last executing test programs: 7m16.5476232s ago: executing program 32 (id=173): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x8) socket$kcm(0x10, 0xe473eebe0169f49b, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r2, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) close(r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() (async) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) (async) pipe2$watch_queue(0x0, 0x80) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 5m57.964340763s ago: executing program 0 (id=625): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20008030) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14009000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 5m56.995348911s ago: executing program 0 (id=628): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00'}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) futex(&(0x7f0000000000), 0x3, 0x1, &(0x7f0000000100), &(0x7f0000000240), 0x2) lseek(r0, 0x6, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r7, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000001840), 0x0, 0x4000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) 5m56.079266833s ago: executing program 0 (id=630): mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x9, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) unshare(0x18038080) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fgetxattr(0xffffffffffffffff, &(0x7f0000000300)=@known='user.incfs.id\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000020}, 0x4810) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="a06afdd02b26d2ac0000ff00004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 5m55.083291256s ago: executing program 0 (id=634): r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) (async, rerun: 32) shutdown(r0, 0x1) (async, rerun: 32) ppoll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)='B', 0x1}], 0x1}}], 0x1, 0x44055) (async, rerun: 64) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) (rerun: 64) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 5m55.065846559s ago: executing program 0 (id=635): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r3 = socket(0x25, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7f}}}}]}, 0x48}}, 0x0) 5m53.776786685s ago: executing program 0 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x3, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000cd4c74a2642ee5615138254a2c4e0000000000000000000000b32b00990920ae5d63007bd6e74a87bc7d01cf09be9f6b4c1d02471722e5fe6b0af8ba4d080050187eb967f568de3814ffb25b8980bcd78fd257d6be0fc72f90b90c7aae6aceedb352b16f03092e0722085c0a843808719ce594c25714adc7f0ff3c0ffee4493834175a9dfa6763a83ed7f4e08929", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES8=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00'}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r7, 0x1, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5m43.861651484s ago: executing program 3 (id=696): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_bond\x00', 0x7002}) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000cc0)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b79", 0x4d}], 0x1, 0x0, 0x0, 0x4000}, 0xa000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0x0, 0x6, 0x4}, &(0x7f0000000840)=0x98) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="65401c17dab81f710c1f34a22e3877ef7c436621f151ebb945c6fc3cafd11aeb26791de74b57a83021d5aeadaaeaa9af27cc7c3f8029549f0b1affc32aad63e9f1f5f9671ff7fa7573565019fa1472aac0b5ae256aa1b647b4ccbc0a02e8a6121fe5b42424bef9f3e25b67677770f73bfebbaae8bc279621bc527dee407dcdf2d3252bf41691fb9fb681735fea9c620996a7aec2c8715e2a6e18e2733689a967", 0xa0}, {&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed24f77c513e80ec3b5dd887c2e06e962f824f5b806e51ff73a109", 0x6a}], 0x2}, 0x2000c0d0) (async) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="65401c17dab81f710c1f34a22e3877ef7c436621f151ebb945c6fc3cafd11aeb26791de74b57a83021d5aeadaaeaa9af27cc7c3f8029549f0b1affc32aad63e9f1f5f9671ff7fa7573565019fa1472aac0b5ae256aa1b647b4ccbc0a02e8a6121fe5b42424bef9f3e25b67677770f73bfebbaae8bc279621bc527dee407dcdf2d3252bf41691fb9fb681735fea9c620996a7aec2c8715e2a6e18e2733689a967", 0xa0}, {&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed24f77c513e80ec3b5dd887c2e06e962f824f5b806e51ff73a109", 0x6a}], 0x2}, 0x2000c0d0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESDEC=r0], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000c80)={0x2, 0x1, 0x11, 0x18, 0x1e0, &(0x7f0000000880)="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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4001}], 0x1, 0x40800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4001}], 0x1, 0x40800) socket$xdp(0x2c, 0x3, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 5m43.777895422s ago: executing program 3 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC=r0, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x7fff, {0x0, 0xf6, 0x0, {0x6, 0x8, 0x9, 0xffffffffffffff81, 0x200000010001, 0x2, 0x837d, 0x7, 0x6, 0x8000, 0x8, 0x0, 0x0, 0x800, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x10d6, &(0x7f0000000480)={0x0, 0x7734, 0xa0, 0x0, 0xd6}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f000000ae80)=[{{&(0x7f0000000700)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000780)="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", 0xfd}], 0x1, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [r0, r8, 0xffffffffffffffff, r5, r6]}}], 0x28, 0x1}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000900)="088310f8cc0c2ce4350d83e39fa0638b9bcc7d83c94cc0f8478494fad17a96d0d507dec36359360d61ed3d21ae2cda87a154f7e68c8a615a4b41ccc38650933fed7a72cfb75e6f17e93838e383a2b589c8ed0a1cc4516f2858e8bb33591fbea466583eec4c1a4541364baec49ce07d9062678395e6e845cce8f6dbda22f976afd6beae", 0x83}], 0x1, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r4, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r0, r8, r6, r5]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r8, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r4, r8, 0xffffffffffffffff, r6]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r5, r9, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x168, 0x4044007}}, {{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a380)="533333ff0ace65f1f9162b249d0142291f72f3b37d6487e1f653b86ecc8eb01c3075836429055993a5d7c6d98a081e5a336ca45f81645b8b00edfe11607c253be4bb5b6a78eaa8b26b6ea2b197966e789db66548c800c083ef354d1519899f362266885633f51949833da0dc118e85903e2eb1a7661848221cc19aa1d3850cab91df64e260028d427a236db2eabb043da46af00713a81ea63e192b7fefe23c96217ebfb87b7c347909ea66198941bb9addd831a28c89faed92cfa4d706dc6966394f405d9ff60cf84a2df5e5951326ca63820fbb2d85ef0c53057de5a4a62317fdd51740ddd2e63b9fa7c9019971", 0xee}, {&(0x7f0000006200)="8cfa2910dac8789d776a4a13121db412cecddeb75990be2605e83c157c4ec4426df804777f8e8707613648a00850d83328b87c0dd812a6439852b56887aaf7e1aa4cf17b2d8ca6f54b029d2d08b9a3e5a090d68cb68bfe0b6ae4a4c2760bb5eef4499a3399b1b3c88c4164c0936c44040b9f42aed511236958f00df8402aa595c97f0e524dbc8df00817ca630ee0f41d0a08", 0x92}, {&(0x7f000000a480)="22780cffd4df63b96db9fa7f38610859a874b169d69940306c0e38c2a96a02992e1c5420c49f4728f66ac952022b5ae1486e1b8ad8b14626214e7c2bd58e9dfd01973ca49702bb125d2c3497cff555234abeedebfc5bcb0a19641d3f2469e01dd8ee11c4055811d3b3a5ff071fa543f6b09e08dab33a4c1aa419b2ab4b31b9118bf9a54cbcca07", 0x87}, {&(0x7f000000a540)="8d939ab35cdf2bdb0360d777895d6d98e1f511f86aa9ebee9604962d9915d6207661cf373ef1c64151052edefbbff2bb5e8a386ca48eb7de5640aadaab78248ea67269d82762a489fa79b225c520655ee822f45369988aabcaf4b0df6603bc8bb7f7be1da636b6087722c7bd9ba85c5a1a192ea913ace16264b7e2a1d382681461c1698911851222650a11345b88f4527556eab14cb00c13e3531a6e2fafa809c49e0a726bc21d1e51a235de29e65e19d052a93621732accacbc66ea3fcc", 0xbe}, {&(0x7f000000a600)="2ed23ca7e5201e58d7456b87c7bdee0b997930f7e266c5e15b9ee617cf48becf0d473711ffc317073c44f43a4d6ad523bebf9a22786fb9896ff33c7c07b581f2e44ed7bab4fe1dc84a23c3a671cdf30ecef039aa69d77508f8466c8ab027d11bf1b13e7d5ab63ef314e93ad3bd2dd3f68ea1ad0a242d65e81a07c74f4c", 0x7d}], 0x5, 0x0, 0x0, 0x20040004}}, {{&(0x7f000000a700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000a780), 0x0, &(0x7f000000aa80)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x108, 0x10}}, {{&(0x7f000000abc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000acc0)=[{&(0x7f000000ac40)="c52c55cc7f5305b017536d79648f45dbea20be25714a4872629e4ceb95422bcdba23018bf7c0add7d1482f326f6beb092784bba350dc6e5e0912a3f5fd45fafaa7748d40140219321b160a93f7a9", 0x4e}], 0x1, &(0x7f0000002240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2bed77b241eb99a265ca7d429c"], 0xa0, 0x200000c1}}], 0x5, 0x4051) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x18, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0xc) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$inet6(r12, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ec0)='}', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)={0xa, 0x4e22, 0x5, @mcast2, 0xf}, 0x1c, &(0x7f0000000d80), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000290000000800000006000000008000002400000000000000290000de3100000000000000000000000000ffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}], 0x3, 0x20008010) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r12, 0x0, 0x20c0800) 5m42.881028704s ago: executing program 3 (id=701): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x101, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x70, 0x58, 0x17, 0x10, 0x1066, 0x300, 0x80a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x2, 0x5, 0x4, 0xa0, 0x5, [{{0x9, 0x4, 0x12, 0x7a, 0x2, 0xff, 0x4, 0x1b, 0xfb, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x2, 0x5, 0x86}]}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0xc, 0xcf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x9, 0x5, 0x8}}]}}, {{0x9, 0x4, 0xb9, 0xaf, 0x5, 0xff, 0xfe, 0xff, 0x7f, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x25b409ca, 0xd, 0x97b4, 0xe}, {0x6, 0x24, 0x1a, 0x3}}], [{{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x3, 0x6, 0xe6, [@generic={0x58, 0xc, "c4b2faecd1fe5298051e222977aec811ff7a87c917a7a5bcebfec3c455a4668468ec5ddd93cbf098ebcbdccce74bcc78018564754d48402efcfc294a16144e21088820031b0026092a0e17ab32cb0abca8cc390c2fd8"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xfe, 0x5, 0xf9}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xee, 0x7, 0x10}}, {{0x9, 0x5, 0xd, 0xc, 0x59e, 0x6, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}]}}, {{0x9, 0x5, 0x4, 0x22a89447293cce28, 0x8, 0x1, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x11, 0x4c, {0x4c, 0x21, "8ed6913200ffeeb3d7c79ed110975ee4506768c44ca94b1b62da3a8708659821962c4e237f8492851513efc5347c9d2ada543f7da512f1c57c3403cc78e5fe3eeb096b919158830c5ff9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000100)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x2, 0xf65d}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x7, 0x401}, @ssp_cap={0x10, 0x10, 0xa, 0xf0, 0x1, 0xc2, 0x0, 0x5, [0xff00f0]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x3, 0x4, "4d1ee071", "1ed0729e"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x8, 0x79, 0x4a}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0xb, 0xd6, "a8f1a87974979131302042bbff5d9509417990d6992721d8fabe276e2a0c0ec78a1444d4eccd5e1e1e8a3eeaf3fe6f052ce4a917812d7621b6c3a46cba534d53db3a8c00df5f2fc9ad6bc7345c35fee3f4a9b81f9d3b60716e323d5d2e8b729ea03e0bfa49a857af9a0418e3dd565c82679862f70589c9c1b37f7a23319fb83a29fe8c91abb072cd8f137fc85cdadeaf4f76d2108a66245f4da7731aa85406cff2441aa994d524893469c65014c630bec5be666d18cfe537ae11ee316201db6e4b0536a4dd5ae0a23f03c4d41a66e3031c99c0cf1620"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x70}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x460, 0x2, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x35}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "1840"}, 0xfffffffffffffffc, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "1381"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x7a}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x560, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x0, 0x1, 0x11}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) sendmmsg$sock(r2, &(0x7f0000001300)=[{{&(0x7f0000000900)=@in6={0xa, 0x4e20, 0x7, @local, 0x3}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000980)="f4dd185af3865cbbd8e09d177b8f3de783469c179df726336a1d2303337e2d89dfec884b8235cb698263adb682973788b0b254fec693d8da7ecdc12e53c3be0fef7db9c05415ba975b736886b421aeb45d684c8724c84551d605f724def9b0c32b31998624d8d7408550cc05f1ab70305f0f0ee21a41ae05280f4a972b2df42ac79af923028e35677e84e0c05215772b2aff2f8d7f1a12bd8fbd13d03a69d7b7de6d6825c2b15e82c8f9405533a4", 0xae}, {&(0x7f0000000500)="36f305ba87deba803d7ee7e6d7f6b134380f1449e2171f45291eb4fb230a315e9831db9a31fceb", 0x27}, {&(0x7f0000000a40)="53c5b37e38085321ca34970b892a405692107d02e33008f6d9fdd55dc432aba38d1e823afbb797d2745baea778a278fbd7ed59670398e8db8860206b06d2590e13393152e1543d99e96a7932b233497d52cde1e9f4bd3c21872f77df8489209f0e28f1c975e5df3ec69d67", 0x6b}, {&(0x7f0000000bc0)="c77519deedc8d7f3cdd31642bbae1d8f60fc324768a028d88e0804c24ec7d1e382b569f16d0d308b880c7835744ea9500fb6f0643f53e34b076414b10d86c8afbde56e216096ba7bdc6129e1c84c9bd49653c5f80027655c8c010bfbca1f48626d18f4737a6c9b8bf9d44b28de4b1f52de19b84149937f426ea6eb38e3e7c148d151f5c163dde63b38a1b2bdac7387f526514afd00c629d3e59e884a41b7d4095d6d4895a428a8a8b716850bd6ed6ce606552ac3e9b71a23018b625f168bbb2cafe24dcb5f5c030e38a1bb3230c7175ab60340ff", 0xd4}, {&(0x7f0000000ac0)="3dcd710eb5a92605a1f081e166e14f093e5f0888034c2bfe713528cb356e57f38d0230b46a63d3f100f566278afc3a353b4b73625ad1355e124e95b0f5a39cbdb40b27c79d9f7687fd2c7777c18550246e74a6a6fce88131ef0685e9e71ff6ed1c13d38fae01ded10dfec639879cc80396a0062aa789e7049570ec3931e0", 0x7e}, {&(0x7f0000000cc0)="349db53f9c60a70f3c1c08e7a6b584cea91426d4411bf64e5992f6ee243d98cd257ff923001fd0701ee40b64b17af38e5051c02de6e810", 0x37}, {&(0x7f0000000d00)="7c22b58ea581345ba441f213f10bd5e6a35f742cf02902721da25cff47911c2ea8b16c5b071611dcd8366a58b565265b89cf6761df51170646ea3dd00bf9aa97c825c111903c1d4dea9e4a4f0d41786bfe6309f68c176ea90b40b19572800d444695e519575d5f293c", 0x69}], 0x7}}, {{&(0x7f0000000e00)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x1, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)="9ab57a6d5952cbd113b4293d9a03068d8567f2ad0cee2a5112ade2d467a392786dbbcc0a89cb26fab763540b4be0", 0x2e}, {&(0x7f0000000ec0)="ef080c6e647088ce8d13d6aed6749b13ff7803c38464fc54c820da9db56d72aa70e0270f484ab795c5fbf36502cdb4ae98ceb7018addb9700982e25d3c6c8d8ee8875f9bdea486da897d2a0e6ee7c2a562b5aa11a2221e08e700ea5c04b6828aab947edf9cd363e6a44ef7033f29d2ff19dc4aa0592b02a84cc9ddd00b9711d1443392c268ff2933c971b5f7f44cf7859ed0ed55daeabd8dc20e73e435130d7bbb5c95f28b220153758987e73b44158354b67ff24ee505c906", 0xb9}, {&(0x7f0000000f80)="f2fed919a48ed94e254736dce502169f49310e0d473a62eda692f81ea4036a91625d4a2d0ceaa3388ec022c4a1b65af20566da7f865c59d497ea65864ef95537c175c7d77f0a62ba7f6ec2b76c6e7cd3e880e775b61c7f8330e9c1ac3d02b97caabff6cc0205feedaaa35be970dcf4694bb74b44b86ea66096e512bb2c65011e0c8cb5b94408baf0326b4c40a83e1f979cd9cd359e24a4688284590ba9329251e2af03b8f4bb47a000c660b7d50d80e38004d652fac97889434e4d5675f59fb8312512e3d1ac45c7c3", 0xc9}, {&(0x7f0000001080)="2980248111feaa02dd1a1a3622dd2b1a5ccce4d39a514c3f17bbff96074746c4a4d3ea4c1ba06cc2e1e2b71ec1f384e0a58c90cdd17815217cfe4e471710f79605247758673c4de75a1df9d8b12e3ec2f353ac21dffbc7818d557ea8828cac4f7b042da7b17133a16dd3b2db81c712aac02592877ccd8ee11d2be0de7d5de256535cba2449c4c09ead8d2fe5c4dc16f75cfd0304bbf0263156c25c302d4450650e4561ca9cd95aab", 0xa8}, {&(0x7f0000001140)="51b87cb60f13ae76f86fd93db236657b958be7f7c09e01cca5b085f971864f9285172c23af95b38900088a92bc3daa9309d90a52e71e7fe068c57ec20231f77ecb04fc1a29d8afaa3651f2af463321d8c1d4fbe41351695aa186e6d4aab1", 0x5e}], 0x5, &(0x7f0000001240)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xd7e}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xf678}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0xa8}}], 0x2, 0x24000001) 5m41.382774942s ago: executing program 3 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) madvise(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0xc) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x0, 0xfffd, 0x2, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, {0x0, 0x0, 0x1}}, [@mark={0xc, 0x15, {0x35075c, 0xd4}}]}, 0xc4}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 5m41.355503143s ago: executing program 3 (id=705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x6, 0xfffffed6, 0x5, '\x00', 0x1}, 0x2, 0x200, 0x2, r1, 0x4, 0x1, 'syz1\x00', &(0x7f0000000080)=['/dev/cpu/#/msr\x00', '*$\\{\x00', ')%:+q(\x00', '\x00'], 0x1c}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f0000000000)=0x200, 0x4) 5m41.07523748s ago: executing program 3 (id=706): socket$kcm(0x23, 0x5, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 5m41.074979511s ago: executing program 33 (id=706): socket$kcm(0x23, 0x5, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 5m38.173715542s ago: executing program 34 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x3, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000cd4c74a2642ee5615138254a2c4e0000000000000000000000b32b00990920ae5d63007bd6e74a87bc7d01cf09be9f6b4c1d02471722e5fe6b0af8ba4d080050187eb967f568de3814ffb25b8980bcd78fd257d6be0fc72f90b90c7aae6aceedb352b16f03092e0722085c0a843808719ce594c25714adc7f0ff3c0ffee4493834175a9dfa6763a83ed7f4e08929", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES8=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00'}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r7, 0x1, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5m16.653856976s ago: executing program 1 (id=837): r0 = socket$netlink(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}, 0x4000, 0x4000}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0502000017040200280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5m16.01527578s ago: executing program 1 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x1000, 0x7d90000, 0x3, {0x1, @raw_data="9f4b8a009ddea168ad7f1e29aa9e89343f4f304c87fd744efcac268626520742de8ca71bb636ea99f86416b662ad513034576c35a7bd0304049f3ac0fc4fbc24334bdcdcb82fae621eb1071398929b255e242049de0af868054ac4dafa8d5cd8a94da43930cc1eaf5fe51ff51bf68510bfc419c116549b32bcd131acbed0b690108958286d3ef509bfdca6f5ffe0a19e3c35b3970e1a9ab1b2cbaca0bac7c030418e701d258cb135cba9b45325fbd0832ddae58fa0d351e093729f6f51ad54947b09a45bd949d494"}, 0x7ff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x3, 0x0, "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", 0x7, 0x0, 0x6, 0x4, 0x4, 0x40, 0x5, 0x1}}}, 0x120) socket$inet_tcp(0x2, 0x1, 0x0) 5m15.112815222s ago: executing program 1 (id=844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000000)=0x200, 0x4) 5m14.910765586s ago: executing program 1 (id=847): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x800) syz_emit_ethernet(0x7a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000400004406fefe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="14c22000907800071e0c1f0500000000000000011312a1cbd12aa50e39de3b5624a87fb75f55c800"/49], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000840)={0x0, 0x4, 0x300d}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000ff6bd4f541a1fc94c9000008000300", @ANYRES32=r4, @ANYBLOB="080005"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x194, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfff, 0x2f}}}}, [@NL80211_ATTR_IE={0x136, 0x2a, [@dsss={0x3, 0x1, 0xad}, @perr={0x84, 0xe2, {0x7f, 0xe, [{{}, @broadcast, 0x101, @void, 0x2}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x32}, {{}, @device_b, 0x2, @void, 0x13}, {{}, @device_b, 0x8001, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0x10000, @value, 0x41}, {{0x0, 0x1}, @device_a, 0xff, @value=@broadcast, 0x8}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x4}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x8}, {{}, @device_b, 0xf, @void, 0x25}, {{}, @device_b, 0xc73, @void, 0x3f}, {{}, @device_a, 0x401, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x34}, {{}, @device_a, 0x8, @void, 0x15}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x34}]}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x7, 0xba, @device_b, 0x6, 0x2b2, 0xa2b}}, @ibss={0x6, 0x2, 0x1}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x5, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x2, 0x40}}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x14, 0x8}}, @supported_rates={0x1, 0x2, [{0x24, 0x1}, {0x48}]}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x17, 0x2a, [@supported_rates, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @chsw_timing={0x68, 0x4, {0x7fff, 0x1}}, @mesh_chsw={0x76, 0x6, {0xad, 0x4, 0x25, 0x81}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x194}, 0x1, 0x0, 0x0, 0x4800}, 0x24010000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x2, 0x1, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x2, 0x1, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r8, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x1, {0xa, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) 5m14.747270633s ago: executing program 1 (id=848): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x8c41}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xffffffff, "fa02c8098000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040), 0x4) ioctl$SYNC_IOC_MERGE(r5, 0x40103e05, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, 0x0, 0x0, 0x40) sendfile(r7, r9, 0x0, 0x10ffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000300)) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) unshare(0x44000280) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) lseek(r2, 0xa, 0x4) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) 5m12.937884555s ago: executing program 1 (id=855): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x4}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000002500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000002500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) 4m57.845194722s ago: executing program 35 (id=855): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x4}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000002500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000002500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) 2m48.798399402s ago: executing program 4 (id=1649): timer_create(0x7, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}]}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b0001000000000904010001e90cbd00090503", @ANYRES16], 0x0) timer_create(0x7, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}]}) (async) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b0001000000000904010001e90cbd00090503", @ANYRES16], 0x0) (async) 2m47.415699061s ago: executing program 4 (id=1657): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r4, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc7"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 2m46.483310625s ago: executing program 4 (id=1659): connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x6, @none, 0xffff}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061044000000000009d002d00"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 2m45.675997367s ago: executing program 4 (id=1665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000600)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a30409040100fe00020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) 2m44.275299215s ago: executing program 4 (id=1672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x62, 0x6, 0xc}]}) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) (async) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readlink(0x0, &(0x7f0000000080)=""/167, 0xa7) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81b}}, './file0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000004c0)={0x3, 0x1, &(0x7f00000003c0)=""/23, &(0x7f00000005c0)=""/221, &(0x7f0000000440)=""/97, 0xf000}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0xc0242, 0x1df2a23c5997fa5f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r6}, 0x10) symlinkat(&(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000240)='./file1\x00') readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) (async) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) (async) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) 2m43.662112214s ago: executing program 4 (id=1674): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r0, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, 0x0, 0x9e89) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) sync() sync() ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m28.433902355s ago: executing program 36 (id=1674): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r0, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, 0x0, 0x9e89) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) sync() sync() ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 58.687334751s ago: executing program 7 (id=1873): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000330000005e43bb387ffa65320000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 58.418385899s ago: executing program 7 (id=1876): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000002700)={{'\x00', 0x1}, {0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x6fa}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, 0x0, 0x0}, 0x0) 55.30850329s ago: executing program 7 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500200000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800030007"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 54.456873227s ago: executing program 7 (id=1889): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000002700)={{'\x00', 0x1}, {0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x6fa}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, 0x0, 0x0}, 0x0) 51.248671406s ago: executing program 7 (id=1897): r0 = syz_io_uring_setup(0x4de1, &(0x7f0000000440)={0x0, 0x59c9, 0x8000, 0x0, 0x17b}, &(0x7f0000000040), &(0x7f00000004c0)) r1 = syz_io_uring_setup(0x27b, &(0x7f0000000580)={0x0, 0x3bce, 0x10000, 0x3fffff, 0x20000296, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_TIMEOUT={0xb, 0x22, 0x0, 0x0, 0x6, &(0x7f0000000300), 0x1, 0x4}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="d4bc1424afe5d56771ce36658f58a8c73626a28fe64caa154647810f758dd0265f74236cf89ce1f44dd75692de0930c8651b201a31ab80b3ac81aef5de499f484208099b16f3bc76f08449683e60e877dea97b96d0e14411e99447ee6297047c539ff4f62c64eb671039ea34c29a4616696a8b65a8227b9b52fe32292667fa6776b4c74a7a7dd67a2159434109baeed92a21abcbce03dbcacdcf4cf1b0653b40", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x13) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000400)) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x50d}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r8, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000340)='./file0\x00', 0xc000, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=0x368, 0x4) r9 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(r9, 0x0, 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi5\x00', 0x841c1, 0x0) 48.162427201s ago: executing program 7 (id=1903): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000ef10217d6569908000300", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) 32.961666416s ago: executing program 37 (id=1903): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000ef10217d6569908000300", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) 11.04640248s ago: executing program 6 (id=1970): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000002700)={{'\x00', 0x1}, {0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000ee060000010000000ce1060000e0ea3d5d7cd8a885f0a3d505068fe31511411e4f28af3d40675df906d1630e8eff9388b3044160e32475ddc156e8f59fdcda14d1deda2a01d2361fd552576a07490c4aef863463b95f6298caef2a64f5c2ff1718d4bc95e5991149fd2d16a8e388972766a1ac86342afb984d76d7f1401201efd04193286fb9a98554d3d83dea34d414be08fefce30b62327d814d64639fe7568b7d4a58fab5e91404497de7906616a7a5084387473125584edc101fd55e79fd23f9cfafa6f66ea4753f37ffcbdc2a076a857ea797a12818681307085921d6ee3b50eba435c0cf77f537126162d0f44ca2d685f80c3b82e32c3b9de38dc09392ac3daffcf73908678cd0e6e72c39cfd585b0bd3a2c630d17237d92a4050cb1fa08e20236b7722f014e9c36c506305cd80813fb747637301c54a82a6730cdeac3ed849f1685a643e782efd47f822b8cc7f69e951fba0e89920442ed430513432771237e5e1bfda927ac942c3e9b820d1b91070a6f404ba1884f0873efb43a88c9443e8753feb34808b02d3c050e314a8dd62cb601441119d2af1ec65aad90a4c926d2736790662fdbdfa91282fe64c786d4b20c3a257cd7f09c198d496fce0b17817d36a14a55338c6d9a6b7d4484fb38f583e91704547b2174075813df9ccce7439c665d28bbb84204a3254d007a5f8e98fbb7239e372022260a75a14d534da2b5dc54459704eecdccdeb31a315b6ce9d8fe92bddedd3208c4c01703d149cbc995982fdb54f27aa10c5557073de8227e46bb7ffda2b85360bb5f230216f792ae5c9c8411c208016ee917f6dc3b51a6faabe1455fbe91b26d953b4e72976215ca2472773ea5abb15e970ad2d159165461779ad2bb9f825ba22d7df83bcd9a1596cf95496a5265c07f4aa5f0688e90149d9b2319b155d0e968de0285a60c573e957d5d6019baa373b19d7d29b38671d62b6455c44dd5f48d04cb090e0745fd7bdf5b9148f2d436c6d51eb3c171d106f572b92e036acb45ee8002448cab904674cc7a89ac58d1add9cff44d454248b4b08af0419849688bee35c4510889ece8d1eb0be353b2d8884c246ca4f1050864faf2abf8649c77bc5d3ca9ddfe8978ab588fe2a8ae38b34d81a847fbbfe2e0fb51354f143fc67d7d0ae2b4145db12814d65dcf3160b5be72304998cdc086d20b443584e195914d44ec2daa86fa839ccee452375ade3c99c7f83e3e7c237aac66379a7be2ada3a1b3c2d4dc2aafd7dd0a105d437ad18a2ecf84aa3f6343fe6b29731ea9cb0ac0a283811528740d2036785301213b3a9f5898b86c57b38207d1991e3433137d1b27443677f48bc12ec7c999484ee2b3df4a7e1b3998f748a98953190de66500893d75bf16dd91a275ac5ad03ab14081021d134e9eae3e4a9adddbd44bf8308af06aeb8088eebba8f2d3ed7ed75d63a829b09867cdded6d407edb36ea69e181e792eb078e83dfaed61d4147c7c6fe199aef2ab48cad7145b420e74e44d13ccbfb38c2f6ef6afa00f9f7eace394d2b571678235c00e86d9615d2c88a26f598655feedde9457530d6f0ed91fadfa12d9272c953b11b90c5da02cde08b8bd51ca17bc1acbcfbcfe557ff4c4772fcc32aabe02951c54cf2a3431ecc000895719c3777443812f3f09626559f6fed8cfbb2dddccc9a4f16a2c1e504872dc72ffe3669af8300a064da8a526196ae66443a7aa5223c6d9a3cd82c75c1b441c2b11e2219e5362a62149b7913215449fe9e9a230d053eefef509bccef93006c1f76c5ecbf2d6d2077c2da133e557f11b7052a9594a4594dd9d1d06176f2e64aa18e22c21b17e1d3e9c32d6ecde1a046892ca38e60bf2b0f586969bff6cbf67ca8735ab734b65f4e02b4b"], 0x6fa}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, 0x0, 0x0}, 0x0) 7.570989848s ago: executing program 6 (id=1980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000010006010800000000000000c7e686471800ef80e2053c8147ec4597c524a3cb1000000914000780080011400000000005001500000a10000005000100070000000500040000000000090002000000eb8f017e7419ccbafedd7c0ff8790c5949b3"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0286429, &(0x7f0000000580)={0x0, 0x8, &(0x7f0000000300)=[0x3ff, 0x4, 0x3af, 0x7, 0x4, 0x8, 0x4, 0xa], &(0x7f00000004c0), 0x66, 0x6, 0x100, &(0x7f0000000500)=[0x1, 0x3, 0x1d, 0x4, 0xe0c6, 0x7], &(0x7f0000000540)=[0x7ff, 0xa]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x44}}, 0x0) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0xef, 0xb0}}]}}]}}, 0x0) 7.222765327s ago: executing program 8 (id=1984): socket$packet(0x11, 0x3, 0x300) (async) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x3, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@gettaction={0x118, 0x32, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x96c0}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1006, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800100, 0x4, 0x22, 0x200e1d9, 0x1101, 0x98}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRES32=r6, @ANYBLOB="c300a6000a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000010104000000000000000002000000b2d2587d12e53a1e53635320f891ef3d10bf83f1923ff43ae6fc33ed7a41dcaf7d5705ab459080e459f858d876ff294f93e8923defacdc5f3bc17304597eb4c42ccbe9c950f94f749b60ec60ea948022a3c7260217c0d7235980d7286d00000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x20000000) (async) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280), 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 6.667344856s ago: executing program 8 (id=1987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000030360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 6.415153802s ago: executing program 5 (id=1988): r0 = socket(0x10, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1c, 0x7, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400240}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x84, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r14}, &(0x7f00000006c0), &(0x7f0000000700)=r13}, 0x20) sendmsg$inet(r12, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffc, 0x9}}) 5.929629449s ago: executing program 2 (id=1989): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20008030) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 5.275186776s ago: executing program 2 (id=1990): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES64=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x4}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000180)=0x3e180000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r9}, 0x60) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010676ca2386712ff21f277db40005fba0000142e2b19000000c4e400", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="e5cf23f98bbd5eabbbf7df5443b33da57241073f0c3be3b72ff425e788d134b6555374756f569e38374ca8a43492df9dbc99049ce5fed9bb0ad26aa126f329a2ae45875d279a86deda320d2e23f15f786527f372668e1b24680dedaf8b0b312a798e01ececfd8d38fb70dc7785355048a89b8626b4b062d4e1f9ca4f92ec08a19415d68913baa0bf377b096fd0b51b9c20849727489052db189566b2fe3cfd89665898c3583360a62b72b8013ca2370bc5418ecfc92f3cbe70c79cf153d1cd5b28bb5b970a0a037db740c72daa03aaea0ea88fb47b56937a2e103c77c2fd64f57097f40bacf7689f57dff1"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1000a}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r14, 0x4, r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 5.067293798s ago: executing program 2 (id=1991): open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fdatasync(r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0xa, @vbi={0x7, 0x5, 0xffffffff, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x2], 0x1}}) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1f, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x4}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7154f8dea281000000558e06a51800000000ff0000000000b9f671392c3349e831d0a39e80638be333fc26d4ff628ed8f8957221a45532942491723ce2e4e57f"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1e}, 0x94) r9 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 4.72514788s ago: executing program 9 (id=1992): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c00128009000100626f6e6400000000c38dcb640c00028005000100"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x43, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 4.656566235s ago: executing program 5 (id=1993): set_mempolicy(0x6, &(0x7f0000000040)=0x2003c, 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc4, 0xe4, 0x7, 0x40, 0x14aa, 0x22b, 0x5619, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x0, 0xb1, 0x94, 0xd9}}]}}]}}, 0x0) 3.955677213s ago: executing program 6 (id=1994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x2000000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 3.895182919s ago: executing program 9 (id=1995): pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/94, 0x5e, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x8, 0x8}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.894715567s ago: executing program 6 (id=1996): socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() setitimer(0x2, &(0x7f0000000000)={{0x0, 0xea60}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000fff009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.267457443s ago: executing program 6 (id=1997): r0 = syz_io_uring_setup(0x27b, &(0x7f0000000580)={0x0, 0x3bce, 0x10000, 0x3fffff, 0x20000296}, 0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000600)=@IORING_OP_TIMEOUT={0xb, 0x22, 0x0, 0x0, 0x6, &(0x7f0000000300), 0x1, 0x4}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRES32, @ANYRES8, @ANYBLOB="d4bc1424afe5d56771ce36658f58a8c73626a28fe64caa154647810f758dd0265f74236cf89ce1f44dd75692de0930c8651b201a31ab80b3ac81aef5de499f484208099b16f3bc76f08449683e60e877dea97b96d0e14411e99447ee6297047c539ff4f62c64eb671039ea34c29a4616696a8b65a8227b9b52fe32292667fa6776b4c74a7a7dd67a2159434109baeed92a21abcbce03dbcacdcf4cf1b0653b40", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x13) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000400)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x50d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r6, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000340)='./file0\x00', 0xc000, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000200)=0x368, 0x4) r7 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(r7, 0x0, 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi5\x00', 0x841c1, 0x0) 3.232367535s ago: executing program 9 (id=1998): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local}, &(0x7f0000000400)=0xc) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x5, 0xa, 0x4, 0x10, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xc0}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x8b, &(0x7f0000000340)=""/139, 0x40f00, 0x50, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x9, 0x81}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x3, 0x1, 0x10, 0x8}], 0x10, 0xd42b}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000005c0)={0x1, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0xe4b, 0x1, 0x704d, 0x1, 0x3, 0x5, 0x2, 0x7db, 0x6, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfb, 0x4a, 0x7, 0x9, 0x2ca, 0x8, 0x76, 0x8, 0x2, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0x4000000b, 0x4, 0x6, 0x6, 0x7f, 0x9, 0x1, 0x8, 0x4, 0x2284919, 0x4, 0x9, 0xfffeffff, 0x7, 0x800, 0x2, 0x9, 0x6, 0xfffffffe, 0x6], [0xfffffecf, 0x7fffffff, 0xffff, 0x7, 0x1e62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x7, 0x1934, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x1, 0x20000004, 0x4, 0x8, 0x40, 0xc14, 0x80000081, 0x3, 0x3, 0x7, 0x7, 0x1, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xffc, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x100006c], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x2, 0xc, 0xfffff062, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff2, 0xffffffc0, 0xff, 0x4, 0x8, 0xe6c2, 0xe7, 0x200, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x8, 0x81, 0x9, 0x2000002, 0x400000, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x8, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x80000000, 0xf258, 0x2, 0x201, 0xfff, 0x3, 0x0, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1000001, 0x80000001, 0x8, 0x17ce, 0x0, 0x3, 0x6fa, 0xe, 0x7, 0x13b, 0x7, 0x8, 0xb757, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.079206348s ago: executing program 2 (id=1999): unshare(0x4a020400) unshare(0x600) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = gettid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r5, 0x7) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)='N', 0x1) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) unshare(0x4a020400) (async) unshare(0x600) (async) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) (async) pipe(&(0x7f00000002c0)) (async) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) (async) gettid() (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) (async) rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) (async) tkill(r5, 0x7) (async) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) (async) write$binfmt_misc(r3, &(0x7f0000000140)='N', 0x1) (async) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) 3.049271808s ago: executing program 9 (id=2000): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1d3c53919751732e4a0c46f5fa0e9db3c9222f5e004ca7edfb70a414d948f1d96bf15c3a61b8e99309692ca53aeee6a356d8688cce03b41a0ab9734f0113fb4e3f8232"], 0x18, 0x81}, 0x4c800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x11}) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000180)={0x51, 0xfffe, 0x0, {0x7}, {0x0, 0xffff}, @cond=[{0x9, 0x0, 0xc6c, 0x7, 0xfde9, 0x7}, {0xfffb, 0x95, 0x2, 0x0, 0xc, 0x2}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x804) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.797641042s ago: executing program 2 (id=2001): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x1000, &(0x7f0000000280)="143c249b7278e15e4a6d796c690f677f0b97efde794ccf0106375f63446d509a4a14944982f601f37804f71e34fd4ca23d6801bf669e8a029e019ea2a917848d383aa483858f548b6145739370d7626618c57dac5e03aa000f9fc82be9b3c1d5a3078edb97a5caa227aacf0d11d7bb37d0601047ea0bca98276134e7e9fe3685b9c22dc0", 0x84, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000500)="c4a37700e08b4267ff4bb70d1074895b876b38f7d60b7cfb1e67d2619fb650768b92568d21157b5332dc10e467fba5de86e77a8e3b85b54a4807f52a3cbbc1e2cb1404773bf151948f7875adec5dde8f41e9d702844b65ed647dec5c76e7ea71e6963ad63723016044402a13af2ec294bd086352f038f02f2bbb918981994356496f800415fcabb7c631dcb0fb301daab9ac4059c430cc720b3d36ddc24f9acf338ffea313537904833db71b6fe365c5e5f182d8a07b69c5707728d6482bca8008ab780dccdfe8ebc6a33ddbfa84548903859bde12d0cf033876c9fa1687d217538f1f0a628a1ee5221accf520d8e5cd53f76079ba4d03c2d0") (async) r0 = syz_clone(0x1000, &(0x7f0000000280)="143c249b7278e15e4a6d796c690f677f0b97efde794ccf0106375f63446d509a4a14944982f601f37804f71e34fd4ca23d6801bf669e8a029e019ea2a917848d383aa483858f548b6145739370d7626618c57dac5e03aa000f9fc82be9b3c1d5a3078edb97a5caa227aacf0d11d7bb37d0601047ea0bca98276134e7e9fe3685b9c22dc0", 0x84, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000500)="c4a37700e08b4267ff4bb70d1074895b876b38f7d60b7cfb1e67d2619fb650768b92568d21157b5332dc10e467fba5de86e77a8e3b85b54a4807f52a3cbbc1e2cb1404773bf151948f7875adec5dde8f41e9d702844b65ed647dec5c76e7ea71e6963ad63723016044402a13af2ec294bd086352f038f02f2bbb918981994356496f800415fcabb7c631dcb0fb301daab9ac4059c430cc720b3d36ddc24f9acf338ffea313537904833db71b6fe365c5e5f182d8a07b69c5707728d6482bca8008ab780dccdfe8ebc6a33ddbfa84548903859bde12d0cf033876c9fa1687d217538f1f0a628a1ee5221accf520d8e5cd53f76079ba4d03c2d0") prlimit64(r0, 0x1, &(0x7f0000000380)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_open_procfs(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffffffffff7, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x2cad) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2}, {0x0, 0xffe0}}}, 0x24}}, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x33, 0x0, 0x0, 0xcaf5, 0xffffffffffffb02d, 0x8}) 2.702978291s ago: executing program 5 (id=2002): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000040)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80000) getsockname$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) r2 = syz_open_dev$vivid(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000280)={0x2, "672afb6b320808ac7301bee680fd934bafeae9ac20e886e3b773c3ef453a6b1f"}) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000540)=""/15, 0xf}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x40000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x301100, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f00000006c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, 0xff, 0xffffffff, 'bond_slave_0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x5c, 0x0, 0x21}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @multicast2, 0xffffff00, 0xff000000, 'bridge_slave_1\x00', 'syz_tun\x00', {0xff}, {}, 0x84, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x4, 0x4, 0x5, 0x6, 0x5], 0x3, 0x4}, {0x0, [0x4, 0x0, 0x1, 0x5], 0x6}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x8, "8f81", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x7, 0x0, 0x7, 0x4, 0x6], 0x0, 0x2}, {0x3, [0x6, 0x4, 0x2, 0x1, 0x0, 0x4], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000002b40)=""/168) r5 = accept$netrom(r4, &(0x7f0000002c00)={{0x3, @netrom}, [@rose, @remote, @default, @remote, @netrom, @rose, @bcast, @default]}, &(0x7f0000002c80)=0x48) pwritev(r5, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)="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", 0x1000}], 0x1, 0x4, 0x10000) utime(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x5446, 0xffffffff}) setxattr$security_capability(&(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0), &(0x7f0000003e00)=@v3={0x3000000, [{0x1e86, 0x7e79}, {0x3, 0x2}], r3}, 0x18, 0x5) lgetxattr(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003e80)=@known='trusted.overlay.upper\x00', &(0x7f0000003ec0)=""/4, 0x4) r6 = syz_open_dev$MSR(&(0x7f0000003f00), 0x2, 0x0) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000003f40)=""/2) r7 = getuid() mount$nfs(&(0x7f0000003f80)='\xbb#\x00', &(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000), 0x20, &(0x7f0000004040)={[{'bond_slave_0\x00'}, {'@!@-'}, {'('}, {}], [{@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r7}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, 'security.capability\x00'}}, {@flag='dirsync'}]}) r8 = syz_io_uring_setup(0x58b, &(0x7f00000040c0)={0x0, 0xe534, 0x1, 0x2, 0x1d2, 0x0, r4}, &(0x7f0000004140), &(0x7f0000004180)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f00000041c0)=[r2], 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000004200)='REJECT\x00', &(0x7f0000004240)='./file0\x00', 0xffffffffffffff9c) close(r6) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000004280)=0x2) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000042c0)) r9 = openat$cgroup_devices(r4, &(0x7f0000004300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000004340)={'b', ' *:* ', 'rwm\x00'}, 0xa) fcntl$getownex(r8, 0x10, &(0x7f0000004380)) mount(&(0x7f00000043c0)=@nullb, &(0x7f0000004400)='./file0\x00', &(0x7f0000004440)='securityfs\x00', 0x2000000, &(0x7f0000004480)='\x00') 2.687976092s ago: executing program 8 (id=2003): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x6, 0x101000) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) setresuid(0xee00, 0xee00, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x88, 0x8d, 0x22, 0x8, 0x64b, 0x7825, 0x1a98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x6, 0x40, 0x56, [{{0x9, 0x4, 0x91, 0xa, 0x0, 0xe1, 0x2f, 0xed, 0x6}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 2.585798293s ago: executing program 5 (id=2004): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xa, 0x8, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x7, 0x101, 0x1c, 0x0, 0x0, 0x0, 0x2, {0x200, 0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x78}}, 0x20004080) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000440)=""/164, 0xa4}], 0x2) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d3, &(0x7f0000000000)) 1.634921264s ago: executing program 5 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffeea, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.627576652s ago: executing program 6 (id=2006): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"', @ANYRES32=r0, @ANYRES32=r0], 0x0}, 0x0) fcntl$getown(r1, 0x9) 1.555182315s ago: executing program 5 (id=2007): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e2793b10d10501200036a85128010902120001000010000904"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000006c0)=[{0x84, 0x77, 0xd3, 0x0, @tick=0xffffffff, {0x0, 0x10}, {}, @raw32}], 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = eventfd2(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) r6 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0xa0000000}) shutdown(r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x323, @time={0x400, 0x6}, 0x0, {}, 0x1, 0x0, 0x1}) r7 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f0000000480)={[0x6]}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x184, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0xf, 0x6, 0x0, 0x0, @str='\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00'}]}, @nested={0xbb, 0x2, 0x0, 0x1, [@generic="5836ddcc9742e5be936cdcc2496cedb7d966ab3efd66527ff76833fea3ad5fab7da38bd2da45e3f57da414551190702f7b1ea5a86dcaa031cf47b2df708b1d2701a376837f181a84a96034a5e65ef1677453306ed7bf2ac24ef0b8898b4ea6442b42f56a308fd4c153cb34800d920f5dba1b76afeeeff70c64b9daf4865e8fe7f7f4e761d4c697a9ea12d984da0be4a80c1837c35caae5f03bee9e3eff9787a01b5c6c838e7520b2a7ea02ac57b771c8aeb97ccb111183"]}, @generic="cfee7231e08f46c69ee411134b8d332b8e654ab7f75c44202b8716410e3720e0fa040a7d75e37d8a4da06f46ff4b254e19e5afaec0516d06578e520262650ef53d01397e6c6eab81dde16bad7b421855d3056eea5d67bd38f19581c449834826d0ddf73a51b2dbc7f5680fe9b62e44d7f29d3dc514dbffc65888d5076ce02854a5636d31044e857fcf0c9d0c4c5334a56406f71342c6ed64ff77"]}, 0x184}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 919.232293ms ago: executing program 9 (id=2008): socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() setitimer(0x2, &(0x7f0000000000)={{0x0, 0xea60}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd000001800000000000000000000000080ff009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 337.689941ms ago: executing program 2 (id=2009): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000480), 0x1000000, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@default_permissions}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000440)='./file1\x00', 0x0, 0x73) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 327.007014ms ago: executing program 9 (id=2010): open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) fdatasync(r2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="7154f8dea275152ca3558e06a51800000000010000000000b9f671392c3349e831d0a39e80638be333"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x0, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5785}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc26}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r11, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) io_uring_enter(r5, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 267.107147ms ago: executing program 8 (id=2011): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000400)="6bfb015290d7487cf6ee8cc1fdfcc6dd7d35db31785f2e3258307060ac593526bffa91a1bd26bbe1347226ab8695398008ba96c961745367672d0f7ba4a976130e05679eac4639fae9e846d3f09f3610fa7bb41f85fa07e942b0776e84069a86fdbe4d190284514d85f784da50a18cf6e839887e80293b1f7d5e213ff6747ad4f163228d96807ea4d8e41e081fbf9596c0e598ecba4402fcfaac8ca996209c5efa669a4d4aa50bd423ec5906a1c2c449cd5402919c6dc0c3b949d922f9", 0xbd}, {&(0x7f0000000900)="9bb7b692f493a782d420472c02836b2f1db1955a827a031a9535b40a7ddfcd4d9fbf0443bdd4aa17e01cf9d5bc162ffeb1585fb43f60fc84d4191cda3a385a340c59c24797816463e0a30244e00ceedcf88ce60b7cd26e9de000a6d17fe6ae6c45078b214fe85e0bd0d66ee422f9ae84e02b4e246cea71b07cf3292ad9de14614773f90232bcb726f158ce5408b19fbdae2ae6db60617bc75888f9c9e0d8b12d06014ddf5591bb6456981696223c46b3d4c2d0a59e21426fea56609ec532d674c2d3211ab6741c95ccdf23f84c6daecf870a9b93fb30aefba2c9596bb91581e09506ee1a01d1d353949a5f78fdc3b0f2ae66a127b261bbd7497f15e045bf858756b2d9198df701c472e794b4ac4b02a2a323c1c1a2af222b0b74a57ea9cdbda79ef6b187aec1b57ae2a92266d30d27ad94992315549c363b9c71283d7d917adcbbc24d9e03b00558334fec658a954d015e74ae80fa946a2868cc0c3b2ca4b838ecbe81", 0x163}, {&(0x7f0000000100)="f99f3a53f69ebbd26d8acf9617f4bf9788216379634104759e64468aa633a1efba699a5ec2b9aee31a38a7c22139a108ecfde365745b760ab643ed28c332f9f092425358ec7da791ad1b3a47df280077b7", 0x51}, {&(0x7f0000000580)="0950cfb6b63444a5b385fce3b1869d19898a5252f180f7ef5fe980baad7372b60e242764ffffffffa4f4e059c04e08cbdaf21862717c11b8328f728a14a21ad2c15c79cec4851447cc72c5dc3fb514f84bbfef2b9b78d7ac396b761acb4356d9272ef3197fa470f547d4f9f6b3e6907aeb4f1bf5031a93d01fb6f5eb2c388ee255f3d4d6c3d4e499f7bc0ff2a37cfadfd520109eba60e6b842c28531b1dfcceebfec67c1a992798c6e0bb8af7c7690a9dd72b6e549f7c6", 0xb7}, {&(0x7f0000002e00)="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", 0x108d}, {&(0x7f0000000740)="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", 0x196}, {&(0x7f0000000640)="201c85462e52a30cc3d0a9180c5ea5c9e09a42a05f1722a08481c3262531ded7a0a50889ea88777b528e3a96c33d16da25a8068a5dc25a827bef9dc1af8760c590203d51d8936be2d600eed1bd9cc6a8d626edad4b8c53ebbfdbcb5122376dfc8f31aa2c48b2f3d20d68b2341d620e893e0cbfd7c06db6bc67baea65abdeeaf11dedaeb362ecbecbba54b08edd12228875e6fd03e05db0a88a9d9c1029f8dfd80ea80bbd10bca315e868708ede89873cf316db56b182b110439382f0539c9f8193a54982959aadf94409e78dea1b19f92d3b34fa6acadd0f0c1bc4d18dfdf0059ff39ac110ff923726d6ed281c06b90f7c7816afffb8b088", 0xf8}, {&(0x7f00000004c0)="e34609b9e05edd61e327115d3b757e40e8307ad32df4c2e5dfb2e86824ec58d797330d2f781d7534a1195cdad39232e8644ed8929aaee9241e693048fc02a84114b05034179f978f9b3f490d5c241e135f83513682f19b95e3f153a82d02117953c51efb4551a3e4944b423dda", 0x6d}, {&(0x7f0000000a80)="4534cb5ad3d09d5858c0e2d60826aa9fedd18e8b4c07d0869b9382ba54c017c04298fbca507bb33aaf12d69a3ec64ebfd8f6a91e5eb41a9f36f09fdf1b8b6773f659dc1272eafbcfd35b5a12dfe7ba824f5b1eeba25fd36a36d786c24b3a32d43ee006c65a0d2f4687e3394f8973a182862d9191aeabde32c4112b23fa0daf43adffeb4716dccb34d5e84c09d24ffade2f", 0x91}, {&(0x7f0000000280)="08c055236456447c0c852e54547e65b9b614495f215d71eea93523e222f01c3e6f6f05faba10e3c77de770077ef67c48cd7bc9ee11f70a", 0x37}, {&(0x7f0000000b40)="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", 0xfd}], 0xb}, 0x20001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d00)={0x6, &(0x7f0000000540)=[{0x1, 0x1, 0x10, 0x7e2c5526}, {0x634, 0x10, 0x0, 0x4}, {0xd, 0x3, 0x9, 0x3}, {0x7, 0xe, 0xf, 0x9}, {0x92c, 0x1, 0x12, 0x2000009}, {0x9, 0x7, 0x9, 0x4}]}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) write$vga_arbiter(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d001190a8e80083db5a4280c2fe5eb3f5eb734a1a5d91f0911ae8dc8fbfebb7bcd5048d4d592a100859268158c969"], 0xc) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x8, 0x8401, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00') preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x7000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) 144.069144ms ago: executing program 8 (id=2012): mkdir(&(0x7f0000000380)='./file0\x00', 0x21) (async) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030002"], 0x88800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000020c0), 0x8081) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0xb0000001}) (async) r6 = accept4(r3, 0x0, 0x0, 0x80000) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r8, 0xf517, 0x0) (async) r9 = dup(r6) accept4(r9, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='xen_mmu_pmd_clear\x00', r9, 0x0, 0x400}, 0x18) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$9p_fd(0x0, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0x20000, 0x0) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) write$UHID_INPUT(r10, &(0x7f00000007c0)={0x8, {"90e7f40712c37a1c949ab79b93d5c85eb4e7d160c568ae19c8c6c82eb9f4ded95f026927c7193e7bcb50502d962e0f25054aeefe61d2270a365389b91b1bff1b6d8e00856482e596b343a28471c818a633e1182cb7b8549f1d525a0ddf332eb22055524e555ffa46e7b3593245d5ad0b0fcf48d7a156020c471fab3790f53f7b3a0f2a95447db3a5156ced97abf5c13856aa1aa145c95f0fcd81b1328d0ea98b098b639a843215727069ddb419c807d3373863161dfd4916c8230330d33f3ef33bd5e2f21529cd1fa2540681bf3e0385830a2c7082de10868736a24771c338ff8a8f8739c4dad7e52ee9395e1a6541a0813bf6733075bccfacc37f17a103f2ff7607a402126160f87f90e2cd71ec8177f65031aea462c4d290e88e9c3c6ebf42f8e4f413d2eb9640963d81e71044d385d8d42320aad5ed197ce5d3267433efd59fed0f9feed4019e28f78b7d709be9721fdb48dd813d5815919fec4a7fdd0a4aa0a81032f98e18862ecc662e0f23773efa06b3986a80ba9db5858d43e26889caa40f8b3aa2640e32366ca1508eab6c750cd1b7db4538c9a46a650344c3e1cc8648513982642ee3b48edd093bf856de2bb44fed039402f476f9662880870d85d64a9425edcf60b8762cb4c2fee0980abf9f4b97e26890b109fef704bc53a57381c3f83eff792395b8b655b2c19cca9ec374ae08305e2cbc714842a1a4c8a3d420be7fc5dcb4f0bc0e5bb27d9712211996777febe812b186acac4ef684e11ebe54c6fb34f02083f8818ad0bb3839ea416a2b2e395f82b9d09b11e1cc846a7bf9a3d3f13f043ddb5f7aa224a2d78e565a8010e2ea03ff7a5aea7c01681fc648c47a5a13e25ba1fb5aedb0483a8020473bbe327208d59aa7a8e14cf7fa2023eefdd640642e7ab1a9fc85ed05b32472f28e8e15930eec0cca6e4586bf26bc6b8dc7da040c571b5e2bcf7de80dea740ddc88ff67617ef13ab8cd0106e9ebe86f2709fe81069e42628e48db2952996d56351895a6936cc743d16c0095d8eb52f3201444cecae1db601b35c676ec8fb0b214ddca2bde9a84c8d832633967883fd04556a84fd7488d63749e2dda26f6bb6ccf770c592195e2d9fd0685315ee351d75115546b5a720112e0d12901b2cfb6c3e4a4425ff36cb6ce310980b72c182cfb72eaccf9b268fe39599efe854b40e7eaab1c7bdfca647079faaa0b3e223c44da8055d087b4e5fc646073da7a5ecfda0b48bfbacb8cc287bd65ceead53ee476efdf8933a32686dbc030e83e1ecddf0b64f674d5aa6484d8509fc2786bc02b285761c72d7c2432fcc00d69973d123d96585400e7b64dead859b740601cd4576952172729a878937780523efccd6d18fa0ce6650305349e08c31c2cfe61b7967cd5df00bda531cd0f2c5204a26d37287afe6096201686a6271429c0a02c7a3052927e9a261c6560feb2ac8cc14043a38196ae710af73ddadd8f57ea979302a77ec9f2a6c1a17f0e654291743339f45cc3eae110b5a0033ddb91c4ead021056f235b3666673b9ef2e5d963e9bfd669eeb4f69a355e7b01e3c62af6cae74127ef098abeccdafaa4a61961350805bebcba4f65f316cd50739df8aeeb0d1f2871e3b0f9ca9d86b6ff7ce20ab5e659bb90771e613149b562dd85089490cbfa20eb5149865e9948c7ea68c2b3af19659c0e97b97fb1e1d810672732771bf8e699a53103de1ccf5afb98a88bd4b3a4f0a9565477b18dd6599bb04d2d1f28348af3c78d3be909bda66833af4fb2bfa2190315db086e646e1550b41dd9da9b978a6293f39307c63b9b2c6da10453e3a6a8ad17ee3d2e1a7e02879a569ab680ad93aa2b2c12a89fadf21195803d6bd83214ea2c6ffdb3e1874c550d465237af91090c254650e4fe26df7f82df9df6c78b61bcb0b6213739009145d522bbbe0cc623275ea9bef94d438436c38e463bc923a50d37e25bd802cb25fb9087801668bb3a63a10e92a07b488228c374b0d97f150ed2f828a6959d0cfc7922b54a1413369e86d3bd72914bfd4368cbdbbf62338f504561d23cf4a2d978122b5be1bc5eba5888d952713ad582698df5648c92ebf5724568803d4b9ed69ae6bd2065f1a39e7a2f8ecc43573bc1797f218c0e5d07675358d2d2f2315edf680aec0cffef75380dd92f3d336a3691eb3a83b1dee74332d49c9f2a4be807adf1e81746fbbc9344c27c048041555543267a1a12d6edf57c7b00c32638f90ea3b227b09e435a97d693cc80a845ddb49f2d7e231d72a43c51fe41349f45b17a1e3c6526aaf3c6b768b8dbec0348a0d25f1cf7a6d3d5674acd0766cae03f6d6a583ac111a11e9d2661b6a8b5b6ac4d7fc36ca40af6c9118a9bf52ec065f874b130e985659f0674c44f3614411b83ddfb05489a6b088faefed20c087487b30dc6aa78454b9106b52d1ad077346a5dfac07dd41db945bc17c56378144328b86551a2d3dd2aee12789f0a1ee429197907e8248c9963a02a1bd8fc590aa6ad2d74a0f02456042a219f2902873eaa1b5950cba6a65273aec0af09dbd51b71e9bce54c0ea25262b629fadf2acb7acea30967b762a98a90a21aae6084ee19d17c32ce2cafdfd7c84831fe228070428eff1042b6b50be5d6005003fcb1daa8a88917aa4bcaf0e19cfcf70d3cc6b49234c8a70bec154baa072bfdd76d5f15cfca2a32621fd5e6b74d408a5615de783393dd88de1b5d69d0414e0cf6d03a4ce318b26a8dd5cc197aeb5d2d78a394a71a751149f79b90b06b650295ce00250ce7ca6353bcde8d4b1dbd26c69b7521f96bb1338101504be03cd491cdcfd8d227085a90435fc5e67864a4395c24d200c71a23d5c833aed4cb9752dbc7928daedd160ccfae1714e59daf4faeb43e5277822dc7193e7972e459ef31c38c542e7a47e811e610fc2a44b9d2ae546b1e696163ae6ee3239168b69b98b6ef4814ef526f33fa0befa73e524966abf694bd4ddab37ce514d36d90a52e0164d6a6396575d8431581306f221ec0f7f2d6efc53b0a8b09e6dbf34d3b360473937be43b40116353bc80b0aeb9defd62f002e7901b30db1a500b8088a6465001c9242e7fd390df3c5acbd69781ce841a6e85a9a4cd6307cd8c5d8f1e2d024a3c975e0269caa2d6dcbabbc2c315d7f6d61558c84d36b800f9ea1204261cfa85f1f1938e11697d88c44bf1a0ec598b0df1ddf22ff3318f7adcbe06ddc223328b835a6e4be7c0c72f877f1c4a7963975a303659508be1c3c21f3290adaa1c5d7f09b7df5cb2115e7ff6b57b260523eb29a4813879b96efff27c536fe1d179fe6172176a6c3081e276a6d6264975343b93c686c867e81e0d37984c7313d7cbcbecac06d5126cb9a6e5592a1389745db5fc332b8576d03bedb4825f6fd1fc15c97133a6b285f8a01026fcf2a2c03f5bde886729bc75c4650b8b32f6c5e7681162698e050ab147140949ac9782daac37851e184afa2250ff43d36d3b6b0e8c4c8db45b1abf89a656a70caf56a307dbe81de4e7398f6c3e307f340aa461c6aed96182fe01123036ac4c87ca231c7523fb02b1d2327be9a4efe1b11ba2d4d0bc49c35b4f40eae9ff2e7d73928f2894b38f3dac76e088e7ef7c68e2a498c913e50a1402bf32cc2750b1edab8d82854c8b38687a3d2f7e7ad2d40bc9312a367d77500427fd364f07518c96084d0c96cea6b8f26306ac748f3e3048fd997c9f59f749ffd3e6a14e5af496fc244468fb8a28bd697a3c5abb1464e33cd4ad73688dfc58b6a42ef7b8d9a44a83d6c569706bfc40ce9b1f8811d0ef5904bf94df163329f6f7763f5672d06516d53f863de56c26ba5ac8148499c8fe22c8862fc16aef6a52658682eff03488c5d887e9ee6cda30ab0c84a6320984c5b0e1b1f28b4af14311ed9177621dcaac5094d2f08a5510808dd6c47200e9a34b668867d7d6a4a41b6a4b047bf660fbbc35cf1d0be7786b518aceddc9d4ea8fb763354afff01f47c1b5da7944d4e2f1b29152449d5f5b8d29bd00ea1818fb195e08b1e6959f87ab6885bd596cd0be8fe44f5dcf1423cb22d6025df605f0664239e00673c653ea58f2d84375bd74f75b4f065fd07cb6c618bd8ea32f0a3ff2da3cb8591b56d415a6a7853d72321bb76d25c363338929996db1e7815b2666707248a43cff29344a41e4faa240b38af44152d2d0ab95ba288c686589bdfd08bd5aef734e6e8cfa51bd38f1a707cfea970682a50822b0434bde4c1f4e98b20765c070767a5be658c068eff91c402b58b70125d6d6dea4954b8a4c219a54ba33d7e230b8dcc6c9b572bd21e2f665c97db231b855af35ff59b050dba188644e7619b1fa00093d5976f605b8de3e29f7885e90e55f6fe5a1a3f8fa2fdf99c1b3d341212131c65ce9fe2609668a3fffec2b4831c6ab907c0ab115aba76b37908be7b9627fc5007971e9f3876c9a5dac36f0da6571b7549902efe89de82f85b956455ce7d7b8e9046946c9ab23d1916261d767428b2a63e69edc21a0df0fff7aa2b0968942308c955dbfa610beb50f7f91756ec1fedeac8a0cbf03f1f9d65da9ed271933729bcf6a27341420d56738705f4b63b2f1eb9792d68885797ba16ce3618afefceabe79b59519d0473603c47d8f6ae10a0bf34c3fc456c3bca9be953cc83c28a75b2a956abdbbc975804398daaa2d043cf906f86204af2299787bab0aea6345b15380dcdff669481aa341280a543faaa276d387f22bc55127b1c563e45b010d2341c7106270ec943c0b1d701024d09eed71b504b6e73e0fa6973d4eb100d5ce93984e136852ae563115f370b387ece276974ee30c61ea5444113a782781207f91c8a702538a2136aa53c2a9c98e39370e7929fd8664c4d3f26824bbaa7a5df0c64b3d11f98625888a269d696c4a60407ad99f00a1b828e27c121bac146ff8b8a7a2055173ddf618f6ca3c4c1b1de583693ad26b4c20ee4dd1af789643b051269f6b4b07ee66ec2e2dfeb8149ffe19f823bf4df102de2f87812fb85eebe3ffdc29af48f276740e98a8b74cff49c6bd7e7a792cd52a25e64731da0a0195e26788f3af4774845d556d5a8b1f827bf48169c7575ba38d224248953af2d9da12baff1a18f12e6e4bec2d4120ce058f3c130333f917a5b5f8bc76e15ea6712a44fbb3cfa64d7ccd6c5afc30898da2182fb20687e9478312c103ff31d29d57bf29a09ddd76a08b3c8357f00c23506470b0dfb165f0388ca3f7821c6689ec835c9dcf5b593f3f86e6858ace397da823a8d5c28fb671dcb91baa9cd02ff55e2df55304c2bf40d919728aabaf4e1770c8e204495d295ff69e5462c69400254ff6a2617acc5a2223d6d592e99a71a240dbf81a1894b1cace31a5ca878d0e3cfe32b64f95a23a544ce24ec2844045373e37f06052c1db085bd2fe3577ff927e14f5ec71e0f0f1154896fc5f39071c99127a61e1451a7adf47d94b0de2cfe8fcf703e405f27e5485d11138a6f28a7f99ff6f6945f3c50b0e6430f2c40fa9d7ffb60acecb64ba5f5d8f826370c131f725f6801b584838acd59eb0807d8ff374ac35988c7b74645a08c6277a7b0a1ea272faa7acfed34214b0fe93b701d47ea2d28734c071be03f22c019bfc908cbe2783f9fda72d3bbdcc0f43f66e2494316577cc59237da356270585440cca00cde5236611b4e1367a590e24e67a5cdfefc1898f97490384db26d0614a28769970e7c2ce1984db988845841faa3b9a65dc02955eea56560adee0eedbc7b8ca5311b4aba66a7d16900f7cda54ed9a77a4015361e353a6e818fa64e059ceb0f54e6dc9ceca3013", 0x1000}}, 0x1006) (async) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff947a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8001}, @IPSET_ATTR_MARK={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x808}, 0x40) fsopen(&(0x7f0000000300)='debugfs\x00', 0x1) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, r10) 0s ago: executing program 8 (id=2013): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r4, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000440)=0xffffffff) recvmmsg(r4, &(0x7f000000e280), 0x58a, 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa1000000f0000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r6}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) kernel console output (not intermixed with test programs): mm="syz.7.1710" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 393.728436][T12947] lo speed is unknown, defaulting to 1000 [ 394.180485][ T7394] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 394.391923][ T7394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 394.450456][ T7394] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 394.490513][ T7394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 394.540465][ T7394] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 394.549510][ T7394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.639172][ T7394] usb 7-1: config 0 descriptor?? [ 394.653872][ T30] audit: type=1400 audit(1755616884.564:1363): avc: denied { module_request } for pid=12947 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 394.713459][ T7394] hdpvr 7-1:0.0: Could not find bulk-in endpoint [ 394.748817][ T7394] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 394.814391][T12947] chnl_net:caif_netlink_parms(): no params data found [ 395.306353][ T5896] usb 7-1: USB disconnect, device number 52 [ 395.360555][ T5849] Bluetooth: hci2: command tx timeout [ 395.402085][T12971] loop2: detected capacity change from 0 to 7 [ 395.402977][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.449132][T12971] Dev loop2: unable to read RDB block 7 [ 395.501663][T12971] loop2: unable to read partition table [ 395.543159][T12971] loop2: partition table beyond EOD, truncated [ 395.561452][T12947] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.598447][T12971] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 395.623874][T12947] bridge_slave_0: entered allmulticast mode [ 395.658498][T12947] bridge_slave_0: entered promiscuous mode [ 395.712574][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.768559][T12947] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.818189][T12947] bridge_slave_1: entered allmulticast mode [ 395.836363][ T30] audit: type=1400 audit(1755616885.754:1364): avc: denied { load_policy } for pid=12972 comm="syz.6.1716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 395.836430][T12973] SELinux: policydb version 292463635 does not match my version range 15-35 [ 395.890940][T12947] bridge_slave_1: entered promiscuous mode [ 395.987728][T12947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.047906][T12947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.080222][T12973] SELinux: failed to load policy [ 396.210716][ T7394] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 396.270870][T12947] team0: Port device team_slave_0 added [ 396.337567][ T30] audit: type=1400 audit(1755616886.254:1365): avc: denied { write } for pid=12977 comm="syz.6.1717" laddr=::1 lport=51077 faddr=::1 fport=32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 396.347224][T12947] team0: Port device team_slave_1 added [ 396.450480][ T7394] usb 9-1: Using ep0 maxpacket: 8 [ 396.461373][ T7394] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 396.512937][ T7394] usb 9-1: config 179 has no interface number 0 [ 396.576959][ T7394] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 396.780146][ T7394] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 396.930451][ T7394] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.991714][T12947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.992461][ T7394] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 397.084313][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.161717][ T7394] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 397.175126][ T6071] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 397.246535][ T7394] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 397.270739][T12947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.311868][ T30] audit: type=1400 audit(1755616887.234:1366): avc: denied { getopt } for pid=12982 comm="syz.6.1719" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.320440][ T7394] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.401156][ T6071] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 397.449944][ T5849] Bluetooth: hci2: command tx timeout [ 397.628386][ T6071] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 397.637657][ T6071] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 397.646800][T12975] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 397.653991][ T6071] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 397.665622][ T6071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 397.685507][T12947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.693597][ T6071] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 397.709141][ T6071] usb 6-1: string descriptor 0 read error: -22 [ 397.716927][ T6071] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 397.740574][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.761967][ T6071] usb 6-1: config 0 descriptor?? [ 397.780456][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.806731][T12981] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 397.931491][ T6071] hub 6-1:0.0: bad descriptor, ignoring hub [ 397.937463][ T6071] hub 6-1:0.0: probe with driver hub failed with error -5 [ 397.950555][ T30] audit: type=1400 audit(1755616887.854:1367): avc: denied { create } for pid=12974 comm="syz.8.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 397.994322][T12975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.004644][T12983] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1719'. [ 398.054312][ T6071] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input94 [ 398.054404][T12947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.100605][T12983] netlink: zone id is out of range [ 398.106038][T12975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.129190][T12983] netlink: zone id is out of range [ 398.134537][T12983] netlink: get zone limit has 8 unknown bytes [ 398.202748][ T30] audit: type=1400 audit(1755616888.044:1368): avc: denied { read } for pid=5202 comm="acpid" name="mouse1" dev="devtmpfs" ino=3655 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.651437][ T6071] usb 9-1: USB disconnect, device number 46 [ 398.657370][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 398.657404][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 398.799785][ T30] audit: type=1400 audit(1755616888.044:1369): avc: denied { open } for pid=5202 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3655 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.900342][ C0] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -1 [ 399.242280][ T30] audit: type=1400 audit(1755616888.044:1370): avc: denied { ioctl } for pid=5202 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3655 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.294948][ T7385] usb 6-1: USB disconnect, device number 62 [ 399.305394][ T30] audit: type=1400 audit(1755616888.894:1371): avc: denied { read append } for pid=12980 comm="syz.5.1718" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 399.480855][ T30] audit: type=1400 audit(1755616888.894:1372): avc: denied { ioctl open } for pid=12980 comm="syz.5.1718" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 399.590738][T12947] hsr_slave_0: entered promiscuous mode [ 399.626027][T12947] hsr_slave_1: entered promiscuous mode [ 399.676826][T13005] /dev/nullb0: Can't lookup blockdev [ 399.685833][ T5849] Bluetooth: hci2: command tx timeout [ 399.690894][T12947] debugfs: 'hsr0' already exists in 'hsr' [ 399.758163][ T30] audit: type=1400 audit(1755616889.494:1373): avc: denied { read append } for pid=12998 comm="syz.8.1724" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 399.804410][T12947] Cannot create hsr debugfs directory [ 400.049728][ T30] audit: type=1400 audit(1755616889.494:1374): avc: denied { open } for pid=12998 comm="syz.8.1724" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 400.253675][ T30] audit: type=1400 audit(1755616889.494:1375): avc: denied { bind } for pid=12998 comm="syz.8.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 400.510453][ T5924] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 400.692209][ T5924] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.869678][T12947] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 400.885917][ T5924] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.122322][ T5924] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 401.168986][T12947] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 401.206100][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.251651][T12947] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 401.300425][ T5924] usb 9-1: SerialNumber: syz [ 401.341210][T12947] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 401.578859][ T5924] usb 9-1: 0:2 : does not exist [ 401.636940][ T5924] usb 9-1: USB disconnect, device number 47 [ 401.760579][ T5849] Bluetooth: hci2: command tx timeout [ 401.766767][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.791830][T12947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.905612][T12947] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.019739][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.026846][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.058992][T13027] netlink: 'syz.6.1730': attribute type 1 has an invalid length. [ 402.139355][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.146468][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.356995][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.686207][T13043] capability: warning: `syz.5.1733' uses deprecated v2 capabilities in a way that may be insecure [ 402.720214][T13035] bond0: (slave veth3): Enslaving as an active interface with a down link [ 402.751595][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 402.751608][ T30] audit: type=1400 audit(1755616892.674:1385): avc: denied { create } for pid=13040 comm="syz.5.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 402.929088][ T30] audit: type=1400 audit(1755616892.674:1386): avc: denied { accept } for pid=13040 comm="syz.5.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 402.967257][T13036] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 403.033132][T13036] bond0: (slave batadv1): making interface the new active one [ 403.147036][T13036] batadv1: entered promiscuous mode [ 403.160639][T13036] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 403.255718][T13032] lo speed is unknown, defaulting to 1000 [ 403.428149][ T30] audit: type=1400 audit(1755616893.334:1387): avc: denied { read } for pid=13046 comm="syz.6.1735" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 403.780449][ T7385] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 403.861038][ T30] audit: type=1400 audit(1755616893.334:1388): avc: denied { open } for pid=13046 comm="syz.6.1735" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 403.945989][T13054] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1736'. [ 404.120540][ T30] audit: type=1400 audit(1755616893.394:1389): avc: denied { ioctl } for pid=13046 comm="syz.6.1735" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 404.140463][ T7385] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 404.261626][ T7385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.352944][ T7385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.387953][ T30] audit: type=1400 audit(1755616893.414:1390): avc: denied { setopt } for pid=13046 comm="syz.6.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.480184][ T7385] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 404.533927][T12947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.696371][ T30] audit: type=1400 audit(1755616894.614:1391): avc: denied { write } for pid=13062 comm="syz.7.1738" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 404.758157][ T7385] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 404.878368][ T7385] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 404.962130][ T30] audit: type=1400 audit(1755616894.614:1392): avc: denied { open } for pid=13062 comm="syz.7.1738" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 404.980275][ T7385] usb 7-1: Manufacturer: syz [ 405.183950][ T7385] usb 7-1: config 0 descriptor?? [ 405.246041][ T30] audit: type=1400 audit(1755616894.614:1393): avc: denied { ioctl } for pid=13062 comm="syz.7.1738" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 405.468176][T12947] veth0_vlan: entered promiscuous mode [ 405.563237][T12947] veth1_vlan: entered promiscuous mode [ 405.603464][ T7385] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 405.685965][ T7385] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 405.703285][T12947] veth0_macvtap: entered promiscuous mode [ 405.789055][T12947] veth1_macvtap: entered promiscuous mode [ 405.911610][T12947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.014624][T12947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.172828][ T6625] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.310633][ T6625] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.332555][ T6631] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.362473][ T30] audit: type=1400 audit(1755616896.254:1394): avc: denied { setopt } for pid=13073 comm="syz.5.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 406.484505][ T6631] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.842346][ T6625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.910401][ T6625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.950452][ T5896] usb 7-1: reset high-speed USB device number 53 using dummy_hcd [ 407.042948][ T6625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.104820][ T6625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.364130][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1740'. [ 407.381468][ T5896] usb 7-1: device descriptor read/64, error -32 [ 407.630779][T13085] netlink: 'syz.5.1741': attribute type 10 has an invalid length. [ 407.661016][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.790493][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.910648][ T7394] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 407.918697][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 407.951003][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.951731][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 407.951742][ T30] audit: type=1400 audit(1755616897.874:1407): avc: denied { listen } for pid=13081 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.041973][T13085] bridge0: port 3(netdevsim0) entered blocking state [ 408.048713][T13085] bridge0: port 3(netdevsim0) entered disabled state [ 408.110434][ T7394] usb 10-1: device descriptor read/64, error -32 [ 408.140658][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.249235][T13085] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 408.303846][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.323129][ T7385] usb 7-1: USB disconnect, device number 53 [ 408.350467][ T7394] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 408.420625][T13085] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 408.437317][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.461086][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.469621][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.536557][ T30] audit: type=1400 audit(1755616898.004:1408): avc: denied { append } for pid=13079 comm="syz.8.1740" name="pfkey" dev="proc" ino=4026534593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 408.610520][ T7394] usb 10-1: Using ep0 maxpacket: 8 [ 408.701243][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.872782][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.140557][ T7394] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.323375][ T7394] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 409.353575][ T30] audit: type=1400 audit(1755616899.274:1409): avc: denied { ioctl } for pid=13101 comm="syz.5.1746" path="socket:[42728]" dev="sockfs" ino=42728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 409.553520][ T7394] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 409.650473][ T7394] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 409.690449][ T7394] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.715613][T13105] block nbd5: shutting down sockets [ 409.812261][ T7394] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 409.946289][ T7394] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.070164][ T7394] usb 10-1: Product: syz [ 410.106636][ T7394] usb 10-1: Manufacturer: syz [ 410.175131][ T7394] usb 10-1: SerialNumber: syz [ 410.243862][ T7394] usb 10-1: config 0 descriptor?? [ 410.518505][ T30] audit: type=1400 audit(1755616900.434:1410): avc: denied { read write } for pid=13110 comm="syz.5.1748" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 410.723380][ T7394] rc_core: IR keymap rc-imon-rsc not found [ 410.729205][ T7394] Registered IR keymap rc-empty [ 411.050990][ T7394] rc rc0: iMON Station as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 411.080424][ T30] audit: type=1400 audit(1755616900.434:1411): avc: denied { open } for pid=13110 comm="syz.5.1748" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 411.252396][ T7394] input: iMON Station as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input97 [ 411.372273][ T7394] usb 10-1: USB disconnect, device number 3 [ 411.480459][ T30] audit: type=1400 audit(1755616900.774:1412): avc: denied { read } for pid=13110 comm="syz.5.1748" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 411.942132][ T30] audit: type=1400 audit(1755616900.794:1413): avc: denied { open } for pid=13110 comm="syz.5.1748" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 412.100904][T13124] netlink: 'syz.5.1750': attribute type 21 has an invalid length. [ 412.139321][T13122] lo speed is unknown, defaulting to 1000 [ 412.238438][ T30] audit: type=1400 audit(1755616901.194:1414): avc: denied { ioctl } for pid=13110 comm="syz.5.1748" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 412.256983][T13124] netlink: 'syz.5.1750': attribute type 1 has an invalid length. [ 412.442872][T13124] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1750'. [ 412.631482][ T30] audit: type=1400 audit(1755616901.344:1415): avc: denied { mount } for pid=13110 comm="syz.5.1748" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 412.788591][ T30] audit: type=1400 audit(1755616901.404:1416): avc: denied { unmount } for pid=6908 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 413.050443][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 413.050461][ T30] audit: type=1400 audit(1755616902.914:1418): avc: denied { setattr } for pid=13131 comm="syz.5.1752" name="timer" dev="devtmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 413.996192][ T30] audit: type=1400 audit(1755616903.064:1419): avc: denied { create } for pid=13131 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 414.139918][T13136] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 415.010560][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1756'. [ 415.280714][ T55] block nbd0: Possible stuck request ffff8880267a0000: control (read@0,1024B). Runtime 210 seconds [ 415.291527][ T55] block nbd0: Possible stuck request ffff8880267a01c0: control (read@1024,1024B). Runtime 210 seconds [ 415.320486][ T55] block nbd0: Possible stuck request ffff8880267a0380: control (read@2048,1024B). Runtime 210 seconds [ 415.331445][ T55] block nbd0: Possible stuck request ffff8880267a0540: control (read@3072,1024B). Runtime 210 seconds [ 415.641766][T13153] loop2: detected capacity change from 0 to 7 [ 415.912323][T13153] Dev loop2: unable to read RDB block 7 [ 415.989658][T13153] loop2: unable to read partition table [ 416.173507][T13153] loop2: partition table beyond EOD, truncated [ 416.270436][T13153] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 416.500909][ T13] batadv1: left promiscuous mode [ 416.705070][ T5217] udevd[5217]: worker [5860] terminated by signal 33 (Unknown signal 33) [ 417.930562][ T7385] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 418.170525][ T7385] usb 10-1: Using ep0 maxpacket: 16 [ 418.236798][ T7385] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.334992][ T7385] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.390480][ T30] audit: type=1400 audit(1755616908.224:1420): avc: denied { ioctl } for pid=13168 comm="syz.8.1763" path="socket:[41702]" dev="sockfs" ino=41702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.465837][ T7385] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.540124][ T7385] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 418.559584][ T7385] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 418.599952][ T7385] usb 10-1: Manufacturer: syz [ 418.651916][ T7385] usb 10-1: config 0 descriptor?? [ 419.500785][ T30] audit: type=1400 audit(1755616908.614:1421): avc: denied { bind } for pid=13166 comm="syz.6.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 419.660559][ T30] audit: type=1400 audit(1755616908.614:1422): avc: denied { execute } for pid=13166 comm="syz.6.1762" path="/dev/nullb0" dev="devtmpfs" ino=3178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 419.976766][ T30] audit: type=1400 audit(1755616909.794:1423): avc: denied { create } for pid=13177 comm="syz.6.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 420.280466][ T5896] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 420.452925][ T5896] usb 7-1: Using ep0 maxpacket: 8 [ 420.507939][ T5896] usb 7-1: too many endpoints for config 0 interface 0 altsetting 21: 74, using maximum allowed: 30 [ 420.599554][ T5896] usb 7-1: config 0 interface 0 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 420.638685][ T5923] usb 10-1: USB disconnect, device number 4 [ 420.741414][ T30] audit: type=1400 audit(1755616910.654:1424): avc: denied { create } for pid=13181 comm="syz.9.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.772134][ T5896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 420.778724][ T5896] usb 7-1: New USB device found, idVendor=f7f0, idProduct=6750, bcdDevice=75.8b [ 420.831630][T13183] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 420.833294][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.855282][ T30] audit: type=1400 audit(1755616910.714:1425): avc: denied { write } for pid=13181 comm="syz.9.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.886090][ T30] audit: type=1400 audit(1755616910.714:1426): avc: denied { nlmsg_write } for pid=13181 comm="syz.9.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.907132][ T5896] usb 7-1: config 0 descriptor?? [ 420.980277][ T30] audit: type=1400 audit(1755616910.894:1427): avc: denied { write } for pid=13181 comm="syz.9.1767" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 421.010515][T13183] SELinux: failed to load policy [ 421.128291][ T5896] usb 7-1: string descriptor 0 read error: -71 [ 421.139003][ T5896] usb 7-1: USB disconnect, device number 54 [ 422.415712][ T30] audit: type=1400 audit(1755616912.334:1428): avc: denied { mounton } for pid=13196 comm="syz.7.1770" path="/186/file0" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 422.628202][ T30] audit: type=1400 audit(1755616912.544:1429): avc: denied { read } for pid=13196 comm="syz.7.1770" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 423.808930][ T30] audit: type=1400 audit(1755616913.724:1430): avc: denied { execute_no_trans } for pid=13204 comm="syz.6.1772" path="/227/file0" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 425.781732][ T30] audit: type=1400 audit(1755616915.694:1431): avc: denied { create } for pid=13222 comm="syz.9.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 426.191835][ T30] audit: type=1400 audit(1755616915.754:1432): avc: denied { ioctl } for pid=13222 comm="syz.9.1778" path="socket:[41921]" dev="sockfs" ino=41921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 426.217465][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.220455][ T7394] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 426.336660][T13223] lo speed is unknown, defaulting to 1000 [ 426.700534][ T30] audit: type=1400 audit(1755616915.754:1433): avc: denied { write } for pid=13222 comm="syz.9.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 426.880548][ T30] audit: type=1400 audit(1755616915.754:1434): avc: denied { setopt } for pid=13222 comm="syz.9.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 426.942675][ T30] audit: type=1400 audit(1755616915.774:1435): avc: denied { connect } for pid=13222 comm="syz.9.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 427.131590][ T7394] usb 10-1: config 0 has no interfaces? [ 427.318927][ T7394] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 427.693740][ T7394] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.820390][ T7394] usb 10-1: Product: syz [ 427.970499][ T7394] usb 10-1: Manufacturer: syz [ 427.975193][ T7394] usb 10-1: SerialNumber: syz [ 428.185390][ T7394] usb 10-1: config 0 descriptor?? [ 431.338958][ T5849] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 431.358881][ T30] audit: type=1400 audit(1755616921.254:1436): avc: denied { bind } for pid=13259 comm="syz.8.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 433.760684][ T7394] usb 10-1: can't set config #0, error -110 [ 433.796289][ T30] audit: type=1400 audit(1755616921.254:1437): avc: denied { name_bind } for pid=13259 comm="syz.8.1789" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 434.012258][ T7394] usb 10-1: USB disconnect, device number 5 [ 434.345881][ T30] audit: type=1400 audit(1755616921.254:1438): avc: denied { node_bind } for pid=13259 comm="syz.8.1789" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 434.554284][T13271] /dev/nullb0: Can't lookup blockdev [ 435.480410][ T30] audit: type=1400 audit(1755616925.374:1439): avc: denied { create } for pid=13273 comm="syz.7.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 435.770407][ T30] audit: type=1400 audit(1755616925.554:1440): avc: denied { ioctl } for pid=13276 comm="syz.9.1794" path="socket:[44074]" dev="sockfs" ino=44074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.803645][T13281] /dev/nullb0: Can't lookup blockdev [ 435.811102][T13281] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 435.819382][T13281] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 435.828074][T13281] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 436.300779][ T30] audit: type=1400 audit(1755616925.744:1441): avc: denied { firmware_load } for pid=13276 comm="syz.9.1794" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 439.605183][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.611693][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.420531][ T30] audit: type=1400 audit(1755616930.334:1442): avc: denied { read } for pid=13293 comm="syz.9.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 440.522655][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1798'. [ 441.234779][ T5951] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 441.580492][ T5896] usb 9-1: new low-speed USB device number 48 using dummy_hcd [ 442.250487][ T5951] usb 7-1: device descriptor read/64, error -71 [ 442.590675][ T5896] usb 9-1: device descriptor read/64, error -71 [ 442.680500][ T5951] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 442.918835][ T5896] usb 9-1: new low-speed USB device number 49 using dummy_hcd [ 442.931781][ T5951] usb 7-1: device descriptor read/64, error -71 [ 442.969266][ T30] audit: type=1400 audit(1755616932.824:1443): avc: denied { create } for pid=13308 comm="syz.7.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.969302][ T30] audit: type=1400 audit(1755616932.844:1444): avc: denied { accept } for pid=13308 comm="syz.7.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 443.055795][ T5951] usb usb7-port1: attempt power cycle [ 443.180409][ T5896] usb 9-1: device descriptor read/64, error -71 [ 443.290553][ T5896] usb usb9-port1: attempt power cycle [ 443.400388][ T5951] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 443.420931][ T5951] usb 7-1: device descriptor read/8, error -71 [ 443.803859][ T5896] usb 9-1: new low-speed USB device number 50 using dummy_hcd [ 443.821751][ T5896] usb 9-1: device descriptor read/8, error -71 [ 443.860423][ T5951] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 443.898942][ T5951] usb 7-1: device descriptor read/8, error -71 [ 444.012794][ T5951] usb usb7-port1: unable to enumerate USB device [ 444.080923][ T5896] usb 9-1: new low-speed USB device number 51 using dummy_hcd [ 444.102561][ T5896] usb 9-1: device descriptor read/8, error -71 [ 444.221810][ T5896] usb usb9-port1: unable to enumerate USB device [ 444.340474][ T5951] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 444.559962][ T5951] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 444.559990][ T5951] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 444.560009][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 444.560035][ T5951] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 444.560082][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 444.560104][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 444.562421][ T5951] usb 7-1: string descriptor 0 read error: -22 [ 444.562483][ T5951] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 444.562504][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.563583][ T5951] usb 7-1: config 0 descriptor?? [ 444.564038][T13318] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 444.564698][ T5951] hub 7-1:0.0: bad descriptor, ignoring hub [ 444.564716][ T5951] hub 7-1:0.0: probe with driver hub failed with error -5 [ 444.566362][ T5951] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input101 [ 445.625260][ T55] block nbd0: Possible stuck request ffff8880267a0000: control (read@0,1024B). Runtime 240 seconds [ 445.625292][ T55] block nbd0: Possible stuck request ffff8880267a01c0: control (read@1024,1024B). Runtime 240 seconds [ 445.625316][ T55] block nbd0: Possible stuck request ffff8880267a0380: control (read@2048,1024B). Runtime 240 seconds [ 445.625337][ T55] block nbd0: Possible stuck request ffff8880267a0540: control (read@3072,1024B). Runtime 240 seconds [ 445.719782][ T7394] usb 7-1: USB disconnect, device number 59 [ 445.843202][T13331] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1806'. [ 446.530390][ T5951] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 446.803154][ T5951] usb 6-1: unable to get BOS descriptor or descriptor too short [ 446.812088][ T5951] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 446.842924][ T5951] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 446.842957][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.842976][ T5951] usb 6-1: Product: syz [ 446.842990][ T5951] usb 6-1: Manufacturer: syz [ 446.843003][ T5951] usb 6-1: SerialNumber: syz [ 447.042566][T13341] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1810'. [ 449.470898][T13310] tty tty1: ldisc open failed (-12), clearing slot 0 [ 449.591090][T13322] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 449.625284][ T30] audit: type=1400 audit(1755616939.544:1445): avc: denied { write } for pid=13338 comm="syz.9.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.798281][ T5903] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 452.010574][ T5903] usb 7-1: device descriptor read/64, error -71 [ 452.253687][ T5951] usb 6-1: USB disconnect, device number 63 [ 452.650391][ T5903] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 452.872348][ T5903] usb 7-1: device descriptor read/64, error -71 [ 452.882081][ T5951] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 452.980578][ T5903] usb usb7-port1: attempt power cycle [ 453.140550][ T5951] usb 9-1: Using ep0 maxpacket: 32 [ 453.218871][ T5951] usb 9-1: config 127 has an invalid interface number: 132 but max is 0 [ 453.318981][ T5951] usb 9-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 453.399652][ T5903] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 453.420423][ T5951] usb 9-1: config 127 has no interface number 0 [ 453.500457][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.545175][ T5903] usb 7-1: device descriptor read/8, error -71 [ 453.630560][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.821721][ T5951] usb 9-1: config 127 interface 132 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 453.970427][ T5903] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 454.089041][ T5903] usb 7-1: device descriptor read/8, error -71 [ 454.095711][ T5951] usb 9-1: config 127 interface 132 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 454.258396][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.279539][ T5903] usb usb7-port1: unable to enumerate USB device [ 454.400480][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 454.490409][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 454.674054][ T5951] usb 9-1: config 127 interface 132 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 454.834968][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 454.902891][T13368] kvm: emulating exchange as write [ 454.978792][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 455.083228][ T5896] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 455.130101][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 455.255877][ T5951] usb 9-1: config 127 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.670496][ T5896] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.680692][ T5951] usb 9-1: New USB device found, idVendor=0b00, idProduct=3070, bcdDevice=1d.e9 [ 455.689713][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.760593][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.890441][ T5903] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 455.906759][T13375] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1821'. [ 455.916128][T13375] netlink: zone id is out of range [ 455.921274][T13375] netlink: zone id is out of range [ 455.926362][T13375] netlink: get zone limit has 8 unknown bytes [ 455.971259][ T5896] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.980508][ T5951] usb 9-1: can't set config #127, error -71 [ 456.032246][ T5951] usb 9-1: USB disconnect, device number 52 [ 456.095366][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.160399][ T5903] usb 10-1: Using ep0 maxpacket: 8 [ 456.178109][ T5903] usb 10-1: no configurations [ 456.195966][ T5896] usb 7-1: Product: syz [ 456.216169][ T5903] usb 10-1: can't read configurations, error -22 [ 456.238172][ T5896] usb 7-1: Manufacturer: syz [ 456.300381][ T5896] usb 7-1: SerialNumber: syz [ 456.401326][ T5896] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 456.438283][ T5903] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 456.492649][ T30] audit: type=1400 audit(1755616946.414:1446): avc: denied { create } for pid=13379 comm="syz.8.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 456.603327][ T5896] usb 7-1: USB disconnect, device number 64 [ 456.680805][ T5903] usb 10-1: Using ep0 maxpacket: 8 [ 456.702201][ T30] audit: type=1400 audit(1755616946.454:1447): avc: denied { bind } for pid=13379 comm="syz.8.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 456.726512][ T5903] usb 10-1: no configurations [ 456.770373][ T5903] usb 10-1: can't read configurations, error -22 [ 456.847586][ T5903] usb usb10-port1: attempt power cycle [ 457.270401][ T5903] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 457.432492][ T5903] usb 10-1: Using ep0 maxpacket: 8 [ 457.819872][ T30] audit: type=1400 audit(1755616947.734:1448): avc: denied { read } for pid=13379 comm="syz.8.1822" path="socket:[44334]" dev="sockfs" ino=44334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 457.892407][ T5903] usb 10-1: no configurations [ 457.897081][ T5903] usb 10-1: can't read configurations, error -22 [ 458.130590][ T5924] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 458.140392][ T30] audit: type=1400 audit(1755616948.044:1449): avc: denied { listen } for pid=13379 comm="syz.8.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 458.172391][ T5903] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 458.350420][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 458.388144][ T5924] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.411324][T13391] kvm: user requested TSC rate below hardware speed [ 458.728697][ T5903] usb 10-1: device descriptor read/8, error -71 [ 458.780385][ T5924] usb 7-1: config 0 has no interface number 0 [ 458.900618][ T5903] usb usb10-port1: unable to enumerate USB device [ 458.944389][ T5924] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 459.022639][T13396] netlink: 'syz.7.1827': attribute type 10 has an invalid length. [ 459.031783][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1827'. [ 459.439649][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.551329][ T5924] usb 7-1: Product: syz [ 459.598150][ T5924] usb 7-1: Manufacturer: syz [ 459.647378][ T5924] usb 7-1: SerialNumber: syz [ 459.718608][ T5924] usb 7-1: config 0 descriptor?? [ 460.571698][ T5924] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 460.680393][ T5924] usb 7-1: selecting invalid altsetting 1 [ 460.740401][ T5924] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 460.817568][ T5924] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.040595][ T5924] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 461.069321][ T5924] usb 7-1: media controller created [ 461.116913][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.242139][ T30] audit: type=1400 audit(1755616951.164:1450): avc: denied { read write } for pid=13388 comm="syz.6.1824" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 461.455740][ T30] audit: type=1400 audit(1755616951.164:1451): avc: denied { open } for pid=13388 comm="syz.6.1824" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 462.241184][ T5924] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 462.380481][ T5924] zl10353_read_register: readreg error (reg=127, ret==-110) [ 462.640408][ T5924] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 462.912081][ T5924] usb 7-1: USB disconnect, device number 65 [ 464.362097][ T5924] delete_channel: no stack [ 466.250814][T13424] netlink: 'syz.8.1833': attribute type 1 has an invalid length. [ 466.258529][T13424] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1833'. [ 467.004398][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1835'. [ 468.424042][T13444] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1839'. [ 468.473961][ T7394] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 468.578774][T13444] netlink: zone id is out of range [ 468.584002][T13444] netlink: zone id is out of range [ 468.589122][T13444] netlink: get zone limit has 8 unknown bytes [ 468.710468][ T7394] usb 9-1: Using ep0 maxpacket: 32 [ 468.730898][ T7394] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.880625][ T7394] usb 9-1: config 0 interface 0 has no altsetting 0 [ 468.947023][ T7394] usb 9-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 469.217901][ T7394] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.308048][ T7394] usb 9-1: config 0 descriptor?? [ 469.838810][ T30] audit: type=1400 audit(1755616959.704:1452): avc: denied { create } for pid=13440 comm="syz.8.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 469.930459][ T5924] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 470.112162][ T30] audit: type=1400 audit(1755616959.704:1453): avc: denied { setopt } for pid=13440 comm="syz.8.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 470.180612][ T5924] usb 10-1: Using ep0 maxpacket: 8 [ 470.250542][ T5924] usb 10-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 470.326395][ T5924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.351547][ T30] audit: type=1400 audit(1755616959.884:1454): avc: denied { getopt } for pid=13440 comm="syz.8.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 470.450393][ T5924] usb 10-1: Product: syz [ 470.500370][ T5924] usb 10-1: Manufacturer: syz [ 470.550558][ T5924] usb 10-1: SerialNumber: syz [ 470.614543][ T5924] usb 10-1: config 0 descriptor?? [ 470.713491][ T5924] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 470.800438][ T5924] imon 10-1:0.0: unable to initialize intf0, err -19 [ 470.906283][ T5924] imon:imon_probe: failed to initialize context! [ 471.019289][ T5924] imon 10-1:0.0: unable to register, err -19 [ 471.116347][ T5924] usb 10-1: USB disconnect, device number 10 [ 471.916539][T13455] FAULT_INJECTION: forcing a failure. [ 471.916539][T13455] name failslab, interval 1, probability 0, space 0, times 1 [ 472.060528][ T7394] usbhid 9-1:0.0: can't add hid device: -71 [ 472.080435][T13455] CPU: 1 UID: 0 PID: 13455 Comm: syz.6.1842 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 472.080459][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.080469][T13455] Call Trace: [ 472.080475][T13455] [ 472.080482][T13455] dump_stack_lvl+0x16c/0x1f0 [ 472.080506][T13455] should_fail_ex+0x512/0x640 [ 472.080528][T13455] should_failslab+0xc2/0x120 [ 472.080548][T13455] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 472.080566][T13455] ? ima_match_policy+0x7f7/0x22d0 [ 472.080591][T13455] ? vm_area_dup+0x27/0x8d0 [ 472.080618][T13455] vm_area_dup+0x27/0x8d0 [ 472.080644][T13455] __split_vma+0x18e/0x1070 [ 472.080660][T13455] ? rcu_is_watching+0x12/0xc0 [ 472.080682][T13455] ? __pfx___split_vma+0x10/0x10 [ 472.080701][T13455] ? up_write+0x1b2/0x520 [ 472.080719][T13455] vms_gather_munmap_vmas+0x1d2/0x1340 [ 472.080738][T13455] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 472.080755][T13455] ? lock_release+0x201/0x2f0 [ 472.080779][T13455] ? __pfx_process_measurement+0x10/0x10 [ 472.080804][T13455] ? avc_has_perm_noaudit+0x149/0x3b0 [ 472.080825][T13455] do_vmi_align_munmap+0x27c/0x7d0 [ 472.080844][T13455] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 472.080863][T13455] ? bpf_bprintf_prepare+0x58a/0x13f0 [ 472.080889][T13455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.080919][T13455] do_vmi_munmap+0x204/0x3e0 [ 472.080937][T13455] do_munmap+0xbd/0x100 [ 472.080958][T13455] ? __pfx_do_munmap+0x10/0x10 [ 472.080984][T13455] ? __pfx_down_write_killable+0x10/0x10 [ 472.081008][T13455] mremap_to+0x236/0x450 [ 472.081025][T13455] do_mremap+0xfad/0x1f80 [ 472.081043][T13455] ? get_pid_task+0x106/0x250 [ 472.081059][T13455] ? proc_fail_nth_write+0x9f/0x220 [ 472.081080][T13455] ? __pfx_do_mremap+0x10/0x10 [ 472.081095][T13455] ? lock_release+0x201/0x2f0 [ 472.081121][T13455] ? preempt_count_add+0x76/0x150 [ 472.081137][T13455] ? ksys_write+0x190/0x250 [ 472.081154][T13455] ? rcu_is_watching+0x12/0xc0 [ 472.081175][T13455] ? lock_release+0x201/0x2f0 [ 472.081208][T13455] __do_sys_mremap+0x119/0x170 [ 472.081225][T13455] ? __pfx___do_sys_mremap+0x10/0x10 [ 472.081240][T13455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.081270][T13455] do_syscall_64+0xcd/0x4c0 [ 472.081289][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.081307][T13455] RIP: 0033:0x7f883d78ebe9 [ 472.081320][T13455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.081337][T13455] RSP: 002b:00007f883e6cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 472.081354][T13455] RAX: ffffffffffffffda RBX: 00007f883d9b5fa0 RCX: 00007f883d78ebe9 [ 472.081366][T13455] RDX: 0000000000002000 RSI: 0000000000004000 RDI: 00002000003cd000 [ 472.081377][T13455] RBP: 00007f883e6cd090 R08: 0000200000c9a000 R09: 0000000000000000 [ 472.081388][T13455] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 472.081398][T13455] R13: 00007f883d9b6038 R14: 00007f883d9b5fa0 R15: 00007fff67747448 [ 472.081414][T13455] [ 472.305921][T13458] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1843'. [ 472.701825][T13458] netlink: zone id is out of range [ 472.706951][T13458] netlink: zone id is out of range [ 472.712164][ T7394] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 472.839989][ T7394] usb 9-1: USB disconnect, device number 53 [ 472.900577][T13458] netlink: get zone limit has 8 unknown bytes [ 473.180371][ T30] audit: type=1400 audit(1755616963.084:1455): avc: denied { unmount } for pid=9972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 473.314013][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1845'. [ 473.481458][ T30] audit: type=1400 audit(1755616963.124:1456): avc: denied { bind } for pid=13464 comm="syz.6.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 473.481544][T13472] netlink: 'syz.8.1847': attribute type 1 has an invalid length. [ 473.577762][ T30] audit: type=1400 audit(1755616963.124:1457): avc: denied { name_bind } for pid=13464 comm="syz.6.1845" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 473.681613][T13472] netlink: 75 bytes leftover after parsing attributes in process `syz.8.1847'. [ 473.740831][ T30] audit: type=1400 audit(1755616963.124:1458): avc: denied { node_bind } for pid=13464 comm="syz.6.1845" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 474.108999][ T30] audit: type=1400 audit(1755616963.524:1459): avc: denied { setopt } for pid=13469 comm="syz.7.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 474.378197][ T30] audit: type=1400 audit(1755616963.524:1460): avc: denied { watch watch_reads } for pid=13469 comm="syz.7.1849" path="/198" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 474.390949][T13493] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1853'. [ 474.471771][T13493] netlink: zone id is out of range [ 474.522736][T13493] netlink: zone id is out of range [ 474.731498][T13493] netlink: get zone limit has 8 unknown bytes [ 474.960945][ T30] audit: type=1400 audit(1755616963.894:1461): avc: denied { read } for pid=13482 comm="syz.5.1851" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 475.080674][ T6071] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 475.372956][ T30] audit: type=1400 audit(1755616963.894:1462): avc: denied { open } for pid=13482 comm="syz.5.1851" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 475.834447][ T6071] usb 9-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 476.080479][T13042] block nbd0: Possible stuck request ffff8880267a0000: control (read@0,1024B). Runtime 270 seconds [ 476.091298][T13042] block nbd0: Possible stuck request ffff8880267a01c0: control (read@1024,1024B). Runtime 270 seconds [ 476.103108][T13042] block nbd0: Possible stuck request ffff8880267a0380: control (read@2048,1024B). Runtime 270 seconds [ 476.114142][T13042] block nbd0: Possible stuck request ffff8880267a0540: control (read@3072,1024B). Runtime 270 seconds [ 476.324941][ T6071] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.925366][ T6071] usb 9-1: Product: syz [ 476.929533][ T6071] usb 9-1: Manufacturer: syz [ 477.039207][ T6071] usb 9-1: SerialNumber: syz [ 477.242246][ T6071] usb 9-1: config 0 descriptor?? [ 477.443775][ T6071] kvaser_usb 9-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 477.581611][ T30] audit: type=1400 audit(1755616967.504:1463): avc: denied { write } for pid=13504 comm="syz.9.1856" path="socket:[44548]" dev="sockfs" ino=44548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 478.100421][ T30] audit: type=1400 audit(1755616967.824:1464): avc: denied { read write } for pid=13512 comm="syz.7.1858" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 478.547473][ T30] audit: type=1400 audit(1755616967.824:1465): avc: denied { open } for pid=13512 comm="syz.7.1858" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 478.833128][ T30] audit: type=1400 audit(1755616967.824:1466): avc: denied { ioctl } for pid=13512 comm="syz.7.1858" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 479.317004][T13528] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 479.471912][T13530] 9pnet_fd: Insufficient options for proto=fd [ 479.492195][ T5903] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 479.860879][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 479.990384][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 480.033303][ T5903] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.050442][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.058721][ T5903] usb 7-1: Product: syz [ 480.068563][ T5903] usb 7-1: Manufacturer: syz [ 480.073393][ T5903] usb 7-1: SerialNumber: syz [ 480.079255][ T5903] usb 7-1: config 0 descriptor?? [ 480.099895][ T5903] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 480.191521][T13535] lo speed is unknown, defaulting to 1000 [ 480.329371][ T30] audit: type=1400 audit(1755616970.244:1467): avc: denied { ioctl } for pid=13534 comm="syz.9.1865" path="socket:[44648]" dev="sockfs" ino=44648 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 480.450452][ T6071] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 480.560676][ T5924] usb 9-1: USB disconnect, device number 54 [ 480.568214][ T5903] usb 7-1: USB disconnect, device number 66 [ 480.640904][ T6071] usb 6-1: Using ep0 maxpacket: 32 [ 480.691856][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.727958][ T6071] usb 6-1: unable to get BOS descriptor or descriptor too short [ 480.790907][ T6071] usb 6-1: config 1 interface 0 has no altsetting 0 [ 480.869357][ T6071] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 480.951132][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.959141][ T6071] usb 6-1: Product: syz [ 481.060472][ T6071] usb 6-1: Manufacturer: syz [ 481.065082][ T6071] usb 6-1: SerialNumber: syz [ 481.275289][ T30] audit: type=1400 audit(1755616971.184:1468): avc: denied { create } for pid=13549 comm="syz.9.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.428310][ T6071] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input104 [ 481.454379][ T30] audit: type=1400 audit(1755616971.184:1469): avc: denied { write } for pid=13549 comm="syz.9.1869" path="socket:[43840]" dev="sockfs" ino=43840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.572385][ T5202] bcm5974 6-1:1.0: could not read from device [ 481.772482][ T30] audit: type=1400 audit(1755616971.684:1470): avc: denied { mount } for pid=13557 comm="syz.9.1871" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 481.931268][ T6071] usb 6-1: USB disconnect, device number 64 [ 481.971427][T13562] loop2: detected capacity change from 0 to 7 [ 482.046060][ T30] audit: type=1400 audit(1755616971.694:1471): avc: denied { mounton } for pid=13557 comm="syz.9.1871" path="/28/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 482.113056][T13562] Dev loop2: unable to read RDB block 7 [ 482.118644][T13562] loop2: unable to read partition table [ 482.271749][ T30] audit: type=1400 audit(1755616971.924:1472): avc: denied { remount } for pid=13557 comm="syz.9.1871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 482.292089][T13562] loop2: partition table beyond EOD, truncated [ 482.320437][T13562] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 482.710471][ T6071] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 482.845897][ T30] audit: type=1400 audit(1755616972.754:1473): avc: denied { create } for pid=13572 comm="syz.8.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 482.970477][ T6071] usb 6-1: device descriptor read/64, error -71 [ 483.060408][ T30] audit: type=1400 audit(1755616972.764:1474): avc: denied { unmount } for pid=12947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 483.448393][ T30] audit: type=1400 audit(1755616972.784:1475): avc: denied { setopt } for pid=13572 comm="syz.8.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 483.480382][ T6071] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 483.740145][ T6071] usb 6-1: device descriptor read/64, error -71 [ 483.940706][ T6071] usb usb6-port1: attempt power cycle [ 484.356299][ T6071] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 484.404966][ T30] audit: type=1400 audit(1755616974.314:1476): avc: denied { ioctl } for pid=13584 comm="syz.8.1880" path="socket:[44737]" dev="sockfs" ino=44737 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.522925][ T6071] usb 6-1: device descriptor read/8, error -71 [ 484.820442][ T6071] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 485.052811][ T6071] usb 6-1: device descriptor read/8, error -71 [ 485.332298][ T6071] usb usb6-port1: unable to enumerate USB device [ 485.349532][T13591] [U] [ 485.352301][T13591] [U] [ 485.354971][T13591] [U] [ 485.357637][T13591] [U] [ 485.381235][ T30] audit: type=1400 audit(1755616975.234:1477): avc: denied { ioctl } for pid=13595 comm="syz.5.1883" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 485.549384][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1884'. [ 485.616415][T13590] [U] [ 485.766994][ T30] audit: type=1400 audit(1755616975.504:1478): avc: denied { mount } for pid=13590 comm="syz.9.1877" name="/" dev="hugetlbfs" ino=43946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 486.522021][T13612] loop2: detected capacity change from 0 to 7 [ 486.605259][T13612] Dev loop2: unable to read RDB block 7 [ 486.643496][T13612] loop2: unable to read partition table [ 486.729806][T13612] loop2: partition table beyond EOD, truncated [ 486.876239][T13612] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 487.190390][ T7395] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 487.456611][ T7395] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 487.475062][ T7395] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 487.588671][ T7395] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 487.680383][ T7395] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 487.740473][ T5924] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 487.810514][ T7395] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 487.910411][ T7395] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 487.980397][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 488.046548][ T7395] usb 6-1: string descriptor 0 read error: -22 [ 488.052798][ T7395] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 488.100455][ T5924] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.137535][T13635] lo speed is unknown, defaulting to 1000 [ 488.206796][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.210393][ T7395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.290379][ T5903] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 488.349848][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 488.441079][ T5924] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 488.541983][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.604361][ T7395] usb 6-1: config 0 descriptor?? [ 488.614182][T13622] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 488.680501][ T5924] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 488.680894][ T7395] hub 6-1:0.0: bad descriptor, ignoring hub [ 488.695641][ T5903] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 488.760437][ T5924] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 488.768428][ T5924] usb 9-1: Manufacturer: syz [ 488.780370][ T5903] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 488.788438][ T5903] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 488.879025][ T7395] hub 6-1:0.0: probe with driver hub failed with error -5 [ 489.011941][ T5924] usb 9-1: config 0 descriptor?? [ 489.014000][ T7395] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input105 [ 489.056260][ T5903] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 489.540625][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 489.599251][ T7395] usb 6-1: USB disconnect, device number 69 [ 489.599359][ C0] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -19 [ 489.606065][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 489.941823][ T5903] usb 7-1: string descriptor 0 read error: -22 [ 490.069009][ T5903] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 490.140452][ T5924] rc_core: IR keymap rc-hauppauge not found [ 490.179211][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.217175][ T5924] Registered IR keymap rc-empty [ 490.270406][ T5903] usb 7-1: config 0 descriptor?? [ 490.295454][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 490.321059][T13634] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 490.396224][ T5903] hub 7-1:0.0: bad descriptor, ignoring hub [ 490.410520][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 490.470382][ T5903] hub 7-1:0.0: probe with driver hub failed with error -5 [ 490.541322][ T5903] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input107 [ 490.762508][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 490.924264][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input106 [ 491.077174][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 491.209025][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 491.312292][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 491.390406][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 491.442008][ T5896] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 491.590450][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 491.750492][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 492.022391][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 492.089862][ T5923] usb 7-1: USB disconnect, device number 67 [ 492.100686][ T5896] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 492.120279][ T30] audit: type=1400 audit(1755616981.994:1479): avc: denied { setopt } for pid=13662 comm="syz.8.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 492.156580][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 492.195780][ T5896] usb 6-1: can't read configurations, error -22 [ 492.260523][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 492.370390][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 492.440434][ T5896] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 492.490367][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 492.601437][ T5924] mceusb 9-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 492.693148][T13667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13667 comm=syz.8.1902 [ 492.705630][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 492.720492][ T5896] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 492.728403][ T5896] usb 6-1: can't read configurations, error -22 [ 492.735101][ T5924] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 492.843602][ T5924] usb 9-1: USB disconnect, device number 55 [ 492.900433][ T30] audit: type=1400 audit(1755616982.784:1480): avc: denied { name_bind } for pid=13672 comm="syz.6.1904" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 492.930449][ T5896] usb usb6-port1: attempt power cycle [ 493.230377][ T5923] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 493.320461][ T5896] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 493.441743][ T5923] usb 7-1: config 0 has no interfaces? [ 493.521965][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 493.560404][ T5923] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 493.684523][ T5896] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 493.700432][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.708419][ T5923] usb 7-1: Product: syz [ 493.761484][T13678] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 493.809543][ T5896] usb 6-1: can't read configurations, error -71 [ 493.880409][ T5923] usb 7-1: Manufacturer: syz [ 493.885014][ T5923] usb 7-1: SerialNumber: syz [ 494.061648][ T5923] usb 7-1: config 0 descriptor?? [ 495.560437][ T30] audit: type=1400 audit(1755616985.474:1481): avc: denied { create } for pid=13682 comm="syz.5.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 495.873269][ T5903] usb 7-1: USB disconnect, device number 68 [ 496.976541][T13684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1907'. [ 497.463886][T13684] bridge0: port 4(batadv1) entered blocking state [ 497.510406][ T5896] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 497.558542][T13684] bridge0: port 4(batadv1) entered disabled state [ 497.713033][T13684] batadv1: entered allmulticast mode [ 497.767446][T13684] batadv1: entered promiscuous mode [ 497.800516][ T5896] usb 10-1: Using ep0 maxpacket: 16 [ 497.874693][ T5896] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.950636][ T6614] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 497.959856][ T6614] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 498.020046][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.121171][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 498.226307][ T5896] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 498.370794][ T5896] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.670668][ T5896] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 498.734917][ T5896] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 498.792220][ T5896] usb 10-1: Manufacturer: syz [ 498.861564][ T5896] usb 10-1: config 0 descriptor?? [ 499.140389][ T30] audit: type=1400 audit(1755616989.044:1482): avc: denied { nlmsg_read } for pid=13705 comm="syz.6.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 499.347493][ T30] audit: type=1400 audit(1755616989.054:1483): avc: denied { ioctl } for pid=13705 comm="syz.6.1912" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 499.950348][ T5896] rc_core: IR keymap rc-hauppauge not found [ 499.956254][ T5896] Registered IR keymap rc-empty [ 500.056503][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 500.192277][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 500.321836][ T5896] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 500.454023][ T30] audit: type=1400 audit(1755616990.364:1484): avc: denied { bind } for pid=13712 comm="syz.5.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 500.462462][ T5896] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input108 [ 500.712044][T13722] fuse: Unknown parameter 'groupRid' [ 500.910738][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.054048][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.060355][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.100373][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.228723][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.344964][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.400753][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.421049][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 501.500436][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.508727][T13730] kAFS: No cell specified [ 501.540410][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.650949][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.751227][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.781721][ T30] audit: type=1400 audit(1755616991.694:1485): avc: denied { listen } for pid=13731 comm="syz.5.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.882015][ T5896] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 501.951145][ T5896] mceusb 10-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 502.490089][ T5896] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 502.610677][ T5896] usb 10-1: USB disconnect, device number 11 [ 502.970383][ T7394] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 502.980434][ T5896] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 503.220685][ T5896] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 503.229834][ T5896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.350903][ T5896] usb 10-1: Product: syz [ 503.355160][ T5896] usb 10-1: Manufacturer: syz [ 503.359823][ T5896] usb 10-1: SerialNumber: syz [ 503.490438][ T7394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 503.608748][ T7394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.620912][ T5896] usb 10-1: config 0 descriptor?? [ 503.746223][ T7394] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 503.854341][ T7394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.970801][ T7394] usb 6-1: config 0 descriptor?? [ 504.250400][ T7395] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 504.475457][ T7394] elan 0003:04F3:0755.000D: unknown main item tag 0x2 [ 504.554859][ T7394] elan 0003:04F3:0755.000D: item fetching failed at offset 1/5 [ 504.800906][ T7394] elan 0003:04F3:0755.000D: Hid Parse failed [ 505.170385][ T7394] elan 0003:04F3:0755.000D: probe with driver elan failed with error -22 [ 505.284439][ T7395] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 505.360828][ T7394] usb 6-1: USB disconnect, device number 74 [ 505.373339][ T7395] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.470784][ T7395] usb 7-1: Product: syz [ 505.474972][ T7395] usb 7-1: Manufacturer: syz [ 505.479552][ T7395] usb 7-1: SerialNumber: syz [ 505.631021][ T7395] usb 7-1: config 0 descriptor?? [ 505.822548][ T7395] kvaser_usb 7-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 506.201812][T13042] block nbd0: Possible stuck request ffff8880267a0000: control (read@0,1024B). Runtime 300 seconds [ 506.212719][T13042] block nbd0: Possible stuck request ffff8880267a01c0: control (read@1024,1024B). Runtime 300 seconds [ 506.223815][T13042] block nbd0: Possible stuck request ffff8880267a0380: control (read@2048,1024B). Runtime 300 seconds [ 506.234848][T13042] block nbd0: Possible stuck request ffff8880267a0540: control (read@3072,1024B). Runtime 300 seconds [ 506.775384][ T7388] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 506.904532][ T5896] usb 10-1: can't set config #0, error -71 [ 507.005885][ T7388] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 507.141276][ T7388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.190546][ T5896] usb 10-1: USB disconnect, device number 12 [ 507.250951][ T7388] usb 6-1: Product: syz [ 507.296798][ T7388] usb 6-1: Manufacturer: syz [ 507.361082][ T7388] usb 6-1: SerialNumber: syz [ 507.416720][ T7388] usb 6-1: config 0 descriptor?? [ 507.561939][ T7388] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 507.764808][ T7388] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 507.804655][ T7388] sq905c 6-1:0.0: Get version command failed [ 507.890362][ T7388] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 508.019372][ T7388] usb 6-1: USB disconnect, device number 75 [ 508.628653][T13776] lo speed is unknown, defaulting to 1000 [ 508.790826][T13780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 508.800470][T13780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 508.807504][T13780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 508.814733][T13780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 508.824560][T13780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 508.841301][T13779] lo speed is unknown, defaulting to 1000 [ 509.392344][T13784] hub 6-0:1.0: USB hub found [ 509.397216][T13784] hub 6-0:1.0: 1 port detected [ 509.900547][ T7388] usb 7-1: USB disconnect, device number 69 [ 510.079121][T13794] fuse: Unknown parameter 'group_id00000000000000000000' [ 510.312506][T13795] vlan1: entered promiscuous mode [ 510.317609][T13795] vlan1: entered allmulticast mode [ 510.340345][T13795] veth0_vlan: entered allmulticast mode [ 510.434925][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1940'. [ 510.444526][ T5924] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 510.642395][T13779] chnl_net:caif_netlink_parms(): no params data found [ 510.642691][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.777465][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 510.880511][T13780] Bluetooth: hci7: command tx timeout [ 510.950364][ T7388] usb 7-1: new low-speed USB device number 70 using dummy_hcd [ 511.160358][ T5924] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 511.216068][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.300459][ T7388] usb 7-1: device descriptor read/64, error -71 [ 511.337472][ T5924] usb 6-1: config 0 descriptor?? [ 511.381237][ T5924] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 511.410347][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 511.438788][ T5924] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 511.541036][ T5924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 511.542236][T13779] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.590364][ T30] audit: type=1400 audit(1755617001.504:1486): avc: denied { create } for pid=13793 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 511.631812][ T5924] usb 6-1: media controller created [ 511.638106][ T7388] usb 7-1: new low-speed USB device number 71 using dummy_hcd [ 511.712288][T13779] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.719437][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.774899][T13779] bridge_slave_0: entered allmulticast mode [ 511.846325][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 511.854077][T13779] bridge_slave_0: entered promiscuous mode [ 511.861024][ T7388] usb 7-1: device descriptor read/64, error -71 [ 511.917831][ T5924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 511.966318][T13793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.011315][T13779] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.018371][T13779] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.028872][ T7388] usb usb7-port1: attempt power cycle [ 512.039812][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input110 [ 512.175703][ T5924] dvb-usb: schedule remote query interval to 150 msecs. [ 512.180518][T13779] bridge_slave_1: entered allmulticast mode [ 512.201289][T13779] bridge_slave_1: entered promiscuous mode [ 512.260681][ T5924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 512.383799][ T5924] usb 6-1: USB disconnect, device number 76 [ 512.393569][T13779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.450528][ T7388] usb 7-1: new low-speed USB device number 72 using dummy_hcd [ 512.522242][T13779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.592456][ T7388] usb 7-1: device descriptor read/8, error -71 [ 512.599143][ T5924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 512.850454][ T7388] usb 7-1: new low-speed USB device number 73 using dummy_hcd [ 512.927171][T13779] team0: Port device team_slave_0 added [ 512.962389][T13780] Bluetooth: hci7: command tx timeout [ 512.968126][ T7388] usb 7-1: device descriptor read/8, error -71 [ 513.012072][T13779] team0: Port device team_slave_1 added [ 513.051949][ T5924] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 513.100670][ T7388] usb usb7-port1: unable to enumerate USB device [ 513.163507][T13779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.246089][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.370357][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 513.430104][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.430412][ T6071] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 513.557008][T13779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.560354][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.630362][ T30] audit: type=1400 audit(1755617003.514:1487): avc: denied { shutdown } for pid=13816 comm="syz.6.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 513.639986][T13779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.688825][T13817] sctp: [Deprecated]: syz.6.1945 (pid 13817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.688825][T13817] Use struct sctp_sack_info instead [ 513.730395][ T6071] usb 10-1: device descriptor read/64, error -71 [ 513.770352][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.779994][ T5924] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 513.832071][ T30] audit: type=1400 audit(1755617003.554:1488): avc: denied { create } for pid=13814 comm="syz.8.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 513.865146][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.010345][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.021958][ T6071] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 514.097796][T13779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.130362][ T7394] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 514.170940][ T5924] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 514.179979][ T5924] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 514.200657][ T6071] usb 10-1: device descriptor read/64, error -71 [ 514.300334][ T7394] usb 7-1: Using ep0 maxpacket: 32 [ 514.350563][ T6071] usb usb10-port1: attempt power cycle [ 514.357606][ T7394] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 514.360329][ T5924] usb 6-1: Manufacturer: syz [ 514.396864][ T7394] usb 7-1: config 0 has no interface number 0 [ 514.461375][ T5924] usb 6-1: config 0 descriptor?? [ 514.479380][ T7394] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 514.539115][ T7394] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.614466][T13779] hsr_slave_0: entered promiscuous mode [ 514.620483][ T7394] usb 7-1: Product: syz [ 514.655064][ T7394] usb 7-1: Manufacturer: syz [ 514.659663][ T7394] usb 7-1: SerialNumber: syz [ 514.681040][T13779] hsr_slave_1: entered promiscuous mode [ 514.726371][T13779] debugfs: 'hsr0' already exists in 'hsr' [ 514.750937][ T7394] usb 7-1: config 0 descriptor?? [ 514.760375][ T6071] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 514.800175][T13779] Cannot create hsr debugfs directory [ 514.809495][ T7394] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 514.868644][ T6071] usb 10-1: device descriptor read/8, error -71 [ 514.910465][ T5923] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 515.040578][T13780] Bluetooth: hci7: command tx timeout [ 515.082527][ T7394] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 515.100441][ T5923] usb 9-1: Using ep0 maxpacket: 32 [ 515.140447][ T5923] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 515.148516][ T5923] usb 9-1: config 0 has no interface number 0 [ 515.150874][ T6071] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 515.200536][ T7394] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 515.271919][ T6071] usb 10-1: device descriptor read/8, error -71 [ 515.295228][ T5923] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 515.310334][ T5924] rc_core: IR keymap rc-hauppauge not found [ 515.316221][ T5924] Registered IR keymap rc-empty [ 515.380322][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.402996][ T6071] usb usb10-port1: unable to enumerate USB device [ 515.440120][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 515.490339][ T5923] usb 9-1: Product: syz [ 515.520601][ T5923] usb 9-1: Manufacturer: syz [ 515.525204][ T5923] usb 9-1: SerialNumber: syz [ 515.557358][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 515.582403][ T30] audit: type=1400 audit(1755617005.504:1489): avc: denied { search } for pid=13826 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.632164][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 515.655148][ T5923] usb 9-1: config 0 descriptor?? [ 515.704692][ T5923] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 515.756445][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input111 [ 515.809184][ T30] audit: type=1400 audit(1755617005.524:1490): avc: denied { search } for pid=13826 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.014392][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 516.177342][T13832] Bluetooth: (null): Invalid header checksum [ 516.212793][ T30] audit: type=1400 audit(1755617005.524:1491): avc: denied { search } for pid=13826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.280906][ T6625] Bluetooth: (null): Invalid header checksum [ 516.362989][ T6625] Bluetooth: (null): Invalid header checksum [ 516.594446][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 516.650525][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 516.713930][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 516.715302][ T7385] usb 7-1: USB disconnect, device number 74 [ 516.734537][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1948'. [ 516.796726][T13842] netlink: 172 bytes leftover after parsing attributes in process `syz.9.1948'. [ 516.806377][ T5849] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 517.122854][ T5849] Bluetooth: hci7: command tx timeout [ 517.130356][ T30] audit: type=1400 audit(1755617005.524:1492): avc: denied { search } for pid=13826 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.187949][ T5923] usb 9-1: qt2_attach - failed to power on unit: -71 [ 517.205047][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.250609][ T7385] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 517.334756][ T30] audit: type=1400 audit(1755617005.544:1493): avc: denied { read open } for pid=13827 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.340453][ T5923] quatech2 9-1:0.51: probe with driver quatech2 failed with error -71 [ 517.400379][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.423057][T13779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.483033][ T7385] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 517.494275][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.496342][T13779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.560462][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.572218][ T7385] quatech2 7-1:0.51: device disconnected [ 517.628949][ T5923] usb 9-1: USB disconnect, device number 56 [ 517.634996][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.646379][T13857] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1951'. [ 517.668677][ T30] audit: type=1400 audit(1755617005.544:1494): avc: denied { getattr } for pid=13827 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.700402][ T7388] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 517.708277][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.740636][ T5924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.771226][ T5924] mceusb 6-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 517.822560][T13779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.876814][ T5924] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 517.902723][T13779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.967836][ T30] audit: type=1400 audit(1755617005.544:1495): avc: denied { getattr } for pid=13827 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 517.995704][ T30] audit: type=1400 audit(1755617005.934:1496): avc: denied { read } for pid=13829 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 518.068384][ T7388] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 518.130509][ T5924] usb 6-1: USB disconnect, device number 77 [ 518.150320][ T7388] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.158403][ T7388] usb 10-1: Product: syz [ 518.201876][ T7385] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 518.213327][ T30] audit: type=1400 audit(1755617005.934:1497): avc: denied { open } for pid=13829 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 518.290545][ T5903] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 518.330341][ T7388] usb 10-1: Manufacturer: syz [ 518.385627][ T7388] usb 10-1: SerialNumber: syz [ 518.460359][ T7385] usb 9-1: Using ep0 maxpacket: 16 [ 518.480850][ T5903] usb 7-1: device descriptor read/64, error -71 [ 518.500818][ T7388] usb 10-1: config 0 descriptor?? [ 518.526283][ T30] audit: type=1400 audit(1755617006.234:1498): avc: denied { create } for pid=13833 comm="syz.5.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 518.568240][T13779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.572380][ T7388] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 017 [ 518.584789][ T7385] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 518.662390][ T7385] usb 9-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 518.676424][T13779] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.763688][ T7388] (null): failure setting delay to 10us [ 518.769348][ T7388] i2c-tiny-usb 10-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 518.770468][ T5903] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 518.781939][ T7385] usb 9-1: Product: syz [ 518.789778][ T7385] usb 9-1: Manufacturer: syz [ 518.793466][ T30] audit: type=1400 audit(1755617007.564:1499): avc: denied { ioctl } for pid=13852 comm="syz.6.1951" path="socket:[46505]" dev="sockfs" ino=46505 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 518.910335][ T7385] usb 9-1: SerialNumber: syz [ 518.960615][ T7388] usb 10-1: USB disconnect, device number 17 [ 518.969460][T13779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 518.978320][ T7385] usb 9-1: config 0 descriptor?? [ 519.060405][ T30] audit: type=1400 audit(1755617007.564:1500): avc: denied { bind } for pid=13852 comm="syz.6.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 519.103609][ T7385] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 519.130401][ T5903] usb 7-1: device descriptor read/64, error -71 [ 519.150386][T13779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.215002][ T7385] usb 9-1: Detected FT4232HA [ 519.250594][ T5903] usb usb7-port1: attempt power cycle [ 519.265168][ T6614] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.272256][ T6614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.321481][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.328560][ T6614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.340379][ T30] audit: type=1400 audit(1755617007.854:1501): avc: denied { add_name } for pid=13826 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.492655][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.680780][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.700381][ T5903] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 519.758561][ T5903] usb 7-1: device descriptor read/8, error -71 [ 519.845583][T13861] netlink: 'syz.8.1952': attribute type 2 has an invalid length. [ 519.972676][T13861] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1952'. [ 520.104021][ T5903] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 520.219945][ T7385] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 520.226834][ T5903] usb 7-1: device descriptor read/8, error -71 [ 520.361299][ T7385] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 520.404039][ T5903] usb usb7-port1: unable to enumerate USB device [ 520.430524][ T7385] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 520.564940][ T7385] usb 9-1: USB disconnect, device number 57 [ 520.599056][T13779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.658836][ T7385] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 520.763125][ T7385] ftdi_sio 9-1:0.0: device disconnected [ 520.915174][T13894] tipc: Enabling not permitted [ 520.929933][T13894] tipc: Enabling of bearer rejected, failed to enable media [ 521.150927][T13896] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1955'. [ 521.339371][T13779] veth0_vlan: entered promiscuous mode [ 521.452211][T13779] veth1_vlan: entered promiscuous mode [ 521.572002][ T5903] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 521.670387][ T7385] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 521.680195][T13779] veth0_macvtap: entered promiscuous mode [ 521.783849][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 521.820136][T13779] veth1_macvtap: entered promiscuous mode [ 521.862165][ T5903] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 521.870692][ T7385] usb 9-1: Using ep0 maxpacket: 16 [ 521.942361][ T5903] usb 7-1: config 2 has no interface number 0 [ 521.948457][ T5903] usb 7-1: config 2 interface 31 has no altsetting 0 [ 521.948488][ T7385] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.971897][T13779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.043836][T13779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.140574][ T5903] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 522.159813][ T7385] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.212324][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.260505][ T6808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.299700][ T7385] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.323000][ T5903] usb 7-1: Product: syz [ 522.327166][ T5903] usb 7-1: Manufacturer: syz [ 522.342582][ T6808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.420452][ T5903] usb 7-1: SerialNumber: syz [ 522.425118][ T7385] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 522.454188][ T5903] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 522.520439][ T6808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.531350][ T7385] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.635430][ T6808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.657493][ T7388] usb 7-1: USB disconnect, device number 79 [ 522.716190][ T7385] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 522.842225][ T7385] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 522.861436][ T6643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.869237][ T6643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.990666][ T7385] usb 9-1: Manufacturer: syz [ 523.050887][ T7385] usb 9-1: config 0 descriptor?? [ 523.120793][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.229705][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.732451][T13915] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 523.814858][T13915] SELinux: failed to load policy [ 524.000567][ T7385] rc_core: IR keymap rc-hauppauge not found [ 524.040351][ T7385] Registered IR keymap rc-empty [ 524.115988][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 524.213203][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 524.330883][ T7385] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 524.501168][ T7385] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input112 [ 524.541219][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 524.642603][T13927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.671181][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 524.693586][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 524.693599][ T30] audit: type=1400 audit(1755617014.614:1509): avc: denied { getopt } for pid=13928 comm="syz.6.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 524.760364][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 524.820860][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 524.840353][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 524.870387][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 524.900058][T13932] ceph: No mds server is up or the cluster is laggy [ 524.946687][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 525.007409][T13945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.081778][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 525.170529][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 525.232530][T13927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.348419][ T30] audit: type=1400 audit(1755617014.814:1510): avc: denied { connect } for pid=13928 comm="syz.6.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 525.768221][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 525.814436][ T7385] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 525.851099][ T7385] mceusb 9-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 525.907356][ T30] audit: type=1400 audit(1755617014.814:1511): avc: denied { write } for pid=13928 comm="syz.6.1961" path="socket:[47012]" dev="sockfs" ino=47012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 525.991969][T13927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.009623][ T30] audit: type=1400 audit(1755617015.914:1512): avc: denied { read } for pid=13952 comm="syz.8.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 526.031208][ T7385] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.200864][ T7385] usb 9-1: USB disconnect, device number 58 [ 526.251664][T13927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.270373][ T30] audit: type=1400 audit(1755617015.924:1513): avc: denied { create } for pid=13952 comm="syz.8.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 526.537166][ T30] audit: type=1400 audit(1755617015.924:1514): avc: denied { ioctl } for pid=13952 comm="syz.8.1964" path="socket:[45587]" dev="sockfs" ino=45587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 526.721794][ T30] audit: type=1400 audit(1755617015.924:1515): avc: denied { create } for pid=13952 comm="syz.8.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 526.741781][ T6614] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.749937][ T6614] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.764621][T13954] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1963'. [ 527.040677][ T6614] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.180364][ T6614] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.722288][T13970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.885572][T13970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.910619][ T7385] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 528.491090][ T30] audit: type=1400 audit(1755617018.414:1516): avc: denied { listen } for pid=13979 comm="syz.9.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 528.512124][T13980] !: renamed from dummy0 (while UP) [ 530.120366][ T7385] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 530.430400][ T7385] usb 7-1: Using ep0 maxpacket: 16 [ 530.532166][ T7385] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.609995][T14006] netlink: 'syz.5.1974': attribute type 1 has an invalid length. [ 530.670358][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1974'. [ 530.725931][ T7385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.922263][ T7385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.111398][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1974'. [ 531.217164][ T30] audit: type=1400 audit(1755617021.134:1517): avc: denied { append } for pid=14004 comm="syz.5.1974" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.280383][ T7385] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 531.320360][ T7385] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.351239][ T7385] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 531.362763][ T7385] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.490810][ T7385] usb 7-1: Manufacturer: syz [ 531.601092][ T7385] usb 7-1: config 0 descriptor?? [ 532.234973][ T7388] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 532.247427][ T30] audit: type=1400 audit(1755617022.144:1518): avc: denied { write } for pid=14032 comm="syz.9.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 532.303402][ T7385] rc_core: IR keymap rc-hauppauge not found [ 532.309426][ T7385] Registered IR keymap rc-empty [ 532.317084][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.380504][ T7388] usb 3-1: device descriptor read/64, error -71 [ 532.388253][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.431210][ T7385] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 532.461972][ T7385] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input114 [ 532.498642][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.549197][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.570340][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.620577][ T7388] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 532.647365][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.690459][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.710503][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.741543][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 532.843097][ T7388] usb 3-1: device descriptor read/64, error -71 [ 532.922897][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.062878][ T7388] usb usb3-port1: attempt power cycle [ 533.068323][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.087103][T14050] devpts: Bad value for 'max' [ 533.112093][ T7385] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.158283][ T7385] mceusb 7-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 533.166750][ T7385] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 533.196023][ T7385] usb 7-1: USB disconnect, device number 80 [ 533.288678][ T30] audit: type=1400 audit(1755617023.204:1519): avc: denied { setattr } for pid=14062 comm="syz.8.1981" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.430714][ T7388] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 533.441434][ T30] audit: type=1400 audit(1755617023.314:1520): avc: denied { connect } for pid=14062 comm="syz.8.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 533.786429][ T30] audit: type=1400 audit(1755617023.314:1521): avc: denied { map } for pid=14062 comm="syz.8.1981" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.810180][ T30] audit: type=1400 audit(1755617023.314:1522): avc: denied { execute } for pid=14062 comm="syz.8.1981" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.834774][ T7388] usb 3-1: device descriptor read/8, error -71 [ 533.901925][ T30] audit: type=1400 audit(1755617023.314:1523): avc: denied { write } for pid=14062 comm="syz.8.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 534.100351][ T7388] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 534.120834][ T7388] usb 3-1: device descriptor read/8, error -71 [ 534.203650][ T5924] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 534.230571][ T7388] usb usb3-port1: unable to enumerate USB device [ 534.240400][ T7395] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 534.360360][ T5924] usb 10-1: Using ep0 maxpacket: 16 [ 534.369759][ T5924] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 534.379034][ T5924] usb 10-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 534.418870][ T5924] usb 10-1: Product: syz [ 534.427577][ T5924] usb 10-1: Manufacturer: syz [ 534.442253][ T5924] usb 10-1: SerialNumber: syz [ 534.451454][ T5924] usb 10-1: config 0 descriptor?? [ 534.487640][ T5924] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 534.538055][ T5924] usb 10-1: Detected FT4232HA [ 534.545558][ T7395] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 534.586934][T14117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.715788][T14079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.728042][T14079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.803416][T14079] netlink: 'syz.9.1985': attribute type 2 has an invalid length. [ 534.811297][T14079] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1985'. [ 534.838801][ T7395] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.850295][ T7395] usb 7-1: Product: syz [ 534.860242][ T7395] usb 7-1: Manufacturer: syz [ 534.870324][ T7395] usb 7-1: SerialNumber: syz [ 534.880428][ T7395] usb 7-1: config 0 descriptor?? [ 535.350167][ T7395] kvaser_usb 7-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 535.524430][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 535.534045][T14128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26384 sclass=netlink_route_socket pid=14128 comm=syz.2.1990 [ 535.558138][ T30] audit: type=1400 audit(1755617025.454:1524): avc: denied { bind } for pid=14127 comm="syz.2.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 535.578250][ T5924] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 535.671560][ T5924] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 535.698441][ T5924] usb 10-1: USB disconnect, device number 19 [ 535.829777][ T5924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 535.935996][ T5924] ftdi_sio 10-1:0.0: device disconnected [ 535.987523][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1992'. [ 536.001360][T14146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.069243][T14146] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 536.105302][T14146] bond_slave_0: entered promiscuous mode [ 536.110951][T14146] bond_slave_1: entered promiscuous mode [ 536.240878][T13042] block nbd0: Possible stuck request ffff8880267a0000: control (read@0,1024B). Runtime 330 seconds [ 536.251642][T13042] block nbd0: Possible stuck request ffff8880267a01c0: control (read@1024,1024B). Runtime 330 seconds [ 536.262655][T13042] block nbd0: Possible stuck request ffff8880267a0380: control (read@2048,1024B). Runtime 330 seconds [ 536.273709][T13042] block nbd0: Possible stuck request ffff8880267a0540: control (read@3072,1024B). Runtime 330 seconds [ 536.307957][T14146] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 536.362422][ T6071] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 536.483380][T14146] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 536.703944][ T7385] usb 7-1: USB disconnect, device number 81 [ 536.704851][ T6071] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 536.751014][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1995'. [ 536.819167][ T6071] usb 6-1: config 0 has no interface number 0 [ 536.826846][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1995'. [ 536.837747][ T6623] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.871192][ T6623] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.904002][ T6623] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.990153][ T6071] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 537.008458][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.018237][ T6071] usb 6-1: Product: syz [ 537.090719][ T6071] usb 6-1: Manufacturer: syz [ 537.100375][ T6071] usb 6-1: SerialNumber: syz [ 537.106118][ T6071] usb 6-1: config 0 descriptor?? [ 537.112973][ T6071] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 537.360713][ T6623] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.448468][ T6071] dvb-usb: bulk message failed: -22 (2/0) [ 537.481398][ T6071] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 537.511267][ T6071] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 537.605211][ T6071] usb 6-1: media controller created [ 537.632033][T14192] lo speed is unknown, defaulting to 1000 [ 537.652820][ T6071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.694715][ T6071] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 537.790209][T14199] input: syz1 as /devices/virtual/input/input116 [ 537.886201][ T6071] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 538.080410][ T7395] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 538.094813][ T6071] rc_core: IR keymap rc-dtt200u not found [ 538.103317][T14215] C: renamed from lo [ 538.108534][T14215] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 538.133117][ T6071] Registered IR keymap rc-empty [ 538.248258][ T6071] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 538.261466][ T6071] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input117 [ 538.610727][ T30] audit: type=1400 audit(1755617028.534:1525): avc: denied { write } for pid=14214 comm="syz.8.2003" path="socket:[47338]" dev="sockfs" ino=47338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 538.610753][T14220] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2003'. [ 538.644440][ T7395] usb 10-1: Using ep0 maxpacket: 8 [ 538.656986][ T6071] dvb-usb: schedule remote query interval to 300 msecs. [ 538.667306][ T7395] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 538.679441][ T6071] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 538.699188][ T7395] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 538.739478][ T6071] usb 6-1: USB disconnect, device number 78 [ 538.746509][ T7395] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 538.762240][ T7395] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 8560, setting to 1024 [ 538.788684][ T7395] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.807662][ T6071] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 538.856868][ T7395] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 538.866236][ T7395] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.874339][ T7395] usb 10-1: Product: syz [ 538.878754][ T7395] usb 10-1: Manufacturer: syz [ 538.883607][ T7395] usb 10-1: SerialNumber: syz [ 538.903389][T14199] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 538.920852][ T7395] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 538.933341][ T7395] usbtest 10-1:1.0: couldn't get endpoints, -22 [ 538.940682][ T7388] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 538.940931][ T7395] usbtest 10-1:1.0: probe with driver usbtest failed with error -22 [ 539.116310][T14199] block nbd9: NBD_DISCONNECT [ 539.142789][ T5951] usb 10-1: USB disconnect, device number 20 [ 539.192476][ T7388] usb 9-1: Using ep0 maxpacket: 8 [ 539.199629][ T7388] usb 9-1: unable to get BOS descriptor or descriptor too short [ 539.208117][ T7388] usb 9-1: config 247 has an invalid interface number: 145 but max is 0 [ 539.217505][ T7388] usb 9-1: config 247 has no interface number 0 [ 539.224010][ T7388] usb 9-1: config 247 interface 145 has no altsetting 0 [ 539.233462][ T7388] usb 9-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 539.251344][ T7388] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.260603][ T7388] usb 9-1: Product: syz [ 539.264733][ T7388] usb 9-1: Manufacturer: syz [ 539.269286][ T7388] usb 9-1: SerialNumber: syz [ 539.290328][ T7395] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 539.350449][ T7385] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 539.441738][ T7395] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 539.452615][ T7395] usb 7-1: config 0 interface 0 has no altsetting 0 [ 539.469088][ T7395] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 539.490616][ T7388] upd78f0730 9-1:247.145: upd78f0730 converter detected [ 539.500357][ T7385] usb 6-1: Using ep0 maxpacket: 16 [ 539.506037][ T7388] usb 9-1: upd78f0730 converter now attached to ttyUSB0 [ 539.515522][ T7388] usb 9-1: USB disconnect, device number 59 [ 539.523503][ T7385] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 539.538995][ T7395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.539666][ T7385] usb 6-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 539.556527][ T7388] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 539.565107][ T7388] upd78f0730 9-1:247.145: device disconnected [ 539.572589][ T7385] usb 6-1: Product: syz [ 539.577412][ T7385] usb 6-1: Manufacturer: syz [ 539.581216][ T7395] usb 7-1: config 0 descriptor?? [ 539.584976][ T7385] usb 6-1: SerialNumber: syz [ 539.617123][T14227] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 539.624933][ T7385] usb 6-1: config 0 descriptor?? [ 539.633559][ T7385] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 539.643026][ T7385] usb 6-1: Detected FT4232HA [ 539.846842][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.871758][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.319741][ T7395] konepure 0003:1E7D:2DBE.000E: item fetching failed at offset 0/2 [ 540.347700][ T7385] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 540.354778][ T7385] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 540.363086][ T7385] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 540.380684][ T7395] konepure 0003:1E7D:2DBE.000E: parse failed [ 540.382026][ T7385] usb 6-1: USB disconnect, device number 79 [ 540.395509][ T7385] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 540.412360][ T7395] konepure 0003:1E7D:2DBE.000E: probe with driver konepure failed with error -22 [ 540.415209][ T7385] ftdi_sio 6-1:0.0: device disconnected [ 540.451071][T14245] overlayfs: failed to resolve './bus/file0': -2 [ 540.487754][T14243] 9pnet_fd: Insufficient options for proto=fd [ 540.492544][ T30] audit: type=1400 audit(1755617030.404:1526): avc: denied { read write } for pid=14242 comm="syz.8.2011" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 540.570642][ T30] audit: type=1400 audit(1755617030.404:1527): avc: denied { open } for pid=14242 comm="syz.8.2011" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 540.578465][ T7395] usb 7-1: USB disconnect, device number 82 [ 540.692149][ T30] audit: type=1400 audit(1755617030.454:1528): avc: denied { write } for pid=14240 comm="syz.9.2010" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 540.787189][ T31] INFO: task syz.4.1674:12807 blocked for more than 143 seconds. [ 540.802665][ T31] Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 541.747195][ T30] audit: type=1400 audit(1755617030.514:1529): avc: denied { mount } for pid=14248 comm="syz.8.2012" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 541.784255][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.920396][ T30] audit: type=1400 audit(1755617030.514:1530): avc: denied { ioctl } for pid=14248 comm="syz.8.2012" path="socket:[48209]" dev="sockfs" ino=48209 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 541.921954][ T31] task:syz.4.1674 state:D [ 541.967804][ T30] audit: type=1400 audit(1755617031.704:1531): avc: denied { write } for pid=5830 comm="syz-executor" path="pipe:[4086]" dev="pipefs" ino=4086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 542.008034][ T31] stack:26056 pid:12807 tgid:12806 ppid:5850 task_flags:0x400140 flags:0x00004004 [ 542.026134][ T31] Call Trace: [ 542.052525][ T31] [ 542.120589][ T31] __schedule+0x1190/0x5de0 [ 542.125094][ T31] ? lock_release+0x201/0x2f0 [ 542.129794][ T31] ? __pfx___schedule+0x10/0x10 [ 542.210321][ T31] ? inode_to_bdi+0x9e/0x160 [ 542.220321][ T31] ? filemap_fdatawrite_wbc+0x81/0x160 [ 542.270333][ T31] ? schedule+0x2d7/0x3a0 [ 542.274678][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.279435][ T31] ? lock_release+0x201/0x2f0 [ 542.306756][ T31] ? sync_bdevs+0xfd/0x360 [ 542.351173][ T31] schedule+0xe7/0x3a0 [ 542.355229][ T31] schedule_preempt_disabled+0x13/0x30 [ 542.390332][ T31] __mutex_lock+0x81b/0x1060 [ 542.400406][ T31] ? sync_bdevs+0x1a9/0x360 [ 542.404894][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.409630][ T31] ? sync_bdevs+0xfd/0x360 [ 542.440402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 542.460394][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.466370][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 542.530331][ T31] ? iput+0xd3/0x880 [ 542.534245][ T31] ? sync_bdevs+0xfd/0x360 [ 542.538654][ T31] sync_bdevs+0xfd/0x360 [ 542.570339][ T31] ksys_sync+0xb2/0x150 [ 542.574505][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 542.579262][ T31] ? rcu_is_watching+0x12/0xc0 [ 542.595154][ T31] __do_sys_sync+0xe/0x20 [ 542.599453][ T31] do_syscall_64+0xcd/0x4c0 [ 542.640473][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.658037][ T31] RIP: 0033:0x7fb41f98ebe9 [ 542.670324][ T31] RSP: 002b:00007fb42080e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 542.680308][ T31] RAX: ffffffffffffffda RBX: 00007fb41fbb5fa0 RCX: 00007fb41f98ebe9 [ 542.688253][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.696230][ T31] RBP: 00007fb41fbb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 542.710331][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.720313][ T31] R13: 00007fb41fbb6038 R14: 00007fb41fbb5fa0 R15: 00007ffcfafa7628 [ 542.728258][ T31] [ 542.830323][ T31] INFO: task syz.4.1674:12845 blocked for more than 145 seconds. [ 542.838034][ T31] Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 [ 542.891786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.970335][ T31] task:syz.4.1674 state:D stack:27376 pid:12845 tgid:12806 ppid:5850 task_flags:0x400040 flags:0x00004004 [ 543.000154][ T31] Call Trace: [ 543.003470][ T31] [ 543.006384][ T31] __schedule+0x1190/0x5de0 [ 543.011793][ T31] ? lock_release+0x201/0x2f0 [ 543.016454][ T31] ? __pfx___schedule+0x10/0x10 [ 543.023386][ T31] ? inode_to_bdi+0x9e/0x160 [ 543.027963][ T31] ? filemap_fdatawrite_wbc+0x81/0x160 [ 543.033533][ T31] ? schedule+0x2d7/0x3a0 [ 543.037843][ T31] ? rcu_is_watching+0x12/0xc0 [ 543.042602][ T31] ? lock_release+0x201/0x2f0 [ 543.047255][ T31] ? sync_bdevs+0xfd/0x360 [ 543.051667][ T31] schedule+0xe7/0x3a0 [ 543.055702][ T31] schedule_preempt_disabled+0x13/0x30 [ 543.061162][ T31] __mutex_lock+0x81b/0x1060 [ 543.065740][ T31] ? sync_bdevs+0x1a9/0x360 [ 543.070252][ T31] ? rcu_is_watching+0x12/0xc0 [ 543.075021][ T31] ? sync_bdevs+0xfd/0x360 [ 543.079416][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 543.084432][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.090406][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 543.095673][ T31] ? iput+0xd3/0x880 [ 543.099541][ T31] ? sync_bdevs+0xfd/0x360 [ 543.105525][ T31] sync_bdevs+0xfd/0x360 [ 543.109773][ T31] ksys_sync+0xb2/0x150 [ 543.115003][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 543.119770][ T31] ? do_user_addr_fault+0x843/0x1370 [ 543.125081][ T31] ? rcu_is_watching+0x12/0xc0 [ 543.129832][ T31] __do_sys_sync+0xe/0x20 [ 543.134161][ T31] do_syscall_64+0xcd/0x4c0 [ 543.138643][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.144515][ T31] RIP: 0033:0x7fb41f98ebe9 [ 543.148896][ T31] RSP: 002b:00007fb4207ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 543.157307][ T31] RAX: ffffffffffffffda RBX: 00007fb41fbb6090 RCX: 00007fb41f98ebe9 [ 543.165276][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.173245][ T31] RBP: 00007fb41fbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.181202][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.189502][ T31] R13: 00007fb41fbb6128 R14: 00007fb41fbb6090 R15: 00007ffcfafa7628 [ 543.197492][ T31] [ 543.200591][ T31] INFO: lockdep is turned off. [ 543.205326][ T31] NMI backtrace for cpu 1 [ 543.205335][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 543.205348][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.205354][ T31] Call Trace: [ 543.205357][ T31] [ 543.205362][ T31] dump_stack_lvl+0x116/0x1f0 [ 543.205376][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 543.205391][ T31] ? watchdog+0xd17/0x1260 [ 543.205402][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 543.205419][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 543.205435][ T31] watchdog+0xf0e/0x1260 [ 543.205447][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.205457][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 543.205468][ T31] ? __kthread_parkme+0x19e/0x250 [ 543.205483][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.205494][ T31] kthread+0x3c5/0x780 [ 543.205504][ T31] ? __pfx_kthread+0x10/0x10 [ 543.205514][ T31] ? rcu_is_watching+0x12/0xc0 [ 543.205527][ T31] ? __pfx_kthread+0x10/0x10 [ 543.205537][ T31] ret_from_fork+0x5d7/0x6f0 [ 543.205546][ T31] ? __pfx_kthread+0x10/0x10 [ 543.205556][ T31] ret_from_fork_asm+0x1a/0x30 [ 543.205572][ T31] [ 543.205576][ T31] Sending NMI from CPU 1 to CPUs 0: [ 543.328315][ C0] NMI backtrace for cpu 0 [ 543.328328][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 543.328346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.328354][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 543.328372][ C0] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 543.328385][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 543.328398][ C0] RAX: 0000000001ab900c RBX: 0000000000000000 RCX: ffffffff8b939c29 [ 543.328407][ C0] RDX: ffffed1017086656 RSI: ffffffff8c162880 RDI: ffffffff819133c1 [ 543.328416][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000000 R09: ffffed1017086655 [ 543.328424][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 543.328433][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab3f90 R15: 0000000000000000 [ 543.328441][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 543.328455][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.328464][ C0] CR2: 0000200000404030 CR3: 000000000e380000 CR4: 00000000003526f0 [ 543.328473][ C0] Call Trace: [ 543.328478][ C0] [ 543.328483][ C0] default_idle+0x13/0x20 [ 543.328499][ C0] default_idle_call+0x6d/0xb0 [ 543.328514][ C0] do_idle+0x391/0x510 [ 543.328531][ C0] ? __pfx_do_idle+0x10/0x10 [ 543.328547][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 543.328563][ C0] cpu_startup_entry+0x4f/0x60 [ 543.328578][ C0] rest_init+0x16b/0x2b0 [ 543.328594][ C0] ? acpi_subsystem_init+0x133/0x180 [ 543.328614][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 543.328628][ C0] start_kernel+0x3ee/0x4d0 [ 543.328647][ C0] x86_64_start_reservations+0x18/0x30 [ 543.328667][ C0] x86_64_start_kernel+0x130/0x190 [ 543.328686][ C0] common_startup_64+0x13e/0x148 [ 543.328706][ C0] [ 543.329346][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 543.527663][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 543.539430][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.549466][ T31] Call Trace: [ 543.552728][ T31] [ 543.555630][ T31] dump_stack_lvl+0x3d/0x1f0 [ 543.560190][ T31] vpanic+0x6e8/0x7a0 [ 543.564319][ T31] ? __pfx_vpanic+0x10/0x10 [ 543.568802][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 543.574673][ T31] panic+0xca/0xd0 [ 543.578369][ T31] ? __pfx_panic+0x10/0x10 [ 543.582775][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 543.588122][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 543.594255][ T31] ? watchdog+0xd78/0x1260 [ 543.598648][ T31] ? watchdog+0xd6b/0x1260 [ 543.603034][ T31] watchdog+0xd89/0x1260 [ 543.607246][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.611895][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 543.617059][ T31] ? __kthread_parkme+0x19e/0x250 [ 543.622065][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.626708][ T31] kthread+0x3c5/0x780 [ 543.630746][ T31] ? __pfx_kthread+0x10/0x10 [ 543.635322][ T31] ? rcu_is_watching+0x12/0xc0 [ 543.640054][ T31] ? __pfx_kthread+0x10/0x10 [ 543.644619][ T31] ret_from_fork+0x5d7/0x6f0 [ 543.649177][ T31] ? __pfx_kthread+0x10/0x10 [ 543.653734][ T31] ret_from_fork_asm+0x1a/0x30 [ 543.658474][ T31] [ 543.661644][ T31] Kernel Offset: disabled [ 543.665940][ T31] Rebooting in 86400 seconds..