660.227756][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 660.252846][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 660.260275][T15206] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 660.271113][ T10] usb 2-1: media controller created [ 660.290057][T15206] usb 8-1: device descriptor read/8, error -71 [ 660.321983][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.559398][T15206] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 660.580271][T15206] usb 8-1: device descriptor read/8, error -71 [ 660.588180][ T10] az6027: usb out operation failed. (-71) [ 660.597071][ T10] stb0899_attach: Driver disabled by Kconfig [ 660.603578][ T10] az6027: no front-end attached [ 660.603578][ T10] [ 660.632738][ T10] az6027: usb out operation failed. (-71) [ 660.639587][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 660.660012][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 660.687165][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 660.698684][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 660.706976][T15206] usb usb8-port1: unable to enumerate USB device [ 660.721682][ T10] usb 2-1: USB disconnect, device number 20 [ 660.744464][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 661.638397][T15355] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 661.647157][T15355] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 662.420607][ T5823] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 662.468394][T15368] pimreg: entered allmulticast mode [ 662.497408][T15368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.505529][T15368] batadv_slave_0: entered promiscuous mode [ 662.535573][T15370] binder: 15364:15370 ioctl 4018620d 0 returned -22 [ 663.364987][T15384] FAT-fs (loop17): unable to read boot sector [ 663.635931][T15362] pimreg: left allmulticast mode [ 663.864826][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.879625][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.919395][T14646] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 664.083643][T14646] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 664.093723][T14646] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=fa.ce [ 664.103044][ T5879] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 664.112893][T14646] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.124703][T14646] usb 9-1: config 0 descriptor?? [ 664.131677][T15384] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 664.142895][T14646] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input51 [ 664.206217][ T10] libceph: connect (1)[c::]:6789 error -97 [ 664.212466][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 664.259639][T15389] ceph: No mds server is up or the cluster is laggy [ 664.642403][ T10] libceph: connect (1)[c::]:6789 error -97 [ 664.650600][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 664.689372][ T5879] usb 2-1: device descriptor read/64, error -71 [ 664.996025][T15407] netlink: 'syz.7.2514': attribute type 8 has an invalid length. [ 665.149385][ T5879] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 665.611536][ T5879] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 665.620693][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.629925][ T5879] usb 2-1: config 0 descriptor?? [ 665.636419][ T5879] pwc: Creative Labs Webcam Pro Ex detected. [ 665.849606][ T10] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 665.891184][T15423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.899811][T15423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.002193][ T10] usb 8-1: config 0 has an invalid interface number: 205 but max is 0 [ 666.010407][ T10] usb 8-1: config 0 has no interface number 0 [ 666.022069][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=59.e2 [ 666.032350][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.040596][ T10] usb 8-1: Product: syz [ 666.044785][ T10] usb 8-1: Manufacturer: syz [ 666.049550][ T10] usb 8-1: SerialNumber: syz [ 666.119997][ T9079] usb 9-1: USB disconnect, device number 3 [ 666.128364][ T10] usb 8-1: config 0 descriptor?? [ 666.140230][ T10] ftdi_sio 8-1:0.205: FTDI USB Serial Device converter detected [ 666.148606][ T10] ftdi_sio ttyUSB0: unknown device type: 0x59e2 [ 666.414126][ T10] usb 8-1: USB disconnect, device number 11 [ 666.460021][ T10] ftdi_sio 8-1:0.205: device disconnected [ 668.180254][ T5879] pwc: Failed to set LED on/off time (-71) [ 668.216683][ T5879] pwc: send_video_command error -71 [ 668.233120][ T5879] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 668.249676][ T5879] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 668.356805][ T5879] usb 2-1: USB disconnect, device number 22 [ 669.571003][T15462] FAT-fs (loop3): unable to read boot sector [ 670.247233][ T5899] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 670.570620][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 670.588736][ T5899] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=fa.ce [ 670.604913][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.615703][ T5899] usb 2-1: config 0 descriptor?? [ 670.624304][T15462] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 670.634196][ T5899] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 670.760130][T15478] loop2: detected capacity change from 0 to 7 [ 670.766811][T15478] Dev loop2: unable to read RDB block 7 [ 670.775047][T15478] loop2: AHDI p2 p3 [ 670.778949][T15478] loop2: partition table partially beyond EOD, truncated [ 670.799664][T15478] loop2: p3 start 335544320 is beyond EOD, truncated [ 671.340680][ T5899] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 671.506306][ T5899] usb 8-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 671.517178][ T5899] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 671.529516][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 671.544339][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 671.568725][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 671.578520][ T5899] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.593064][ T5899] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 671.602173][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.612009][ T5899] usb 8-1: Product: syz [ 671.616149][ T5899] usb 8-1: Manufacturer: syz [ 671.621135][ T5899] usb 8-1: SerialNumber: syz [ 671.626861][ T5899] usb 8-1: config 0 descriptor?? [ 671.632340][T15487] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 671.641154][ T5899] ati_remote 8-1:0.0: Initializing ati_remote hardware failed. [ 671.650188][ T5899] ati_remote 8-1:0.0: probe with driver ati_remote failed with error -5 [ 671.685432][ T30] audit: type=1400 audit(1767343835.882:974): avc: denied { connect } for pid=15491 comm="syz.6.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 671.686106][T15492] No control pipe specified [ 671.740213][T15494] 9p: Bad value for 'rfdno' [ 671.844908][ T9074] usb 8-1: USB disconnect, device number 12 [ 672.239023][T15502] comedi comedi2: bad chanlist[0]=0x80000001 chan=1 range length=1 [ 672.249036][T15502] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2542'. [ 672.260661][T15502] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2542'. [ 672.352522][ T5935] usb 2-1: USB disconnect, device number 23 [ 673.219354][ T9079] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 673.371149][T15522] loop2: detected capacity change from 0 to 7 [ 673.387442][T15522] Dev loop2: unable to read RDB block 7 [ 673.393323][ T9079] usb 8-1: Using ep0 maxpacket: 16 [ 673.408570][T15522] loop2: AHDI p2 p3 [ 673.413774][ T9079] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 673.424953][T15522] loop2: partition table partially beyond EOD, truncated [ 673.437029][T15522] loop2: p3 start 335544320 is beyond EOD, truncated [ 673.447676][ T9079] usb 8-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 673.457461][ T9079] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.493938][ T9079] usb 8-1: config 0 descriptor?? [ 673.501924][ T9079] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 674.430692][T15553] fuse: Bad value for 'fd' [ 674.438450][ T30] audit: type=1400 audit(1767343838.632:975): avc: denied { getopt } for pid=15551 comm="syz.1.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 674.945800][T15565] loop2: detected capacity change from 0 to 7 [ 674.955722][T15565] Dev loop2: unable to read RDB block 7 [ 674.965520][T15565] loop2: AHDI p2 p3 [ 674.969695][T15565] loop2: partition table partially beyond EOD, truncated [ 674.985753][T15565] loop2: p3 start 335544320 is beyond EOD, truncated [ 675.052532][ T30] audit: type=1400 audit(1767343839.252:976): avc: denied { getopt } for pid=15567 comm="syz.8.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 675.113475][ T30] audit: type=1400 audit(1767343839.272:977): avc: denied { ioctl } for pid=15567 comm="syz.8.2561" path="socket:[55667]" dev="sockfs" ino=55667 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 675.884643][ T30] audit: type=1400 audit(1767343839.932:978): avc: denied { ioctl } for pid=15574 comm="syz.7.2563" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 676.366960][ T9079] usb 8-1: USB disconnect, device number 13 [ 676.549398][T15206] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 676.689794][T15206] usb 2-1: device descriptor read/64, error -71 [ 676.939974][T15206] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 677.179569][T15206] usb 2-1: device descriptor read/64, error -71 [ 677.279365][ T5899] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 677.289881][T15206] usb usb2-port1: attempt power cycle [ 677.896936][T15206] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 677.931554][ T5899] usb 8-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 677.941872][ T5899] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 677.953468][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 677.964597][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 677.975590][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 677.985516][ T5899] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.004190][T15206] usb 2-1: device descriptor read/8, error -71 [ 678.004274][ T5899] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 678.019453][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.027447][ T5899] usb 8-1: Product: syz [ 678.031699][ T5899] usb 8-1: Manufacturer: syz [ 678.036296][ T5899] usb 8-1: SerialNumber: syz [ 678.043296][ T5899] usb 8-1: config 0 descriptor?? [ 678.048625][T15597] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 678.060751][ T5899] ati_remote 8-1:0.0: Initializing ati_remote hardware failed. [ 678.069932][ T5899] ati_remote 8-1:0.0: probe with driver ati_remote failed with error -5 [ 678.265410][ T9079] usb 8-1: USB disconnect, device number 14 [ 678.271649][T15206] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 678.312610][T15206] usb 2-1: device descriptor read/8, error -71 [ 678.320925][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2573'. [ 678.403986][T15613] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2573'. [ 678.420690][T15206] usb usb2-port1: unable to enumerate USB device [ 678.709346][ T5935] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 678.912958][T15618] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 678.939506][ T5935] usb 9-1: Using ep0 maxpacket: 32 [ 678.968612][T15619] overlayfs: statfs failed on './file0' [ 678.984192][ T5935] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 679.010763][ T5935] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 679.016916][T15619] mkiss: ax0: crc mode is auto. [ 679.025520][ T5935] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.043508][ T5935] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 679.057405][ T5935] usb 9-1: config 1 has no interface number 0 [ 679.070944][ T5935] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 679.091374][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.279403][ T30] audit: type=1400 audit(1767343843.472:979): avc: denied { setopt } for pid=15620 comm="syz.1.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 679.305094][ T5935] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 679.519078][ T5935] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values [ 680.725807][ T9688] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.248186][ T5935] snd_usb_pod 9-1:1.1: invalid control EP [ 682.451589][ T5935] snd_usb_pod 9-1:1.1: cannot start listening: -22 [ 682.458351][ T5935] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 682.628678][T15629] netlink: 'syz.1.2577': attribute type 12 has an invalid length. [ 682.660678][ T5935] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 682.729672][T15657] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 683.046626][ T5935] usb 9-1: USB disconnect, device number 4 [ 683.435422][T15666] fuse: Unknown parameter 'grouð_i' [ 683.739835][T15206] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 683.844356][T15676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2590'. [ 684.102576][T15206] usb 2-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 684.171381][T15206] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 684.182910][T15206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 684.195992][T15206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 684.207603][T15206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 684.217627][T15206] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.233929][T15206] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 684.244293][T15206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.253315][T15206] usb 2-1: Product: syz [ 684.257517][T15206] usb 2-1: Manufacturer: syz [ 684.257588][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2593'. [ 684.271102][T15206] usb 2-1: SerialNumber: syz [ 684.272895][T15206] usb 2-1: config 0 descriptor?? [ 684.279081][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2593'. [ 684.290384][T15659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 684.305206][T15206] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 684.319660][T15206] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 684.369933][T15688] can: request_module (can-proto-0) failed. [ 684.508125][ T5879] usb 2-1: USB disconnect, device number 28 [ 685.199340][ T9079] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 685.264797][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.769654][ T9079] usb 9-1: Using ep0 maxpacket: 32 [ 685.781286][ T9079] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 685.795278][ T9079] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 685.820506][ T9079] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.853305][ T9079] usb 9-1: New USB device found, idVendor=fa6d, idProduct=830a, bcdDevice=8c.06 [ 685.871354][ T9079] usb 9-1: New USB device strings: Mfr=199, Product=138, SerialNumber=98 [ 685.883488][ T9079] usb 9-1: Product: syz [ 685.888478][ T9079] usb 9-1: Manufacturer: syz [ 685.894318][ T9079] usb 9-1: SerialNumber: syz [ 685.933921][T15716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 685.940180][T15716] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 685.951819][T15716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 685.957721][T15716] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 685.976294][ T9079] usb 9-1: config 0 descriptor?? [ 685.985686][ T9079] hub 9-1:0.0: USB hub found [ 686.233993][ T9079] hub 9-1:0.0: 1 port detected [ 686.247715][T15716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.253718][T15716] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 686.297965][T15716] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 686.304390][T15716] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 686.708191][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 686.875124][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 686.885661][ T10] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 686.894330][ T10] usb 8-1: config 0 has no interface number 0 [ 686.901754][ T10] usb 8-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.913716][ T10] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 686.929529][ T10] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 686.944747][ T10] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 686.954048][ T10] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 686.971848][ T10] usb 8-1: Manufacturer: syz [ 686.976462][ T10] usb 8-1: SerialNumber: syz [ 687.000979][ T10] usb 8-1: config 0 descriptor?? [ 687.019661][T15760] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 687.115616][ T9079] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 687.116503][ T5935] usb 9-1: USB disconnect, device number 5 [ 687.232523][T15796] siw: device registration error -23 [ 687.367487][T15716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 687.373423][T15716] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 687.584300][ T10] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 687.600971][T15716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 687.606871][T15716] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 687.643073][T15716] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 687.648972][T15716] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 687.677878][ T10] usb 8-1: USB disconnect, device number 15 [ 687.828066][T15804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2614'. [ 688.017102][T15813] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 688.051993][T15813] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 688.179517][ T5935] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 688.360667][ T5935] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 688.386412][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.432409][ T5935] usb 9-1: config 0 descriptor?? [ 688.451961][ T5935] hdpvr 9-1:0.0: Could not find bulk-in endpoint [ 688.462403][ T5935] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 688.684776][T15811] syzkaller0: entered promiscuous mode [ 688.699343][T15811] syzkaller0: entered allmulticast mode [ 688.713049][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.727533][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.876761][ T9079] usb 9-1: USB disconnect, device number 6 [ 688.938526][ T30] audit: type=1326 audit(1767343853.132:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 688.999107][T15845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2619'. [ 689.640850][ T30] audit: type=1326 audit(1767343853.842:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.680845][ T30] audit: type=1326 audit(1767343853.862:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.704447][ T30] audit: type=1326 audit(1767343853.862:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.730796][ T30] audit: type=1326 audit(1767343853.862:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.761085][ T30] audit: type=1326 audit(1767343853.862:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.787582][ T30] audit: type=1326 audit(1767343853.862:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.789234][T15872] loop2: detected capacity change from 0 to 7 [ 689.811330][ T30] audit: type=1326 audit(1767343853.862:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.838019][T15872] Dev loop2: unable to read RDB block 7 [ 689.844557][ T30] audit: type=1326 audit(1767343853.862:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.846517][T15872] loop2: AHDI p2 p3 [ 689.907088][ T30] audit: type=1326 audit(1767343853.862:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.1.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7fc00000 [ 689.911599][T15872] loop2: partition table partially beyond EOD, truncated [ 689.939066][T15872] loop2: p3 start 335544320 is beyond EOD, truncated [ 690.097996][T15883] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 690.118519][T15883] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 690.293181][ T9079] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 690.449340][ T9079] usb 2-1: Using ep0 maxpacket: 16 [ 690.455979][ T9079] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 690.464418][ T9079] usb 2-1: config 0 has no interface number 0 [ 690.504289][ T9079] usb 2-1: config 0 interface 185 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 690.523375][ T9079] usb 2-1: config 0 interface 185 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 690.545186][ T9079] usb 2-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=e0.f6 [ 690.554581][ T9079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.562944][ T9079] usb 2-1: Product: syz [ 690.567507][ T9079] usb 2-1: Manufacturer: syz [ 690.574508][ T9079] usb 2-1: SerialNumber: syz [ 690.587873][ T9079] usb 2-1: config 0 descriptor?? [ 690.655673][T15880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 690.912291][T15880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.219468][T15441] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 691.557906][ T5935] usb 2-1: USB disconnect, device number 29 [ 691.679764][T15441] usb 8-1: device descriptor read/64, error -71 [ 691.949589][T15441] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 692.101245][T15441] usb 8-1: device descriptor read/64, error -71 [ 692.145657][T15906] netlink: 'syz.8.2634': attribute type 12 has an invalid length. [ 692.260077][T15441] usb usb8-port1: attempt power cycle [ 692.699426][T15441] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 692.720023][T15441] usb 8-1: device descriptor read/8, error -71 [ 692.959360][T15441] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 692.999799][T15441] usb 8-1: device descriptor read/8, error -71 [ 693.109700][T15441] usb usb8-port1: unable to enumerate USB device [ 693.559659][ T9074] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 693.726884][ T9074] usb 9-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 693.744708][ T9074] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 693.757109][ T9074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 693.768473][ T9074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 693.779784][ T9074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 693.789766][ T9074] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.806144][ T9074] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 693.815671][ T9074] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.832989][ T9074] usb 9-1: Product: syz [ 693.837250][ T9074] usb 9-1: Manufacturer: syz [ 693.842162][ T9074] usb 9-1: SerialNumber: syz [ 693.855924][ T9074] usb 9-1: config 0 descriptor?? [ 693.864261][T15927] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 693.873965][ T9074] ati_remote 9-1:0.0: Initializing ati_remote hardware failed. [ 693.883491][ T9074] ati_remote 9-1:0.0: probe with driver ati_remote failed with error -5 [ 694.069903][T15944] netlink: 'syz.7.2643': attribute type 1 has an invalid length. [ 694.408753][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 694.408769][ T30] audit: type=1400 audit(1767343858.602:1051): avc: denied { map } for pid=15951 comm="syz.1.2647" path="socket:[57156]" dev="sockfs" ino=57156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 694.441503][ T9074] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 694.449443][ T30] audit: type=1400 audit(1767343858.602:1052): avc: denied { read accept } for pid=15951 comm="syz.1.2647" path="socket:[57156]" dev="sockfs" ino=57156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 694.615576][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.628529][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.641963][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.655065][ T9074] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.655242][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.665950][ T9074] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 694.678676][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.678699][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.678722][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.678739][T15963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=15963 comm=syz.1.2651 [ 694.753534][ T9074] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 694.764525][ T9074] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 694.774541][ T9074] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 694.789396][ T9074] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 694.800071][ T9074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.813168][ T9074] usb 8-1: Product: syz [ 694.823265][ T9074] usb 8-1: Manufacturer: syz [ 694.828413][ T9074] usb 8-1: SerialNumber: syz [ 694.839238][ T9074] usb 8-1: config 0 descriptor?? [ 695.273095][ T9074] rc_core: IR keymap rc-imon-rsc not found [ 695.278974][ T9074] Registered IR keymap rc-empty [ 695.285013][ T9074] rc rc0: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 695.301347][ T9074] input: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input58 [ 695.315446][ T9074] imon_raw 8-1:0.0: probe with driver imon_raw failed with error -90 [ 695.355052][ T9074] usb 8-1: USB disconnect, device number 20 [ 695.841576][T15441] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 696.002841][T15441] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 696.011047][T15441] usb 8-1: config 0 has no interface number 0 [ 696.017105][T15441] usb 8-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 696.028816][T15441] usb 8-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 696.042454][T15441] usb 8-1: config 0 interface 255 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 696.055536][T15441] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 696.073796][ T9074] usb 9-1: USB disconnect, device number 7 [ 696.079302][T15441] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.087571][T15441] usb 8-1: Product: syz [ 696.092085][T15441] usb 8-1: Manufacturer: syz [ 696.096676][T15441] usb 8-1: SerialNumber: syz [ 696.103284][T15441] usb 8-1: config 0 descriptor?? [ 696.362209][T15988] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2658'. [ 696.389550][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2663'. [ 696.607569][T16009] netlink: 'syz.1.2665': attribute type 1 has an invalid length. [ 696.645166][T16009] bond3: entered promiscuous mode [ 696.652190][T16009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 696.670105][T16009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 696.679393][T16009] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 696.691117][T16009] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 696.705624][T16009] bond3: (slave wireguard0): making interface the new active one [ 696.714979][T16009] wireguard0: entered promiscuous mode [ 696.722037][T16009] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 696.750436][T15441] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 696.919397][T15441] usb 9-1: Using ep0 maxpacket: 32 [ 696.926876][T15441] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.941232][T15441] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.958462][T15441] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 696.983206][T15441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.999852][T15441] usb 9-1: config 0 descriptor?? [ 698.606062][T15441] usb 8-1: USB disconnect, device number 21 [ 698.771991][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2674'. [ 699.524438][T15441] usb 9-1: USB disconnect, device number 8 [ 699.677074][T16051] trusted_key: encrypted_key: insufficient parameters specified [ 699.999507][T15441] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 700.154205][T15441] usb 9-1: device descriptor read/64, error -71 [ 700.420500][T15441] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 700.532093][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2687'. [ 700.561823][T15441] usb 9-1: device descriptor read/64, error -71 [ 700.686736][T15441] usb usb9-port1: attempt power cycle [ 700.837106][T16081] openvswitch: netlink: IP tunnel dst address not specified [ 700.888187][T16084] trusted_key: encrypted_key: insufficient parameters specified [ 701.029467][T15441] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 701.059753][T15441] usb 9-1: device descriptor read/8, error -71 [ 701.310113][T15441] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 701.351466][T15441] usb 9-1: device descriptor read/8, error -71 [ 701.479674][T15441] usb usb9-port1: unable to enumerate USB device [ 702.330967][T15441] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 702.489367][T15441] usb 8-1: Using ep0 maxpacket: 32 [ 702.496096][T15441] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 702.504312][T15441] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 702.514153][T15441] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.609728][T15441] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.621857][T15441] usb 8-1: New USB device found, idVendor=fa6d, idProduct=830a, bcdDevice=8c.06 [ 702.631091][T15441] usb 8-1: New USB device strings: Mfr=199, Product=138, SerialNumber=98 [ 702.639990][T15441] usb 8-1: Product: syz [ 702.644206][T15441] usb 8-1: Manufacturer: syz [ 702.648819][T15441] usb 8-1: SerialNumber: syz [ 702.654724][T15441] usb 8-1: config 0 descriptor?? [ 702.661219][T15441] hub 8-1:0.0: USB hub found [ 702.948307][T15441] hub 8-1:0.0: 1 port detected [ 703.631119][T15441] hub 8-1:0.0: activate --> -90 [ 703.684253][T16115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 703.809566][ T30] audit: type=1400 audit(1767344381.005:1053): avc: denied { unmount } for pid=15156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 703.836892][T15441] usb 8-1: USB disconnect, device number 22 [ 703.842940][ T5879] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 704.055414][T16123] netlink: 'syz.8.2698': attribute type 11 has an invalid length. [ 704.225069][ T30] audit: type=1400 audit(1767344381.365:1054): avc: denied { prog_load } for pid=16120 comm="syz.6.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 704.514196][ T30] audit: type=1400 audit(1767344381.365:1055): avc: denied { bpf } for pid=16120 comm="syz.6.2699" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 705.041576][ T30] audit: type=1400 audit(1767344382.245:1056): avc: denied { perfmon } for pid=16129 comm="syz.6.2702" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 705.222392][ T30] audit: type=1400 audit(1767344382.425:1057): avc: denied { prog_run } for pid=16129 comm="syz.6.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 705.381578][T15441] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 705.397315][ T30] audit: type=1400 audit(1767344382.445:1058): avc: denied { map_create } for pid=16132 comm="syz.8.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 705.419071][ T30] audit: type=1400 audit(1767344382.445:1059): avc: denied { map_write } for pid=16132 comm="syz.8.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 705.831763][T15441] usb 8-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 705.843332][T15441] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 705.855192][T15441] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 705.867347][T16141] lo speed is unknown, defaulting to 1000 [ 705.867426][T15441] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 705.873400][T16141] lo speed is unknown, defaulting to 1000 [ 705.884208][T15441] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 705.890261][T16141] lo speed is unknown, defaulting to 1000 [ 705.899987][T15441] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.912652][T16141] infiniband sy×Õ: RDMA CMA: cma_listen_on_dev, error -98 [ 705.926328][T15441] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 705.936123][T15441] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.937233][T16141] lo speed is unknown, defaulting to 1000 [ 705.947135][T15441] usb 8-1: Product: syz [ 705.951931][T16141] lo speed is unknown, defaulting to 1000 [ 705.961852][T16141] lo speed is unknown, defaulting to 1000 [ 705.962135][T15441] usb 8-1: Manufacturer: syz [ 705.968638][T16141] lo speed is unknown, defaulting to 1000 [ 705.979969][T16141] lo speed is unknown, defaulting to 1000 [ 705.987123][T16141] lo speed is unknown, defaulting to 1000 [ 705.994273][T16141] lo speed is unknown, defaulting to 1000 [ 706.001417][T16141] lo speed is unknown, defaulting to 1000 [ 706.010091][T16141] lo speed is unknown, defaulting to 1000 [ 706.099566][T15441] usb 8-1: SerialNumber: syz [ 706.113155][T15441] usb 8-1: config 0 descriptor?? [ 706.123987][T16130] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 706.136765][T15441] ati_remote 8-1:0.0: Initializing ati_remote hardware failed. [ 706.155658][T15441] ati_remote 8-1:0.0: probe with driver ati_remote failed with error -5 [ 706.423732][T16145] netlink: 'syz.6.2704': attribute type 32 has an invalid length. [ 706.431697][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2704'. [ 706.448592][T16145] bond1: Setting coupled_control to off (0) [ 706.503178][T16148] overlayfs: failed to clone upperpath [ 706.649432][ T9079] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 706.799528][ T9079] usb 9-1: Using ep0 maxpacket: 32 [ 707.831800][T15206] usb 8-1: USB disconnect, device number 23 [ 707.838502][ T9079] usb 9-1: unable to get BOS descriptor or descriptor too short [ 707.868648][ T9079] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 707.888430][ T9079] usb 9-1: can't read configurations, error -71 [ 707.925044][ T30] audit: type=1400 audit(1767344385.125:1060): avc: denied { map_read } for pid=16175 comm="syz.6.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.269335][T15206] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 708.429543][T15206] usb 8-1: Using ep0 maxpacket: 32 [ 708.440095][T15206] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.475038][T15206] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 708.500038][T15206] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.528862][T15206] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 708.548317][T15206] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.570237][T15206] usb 8-1: config 0 descriptor?? [ 708.580681][T16178] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 708.591119][T15206] hub 8-1:0.0: USB hub found [ 708.796602][T15206] hub 8-1:0.0: config failed, hub has too many ports! (err -19) [ 709.256467][ T30] audit: type=1400 audit(1767344386.455:1061): avc: denied { write } for pid=16190 comm="syz.1.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 709.622422][T15206] hid-generic 0003:046D:C314.000D: item fetching failed at offset 0/1 [ 709.631753][T15206] hid-generic 0003:046D:C314.000D: probe with driver hid-generic failed with error -22 [ 709.662871][T15206] usb 8-1: USB disconnect, device number 24 [ 709.689620][ T9079] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 709.840783][ T9079] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.852404][ T9079] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.863671][ T9079] usb 9-1: New USB device found, idVendor=10d2, idProduct=7186, bcdDevice=23.a0 [ 709.873764][ T9079] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.882063][ T9079] usb 9-1: Product: syz [ 709.886565][ T9079] usb 9-1: Manufacturer: syz [ 709.891517][ T9079] usb 9-1: SerialNumber: syz [ 709.924242][ T9079] usb 9-1: config 0 descriptor?? [ 710.151511][ T9079] usb 9-1: USB disconnect, device number 15 [ 710.230623][T16207] dvmrp0: entered allmulticast mode [ 710.932783][T16217] trusted_key: encrypted_key: insufficient parameters specified [ 710.948224][T16217] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2728'. [ 710.959651][T16217] libceph: resolve '4.' (ret=-3): failed [ 711.186501][T16225] vivid-007: disconnect [ 712.372756][T16222] vivid-007: reconnect [ 713.067090][T16245] bpf: Bad value for 'gid' [ 713.184880][T15441] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 713.193354][ T30] audit: type=1400 audit(1767344390.365:1062): avc: denied { wake_alarm } for pid=16246 comm="syz.6.2735" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.363177][T15441] usb 9-1: device descriptor read/64, error -71 [ 713.950697][T15441] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 714.099369][T15441] usb 9-1: device descriptor read/64, error -71 [ 714.219616][T15441] usb usb9-port1: attempt power cycle [ 714.332246][T15206] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 714.499579][T15206] usb 8-1: device descriptor read/64, error -71 [ 714.569343][T15441] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 714.640297][T15441] usb 9-1: device descriptor read/8, error -71 [ 714.803044][T15206] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 714.942761][T16278] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 714.953666][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2744'. [ 715.321079][T15206] usb 8-1: device descriptor read/64, error -71 [ 715.354772][T15441] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 715.389884][T15441] usb 9-1: device descriptor read/8, error -71 [ 715.429758][T15206] usb usb8-port1: attempt power cycle [ 715.509674][T15441] usb usb9-port1: unable to enumerate USB device [ 715.913577][T15206] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 716.001248][T15206] usb 8-1: device descriptor read/8, error -71 [ 716.031183][ T30] audit: type=1400 audit(1767344393.235:1063): avc: denied { map } for pid=16283 comm="syz.8.2746" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 716.356570][T15206] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 716.482108][T15206] usb 8-1: device descriptor read/8, error -71 [ 716.509323][T15441] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 716.591146][T15206] usb usb8-port1: unable to enumerate USB device [ 716.659360][T15441] usb 9-1: Using ep0 maxpacket: 32 [ 716.665678][T15441] usb 9-1: config 0 has an invalid interface number: 136 but max is 0 [ 716.675641][T15441] usb 9-1: config 0 has no interface number 0 [ 716.681802][T15441] usb 9-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 716.691738][T15441] usb 9-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 716.702011][T15441] usb 9-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 716.715151][T15441] usb 9-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 716.724235][T15441] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.732235][T15441] usb 9-1: Product: syz [ 716.736376][T15441] usb 9-1: Manufacturer: syz [ 716.740967][T15441] usb 9-1: SerialNumber: syz [ 716.746685][T15441] usb 9-1: config 0 descriptor?? [ 716.752198][T16290] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 716.764375][T15441] vmk80xx 9-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 716.773677][T15441] vmk80xx 9-1:0.136: probe with driver vmk80xx failed with error -22 [ 716.983016][T15441] IPVS: starting estimator thread 0... [ 716.983305][T15206] usb 9-1: USB disconnect, device number 20 [ 717.079424][T16297] IPVS: using max 40 ests per chain, 96000 per kthread [ 717.454730][T16302] Cannot find add_set index 0 as target [ 717.528695][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2753'. [ 717.572781][T16316] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2755'. [ 717.899072][T16321] netlink: 'syz.8.2755': attribute type 10 has an invalid length. [ 717.922146][T16321] syz_tun: entered promiscuous mode [ 717.933291][T16321] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 718.075816][T16318] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 718.116882][T16318] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 718.633843][T16334] qnx6: unable to read the first superblock [ 719.109733][ T5935] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 719.411379][ T5935] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 719.419528][ T5935] usb 9-1: config 0 has no interface number 0 [ 719.425842][ T5935] usb 9-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 719.437233][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.459077][ T5935] usb 9-1: config 0 descriptor?? [ 719.485648][ T5935] usb 9-1: selecting invalid altsetting 1 [ 719.541743][ T5935] dvb_ttusb_budget: ttusb_init_controller: error [ 719.548437][ T5935] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 719.628724][ T5935] DVB: Unable to find symbol ves1820_attach() [ 719.699957][ T5935] DVB: Unable to find symbol stv0297_attach() [ 719.706027][ T5935] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 719.756719][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.772703][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.785094][ T5935] usb 9-1: USB disconnect, device number 21 [ 719.832895][T16362] pimreg: entered allmulticast mode [ 720.430220][T16370] team0: Port device team_slave_0 removed [ 720.516738][T16354] pimreg: left allmulticast mode [ 721.131662][T16385] overlayfs: missing 'lowerdir' [ 722.446298][T16390] input: syz0 as /devices/virtual/input/input61 [ 722.502386][ T30] audit: type=1400 audit(1767344399.705:1064): avc: denied { connect } for pid=16394 comm="syz.7.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 722.523382][ T30] audit: type=1400 audit(1767344399.725:1065): avc: denied { bind } for pid=16394 comm="syz.7.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 722.638575][T16390] lo speed is unknown, defaulting to 1000 [ 722.809604][T15206] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 722.969324][T15206] usb 8-1: Using ep0 maxpacket: 8 [ 722.983081][T15206] usb 8-1: config 0 has an invalid interface number: 246 but max is 0 [ 722.991669][T15206] usb 8-1: config 0 has no interface number 0 [ 723.000921][T15206] usb 8-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 723.010862][T15206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.025211][T15206] usb 8-1: Product: syz [ 723.030565][T15206] usb 8-1: Manufacturer: syz [ 723.035836][T15206] usb 8-1: SerialNumber: syz [ 723.045988][T15206] usb 8-1: config 0 descriptor?? [ 723.080061][T15206] msi2500 8-1:0.246: Registered as swradio24 [ 723.086120][T15206] msi2500 8-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 723.430806][ T5935] usb 8-1: USB disconnect, device number 29 [ 724.004812][T16423] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 724.017364][T16423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.163068][T16429] kvm: pic: non byte write [ 724.969558][ T5935] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 725.129380][ T5935] usb 9-1: Using ep0 maxpacket: 8 [ 725.147876][ T5935] usb 9-1: config 0 has an invalid interface number: 153 but max is 1 [ 725.168139][ T5935] usb 9-1: config 0 has no interface number 0 [ 725.188612][ T5935] usb 9-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=28.3e [ 725.214776][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.245982][ T5935] usb 9-1: config 0 descriptor?? [ 725.473564][ T5935] usb 9-1: USB disconnect, device number 22 [ 726.725472][ T5935] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 727.110074][ T5935] usb 9-1: Using ep0 maxpacket: 32 [ 727.140194][ T5935] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.151691][ T5935] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.162175][ T5935] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 727.171418][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.235540][ T5935] usb 9-1: config 0 descriptor?? [ 727.358085][T16466] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2799'. [ 727.552667][ T5935] usbhid 9-1:0.0: can't add hid device: -71 [ 727.560175][ T5935] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 727.576315][ T5935] usb 9-1: USB disconnect, device number 23 [ 727.649114][ T5879] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 727.776880][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 728.170462][ T5879] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.182364][ T5879] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 728.191480][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.199612][ T5879] usb 8-1: Product: syz [ 728.203813][ T5879] usb 8-1: Manufacturer: syz [ 728.208401][ T5879] usb 8-1: SerialNumber: syz [ 728.214286][ T5879] usb 8-1: config 0 descriptor?? [ 728.310247][ T5935] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 728.422543][ T5879] powermate 8-1:0.0: probe with driver powermate failed with error -22 [ 728.432130][ T5879] usb 8-1: USB disconnect, device number 30 [ 728.480995][ T5935] usb 9-1: unable to get BOS descriptor or descriptor too short [ 728.489421][ T5935] usb 9-1: not running at top speed; connect to a high speed hub [ 728.497968][ T5935] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.508172][ T5935] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.529157][ T5935] usb 9-1: string descriptor 0 read error: -22 [ 728.535355][ T5935] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.546626][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.558714][ T5935] usb 9-1: 0:2 : does not exist [ 728.957901][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2804'. [ 729.136300][T16482] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 729.158901][T16482] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 729.496640][ T5935] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 729.507029][ T5935] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 729.528861][ T5935] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 729.540642][ T5935] usb 9-1: USB disconnect, device number 24 [ 730.318617][T16492] pimreg: entered allmulticast mode [ 730.329336][T16491] pimreg: left allmulticast mode [ 732.429111][T15206] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 732.558845][T15206] usb 9-1: device descriptor read/64, error -71 [ 732.559187][T16548] netlink: 'syz.1.2825': attribute type 1 has an invalid length. [ 732.602152][T16548] bond4: entered promiscuous mode [ 732.607340][T16548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 732.667374][T16548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 732.675918][T16548] bond4: (slave bond5): making interface the new active one [ 732.683258][T16548] bond5: entered promiscuous mode [ 732.688663][T16548] bond4: (slave bond5): Enslaving as an active interface with an up link [ 732.798819][T15206] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 732.808891][ T9075] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 732.951038][T15206] usb 9-1: device descriptor read/64, error -71 [ 733.365937][T15206] usb usb9-port1: attempt power cycle [ 733.378794][ T9075] usb 8-1: Using ep0 maxpacket: 32 [ 733.385977][ T9075] usb 8-1: unable to get BOS descriptor or descriptor too short [ 733.394928][ T9075] usb 8-1: config 5 has an invalid interface number: 218 but max is 0 [ 733.403823][ T9075] usb 8-1: config 5 has no interface number 0 [ 733.410086][ T9075] usb 8-1: config 5 interface 218 has no altsetting 0 [ 733.419191][ T9075] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=f4.bc [ 733.428918][ T9075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.436898][ T9075] usb 8-1: Product: syz [ 733.442081][ T9075] usb 8-1: Manufacturer: syz [ 733.446672][ T9075] usb 8-1: SerialNumber: syz [ 733.713210][T15206] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 733.781367][T15206] usb 9-1: device descriptor read/8, error -71 [ 734.000946][ T9075] usbtest 8-1:5.218: couldn't get endpoints, -71 [ 734.007353][ T9075] usbtest 8-1:5.218: probe with driver usbtest failed with error -71 [ 734.029151][ T9075] usb 8-1: USB disconnect, device number 31 [ 734.098747][T15206] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 734.122864][T15206] usb 9-1: device descriptor read/8, error -71 [ 734.243985][T15206] usb usb9-port1: unable to enumerate USB device [ 735.905807][ T30] audit: type=1400 audit(1767344413.106:1066): avc: denied { getopt } for pid=16599 comm="syz.7.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 738.421268][T16636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2846'. [ 738.479044][T15206] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 738.645338][T15206] usb 9-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 738.656850][T15206] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 738.672879][T15206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 738.688040][T15206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 738.699500][T15206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 738.710316][T15206] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.741721][T15206] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 738.760396][T15206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.771251][T15206] usb 9-1: Product: syz [ 738.776880][T15206] usb 9-1: Manufacturer: syz [ 738.781678][T15206] usb 9-1: SerialNumber: syz [ 738.788233][T15206] usb 9-1: config 0 descriptor?? [ 738.804549][T16637] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 738.812867][T15206] ati_remote 9-1:0.0: Initializing ati_remote hardware failed. [ 738.821075][T15206] ati_remote 9-1:0.0: probe with driver ati_remote failed with error -5 [ 739.838662][T15206] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 739.988819][T15206] usb 8-1: Using ep0 maxpacket: 32 [ 740.902626][ T5935] usb 9-1: USB disconnect, device number 29 [ 741.937593][ T30] audit: type=1400 audit(1767344419.136:1067): avc: denied { relabelfrom } for pid=16677 comm="syz.1.2858" name="" dev="pipefs" ino=61220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 742.092719][T15206] usb 8-1: unable to get BOS descriptor or descriptor too short [ 742.113952][T15206] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 742.136304][T15206] usb 8-1: can't read configurations, error -71 [ 742.150223][T16695] vlan2: entered allmulticast mode [ 742.158765][T16695] macsec0: entered allmulticast mode [ 742.164052][T16695] veth1_macvtap: entered allmulticast mode [ 742.370896][T16704] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2865'. [ 742.875583][T15085] overlayfs: failed lookup in lower (newroot/109, name='bus', err=-40): overlapping layers [ 742.896485][T15085] overlayfs: failed lookup in lower (newroot/109, name='bus', err=-40): overlapping layers [ 743.872272][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.881931][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.894439][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.902848][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 743.911953][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 743.926774][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.936369][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.944622][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.953590][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 744.170607][ T30] audit: type=1326 audit(1767344421.376:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.195569][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 744.205213][ T30] audit: type=1326 audit(1767344421.376:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.530348][ T30] audit: type=1326 audit(1767344421.396:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.554263][ T30] audit: type=1326 audit(1767344421.396:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.578261][ T30] audit: type=1326 audit(1767344421.396:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.602148][ T30] audit: type=1326 audit(1767344421.396:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.626108][ T30] audit: type=1326 audit(1767344421.396:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.650006][ T30] audit: type=1326 audit(1767344421.396:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 744.659302][T16728] lo speed is unknown, defaulting to 1000 [ 744.673866][ T30] audit: type=1326 audit(1767344421.396:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f927a38f749 code=0x7ffc0000 [ 745.176637][T16744] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 745.183842][T16744] overlayfs: failed to set xattr on upper [ 745.189576][T16744] overlayfs: ...falling back to redirect_dir=nofollow. [ 745.249742][T16744] overlayfs: ...falling back to uuid=null. [ 745.336911][T16723] lo speed is unknown, defaulting to 1000 [ 746.033708][T16723] chnl_net:caif_netlink_parms(): no params data found [ 746.048090][ T9079] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 746.097701][T16723] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.105068][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.112800][T16723] bridge_slave_0: entered allmulticast mode [ 746.119616][T16723] bridge_slave_0: entered promiscuous mode [ 746.127348][T16723] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.135045][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.144999][T16723] bridge_slave_1: entered allmulticast mode [ 746.151846][T16723] bridge_slave_1: entered promiscuous mode [ 746.218181][ T9079] usb 9-1: Using ep0 maxpacket: 32 [ 746.236622][ T9079] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 746.252458][ T9079] usb 9-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 746.265506][ T9079] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 746.273889][ T9079] usb 9-1: Manufacturer: syz [ 746.279096][ T9079] usb 9-1: SerialNumber: syz [ 746.287206][T16723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.287470][ T9079] usb 9-1: config 0 descriptor?? [ 746.299201][T16723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.324020][T16723] team0: Port device team_slave_0 added [ 746.331368][T16723] team0: Port device team_slave_1 added [ 746.350091][T16723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.357019][T16723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.384855][T16723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.397242][T16723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.404528][T16723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.430651][T16723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.458473][ T5823] Bluetooth: hci3: command tx timeout [ 746.462586][T16723] hsr_slave_0: entered promiscuous mode [ 746.471275][T16723] hsr_slave_1: entered promiscuous mode [ 746.477125][T16723] debugfs: 'hsr0' already exists in 'hsr' [ 746.482875][T16723] Cannot create hsr debugfs directory [ 746.700816][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.829668][ T9079] usb 9-1: USB disconnect, device number 30 [ 746.902285][T16723] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 746.910756][T16768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2884'. [ 746.921647][T16723] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 746.931562][T16723] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 746.944018][T16723] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 746.997485][T16723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.017250][T16723] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.030858][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.037985][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.049376][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.056448][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.172511][T16723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.307240][T16723] veth0_vlan: entered promiscuous mode [ 747.316651][T16723] veth1_vlan: entered promiscuous mode [ 747.335381][T16723] veth0_macvtap: entered promiscuous mode [ 747.344911][T16723] veth1_macvtap: entered promiscuous mode [ 747.357695][T16723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.369772][T16723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.395932][T10635] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.413661][T10635] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.450061][T10635] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.474726][T10635] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.552597][ T9686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.567191][ T9686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.619709][ T9686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.644005][ T9686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.801365][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 747.801381][ T30] audit: type=1400 audit(1767344425.007:1094): avc: denied { view } for pid=16797 comm="syz.9.2888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 748.538333][ T5823] Bluetooth: hci3: command tx timeout [ 748.699941][T16812] pimreg: entered allmulticast mode [ 748.947000][T16818] netlink: 'syz.8.2895': attribute type 1 has an invalid length. [ 748.991865][T16818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 748.998508][T16820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63248 sclass=netlink_route_socket pid=16820 comm=syz.8.2895 [ 749.031429][T16821] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2894'. [ 749.054959][T16821] netlink: 'syz.9.2894': attribute type 7 has an invalid length. [ 749.064826][T16820] bond1: (slave ip6gretap1): making interface the new active one [ 749.087218][T16821] netlink: 'syz.9.2894': attribute type 8 has an invalid length. [ 749.099727][T16820] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 749.114263][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2894'. [ 749.169905][T16821] erspan0: entered promiscuous mode [ 749.193923][T16821] gretap0: entered promiscuous mode [ 749.862229][T16808] pimreg: left allmulticast mode [ 750.628542][ T5823] Bluetooth: hci3: command tx timeout [ 750.698135][ T5879] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 750.849223][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.914625][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.935927][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.373936][ T5879] usb 9-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 751.410607][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.425619][ T5879] usb 9-1: config 0 descriptor?? [ 751.855053][ T5879] hid-udraw 0003:20D6:CB17.000E: unknown main item tag 0x0 [ 751.965791][ T5879] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:20D6:CB17.000E/input/input63 [ 752.051172][ T30] audit: type=1400 audit(1767344429.257:1095): avc: denied { write } for pid=16837 comm="syz.8.2901" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 752.154764][ T5879] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:20D6:CB17.000E/input/input64 [ 752.255693][ T5879] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:20D6:CB17.000E/input/input65 [ 752.296899][ T5879] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:20D6:CB17.000E/input/input66 [ 752.351506][ T5879] hid-udraw 0003:20D6:CB17.000E: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.8-1/input0 [ 752.384297][ T5879] usb 9-1: USB disconnect, device number 31 [ 752.518072][T16861] openvswitch: netlink: Flow actions attr not present in new flow. [ 752.691316][T16881] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 752.701644][ T5823] Bluetooth: hci3: command tx timeout [ 752.943332][T16887] tmpfs: Bad value for 'mpol' [ 753.152082][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 753.162242][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 753.171774][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 753.182960][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 753.190492][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 753.420669][T16888] lo speed is unknown, defaulting to 1000 [ 753.663408][T16888] chnl_net:caif_netlink_parms(): no params data found [ 754.274546][T16888] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.281744][T16888] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.289194][T16888] bridge_slave_0: entered allmulticast mode [ 754.296330][T16888] bridge_slave_0: entered promiscuous mode [ 754.304992][T16888] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.312366][T16888] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.320142][T16888] bridge_slave_1: entered allmulticast mode [ 754.327319][T16888] bridge_slave_1: entered promiscuous mode [ 754.360488][T16888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.372814][T16888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.414985][T16888] team0: Port device team_slave_0 added [ 754.423378][T16888] team0: Port device team_slave_1 added [ 754.489621][T16888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.497128][T16888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.544899][T16888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.557184][T16888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.564151][T16888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.590485][T16888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.657352][T16888] hsr_slave_0: entered promiscuous mode [ 754.664638][T16888] hsr_slave_1: entered promiscuous mode [ 754.670654][T16888] debugfs: 'hsr0' already exists in 'hsr' [ 754.676371][T16888] Cannot create hsr debugfs directory [ 754.777803][ T9075] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 754.810099][T16888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.880369][T16888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.893154][T16924] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 754.903620][ T9079] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 754.911383][ T30] audit: type=1400 audit(1767344432.117:1096): avc: denied { relabelto } for pid=16920 comm="syz.6.2923" name="418" dev="tmpfs" ino=2225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 754.939817][ T30] audit: type=1400 audit(1767344432.117:1097): avc: denied { associate } for pid=16920 comm="syz.6.2923" name="418" dev="tmpfs" ino=2225 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 754.947995][ T9075] usb 9-1: Using ep0 maxpacket: 32 [ 754.975662][ T9075] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 754.984416][ T9075] usb 9-1: config 0 has no interface number 0 [ 754.990647][ T9075] usb 9-1: config 0 interface 184 has no altsetting 0 [ 754.999538][ T9075] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 755.009213][ T9075] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.017204][ T9075] usb 9-1: Product: syz [ 755.022708][ T9075] usb 9-1: Manufacturer: syz [ 755.023864][T16888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.027294][ T9075] usb 9-1: SerialNumber: syz [ 755.043104][ T9075] usb 9-1: config 0 descriptor?? [ 755.050085][ T9075] smsc75xx v1.0.0 [ 755.067642][ T9079] usb 10-1: Invalid ep0 maxpacket: 64 [ 755.097746][T16888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.214453][ T9079] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 755.221516][T16888] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 755.231891][T16888] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 755.241019][T16888] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 755.251434][T16888] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 755.267849][ T5835] Bluetooth: hci7: command tx timeout [ 755.313368][T16888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.329835][T16888] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.341492][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.348592][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.362710][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.369790][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.377318][ T9079] usb 10-1: Invalid ep0 maxpacket: 64 [ 755.383833][ T9079] usb usb10-port1: attempt power cycle [ 755.513635][T16888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.560844][T16888] veth0_vlan: entered promiscuous mode [ 755.572664][T16888] veth1_vlan: entered promiscuous mode [ 755.598035][T16888] veth0_macvtap: entered promiscuous mode [ 755.606764][T16888] veth1_macvtap: entered promiscuous mode [ 755.624692][T16888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.642083][T16888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.649563][ T30] audit: type=1400 audit(1767344432.847:1098): avc: denied { remove_name } for pid=9305 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 755.686594][ T3811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.695583][ T30] audit: type=1400 audit(1767344432.847:1099): avc: denied { rmdir } for pid=9305 comm="syz-executor" name="418" dev="tmpfs" ino=2225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 755.697290][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.726200][ T3811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.737788][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.741384][ T3811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.756727][ T9079] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 755.767119][ T3811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.778540][ T9079] usb 10-1: Invalid ep0 maxpacket: 64 [ 755.842021][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.850608][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.876384][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.884390][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.894198][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2925'. [ 755.936015][ T9079] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 755.969438][ T9079] usb 10-1: Invalid ep0 maxpacket: 64 [ 755.975909][ T9079] usb usb10-port1: unable to enumerate USB device [ 756.113178][T16944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2926'. [ 756.393974][ T9075] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 756.423317][ T9075] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 756.434171][ T9075] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 756.445087][ T9075] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 756.455915][ T9075] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 756.466941][ T9075] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 756.476591][ T9075] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 756.487539][ T9075] usb 9-1: USB disconnect, device number 32 [ 756.506901][T16947] netlink: 'syz.6.2927': attribute type 1 has an invalid length. [ 757.277745][ T9075] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 757.348155][ T5835] Bluetooth: hci7: command tx timeout [ 757.427463][ T9075] usb 9-1: Using ep0 maxpacket: 32 [ 757.434241][ T9075] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 757.456334][ T9075] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.466802][ T9075] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 757.477831][ T9075] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.504997][ T9075] usb 9-1: New USB device found, idVendor=fa6d, idProduct=830a, bcdDevice=8c.06 [ 757.522727][ T9075] usb 9-1: New USB device strings: Mfr=199, Product=138, SerialNumber=98 [ 757.531740][ T9075] usb 9-1: Product: syz [ 757.535925][ T9075] usb 9-1: Manufacturer: syz [ 757.541487][ T9075] usb 9-1: SerialNumber: syz [ 757.558287][ T9075] usb 9-1: config 0 descriptor?? [ 757.574824][ T9075] hub 9-1:0.0: bad descriptor, ignoring hub [ 757.590076][ T9075] hub 9-1:0.0: probe with driver hub failed with error -5 [ 757.604606][ T9075] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 758.336861][T16947] Set syz1 is full, maxelem 65536 reached [ 759.417557][ T5835] Bluetooth: hci7: command tx timeout [ 759.932061][T16992] m1Ie5nè‹Ò: entered promiscuous mode [ 760.022394][T16995] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 760.638861][T16437] usb 9-1: reset high-speed USB device number 33 using dummy_hcd [ 760.648762][T16437] usb 9-1: device reset changed ep0 maxpacket size! [ 760.660890][T16437] usb 9-1: USB disconnect, device number 33 [ 760.819866][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2942'. [ 760.896427][T17004] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 760.905864][T17004] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 760.957969][T16437] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 760.967403][ T5805] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 761.122202][T16437] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 761.130388][T16437] usb 9-1: config 0 has no interface number 0 [ 761.130427][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 761.165261][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 761.173628][ T5805] usb 2-1: can't read configurations, error -61 [ 761.189821][T16437] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 761.207491][T16437] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.215797][T16437] usb 9-1: Product: syz [ 761.221556][T16437] usb 9-1: Manufacturer: syz [ 761.226191][T16437] usb 9-1: SerialNumber: syz [ 761.314358][T16437] usb 9-1: config 0 descriptor?? [ 761.376714][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2943'. [ 761.385629][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2943'. [ 761.399952][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2943'. [ 761.399951][ T7111] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.408839][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2943'. [ 761.423939][ T7111] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.438450][ T7111] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.440264][ T5805] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 761.449134][ T7111] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.503207][ T5835] Bluetooth: hci7: command tx timeout [ 761.527049][T16437] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 761.536862][T16437] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 761.550181][T16437] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 761.558222][T16437] usb 9-1: media controller created [ 761.569202][T16437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 761.684944][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 761.693101][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 761.700829][ T5805] usb 2-1: can't read configurations, error -61 [ 761.707519][ T5805] usb usb2-port1: attempt power cycle [ 761.727839][T16437] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 761.734312][T16998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.242820][T16998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.264177][T17015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.279095][T17015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.473887][ T9079] usb 9-1: USB disconnect, device number 34 [ 762.497368][T16437] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 762.507895][ T5805] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 762.507930][ T9075] libceph: connect (1)[c::]:6789 error -101 [ 762.521658][ T9075] libceph: mon0 (1)[c::]:6789 connect error [ 762.545213][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 762.551866][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 762.559612][ T5805] usb 2-1: can't read configurations, error -61 [ 762.590438][T17020] ceph: No mds server is up or the cluster is laggy [ 762.652809][T16437] usb 10-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 762.667377][T16437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.677740][T16437] usb 10-1: config 0 descriptor?? [ 762.687528][ T5805] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 762.707707][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 762.714384][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 762.722530][ T5805] usb 2-1: can't read configurations, error -61 [ 762.729146][ T5805] usb usb2-port1: unable to enumerate USB device [ 762.886447][T16437] usbhid 10-1:0.0: can't add hid device: -71 [ 762.892546][T16437] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 762.902094][T16437] usb 10-1: USB disconnect, device number 6 [ 763.120357][ T7111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.130014][ T7111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.142578][T17032] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 763.480559][ T5835] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 764.021120][ T30] audit: type=1400 audit(1767344441.207:1100): avc: denied { read } for pid=17036 comm="syz.9.2952" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 764.229427][ T30] audit: type=1400 audit(1767344441.207:1101): avc: denied { open } for pid=17036 comm="syz.9.2952" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 764.254169][ T30] audit: type=1400 audit(1767344441.217:1102): avc: denied { ioctl } for pid=17036 comm="syz.9.2952" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 764.294696][ T30] audit: type=1400 audit(1767344441.227:1103): avc: denied { write } for pid=17036 comm="syz.9.2952" lport=36949 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 764.876957][T17052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=17052 comm=syz.8.2956 [ 764.893310][T17053] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2957'. [ 764.922241][T17053] netlink: 'syz.9.2957': attribute type 7 has an invalid length. [ 764.937291][T17053] netlink: 'syz.9.2957': attribute type 8 has an invalid length. [ 764.947836][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2957'. [ 765.085969][ T30] audit: type=1804 audit(1767344442.287:1104): pid=17059 uid=60928 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2958" name="/newroot/18/file0" dev="tmpfs" ino=111 res=1 errno=0 [ 765.477376][ T5805] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 765.491382][T17072] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 765.910325][ T5805] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 765.922259][ T5805] usb 10-1: config 0 has no interface number 0 [ 765.956814][ T5805] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 765.968514][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.979795][ T5805] usb 10-1: Product: syz [ 765.986927][ T5805] usb 10-1: Manufacturer: syz [ 765.997887][ T5805] usb 10-1: SerialNumber: syz [ 766.023854][T17076] PKCS8: Unsupported PKCS#8 version [ 766.194281][ T5805] usb 10-1: config 0 descriptor?? [ 766.233961][ T9079] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 766.410226][ T9079] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.423325][ T9079] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 766.432781][ T9079] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.432848][ T5805] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 766.450391][ T9079] usb 9-1: config 0 descriptor?? [ 766.451653][ T5805] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 766.466135][ T5805] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 766.474180][ T5805] usb 10-1: media controller created [ 766.486031][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 766.634246][ T5805] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 766.635066][T17065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.649330][T17065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.883093][ T9074] usb 10-1: USB disconnect, device number 7 [ 766.893445][ T9079] prodikeys 0003:041E:2801.000F: item fetching failed at offset 0/5 [ 766.902380][ T9079] prodikeys 0003:041E:2801.000F: hid parse failed [ 766.908992][ T9079] prodikeys 0003:041E:2801.000F: probe with driver prodikeys failed with error -22 [ 767.154598][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 767.285877][ T5805] usb 9-1: USB disconnect, device number 35 [ 768.380582][ T30] audit: type=1400 audit(1767344445.577:1105): avc: denied { append } for pid=17106 comm="syz.8.2973" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 768.607352][ T5805] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 768.623811][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2975'. [ 768.765773][T17121] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 768.772830][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 768.779574][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.787962][T17121] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 768.801547][T17121] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 768.832939][ T5805] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 768.855099][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.894191][ T5805] usb 2-1: config 0 descriptor?? [ 769.704615][ T5805] hid-alps 0003:044E:121E.0010: unknown main item tag 0x0 [ 769.712976][ T5805] hid-alps 0003:044E:121E.0010: unknown main item tag 0x0 [ 769.722065][ T5805] hid-alps 0003:044E:121E.0010: unknown main item tag 0x0 [ 769.731011][ T5805] hid-alps 0003:044E:121E.0010: unknown main item tag 0x0 [ 769.758753][ T5805] hid-alps 0003:044E:121E.0010: unknown main item tag 0x0 [ 769.818852][ T5805] hid-alps 0003:044E:121E.0010: hidraw0: USB HID v0.95 Device [HID 044e:121e] on usb-dummy_hcd.1-1/input0 [ 769.833103][ T5805] usb 2-1: USB disconnect, device number 34 [ 770.167867][ T9074] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 770.381023][ T9074] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.391573][ T9074] usb 9-1: config 0 has no interface number 0 [ 770.406048][ T9074] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 770.435283][ T9074] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.455297][ T9074] usb 9-1: Product: syz [ 770.473164][ T9074] usb 9-1: Manufacturer: syz [ 770.487402][ T9074] usb 9-1: SerialNumber: syz [ 770.508371][ T9074] usb 9-1: config 0 descriptor?? [ 770.637348][ T5805] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 770.726175][ T9074] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 770.751006][ T9074] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 770.762234][ T9074] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 770.770596][ T9074] usb 9-1: media controller created [ 770.781073][ T9074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.797470][ T5805] usb 10-1: Using ep0 maxpacket: 8 [ 770.803842][ T5805] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 770.814221][ T5805] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.825898][ T5805] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 770.845117][T17138] kvm: kvm [17137]: vcpu2, guest rIP: 0x1bc Unhandled WRMSR(0xc1) = 0x1 [ 770.860506][T17138] kvm: kvm [17137]: vcpu2, guest rIP: 0x1bc Unhandled WRMSR(0xc2) = 0x1 [ 770.869526][ T5805] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 770.882913][T17138] kvm: kvm [17137]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 770.892836][ T5805] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.906032][T17138] kvm: kvm [17137]: vcpu2, guest rIP: 0x1bc Unhandled WRMSR(0x11e) = 0x1 [ 770.906220][ T5805] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 770.919694][T17138] kvm: kvm [17137]: vcpu2, guest rIP: 0x1bc Unhandled WRMSR(0x186) = 0x1 [ 770.924026][ T5805] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.932658][T17138] kvm: kvm [17137]: vcpu2, guest rIP: 0x1bc Unhandled WRMSR(0x187) = 0x1 [ 770.950074][T17128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.958877][ T9074] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 770.965303][T17128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.006289][T17138] kvm_intel: kvm [17137]: vcpu2, guest rIP: 0x1bc Unhandled WRMSR(0x1d9) = 0x1 [ 771.169237][ T5805] usb 10-1: GET_CAPABILITIES returned 0 [ 771.174965][ T5805] usbtmc 10-1:16.0: can't read capabilities [ 771.194213][ T90] usb 9-1: USB disconnect, device number 36 [ 771.385721][ T90] usb 10-1: USB disconnect, device number 8 [ 771.578382][T17142] overlayfs: failed to clone upperpath [ 771.757288][ T30] audit: type=1400 audit(1767344448.957:1106): avc: denied { setopt } for pid=17150 comm="syz.8.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 771.804778][ T30] audit: type=1400 audit(1767344448.997:1107): avc: denied { map } for pid=17150 comm="syz.8.2984" path="socket:[65062]" dev="sockfs" ino=65062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 771.858982][ T30] audit: type=1400 audit(1767344448.997:1108): avc: denied { accept } for pid=17150 comm="syz.8.2984" path="socket:[65062]" dev="sockfs" ino=65062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 771.986431][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 772.106127][T17163] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:21 [ 772.133265][T17163] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 774.807485][ T5805] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 774.967420][ T5805] usb 9-1: device descriptor read/64, error -71 [ 775.138874][T15213] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 775.277812][ T5805] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 775.379208][T15213] usb 10-1: Using ep0 maxpacket: 8 [ 775.389868][T15213] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 775.409828][T15213] usb 10-1: config 1 has no interface number 0 [ 775.424901][T15213] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.436281][T15213] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 775.445641][T15213] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 775.462194][T15213] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 775.471740][ T5805] usb 9-1: device descriptor read/64, error -71 [ 775.478768][T15213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.486958][T15213] usb 10-1: Product: syz [ 775.494934][T15213] usb 10-1: Manufacturer: syz [ 775.501294][T15213] usb 10-1: SerialNumber: syz [ 775.587716][ T5805] usb usb9-port1: attempt power cycle [ 776.267349][T15441] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 776.324115][T15213] cdc_ncm 10-1:1.1: bind() failure [ 776.477311][T15441] usb 2-1: Using ep0 maxpacket: 32 [ 776.484620][T15441] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 776.507288][T15441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.527533][T15441] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 776.547308][T15441] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.578846][T15441] usb 2-1: New USB device found, idVendor=fa6d, idProduct=830a, bcdDevice=8c.06 [ 776.597328][T15441] usb 2-1: New USB device strings: Mfr=199, Product=138, SerialNumber=98 [ 776.598852][ T9074] usb 10-1: USB disconnect, device number 9 [ 776.616120][T15441] usb 2-1: Product: syz [ 776.625422][T15441] usb 2-1: Manufacturer: syz [ 776.639114][T15441] usb 2-1: SerialNumber: syz [ 776.646105][T15441] usb 2-1: config 0 descriptor?? [ 776.661925][T15441] hub 2-1:0.0: bad descriptor, ignoring hub [ 776.677293][T15441] hub 2-1:0.0: probe with driver hub failed with error -5 [ 776.685200][T15441] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 777.215378][T17219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.447739][ T9074] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 777.617507][ T9074] usb 9-1: Using ep0 maxpacket: 8 [ 777.625426][ T9074] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 777.634618][ T9074] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.643122][ T9074] usb 9-1: Product: syz [ 777.649952][ T9074] usb 9-1: Manufacturer: syz [ 777.654579][ T9074] usb 9-1: SerialNumber: syz [ 777.663570][ T9074] usb 9-1: config 0 descriptor?? [ 777.671999][ T9074] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 777.809985][ T30] audit: type=1400 audit(1767344455.017:1109): avc: denied { map } for pid=17226 comm="syz.9.3009" path="socket:[64309]" dev="sockfs" ino=64309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.650244][ T9074] gspca_sonixj: reg_r err -71 [ 778.777612][ T9074] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 778.789227][ T9074] usb 9-1: USB disconnect, device number 40 [ 779.338639][ T9074] usb 2-1: USB disconnect, device number 35 [ 779.357227][ T30] audit: type=1400 audit(1767344456.557:1110): avc: denied { connect } for pid=17247 comm="syz.1.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 779.617360][ T9074] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 779.787300][ T9074] usb 2-1: Using ep0 maxpacket: 32 [ 779.798781][ T9074] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 779.832629][ T9074] usb 2-1: config 0 has no interface number 0 [ 779.857650][ T9074] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 779.879185][ T9074] usb 2-1: config 0 interface 196 has no altsetting 0 [ 779.899300][ T9074] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 779.917740][ T9074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.947352][ T9074] usb 2-1: Product: syz [ 779.951566][ T9074] usb 2-1: Manufacturer: syz [ 779.956153][ T9074] usb 2-1: SerialNumber: syz [ 779.973652][ T9074] usb 2-1: config 0 descriptor?? [ 779.989574][T17248] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 780.202874][ T9074] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 780.217538][ T9074] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 780.237620][ T9074] usb 2-1: USB disconnect, device number 36 [ 780.317335][T15441] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 780.467305][T15441] usb 9-1: Using ep0 maxpacket: 16 [ 780.473885][T15441] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.485121][T15441] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.505853][T15441] usb 9-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 780.515195][T15441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.526770][T15441] usb 9-1: config 0 descriptor?? [ 780.655817][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3019'. [ 780.927407][T15213] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 780.945252][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 780.963628][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 780.976975][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 780.991568][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 781.007053][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 781.022398][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 781.030193][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 781.038428][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 781.063505][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 781.086669][T15441] logitech 0003:046D:C623.0011: unknown main item tag 0x0 [ 781.093895][T15213] usb 10-1: Using ep0 maxpacket: 8 [ 781.115203][T15213] usb 10-1: config index 0 descriptor too short (expected 19222, got 18) [ 781.126082][T15441] logitech 0003:046D:C623.0011: hidraw0: USB HID v0.08 Device [HID 046d:c623] on usb-dummy_hcd.8-1/input0 [ 781.147721][T15213] usb 10-1: config 28 has too many interfaces: 241, using maximum allowed: 32 [ 781.166824][T15441] usb 9-1: USB disconnect, device number 41 [ 781.174074][T15213] usb 10-1: config 28 has 1 interface, different from the descriptor's value: 241 [ 781.201742][T15213] usb 10-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d [ 781.220752][T15213] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.229317][T15213] usb 10-1: Product: syz [ 781.238124][T15213] usb 10-1: Manufacturer: syz [ 781.248858][T15213] usb 10-1: SerialNumber: syz [ 781.473611][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3019'. [ 781.487876][T17265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.501169][T17265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.510556][T15441] usb 10-1: USB disconnect, device number 10 [ 782.747321][ T5805] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 782.896989][ T30] audit: type=1326 audit(1767344460.097:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 782.921071][ T30] audit: type=1326 audit(1767344460.127:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 782.927542][ T5805] usb 9-1: device descriptor read/64, error -71 [ 783.108444][ T5835] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 783.315497][ T30] audit: type=1326 audit(1767344460.517:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 783.383953][T17292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17292 comm=syz.1.3025 [ 783.398220][ T30] audit: type=1400 audit(1767344460.597:1114): avc: denied { map } for pid=17284 comm="syz.6.3024" path="socket:[64405]" dev="sockfs" ino=64405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 783.398259][T17294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17294 comm=syz.1.3025 [ 783.477129][ T30] audit: type=1326 audit(1767344460.677:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 783.506683][ T30] audit: type=1326 audit(1767344460.707:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 783.508493][ T5805] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 783.651990][T16437] IPVS: starting estimator thread 0... [ 783.677697][ T5805] usb 9-1: device descriptor read/64, error -71 [ 783.708866][T17298] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 783.716831][ T30] audit: type=1326 audit(1767344460.917:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 783.747381][T17300] IPVS: using max 47 ests per chain, 112800 per kthread [ 783.796878][ T30] audit: type=1326 audit(1767344460.917:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 783.798308][ T5805] usb usb9-port1: attempt power cycle [ 783.863397][ T30] audit: type=1326 audit(1767344460.927:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 783.917583][ T30] audit: type=1326 audit(1767344460.927:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 784.207419][ T5805] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 784.278400][ T5805] usb 9-1: device descriptor read/8, error -71 [ 784.481176][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 784.490147][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3030'. [ 784.508468][T17306] netlink: 'syz.1.3030': attribute type 12 has an invalid length. [ 784.517465][ T5805] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 784.550284][ T5805] usb 9-1: device descriptor read/8, error -71 [ 784.657506][ T5805] usb usb9-port1: unable to enumerate USB device [ 785.002919][T17313] nfs: Unknown parameter '/dev/net/tun' [ 786.174018][T17327] xt_nat: multiple ranges no longer supported [ 787.169352][T17327] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3036'. [ 787.212210][T17327] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3036'. [ 787.367350][ T5805] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 787.466277][T17335] batadv_slave_1: entered promiscuous mode [ 787.525953][ T5805] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 787.539413][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.554622][ T5805] usb 2-1: Product: syz [ 787.560686][ T5805] usb 2-1: Manufacturer: syz [ 787.569660][ T5805] usb 2-1: SerialNumber: syz [ 787.582414][ T5805] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 787.607550][T15441] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 788.113671][T17346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1052 sclass=netlink_route_socket pid=17346 comm=syz.1.3035 [ 788.380541][T17329] batadv_slave_1: left promiscuous mode [ 788.727744][ T10] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 788.857347][T15441] usb 2-1: Service connection timeout for: 256 [ 788.864332][T15441] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 788.886828][T15441] ath9k_htc: Failed to initialize the device [ 788.894903][T15441] usb 2-1: ath9k_htc: USB layer deinitialized [ 788.909326][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.921289][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.935625][ T10] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 788.949887][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.959523][ T10] usb 9-1: config 0 descriptor?? [ 789.175176][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 789.175192][ T30] audit: type=1326 audit(1767344466.377:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.205710][ T30] audit: type=1326 audit(1767344466.407:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.229805][ T30] audit: type=1326 audit(1767344466.407:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.254413][ T30] audit: type=1326 audit(1767344466.407:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.281150][ T30] audit: type=1326 audit(1767344466.417:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.305821][ T30] audit: type=1326 audit(1767344466.427:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.329761][ T30] audit: type=1326 audit(1767344466.427:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.355017][ T30] audit: type=1326 audit(1767344466.427:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.379267][ T30] audit: type=1326 audit(1767344466.427:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.402992][ T30] audit: type=1326 audit(1767344466.427:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.6.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63d8f749 code=0x7ffc0000 [ 789.494148][T14646] usb 2-1: USB disconnect, device number 37 [ 789.661190][T17349] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3044'. [ 789.678802][ T10] usb 9-1: string descriptor 0 read error: -71 [ 789.694331][ T10] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 789.703413][ T10] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 789.804502][T17364] FAT-fs (loop3): unable to read boot sector [ 790.077450][T14646] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 790.130737][ T10] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 790.139350][ T10] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 790.147318][ T10] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 790.158076][ T10] usb 9-1: USB disconnect, device number 46 [ 790.299516][T14646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 790.318847][T14646] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=fa.ce [ 790.328259][T14646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.338223][T14646] usb 2-1: config 0 descriptor?? [ 790.349903][T17364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 790.360939][T14646] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input68 [ 791.627322][ T10] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 791.777318][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 791.783972][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.794430][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.807420][ T10] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 791.816460][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.826875][ T10] usb 9-1: config 0 descriptor?? [ 791.834290][ T10] hso 9-1:0.0: Can't find BULK IN endpoint [ 792.138501][ T31] INFO: task kworker/u8:22:6525 blocked for more than 143 seconds. [ 792.146462][ T31] Tainted: G L syzkaller #0 [ 792.154329][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.169960][ T31] task:kworker/u8:22 state:D stack:24872 pid:6525 tgid:6525 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 792.243064][T17384] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 792.331036][ T31] Workqueue: netns cleanup_net [ 792.344302][ T31] Call Trace: [ 792.356052][ T31] [ 792.368815][ T31] ? __schedule+0x10b9/0x6150 [ 792.380929][ T31] __schedule+0x1139/0x6150 [ 792.407067][ T31] ? __lock_acquire+0x436/0x2890 [ 792.438878][ T31] ? __pfx___schedule+0x10/0x10 [ 792.463066][ T31] ? find_held_lock+0x2b/0x80 [ 792.493698][ T31] ? schedule+0x2d7/0x3a0 [ 792.521168][ T31] schedule+0xe7/0x3a0 [ 792.666249][ T31] schedule_preempt_disabled+0x13/0x30 [ 792.747449][ T31] __mutex_lock+0xc69/0x1ca0 [ 792.805083][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 792.836660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 792.874279][ T31] ? __mutex_unlock_slowpath+0x161/0x790 [ 792.903488][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 792.943566][ T31] ? find_held_lock+0x2b/0x80 [ 792.971281][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 792.998764][ T31] rdma_dev_change_netns+0x30/0x320 [ 793.026589][ T31] rdma_dev_exit_net+0x2dd/0x590 [ 793.060850][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 793.094453][ T31] ? __pfx___might_resched+0x10/0x10 [ 793.122721][ T31] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 793.155495][ T31] ? mutex_is_locked+0x17/0x60 [ 793.165542][T17281] usb 2-1: USB disconnect, device number 38 [ 793.168974][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 793.207675][ T31] ops_undo_list+0x2ee/0xab0 [ 793.229875][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 793.254764][ T31] ? cleanup_net+0x347/0x830 [ 793.306374][ T31] ? idr_destroy+0x62/0x2e0 [ 793.345169][ T31] cleanup_net+0x41b/0x830 [ 793.365895][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 793.409592][ T31] ? rcu_is_watching+0x12/0xc0 [ 793.428770][ T31] process_one_work+0x9ba/0x1b20 [ 793.447086][ T31] ? __pfx_process_one_work+0x10/0x10 [ 793.470025][ T31] ? assign_work+0x1a0/0x250 [ 793.489998][ T31] worker_thread+0x6c8/0xf10 [ 793.502021][ T31] ? __kthread_parkme+0x19e/0x250 [ 793.522076][ T31] ? __pfx_worker_thread+0x10/0x10 [ 793.545101][ T31] kthread+0x3c5/0x780 [ 793.563034][ T31] ? __pfx_kthread+0x10/0x10 [ 793.583507][ T31] ? rcu_is_watching+0x12/0xc0 [ 793.611748][ T31] ? __pfx_kthread+0x10/0x10 [ 793.636271][ T31] ret_from_fork+0x983/0xb10 [ 793.656168][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 793.687974][ T31] ? __switch_to+0x7af/0x10d0 [ 793.714696][ T31] ? __pfx_kthread+0x10/0x10 [ 793.749519][ T31] ret_from_fork_asm+0x1a/0x30 [ 793.780195][ T31] [ 793.794795][ T31] INFO: task syz.0.2380:14892 blocked for more than 145 seconds. [ 793.853881][ T31] Tainted: G L syzkaller #0 [ 793.867784][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.885669][ T31] task:syz.0.2380 state:D stack:25064 pid:14892 tgid:14886 ppid:13889 task_flags:0x400140 flags:0x00080002 [ 793.909910][ T31] Call Trace: [ 793.916295][ T31] [ 793.922974][ T31] ? __schedule+0x10b9/0x6150 [ 793.929064][ T31] __schedule+0x1139/0x6150 [ 793.933768][ T31] ? __lock_acquire+0x436/0x2890 [ 793.939434][ T31] ? __pfx___schedule+0x10/0x10 [ 793.944326][ T31] ? find_held_lock+0x2b/0x80 [ 793.949553][ T31] ? schedule+0x2d7/0x3a0 [ 793.953881][ T31] schedule+0xe7/0x3a0 [ 793.958050][ T31] schedule_timeout+0x257/0x290 [ 793.963004][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 793.968504][ T31] ? mark_held_locks+0x49/0x80 [ 793.973277][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 793.978655][ T31] __wait_for_common+0x2fc/0x4e0 [ 793.983597][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 793.989119][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 793.994582][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 793.999924][ T31] disable_device+0x16f/0x280 [ 794.004619][ T31] ? __pfx_disable_device+0x10/0x10 [ 794.009867][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 794.015212][ T31] __ib_unregister_device+0x2b4/0x480 [ 794.020716][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 794.026621][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 794.032509][ T31] nldev_dellink+0x21f/0x320 [ 794.038842][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 794.044046][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.049008][ T31] ? cap_capable+0x10d/0x3f0 [ 794.053616][ T31] ? bpf_lsm_capable+0x9/0x10 [ 794.060940][ T31] ? security_capable+0x7e/0x260 [ 794.065905][ T31] ? ns_capable+0xd7/0x110 [ 794.070417][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 794.075568][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 794.080394][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 794.085708][ T31] ? __lock_acquire+0x436/0x2890 [ 794.090718][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 794.097160][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 794.104189][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 794.109540][ T31] netlink_unicast+0x5aa/0x870 [ 794.114306][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 794.119619][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 794.124398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.129715][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 794.134492][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 794.140332][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.145628][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 794.151636][ T31] ___sys_sendmsg+0x134/0x1d0 [ 794.156332][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.161712][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 794.168763][ T31] __sys_sendmsg+0x16d/0x220 [ 794.173357][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.178542][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 794.183507][ T31] do_syscall_64+0xcd/0xf80 [ 794.188063][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.193969][ T31] RIP: 0033:0x7f3c1878f749 [ 794.198703][ T31] RSP: 002b:00007f3c19622038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.207121][ T31] RAX: ffffffffffffffda RBX: 00007f3c189e6180 RCX: 00007f3c1878f749 [ 794.215134][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 794.223339][ T31] RBP: 00007f3c18813f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.231472][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.239762][ T31] R13: 00007f3c189e6218 R14: 00007f3c189e6180 R15: 00007ffd61811368 [ 794.247795][ T31] [ 794.250870][ T31] INFO: task syz.5.2396:14936 blocked for more than 145 seconds. [ 794.272774][ T31] Tainted: G L syzkaller #0 [ 794.288367][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.313025][ T31] task:syz.5.2396 state:D stack:26840 pid:14936 tgid:14935 ppid:7664 task_flags:0x400140 flags:0x00080002 [ 794.339416][ T31] Call Trace: [ 794.343615][ T31] [ 794.346551][ T31] ? __schedule+0x10b9/0x6150 [ 794.351290][ T31] __schedule+0x1139/0x6150 [ 794.355815][ T31] ? __pfx___schedule+0x10/0x10 [ 794.360704][ T31] ? find_held_lock+0x2b/0x80 [ 794.365401][ T31] ? schedule+0x2d7/0x3a0 [ 794.369967][ T31] schedule+0xe7/0x3a0 [ 794.374060][ T31] schedule_preempt_disabled+0x13/0x30 [ 794.380047][ T31] __mutex_lock+0xc69/0x1ca0 [ 794.384665][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 794.390105][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 794.395152][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.401171][ T31] ? find_held_lock+0x2b/0x80 [ 794.405871][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 794.411301][ T31] rdma_dev_change_netns+0x30/0x320 [ 794.416524][ T31] rdma_dev_exit_net+0x2dd/0x590 [ 794.421561][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 794.427034][ T31] ? __pfx___might_resched+0x10/0x10 [ 794.432479][ T31] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 794.438278][ T31] ? mutex_is_locked+0x17/0x60 [ 794.443285][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 794.448801][ T31] ops_undo_list+0x2ee/0xab0 [ 794.453430][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 794.458780][ T31] ? ops_init+0x2f0/0x5f0 [ 794.463114][ T31] ? ops_init+0x2fa/0x5f0 [ 794.467505][ T31] setup_net+0x1ff/0x3a0 [ 794.471762][ T31] ? __pfx_setup_net+0x10/0x10 [ 794.476517][ T31] ? lockdep_init_map_type+0x5c/0x270 [ 794.481935][ T31] ? mutex_init_lockep+0x110/0x150 [ 794.487062][ T31] copy_net_ns+0x351/0x7c0 [ 794.491687][ T31] create_new_namespaces+0x3ea/0xab0 [ 794.496996][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 794.502687][ T31] ksys_unshare+0x45b/0xa40 [ 794.507201][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 794.512264][ T31] ? file_close_fd+0x61/0x80 [ 794.516885][ T31] __x64_sys_unshare+0x31/0x40 [ 794.521685][ T31] do_syscall_64+0xcd/0xf80 [ 794.526206][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.532125][ T31] RIP: 0033:0x7fa5a618f749 [ 794.536545][ T31] RSP: 002b:00007fa5a6ff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 794.545217][ T31] RAX: ffffffffffffffda RBX: 00007fa5a63e5fa0 RCX: 00007fa5a618f749 [ 794.553227][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 794.561243][ T31] RBP: 00007fa5a6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.569238][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.577202][ T31] R13: 00007fa5a63e6038 R14: 00007fa5a63e5fa0 R15: 00007ffdb22f6448 [ 794.585261][ T31] [ 794.588369][ T31] [ 794.588369][ T31] Showing all locks held in the system: [ 794.596118][ T31] 1 lock held by khungtaskd/31: [ 794.601186][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 794.611138][ T31] 5 locks held by kworker/u8:16/4423: [ 794.616513][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 794.626487][ T31] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 794.635228][ T31] #2: ffff8880b84262d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 794.644575][ T31] #3: ffffffff9ae5e348 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 794.655160][ T31] #4: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20b0 [ 794.664911][ T31] 1 lock held by klogd/5179: [ 794.669524][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 794.679471][ T31] 2 locks held by getty/5577: [ 794.684152][ T31] #0: ffff88814d5a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 794.693933][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 794.705612][ T31] 4 locks held by kworker/u8:22/6525: [ 794.711157][ T31] #0: ffff88801badc948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 794.722957][ T31] #1: ffffc9000c35fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 794.732970][ T31] #2: ffffffff9012b510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 794.743002][ T31] #3: ffff88802a780700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 794.755031][ T31] 2 locks held by syz.0.2380/14892: [ 794.760376][ T31] #0: ffffffff9af7abd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 794.770859][ T31] #1: ffff88802a780700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 794.782631][ T31] 2 locks held by syz.5.2396/14936: [ 794.787879][ T31] #0: ffffffff9012b510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 794.797337][ T31] #1: ffff88802a780700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 794.808612][ T31] [ 794.810949][ T31] ============================================= [ 794.810949][ T31] [ 794.837343][ T31] NMI backtrace for cpu 1 [ 794.837359][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 794.837381][ T31] Tainted: [L]=SOFTLOCKUP [ 794.837387][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.837396][ T31] Call Trace: [ 794.837402][ T31] [ 794.837412][ T31] dump_stack_lvl+0x116/0x1f0 [ 794.837436][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 794.837467][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.837486][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 794.837513][ T31] sys_info+0x133/0x180 [ 794.837536][ T31] watchdog+0xe66/0x1180 [ 794.837560][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.837576][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.837592][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.837615][ T31] ? __kthread_parkme+0x19e/0x250 [ 794.837633][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.837650][ T31] kthread+0x3c5/0x780 [ 794.837669][ T31] ? __pfx_kthread+0x10/0x10 [ 794.837689][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.837704][ T31] ? __pfx_kthread+0x10/0x10 [ 794.837724][ T31] ret_from_fork+0x983/0xb10 [ 794.837742][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 794.837763][ T31] ? __switch_to+0x7af/0x10d0 [ 794.837783][ T31] ? __pfx_kthread+0x10/0x10 [ 794.837803][ T31] ret_from_fork_asm+0x1a/0x30 [ 794.837838][ T31] [ 794.838065][ T31] Sending NMI from CPU 1 to CPUs 0: [ 794.981096][ C0] NMI backtrace for cpu 0 [ 794.981110][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.981128][ C0] Tainted: [L]=SOFTLOCKUP [ 794.981132][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.981139][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 794.981158][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 794.981170][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 794.981181][ C0] RAX: 0000000002a5ca97 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 794.981189][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf79 RDI: ffffffff8bf2b400 [ 794.981197][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 794.981205][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 794.981214][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b6d0 R15: 0000000000000000 [ 794.981222][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 794.981235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.981243][ C0] CR2: 000055557493a5c8 CR3: 000000007feec000 CR4: 00000000003526f0 [ 794.981251][ C0] Call Trace: [ 794.981256][ C0] [ 794.981260][ C0] default_idle+0x13/0x20 [ 794.981277][ C0] default_idle_call+0x6c/0xb0 [ 794.981293][ C0] do_idle+0x38d/0x510 [ 794.981312][ C0] ? __pfx_do_idle+0x10/0x10 [ 794.981331][ C0] cpu_startup_entry+0x4f/0x60 [ 794.981348][ C0] rest_init+0x16b/0x2b0 [ 794.981368][ C0] ? acpi_subsystem_init+0x133/0x180 [ 794.981380][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 794.981393][ C0] start_kernel+0x3ef/0x4d0 [ 794.981411][ C0] x86_64_start_reservations+0x18/0x30 [ 794.981428][ C0] x86_64_start_kernel+0x130/0x190 [ 794.981446][ C0] common_startup_64+0x13e/0x148 [ 794.981467][ C0] [ 795.237286][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 795.244148][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 795.254811][ T31] Tainted: [L]=SOFTLOCKUP [ 795.259106][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.269135][ T31] Call Trace: [ 795.272388][ T31] [ 795.275291][ T31] dump_stack_lvl+0x3d/0x1f0 [ 795.279862][ T31] vpanic+0x640/0x6f0 [ 795.283820][ T31] panic+0xca/0xd0 [ 795.287519][ T31] ? __pfx_panic+0x10/0x10 [ 795.291922][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 795.297874][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 795.304003][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 795.310131][ T31] ? watchdog+0xe83/0x1180 [ 795.314517][ T31] ? watchdog+0xe76/0x1180 [ 795.318904][ T31] watchdog+0xe94/0x1180 [ 795.323120][ T31] ? rcu_is_watching+0x12/0xc0 [ 795.327855][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.332502][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.337678][ T31] ? __kthread_parkme+0x19e/0x250 [ 795.342690][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.347344][ T31] kthread+0x3c5/0x780 [ 795.351408][ T31] ? __pfx_kthread+0x10/0x10 [ 795.355989][ T31] ? rcu_is_watching+0x12/0xc0 [ 795.360735][ T31] ? __pfx_kthread+0x10/0x10 [ 795.365299][ T31] ret_from_fork+0x983/0xb10 [ 795.369864][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 795.374949][ T31] ? __switch_to+0x7af/0x10d0 [ 795.379599][ T31] ? __pfx_kthread+0x10/0x10 [ 795.384160][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.388906][ T31] [ 795.392165][ T31] Kernel Offset: disabled [ 795.396468][ T31] Rebooting in 86400 seconds..