last executing test programs: 5m16.222623531s ago: executing program 1 (id=674): socket$inet6_sctp(0xa, 0x5, 0x84) gettid() prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000001100000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = getuid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000030601014000000000000000010000090900020073797a3100000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in=@multicast2, 0x4e24, 0xfff, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11, r7, r8}, {0x6, 0x80000000000, 0x2, 0x6, 0x1ff, 0xfffffffffffffffa, 0x9, 0x7f}, {0x3, 0xfff0000000000000, 0xc5f, 0x5}, 0xfffffffe, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@local, 0x4d4, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x0, 0x3, 0x10, 0x76e9af20, 0x9, 0x4}}, 0xe8) mmap(&(0x7f00001f5000/0x11000)=nil, 0x11000, 0x1000005, 0x11, r5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRESOCT=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0], 0x50) 5m13.572303105s ago: executing program 1 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x28013, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setrlimit(0xe, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40000000, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x1, 0x8af1, 0x0, 0x9, 0x2, 0x1}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_WRITEV={0x2, 0x69, 0x2004, @fd_index=0x2, 0x100000000, &(0x7f00000007c0)=[{&(0x7f0000000640)="e7846bea5c808edc5deaa653492d0d25b8486092a472ce0198a57af3c1aba618f3db28de825d0419c4557354682298a4d941011e2a4eb728518366b064eb5428b3ef9c9d15e4b3e93563c26c6371df0333ac928ee4fb5b320aec7d177a86dd250d58e0d12a8c142d9057db6fa51893e2f6d1f26f30415cfbc5c7ec443685587a0250632c3d907bb92910212b5dd4bf1034dc0eecae3c870e96d1e2de47ec3e206cf15f504c9a9a00a5ad983e39c4230b268215d1f321c82e582752b661fbfd925522c3199e4ab087c2ae9ae515c9f78d3f7ece043fbad91476147818b23497eccc7498536b1f75167cd8483a13c4bcee68", 0xf1}, {&(0x7f0000000740)="7f53fc1808420734d1972b08ade8f9677c4307b3af83ec6a7ee3d173d7033ec0f50db7853ae341b10f7faf995b090dc08408c8cfbc6e040b2bd30c8bf2fa51a3560930d11ec4", 0x46}, {&(0x7f0000000800)="7958e5d70f571c83e8cba6a29e2d860b75b51f75aba4b09b6ac8979bf92c6da1a89f1d86ac5feb09ed13f14daec70f1d628be29b7d670aefcbca84a041a68acb5f6c36368011e0cc7bdee0bffe99abad0559d33ce9e22674d90e8eadc21a2e0aa084b4bc5844c8999426e48d3fcd64dde3275a47fdb7060fe9acce013062d96375e2dacb7338047f7cb6e4b118d1a8b557723cdefd63e86a73fcf5c62862c9579f2d4144d66afac14efbe771e683eec601331f2eea3b9443e5f763f371cf43", 0xbf}], 0x3, 0x5, 0x1, {0x2002}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) (async) poll(&(0x7f00000000c0)=[{r4, 0x2201}], 0x1, 0x107) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000280)=0x4, 0xfffffffffffffe96) (async) recvmmsg(r5, &(0x7f0000000540)=[{{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000003280)=""/4096, 0x1000}, 0x4}], 0x1, 0x10041, &(0x7f0000001a00)={0x0, 0x3938700}) r6 = socket$l2tp(0x2, 0x2, 0x73) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x35, 0x37, 0x33, 0x33, 0x32, 0x63, 0x64, 0x30, 0x5, 0x63, 0x36, 0x5, 0x35, 0x31, 0x31, 0x64]}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8939d6000008d39af14c31ed56ad59300", 0x804}, 0x48, 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xb0, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20008810}, 0x0) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00020000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5m13.524515375s ago: executing program 1 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 5m12.330654949s ago: executing program 1 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f00000000c0), 0x1000, 0x402100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) mount(0x0, 0x0, 0x0, 0x208000, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r2, @ANYBLOB="21a5dbc58edb43b2f74b195e9e688a4895ca80f679ff532a7938525fd60432e290f676b5019008dfef4d2e6f29ebb776a6a5b63d9826ebebad5efd14a0f82cf3f7488e0e88fea10e005eee73173ce8c0504f1269b37d4c1317c2bfb4dd144fa288ca565374367baf6243b7978c1cfc2268183a"], 0x1c}, 0x1, 0xf0}, 0x8010) 5m10.674544975s ago: executing program 1 (id=691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) (async) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x68) syz_open_dev$radio(0x0, 0x2, 0x2) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x0) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000010000001300000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) (async) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) 5m7.353664084s ago: executing program 1 (id=704): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r0, &(0x7f00000001c0)=ANY=[], 0xfffffcd7) 4m51.938886059s ago: executing program 32 (id=704): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r0, &(0x7f00000001c0)=ANY=[], 0xfffffcd7) 2m22.736522481s ago: executing program 2 (id=1331): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0xf) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x5, 0xa0300f10, 0x9, 0x8, 0x8, 0xd9, 0x0, 0x0, 0x10, 0xf}}, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0xb0, 0x6, 0xbf, 0x10, 0xbfd, 0xb, 0x4e46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x2, 0x20, 0x96, [{{0x9, 0x4, 0x3, 0x8e, 0x2, 0xb7, 0x4d, 0xd6, 0xd, [], [{{0x9, 0x5, 0x5, 0x2, 0x20, 0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x8, 0xe, 0x2}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ptrace(0x11, 0x0) r4 = getpgrp(0xffffffffffffffff) kcmp(r4, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(r4) 2m18.618932767s ago: executing program 2 (id=1346): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00010000000007045a7da32917"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a40)={0x84, &(0x7f0000001580)={0x20, 0xe, 0x3b, "915ae35d9fb1052a51d78e38cddb9c111086d5c267691dbc62edad699a8082d5bf816616c0b9b9fed9456ae126354abd284e46ab3c7c8af42159b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m15.383707368s ago: executing program 2 (id=1359): r0 = socket(0x2d, 0x2, 0x0) (async) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10005) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000fb154920480b0810423d0102ffffffff12000100000000090400000008841100"], 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) mmap(&(0x7f00002eb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2) (rerun: 32) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/251, 0xfb}], 0x1, 0x3, 0x4) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000940)={"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"}) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)={0x6d18}) (async) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) (async, rerun: 64) bind$xdp(r0, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1c}, 0x10) (rerun: 64) 2m15.277589835s ago: executing program 2 (id=1361): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000ac0)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x3, 0x0, "4c475335829997bb3c24a416e90ad6b967bc9c38b147866d119b31ca66b8a1fefa45d1e8e99af607e4ff94933039602361089256038505018bd152aa13b919bf8ec5e11d94b199f04666325fb6c94970"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r4, 0x0, 0x160) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(r3, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r3}}, 0x20) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x6b8, 0x558, 0x6b8, 0x410, 0x0, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fffffff, 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@private2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x10, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[]) 2m12.305457333s ago: executing program 2 (id=1375): lsm_set_self_attr(0x64, 0x0, 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x50) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='ext4_es_shrink_scan_exit\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044103, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x2}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xfffffffb}]}}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/73, 0x49}], 0x1, &(0x7f0000000440)=""/125, 0x7d}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x3, 0xc, 0xe, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) 2m11.54799017s ago: executing program 2 (id=1377): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010961b0800000000000001090224000100000001090400000103000000092100000001220700090581038ebc3094d0da7965c1463a2a74bfb6fd6a001b4b5f2e1f20705022d3bdd24e1e1dff5ba1de353c822c886ebd177e09bdfd1efaa295c5062e6876a76092db9e88614b73ebf5664c8d35c580d662e29ccd0eacd599a544d955e65da452c02c69d262a1ca010fdff2a8cefdd7e14e5febe28c651118af51f38aaedc15fe50"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0x1, 0x43, {0x43, 0x22, "3db151b6cf866b814390c38efaf49c6724fcd39b6c70530cc8bc42765e3c9d92885e55084656eb4939e36b46d20ea08b16dbd85664043b44d6199f8061552d6b22"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x31, 0x2e, "b644dcc9e7593fb18b6274fb1d1bf538d661a5f59365bc09d4b6e488559f6ae993a8e3f3e330436224352e90e142"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0xc0, 0x5, 0x2, "a669"}, &(0x7f0000000380)={0x40, 0x5, 0x6, "ebb274d06d41"}}) 2m11.097251838s ago: executing program 33 (id=1377): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010961b0800000000000001090224000100000001090400000103000000092100000001220700090581038ebc3094d0da7965c1463a2a74bfb6fd6a001b4b5f2e1f20705022d3bdd24e1e1dff5ba1de353c822c886ebd177e09bdfd1efaa295c5062e6876a76092db9e88614b73ebf5664c8d35c580d662e29ccd0eacd599a544d955e65da452c02c69d262a1ca010fdff2a8cefdd7e14e5febe28c651118af51f38aaedc15fe50"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0x1, 0x43, {0x43, 0x22, "3db151b6cf866b814390c38efaf49c6724fcd39b6c70530cc8bc42765e3c9d92885e55084656eb4939e36b46d20ea08b16dbd85664043b44d6199f8061552d6b22"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x31, 0x2e, "b644dcc9e7593fb18b6274fb1d1bf538d661a5f59365bc09d4b6e488559f6ae993a8e3f3e330436224352e90e142"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0xc0, 0x5, 0x2, "a669"}, &(0x7f0000000380)={0x40, 0x5, 0x6, "ebb274d06d41"}}) 34.219847854s ago: executing program 4 (id=1716): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$netlink(0x10, 0x3, 0xb) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 28.080978833s ago: executing program 4 (id=1721): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x51, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x52}, 0x20) r1 = msgget$private(0x0, 0x193) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xd6, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce"], 0xfc}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 22.701057644s ago: executing program 4 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x4, 0x2, 0x292}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x4, 0x2, 0x292}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) syz_usb_connect$uac1(0x2, 0xa8, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x56, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x5, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0x1, 0x1], 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x1, 0x1, [0x7]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x202, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 21.298775847s ago: executing program 0 (id=1728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0xf11c, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setresuid(0x0, 0x0, 0x0) listen(r5, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_netfilter(r5, 0x0, 0x20004080) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x800000, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x1000c}}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a30000000f55b000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800b0001007461726765740000200002800a0001004155444954000000080002400000000005000300b9000000140000001100010000000000000000000300000a"], 0xd0}}, 0x0) 18.075599843s ago: executing program 6 (id=1730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f00000000c0), 0x1000, 0x402100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) mount(0x0, 0x0, 0x0, 0x208000, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000600)={0xff, 0xe9b2, {r6}, {0xee00}, 0x1, 0x3}) sendmmsg$unix(r8, &(0x7f0000002340)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)="b75d09f4e8afd5783350c241a13c6a9d9f3e69c8ebbf289aec15c54726ade30fa5337686abd866b6e9c7caba76be82648f4cf9056d083054442b6db1e4eeb15720fb034c24eb50132c3e38a281d3031e05531513bdc2e16bfd9fde91ff65e02cef710128198d05fec551f27b72299e5f177f4a915347560217c3815fc415b5887f48a22cdfdc65ef37004b288c481dcfcd1b33cd3049db28f76957a5958c6a36e274b148e1ff156e496e6c9cb3aa6ff97a0f8598e842c3b830eb27019bb7b2f197f48eb1e7713438", 0xc8}, {&(0x7f0000000480)="b9b37ece6953b6aee313dbc2cadc1ac39f88986d4d2b4e27c3b7b1a28233bc94b17503b888397de819af319bb0fc7b4b85aab2b391c8c659386651e3cca29b8deffaecd30747cc34fe080072dcedc007af2cc8e736d0efd6d58c25eae36f53701012ec60fcd7b2c289327d254dbe3c8498f1cc3973f349ed50d66ebf575fb5acc8a45a6e6c80d23b8672fc6be423a6d88f6bc3854e85bd6b17c0937f5bd10e6ade69bdd3787b663b14e285d861dfa075e83508cc703e09d298c6221f4fee8a0a8f4d33525b95f4a21cf497b8adff6247abac1c7de3bbef8c091467e54af43c77fce5d1732cea66552ee4ca939482a0c752", 0xf1}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000010000007d43a6f3dabf407a2b80744aecd68ed96c154f4248a3d43e5f844afb7da0e0d043", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0xd0}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000980)="4df385d4231940bd94e67bb77e309cf0057bb9816903815f00244522e385bd39f05ed0f9834868923b327e99e03eda432bb0d3f73f1e165cecc836d5b9cad19ad70108957041f904c3e1ec92ca16aa3d2852a0034716b15e5e9057c6c0c9e0dff1a032c5b32e0f1c67cd77021dbae4f0dc1f831ccf3e1c3cd523596e2998ff1ffa702644c909bfde3e932b8580038b40890f97", 0x93}, {&(0x7f0000000a40)="e2f5776bf2fe87d024a825625f3c941343b20c311563c4127bc1cc9dbee1a7697cec49a42a6e7b1f631295fafeae424cb8e02b60a5aa88e4ae604ed5192724e04aed6b0b46931fb3c37329cd8ac3c7718c04fdc040a2e8c3dd4a51a4f154b23734343e79c9d90071f4954ca8f95b5d514248b2bbdc1fedbd8990e23c7d8f64714d93192a", 0x84}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="8c6d1a5771598a1f97539e7ea5c65fcfd24cb120ebf75be09d0e00d556d73210deef61c4446cda203e3cdf884fff54ad4f2944d2b6", 0x35}, {&(0x7f0000001b40)="ed9b41a36c34e7864e41d64579eb0d4ec85670693767e764666c6ac54f0181eda4d4001d2107fdec628d2d43062d16e64d053199ab98844f88a325506e880deb2536bfadc1912b8690c76664c1b74d7aac3e3b52bec6c4ee8843a46a0956872789feed65266aa361543e13ebe98af706d1d8a110fea033332c1af4ac3a15e8015b9c9fa9cdf1e6e3988ffc225fda5eda0c610130", 0x94}, {&(0x7f0000001c00)="db21e28d069072b02c59aed630f63ab486f98b96e83403d94559f47baea563ece9d63a684e9d423e716f78582b1f91226e0dfe28b2dea9677c5b7f411cfcfcc899e1b215ba1f48fc418c3962fa1e146693291c5ffaac857630bc2c2b33d792f81ca84008029577fc4c93fccfd72dc377d76d0686d908ff9855e51ea2f69eb595068222db9b65df2539f6d6080c1ceb8dac77dc297da8a61274093bf56ee06d2be790618ec782ad7a71781696834d64759c8b57e44589e2", 0xb7}, {&(0x7f0000001cc0)="2d3e94bb28815f834a2f215f9c8e5b742a7e72911e46bc04b2611438a9e6cf773e29ae9ace7ae3b0a41222316220a2370cb01c2352ee14f9187d9c5018ac9ec4b61598b29184b630cf7298615a766e3c1a5d680128b6d557ddf5b07adfacf1bc2970cf491e", 0x65}, {&(0x7f0000001d40)="6a6b4352b0efb2b5a3f8cfb45378783d17ead78e0c9295645644b99752a3e2a3a8975421d2219ac447aa109406408df1fa166b8991d32f79466ca7cd67eb1ce78f1cfc98133091e5f373d804b3757341c071f2f3cca4c3e88f01ff83ccb73b3f6a3a7289746eb2bb2d9b888ac5ea22749d794df5f0ffbd8d9554add27cbb60f929fd15740386af820a114b45127d0ad6f225d2345dcdb8ae579ee583a211c5c5d02a9b253076e2c5a6d1aac8a2afd0a1598fa80d6ceb57b1e593b5d97882ac286f77b016ba968ba3785b4bb598badc71dee7185047486da868a55cb5a8a177b81e68eb245d", 0xe5}], 0x8, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}], 0x88, 0x24000081}}, {{0x0, 0x0, &(0x7f0000002200), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0a0000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x60000800}}], 0x3, 0x0) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r12, 0x40043311, &(0x7f00000002c0)) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 18.073914721s ago: executing program 3 (id=1731): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="3d6d360c9f4ffb39cfa84f3e5e16a7194f889e9f3f57bfbf8fc4f7ab2a525232554cff879b6715d5c89f6d87309abf3f0d5d8f6afc07893108f7878b0632186a1a94891a75b4f09b9c3dd7a3736725583ed950d375e0f84e8d104fe54359852290d74ce29f71983a21c6e9f088407e9d556103e659273e7a79d04bf8a3e244cfd043a7bb0bb0a35e855707cd3312758e35555b93300edba42d7a47de4c6c6043cc8c874660682171460f40ce1fc14b8e32", 0xb1, 0x0) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5e800000", @ANYRES16=r4, @ANYBLOB="010028bd700000800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x5c}, 0x1, 0x0, 0x0, 0x831}, 0x24040880) r5 = open(0x0, 0x50040, 0x389b0d52417bb2d1) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pwritev2(r5, 0x0, 0x0, 0x7000, 0x0, 0x3) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000002300)={{}, {@local, 0x200000}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b54dbd94b94ba09000000000000001c9e4a41d3ca6af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca58a41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879040000009ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743de4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6132000efe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c234c15a54b63586713cb66179a0897d98ee5228569c32c1a682807c86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x6}) (async) r6 = syz_io_uring_setup(0x82c, &(0x7f00000006c0)={0x0, 0x1b6c, 0x3c00, 0x7, 0x1a1}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r8], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x74) syz_usb_connect(0x5, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000b80c2d4043052915c6e401020367de4a9faf4903010902120001000000000904860000bcee2400c41038ce78b8c3d38a680000000000000c6fa28dccf282"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r6, 0x47f6, 0x0, 0x700000000000000, 0x0, 0x0) 18.071557967s ago: executing program 5 (id=1732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000740)=@caif=@rfm, 0x80, &(0x7f0000000480)=[{&(0x7f0000000f00)=""/223, 0xdf}, {&(0x7f0000000ac0)=""/161, 0xa1}, {&(0x7f0000000c40)=""/236, 0xec}, {&(0x7f0000000d40)=""/251, 0xfb}], 0x4, &(0x7f00000009c0)=""/196, 0xc4}, 0x8}], 0x1, 0x2022, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x8000, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="0200ac7f7a00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r4, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000840)={0x2, 0x0, {&(0x7f00000008c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) dup(r3) (async) r5 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400951183aac2415, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000000000000000000000000004000400"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000000000000000000000000004000400"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 17.632123564s ago: executing program 4 (id=1733): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000880)) close_range(r0, 0xffffffffffffffff, 0x0) 17.469832699s ago: executing program 5 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) unshare(0x6a040000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rt_sigqueueinfo(r2, 0xb, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffd}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000140)) 15.873769969s ago: executing program 4 (id=1735): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)) 15.861464795s ago: executing program 6 (id=1736): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x6, 0xd00}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x500, 0x2b, 0x0, &(0x7f0000000740)="00800000000000000145a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120110010928fc10ac0591022543010203410902120001000040000904"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x6, 0xd00}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x500, 0x2b, 0x0, &(0x7f0000000740)="00800000000000000145a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120110010928fc10ac0591022543010203410902120001000040000904"], 0x0) (async) 15.657876299s ago: executing program 0 (id=1737): syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xb01e, 0x10, 0x2, 0xbfdffdfc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_emit_ethernet(0x3e, &(0x7f0000019400)=ANY=[], 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r8, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @local, 0x6e}}, {{0xa, 0x800, 0x0, @mcast1}}}, 0x108) 13.529899874s ago: executing program 0 (id=1738): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/220) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 12.759347151s ago: executing program 3 (id=1739): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) gettid() close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) 12.605853479s ago: executing program 6 (id=1740): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) syz_open_procfs$pagemap(0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000240)=0x7fe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000140)='./control\x00', 0x191) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000280)='./control\x00', &(0x7f0000000440)='xfs\x00', 0x154000, &(0x7f0000000000)='\x06\x00\x00\x00\x01\x00\xfe\x98\x9a\x02\x00\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 10.050840859s ago: executing program 3 (id=1742): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 9.030982622s ago: executing program 5 (id=1743): pipe(&(0x7f0000000600)) io_setup(0x8, &(0x7f0000000500)) close(0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180"], 0xb4}, 0x1, 0x0, 0x0, 0x4004054}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000400)={0x4000, &(0x7f0000000340), &(0x7f0000000100), 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$sock(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="b420bcbf081e964d2518a150955f066c254c44c1e8696331b4089babf8151cf4e32bf42355561bcd1a3816804458f131c43ea1f743b8324884578f55cc00d42d55aa1eca0080a63b7689a9d1a717b1bf0ce455fd0f8ff086fdd368d5e315e1a3994f83ba7c3c9c", 0x67}, {&(0x7f0000000640)="119ae5380d9c8dd0f705b43f06e5192897f5f2b51f5bd64832cef56182d43e1648123f53554af3ef9d0b5350699926e9b000423eb81bde8f2cff3c2276e90d581046f70c277d5450564261b7966bfe77c7c66c6aec07d3236e2b3bd57915c51f15d341a7b01947fef6cee5b0b16baeaae913b75ccadcbb6e522a18ad3b6d66a24a48061ca9735952f1afa9a526c32469dbcdd13b0eaa108acdd77acc6217ed7643b42f86239c028f841bceb1e4823493a9249531097cb3bb4b282b45760e7b9008a95e30032ad0065616bd6ede7f5ff6675aec6a7c31757656adbda0", 0xdc}, {&(0x7f0000000900)="e50bc2b7316536e2c2487a02276582ebb1804b71e75d6fc2f8248dd82d892c8c6b73cb3bd355f2ed9cb14ee2d88550d09ecb08d0297d2339c757d350fe9e43766ffa2e00c143cdbe6a07a7e7ce42ceeb05ad89e405959b8c41e9f602631886a22fae0af054d596c7ab613c38b2deb47eec9b618259a4c87c43b646b605f7012b6bee6e4792f756a063362130049363e8ee9166c91f774dfd", 0x98}, {&(0x7f00000000c0)="781ea4e70bf9", 0x6}, {&(0x7f0000000800)="a28ad906cdb9a5d93e270c85b49cbc4bcd83ca881195741e27d12c282123f0bf681683ff25d59eacb12d0d19cd66bdfa600a5322173a7f2452e68a76dfa9de386539572e6ce9725c43392091d53c43588757fbe253c9eca0cae2aec958f3ae1c4deb6ffb4b96cfd90a4a0c7da52f9cb726981a579f81509899758a9b8c0216aa775383bb06ba0cf63b5e3e3427166ce158c8391ee1c007a5fda69f88e61e0f60c15b4261dbbe9b8b8347239b05c4c62ed5ef9878dc3407278e0ab95895d755a096c4a280e23ff986f3e916590b05911fd2f76fe64b66dd79d4b046919087809a90f5329873496a86bcea", 0xea}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) 8.965318161s ago: executing program 3 (id=1744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fdffffff0059000000000001850000005300000018010000202069250000000400000000000000ff00000000b89f00000000000007010000f8ffffffb70200000800007b0000009500"/96], &(0x7f0000000040)='GPL\x00'}, 0x94) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2102, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1418c1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',$']) syz_fuse_handle_req(r4, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0xdb0078e619f2dde7, 0xdd2, 0x6, 0xb, 0x20000800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [], {0x10, 0x5}, {0x20, 0x1}}, 0x24, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9, 0x8, 0xfffd}}}}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r8}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f00000030c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}, 0x18) shutdown(r5, 0x1) 6.480432553s ago: executing program 5 (id=1745): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000880)) close_range(r0, 0xffffffffffffffff, 0x0) 4.794616076s ago: executing program 0 (id=1746): syz_usb_connect(0x1, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d00090502000000f3ffff08050c75"], 0x0) 4.244235794s ago: executing program 6 (id=1747): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/if_inet6\x00') close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80008, 0x0) preadv(r2, &(0x7f00000001c0), 0x0, 0x740, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg0\x00'}) pread64(r4, &(0x7f0000000400)=""/82, 0x52, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001100000425bdead1fedbdf25024008fe", @ANYRES32=0x0, @ANYBLOB="08000200e000000108000a0001000000080002000a010101080004000000000008000400ac141413140006000008000000000000060000000a0000000800080080000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r5, 0x200002) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 4.018828057s ago: executing program 3 (id=1748): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xe7, 0x93a, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9c, 0x50, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xe12}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1f, 0x4, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x37, 0xe, 0xde}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x4, 0x5, 0x40, 0xdf, 0x7f}, 0x20, &(0x7f0000000200)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0xf, 0x1, 0x4, 0xf, 0x8000, [0xc030]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0xfa, 0x40, 0x5, 0x6}]}, 0x1, [{0xfc, &(0x7f0000000240)=@string={0xfc, 0x3, "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"}}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000240)) splice(r1, 0x0, r2, 0x0, 0x200000000622c, 0x1000000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x12, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x1, 0xb, 0x1, 0xffffffffffffffc0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6, 0x0, 0x1}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="f6", 0x1}], 0x1) 3.859743719s ago: executing program 4 (id=1749): syz_emit_ethernet(0x33, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x8, 0xb, 0x19, 0xfa9}]}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x440) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000004000000000000070200000002002e0000"], 0x0, 0x29}, 0x28) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x80040) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000340)) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYBLOB="00030000080008000a0101010600190028000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="40240600000006165af32f97ca88ba02dbee5b7596a50cfc1718be39f022cbc270d5fa08dce14a6dcb46e5fb85cee615b26c6d40fea873e8be4f55a9b298f987944cb55ddfcae10cbe2fb0fba7586aad6db0d1252790e18247b6d1bf722323efea4a56c7f110809ada0079e9b76775438726f15d5a503e4b9d1e9923bbbd318594709d95dcf09f24609cec1972e6f33d00"], 0x0}, 0x0) 1.709171793s ago: executing program 5 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4], 0x24}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x20, 0x32, 0x1, 0x0, 0x0, {0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x10001, 0x4, 0x0, 0x3}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x60c4e2aeb547948b) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x530, 0x35, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xb4, 0x1, 0x0, 0x1, [@generic="6a938dfb080098a097ab66ea7571903919039aaa66401f348f720f3308a17f67d872f5f7c0da34540aa280ab22a5b0f0d3eab43791e5230b6a19d57758d4b266de25eaa54d3f370dacc30bf03c81f28905eaed88fb0897fb198b505c08cdaa7b7f2a695d436c93e18e3135e6138060d8da08ec1184a17fe4b2de689add5febd406028d3407572108636518c9247ffde91c811ff1c714d9961234e2f87fff8a6112bb4ae7deda324c2bc6bd26ed46f5e1"]}, @nested={0x464, 0x2, 0x0, 0x1, [@nested={0x460, 0x61, 0x0, 0x1, [@nested={0x45a, 0x13a, 0x0, 0x1, [@nested={0x120, 0xe7, 0x0, 0x1, [@nested={0x4, 0x1e}, @generic="50ce8c3a66ea3a0162d856eff64cc3ac9aab7885f6f1ec522d52da2b9fb4265fd7c11fbdb494677dece32394b31fa8cfc60d9aebe3fdca6a9137852bfdc3e3e1cebda733ae1019618a358501ff3d2d92f903fc38a99180ccbb193ee8a9a3433fbc32a76d539a85fd121fa797eeb506ed370a66e68a7382ec5d413fabf832f56327c46e082a84696b2f8e734bf636d6c60cd1dfb1ab0ffa4d9bfbadf30912dbea9d03", @typed={0xc, 0x105, 0x0, 0x0, @u64=0x7a8}, @generic="9019a4a335b841382d520e709b11759907d584d926c1ab5f76fe", @generic="cd2b4ab3fefad3513c9353db995523b6180dc5c6a0d139055cf3167371e261157b1fdae2b4b046d0031078baac0955d572ae52e7ebb092a2b5f7426ad3ccb5a59e13e7d2cab6b8ce20b8daf4b1cd57a6"]}, @generic="cd712f0051a4b8e604d7cbcff2535e271760ef82fb689570d50636bac6e6591e400df69896df993cd2c524633183", @nested={0x1c, 0xd8, 0x0, 0x1, [@typed={0x14, 0xb6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0x87}]}, @nested={0xc8, 0x89, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @uid}, @nested={0x4, 0x64}, @generic="653c0901922861021dac9f95f9895c3f07a77731b1c4cbb3e4ea75a1d2464daac10e8d8fdefb46da059d608bdd51cdda46ceae924f96a3c268ff7a4bc7b5539cf7d9dffdc246718b6c560754408ffa6577f5940cf1b0d1f15289f9c669a34feb80de55a7aba186e663da12c8498e98000df27618f0220f2ae840dc80cc8216fa77", @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="5f24ea700b38f0f825fb245041fb156ce3bb4c1926d151a1d0385f7001c896fd60cb7c987684f86fb0909d", @generic, @generic, @nested={0x4, 0x9a}]}, @nested={0x4, 0x119}, @nested={0x21e, 0xcc, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @u32=0x9a25}, @nested={0x4, 0x1f}, @generic="9c66da90656e82b8767a48314a991cd9892abb99dce0a12bc385cb7020a38c502546693eac1c89660eabe41d80db5dde638cb4d431dca39c3aa658354064897b6f46786c3526b106f85798fe22589689ca89f5bc37659e6c1aeade8b64a7bfe6ab675399534bd22c39db7c53682a54e1c654bf615e37576b19a2aa0a5cb6082e1fbe2bab5252c9ca4dcfe4d826ab36d35d47da24125bcc3ff7d8a9", @typed={0x8, 0xc1, 0x0, 0x0, @uid}, @generic="0fa2707432eda091adfeee8d9a1f2ffca13f069095669cff4e156d6936ef15fb2e8d72baa8c3f0b94b4c1420a61f490a13049eb38e74d4f1fc26382d1e66c69d634786271e0ed9f9b4ffe45493aa1b4a6d9a05daea1bf09bd5c8cbd9ad5a6ad2abfb182b46039a59c6eca42bc8d97ae4188fde674a2602e9efd8099812d77b060546f08ae850982d90d6c8ac34470db5c46edf74ec19f2cb66", @generic="7a762f62732533e8a92314896aaf84e9f84e045a2cd6e9601328383c0111e9c0c4ae730b83d400d5cb91865490ef7407f25182a4a77ba978b41ae8f9b39f5dd9f075afe8916e31e5eba5a5378ffa130c5c8f1cd0bdff15886ee2dd5c3eb282e2f5502fdacbc64e0eef72f2b797f4f5563d21ffcdd2c52cb3b6bada2c1ff3dc98", @generic="66b34f94dbfb6a429a6d9b5e6b5da6dec9a04ddf7642b7da36837fd2431690f62ae836755fec1e26b5d40bf8df8e6f71b1bce77a81028b194a2904d826f4833e8b61f735a241c4ac550a57804253f58cb56b", @generic]}]}]}]}]}, 0x530}, 0x1, 0x0, 0x0, 0x4048011}, 0x24000000) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000005180)={0x2c, &(0x7f0000000740)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, 0x0, 0x4004840) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030d", 0x50}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 790.672096ms ago: executing program 0 (id=1751): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) (async) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x0, 0x2080, 0x65f40}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x103082) (async) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r8 = epoll_create1(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = socket(0x28, 0x5, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000200)={0x3fb, 0x8, '\x00', 0xc1881827e2a3ad8e, &(0x7f0000000080)=[0x0]}) (async) bind$vsock_stream(r9, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r10 = getpid() sched_setscheduler(r10, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000dc0)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000080)}, {&(0x7f0000000700)="1f3ce75d07fb7708b5a1caa4627ca529dd689945a907d3d59ccd0678ce0fb892c85127ec478416e14d931599a619a1eee8ba744048df5175fd9e785b64d4b8aba77a3eaf91e62924d76d9fbbdc3e781eba5bfe04fedbd1c53356019beb1b1be7e6f7a8189f2fc09fe862f7b636b64867777128ebeea2323a911385c71914bb3a30403248a7c4ab082c18216995eca03fa4b22adf2d7e6796722537d3dfe5a16e4337cf94022653057a409b19dbf38f8a6929800b66dc2c8a2cf5284c2e358b37de1faaee8075a9b2f007ef67b8b848042e3c2531a527d81f83e4aae324", 0xdd}, {&(0x7f0000000180)="37eb96e4a1a9bb47c94ec81e9a217b85fb1665f699c0be159ae1b7f2a2f26e71dbfa83d444bb914b6fa27d046a", 0x2d}, {&(0x7f00000004c0)="6b8c4a9fa62907a951c38b3903fcbd4e80f478ba397bfd192fab6aaac3bb02d39ba5f97affe67d75b30ce1ba42956b5a570c6eae13835bf10cc196e4850729de4f2eedb55bc9d8c0232d22d073a7bcf8e64d276b973c515efcc9d60cef0f6183c31863df637644e88e1cb5bc07ac6ca94c695e04b3214c40f36e0c1858d6c3d58509046f7144e3a64aa5528883725cfa38ac41d64379c0bafba84880821bd2525d13a8260e", 0xa5}, {&(0x7f0000000580)="5ac94de2e22d54bf2b9eb6002a685ba59378be06ab8a899f92b567c7754c04ac97b8d6bdc0f145913c4f45df17100d7d85d204666a3958dba12dce4134b4617158e56e91005187babefe9ef5818194353abb5cde76060db65a89fae37d4debbf089bd928865ab4362e656efc4f6e172f25addba01d1f4532a4992c6be4cdcb4115854a371e29b9b7afe62822f44ebbf75605113e13d836618abfe0986132ba93039e7a60909dfe5a6693070df24326e0bb9a35d7713e4c1e758c7604d43181fa66d09f73d9", 0xc5}, {&(0x7f0000000300)="937cab2c308b628c6da4fe034f1d4612c3ee5847be276249df6bc971ec11816a4fc4b996569a68ba14ea612ec6fc90", 0x2f}, {&(0x7f0000000340)="b03fb2153ff311fd43339b9d02b949062b4756cefa3a28518084992a95cc31548aa5a25ca3edb91840d81b66c4b9dfc5fe0e8c205431c4", 0x37}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES64=r2, @ANYRESHEX, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000d15fc314f5080843a8649c35f7a7c7a9ddeb8e8f48258815037500"/55, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r7, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000061000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x10}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 763.294539ms ago: executing program 3 (id=1752): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x118d5, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x2, 0xffff9b53, 0x40b49, 0x3, 0x8, 0xa, 0x80000001}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0/file0\x00', 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) unshare(0x2000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) 354.697661ms ago: executing program 6 (id=1753): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x4, 0x6, 0x8, 0xa, 0x20000}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x7, 0x2, 0x9, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5fb, 0x1000, &(0x7f0000000f40)=""/4096, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xb, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r0, r0, r0, r0], &(0x7f0000000400)=[{0x5, 0x5, 0x5, 0xb}, {0x1, 0x3, 0xf, 0x1}, {0x0, 0x1, 0xd, 0x2}, {0x0, 0x5, 0xc, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000000c0)='rpcgss_svc_unwrap_failed\x00', r1, 0x0, 0x4d}, 0x18) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x214, 0x13, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xd6, 0x8, "a257f1b7c20d4b633838f3d4f8ce45cc6c51e36b687f6e972e40afe97a1f6dd09742e43edb934b0e7a07f9fb33e8e3598eee6fbf9f46fe7924888ac617dda22509bfa8acdaf28fcc9dad72a27cea0bd7f2f10169a31cd6ebf0c501f244c4439daab16daa937310f1ac4a931ae95a40648233c3b3356a343459fa5619c18211c1e8d6b51ca2d185d4a328072ea4d80437850cb2111c22dbb84f1bca7def7def47892bc693a7e1a2edfdcebdcbc4bc64e463f642bc610549e100e6ad118173f02206e7f6a49c1d7852e79e48e155a00317b52d"}, @NFTA_OBJ_USERDATA={0x101, 0x8, "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"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008010) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x4, 0x6, 0x8, 0xa, 0x20000}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x7, 0x2, 0x9, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5fb, 0x1000, &(0x7f0000000f40)=""/4096, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xb, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r0, r0, r0, r0], &(0x7f0000000400)=[{0x5, 0x5, 0x5, 0xb}, {0x1, 0x3, 0xf, 0x1}, {0x0, 0x1, 0xd, 0x2}, {0x0, 0x5, 0xc, 0x3}], 0x10, 0x8}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000000c0)='rpcgss_svc_unwrap_failed\x00', r1, 0x0, 0x4d}, 0x18) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x214, 0x13, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xd6, 0x8, "a257f1b7c20d4b633838f3d4f8ce45cc6c51e36b687f6e972e40afe97a1f6dd09742e43edb934b0e7a07f9fb33e8e3598eee6fbf9f46fe7924888ac617dda22509bfa8acdaf28fcc9dad72a27cea0bd7f2f10169a31cd6ebf0c501f244c4439daab16daa937310f1ac4a931ae95a40648233c3b3356a343459fa5619c18211c1e8d6b51ca2d185d4a328072ea4d80437850cb2111c22dbb84f1bca7def7def47892bc693a7e1a2edfdcebdcbc4bc64e463f642bc610549e100e6ad118173f02206e7f6a49c1d7852e79e48e155a00317b52d"}, @NFTA_OBJ_USERDATA={0x101, 0x8, "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"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008010) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) (async) 103.462999ms ago: executing program 0 (id=1754): write$tun(0xffffffffffffffff, 0x0, 0xfde) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000300)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0xec, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfff}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x40054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 0s ago: executing program 6 (id=1755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x20, 0x2}, 0x18) r3 = open_tree(r2, &(0x7f0000000240)='./file0\x00', 0x89801) open_tree(r3, &(0x7f0000000640)='\x00', 0x81101) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x20002) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000019300), 0x1fc, 0x2b2301) syz_io_uring_setup(0x83b, 0x0, &(0x7f0000000140), 0x0) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0xb) syz_open_dev$video(0x0, 0xa7, 0x0) r7 = fsopen(0x0, 0x0) r8 = fsmount(r7, 0x0, 0x18) openat2(r8, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000012000300686173683a6e65742c706f727400000005000100070000000c000780080012"], 0x58}}, 0x20000004) kernel console output (not intermixed with test programs): sb1-port1: unable to enumerate USB device [ 444.953306][ T5861] usb 4-1: USB disconnect, device number 70 [ 444.959261][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 445.096319][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 445.124770][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 445.348544][T11163] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 445.492258][T11852] chnl_net:caif_netlink_parms(): no params data found [ 445.637377][T11852] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.652243][T11852] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.659494][T11852] bridge_slave_0: entered allmulticast mode [ 445.668500][T11852] bridge_slave_0: entered promiscuous mode [ 445.688426][T11852] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.706502][T11852] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.721127][T11852] bridge_slave_1: entered allmulticast mode [ 445.739165][T11852] bridge_slave_1: entered promiscuous mode [ 445.794510][T11852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.808501][T11852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.848297][T11852] team0: Port device team_slave_0 added [ 445.904655][T11852] team0: Port device team_slave_1 added [ 445.952855][T11852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.959815][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.035809][T11852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.077220][T11852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.085343][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.119802][T11852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.133266][T11942] vivid-007: disconnect [ 446.160575][T11944] Bluetooth: MGMT ver 1.23 [ 446.224734][T11852] hsr_slave_0: entered promiscuous mode [ 446.300482][T11947] ubi: mtd0 is already attached to ubi31 [ 446.515239][T11852] hsr_slave_1: entered promiscuous mode [ 446.522216][T11852] debugfs: 'hsr0' already exists in 'hsr' [ 446.533769][T11852] Cannot create hsr debugfs directory [ 446.560179][ T5812] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 446.610804][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'. [ 446.631025][T11163] Bluetooth: hci2: command tx timeout [ 446.650582][ T5861] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 446.674020][ T5861] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 446.726202][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 446.746491][ T5812] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 446.771339][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 446.802177][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 446.818241][ T5812] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 446.823524][T11936] vivid-007: reconnect [ 446.841748][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.869230][ T5812] usb 4-1: Product: syz [ 446.879061][ T5812] usb 4-1: Manufacturer: syz [ 446.890359][ T5812] usb 4-1: SerialNumber: syz [ 446.911019][ T5812] usb 4-1: config 0 descriptor?? [ 447.006029][T11852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 447.032203][T11852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 447.128492][T11852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 447.177440][T11944] vivid-001: disconnect [ 447.234379][T11852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 447.349179][T11852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.373767][T11852] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.400293][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.407441][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.441765][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.448916][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.371751][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.730195][T11163] Bluetooth: hci2: command tx timeout [ 449.101107][ T5897] libceph: connect (1)[c::]:6789 error -13 [ 449.113715][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 449.148638][ T5897] libceph: connect (1)[c::]:6789 error -13 [ 449.159627][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 449.640832][T12035] ip6t_srh: unknown srh match flags 4000 [ 449.995234][ T9] libceph: connect (1)[c::]:6789 error -13 [ 450.008407][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 450.020733][ T30] audit: type=1400 audit(1766706282.711:779): avc: denied { create } for pid=12029 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 450.282756][T12017] ceph: No mds server is up or the cluster is laggy [ 450.908764][ T9] libceph: connect (1)[c::]:6789 error -13 [ 450.914815][T11163] Bluetooth: hci2: command tx timeout [ 450.920246][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 451.669893][T12051] affs: No valid root block on device nullb0 [ 451.714788][ T30] audit: type=1400 audit(1766706284.761:780): avc: denied { setopt } for pid=12049 comm="syz.4.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 451.741806][T11852] veth0_vlan: entered promiscuous mode [ 451.754585][T11852] veth1_vlan: entered promiscuous mode [ 451.807646][T11852] veth0_macvtap: entered promiscuous mode [ 451.825364][T11852] veth1_macvtap: entered promiscuous mode [ 451.871816][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.903544][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.942128][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.961055][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.991741][ T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.003780][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.052181][ T6229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.061251][ T6229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.113919][ T6229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.122604][ T6229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.196149][ T30] audit: type=1400 audit(1766706285.271:781): avc: denied { mounton } for pid=11852 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 452.951044][ T5861] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 453.090168][ T5861] usb 7-1: device descriptor read/64, error -71 [ 453.178392][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.188311][ T30] audit: type=1400 audit(1766706286.251:782): avc: denied { bind } for pid=12078 comm="syz.5.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 453.211782][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.360127][ T5861] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 453.645809][ T5861] usb 7-1: device descriptor read/64, error -71 [ 453.803622][ T5861] usb usb7-port1: attempt power cycle [ 454.074377][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.164736][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.220727][ T5861] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 454.248437][ T5861] usb 7-1: device descriptor read/8, error -71 [ 454.430595][ T5812] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 454.500088][ T5861] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 454.530553][ T5861] usb 7-1: device descriptor read/8, error -71 [ 454.591585][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 454.598963][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.609510][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.622789][ T5812] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 454.632952][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.644005][ T5812] usb 1-1: config 0 descriptor?? [ 454.660583][ T5861] usb usb7-port1: unable to enumerate USB device [ 454.707205][ T5812] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 454.793891][ T30] audit: type=1326 audit(1766706287.871:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.3.1421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3aa958f749 code=0x0 [ 454.888194][T12114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.898509][T12114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.035126][ T9] usb 1-1: USB disconnect, device number 73 [ 458.391044][ T5861] libceph: connect (1)[c::]:6789 error -13 [ 458.450673][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 459.619982][ T5861] libceph: connect (1)[c::]:6789 error -13 [ 459.628412][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 459.681771][T12147] ceph: No mds server is up or the cluster is laggy [ 459.697809][ T30] audit: type=1400 audit(1766706292.771:784): avc: denied { mounton } for pid=12159 comm="syz.0.1432" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 459.776733][T12172] nftables ruleset with unbound set [ 459.941233][T12175] kernel profiling enabled (shift: 7) [ 459.987721][T12162] 9p: Could not find request transport: tcpport=0x0000000000000014 [ 460.251675][T12187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1436'. [ 460.276078][T12187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12187 comm=syz.3.1436 [ 460.554171][T12189] ceph: No mds server is up or the cluster is laggy [ 460.592321][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 460.732579][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 460.790134][ T5861] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 461.140169][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 461.146601][ T5861] usb 1-1: config 0 has no interfaces? [ 461.153977][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 461.163147][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.171415][ T5861] usb 1-1: Product: syz [ 461.175671][ T5861] usb 1-1: Manufacturer: syz [ 461.180327][ T5861] usb 1-1: SerialNumber: syz [ 461.252222][ T5861] usb 1-1: config 0 descriptor?? [ 461.285215][ T30] audit: type=1400 audit(1766706294.361:785): avc: denied { shutdown } for pid=12202 comm="syz.4.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.308426][ T30] audit: type=1400 audit(1766706294.391:786): avc: denied { shutdown } for pid=12202 comm="syz.4.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 461.482515][ T5975] usb 1-1: USB disconnect, device number 74 [ 461.946305][T12221] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1442'. [ 461.955439][T12221] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1442'. [ 461.987044][T12221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1442'. [ 462.027999][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.071567][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.232023][ T5975] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 462.430250][ T5975] usb 7-1: Using ep0 maxpacket: 32 [ 462.531917][ T5975] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.660149][ T5975] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.688509][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 462.696224][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 462.720402][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 462.762363][ T5975] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 462.812701][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.847721][ T5975] usb 7-1: config 0 descriptor?? [ 462.881603][ T5975] usbhid 7-1:0.0: can't add hid device: -22 [ 462.903501][ T5975] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 462.950871][T12236] ceph: No mds server is up or the cluster is laggy [ 463.640435][ T5861] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 463.793029][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'. [ 463.813824][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 463.821356][ T5861] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 463.833807][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.858459][ T5861] pvrusb2: Hardware description: Terratec Grabster AV400 [ 463.881766][ T5861] pvrusb2: ********** [ 463.891673][ T5861] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 463.920788][ T5861] pvrusb2: Important functionality might not be entirely working. [ 463.945436][ T5861] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 463.975126][ T5861] pvrusb2: ********** [ 464.049936][ T2336] pvrusb2: Invalid write control endpoint [ 464.135792][ T2336] pvrusb2: Invalid write control endpoint [ 464.141711][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 464.170135][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 464.198292][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 464.218628][ T2336] pvrusb2: Device being rendered inoperable [ 464.265168][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 464.293341][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 464.316044][ T2336] pvrusb2: Attached sub-driver cx25840 [ 464.331216][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 464.376480][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 464.419745][ T5861] usb 1-1: USB disconnect, device number 75 [ 464.641825][ T30] audit: type=1400 audit(1766706297.711:787): avc: denied { map } for pid=12305 comm="syz.5.1456" path="socket:[36036]" dev="sockfs" ino=36036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 465.282366][ T974] usb 7-1: USB disconnect, device number 6 [ 466.181570][ T30] audit: type=1400 audit(1766706298.831:788): avc: denied { ioctl } for pid=12328 comm="syz.4.1459" path="socket:[36066]" dev="sockfs" ino=36066 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.620156][ T974] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 467.060633][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 467.074713][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 467.105038][ T974] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.155581][ T974] usb 7-1: config 0 has no interface number 0 [ 467.170114][ T974] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 467.182382][ T974] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 467.228021][ T974] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 467.256427][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.279739][ T974] usb 7-1: config 0 descriptor?? [ 467.315788][T12331] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 467.353751][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 467.367810][T12356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1466'. [ 467.380189][T12341] ceph: No mds server is up or the cluster is laggy [ 467.387060][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 467.391110][ T974] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 467.410546][T12356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1466'. [ 467.571536][T12361] uprobe: syz.4.1467:12361 failed to unregister, leaking uprobe [ 467.682970][ T5861] usb 7-1: USB disconnect, device number 7 [ 467.683061][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 467.937020][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.997626][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.031467][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.138829][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1472'. [ 468.222555][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.264964][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1472'. [ 469.766365][T12396] xt_connbytes: Forcing CT accounting to be enabled [ 469.788989][T12396] Cannot find del_set index 1 as target [ 470.251475][ T89] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 470.317900][ T89] dvb_usb_az6027 6-1:0.118: probe with driver dvb_usb_az6027 failed with error -110 [ 470.352011][ T89] usb 6-1: USB disconnect, device number 26 [ 470.363225][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 470.369484][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 470.795401][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 470.815950][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 470.914396][ T89] libceph: connect (1)[c::]:6789 error -101 [ 470.920468][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 471.038355][T12400] ceph: No mds server is up or the cluster is laggy [ 471.049252][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 471.058210][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 471.082455][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 471.166277][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 471.180547][ T89] libceph: connect (1)[c::]:6789 error -101 [ 471.197408][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 471.295856][T12407] ceph: No mds server is up or the cluster is laggy [ 471.385638][T12425] bridge0: port 3(veth0_to_bridge) entered blocking state [ 471.395150][T12425] bridge0: port 3(veth0_to_bridge) entered disabled state [ 471.407426][T12425] veth0_to_bridge: entered allmulticast mode [ 471.408692][T12424] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 471.415965][T12425] veth0_to_bridge: entered promiscuous mode [ 471.430523][ T974] libceph: connect (1)[c::]:6789 error -101 [ 471.442354][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 471.454428][T12425] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 471.487384][T12425] bridge0: port 3(veth0_to_bridge) entered blocking state [ 471.495025][T12425] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 471.534359][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.553397][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.760302][ T89] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 471.925881][ T89] usb 6-1: no configurations [ 471.933898][ T89] usb 6-1: can't read configurations, error -22 [ 471.951805][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 471.977244][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 472.007187][T12439] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 472.033995][T12416] ceph: No mds server is up or the cluster is laggy [ 472.100216][ T89] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 472.323545][ T89] usb 6-1: no configurations [ 472.330280][ T5995] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 472.430096][ T89] usb 6-1: can't read configurations, error -22 [ 472.440429][ T89] usb usb6-port1: attempt power cycle [ 472.621014][ T5995] usb 1-1: Using ep0 maxpacket: 32 [ 472.629016][ T5995] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.640716][ T5995] usb 1-1: config 0 has no interface number 0 [ 472.651569][ T5995] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 473.098510][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.109469][ T5995] usb 1-1: Product: syz [ 473.114815][ T5995] usb 1-1: Manufacturer: syz [ 473.120245][ T5995] usb 1-1: SerialNumber: syz [ 473.127516][ T5995] usb 1-1: config 0 descriptor?? [ 473.155329][ T89] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 473.165913][ T5995] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 473.175673][ T5995] usb 1-1: selecting invalid altsetting 1 [ 473.181958][ T5995] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 473.238464][ T89] usb 6-1: no configurations [ 473.243168][ T89] usb 6-1: can't read configurations, error -22 [ 473.255457][ T5995] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 473.266690][ T5995] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 473.275450][ T5995] usb 1-1: media controller created [ 473.289355][T12464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.298218][T12464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.308038][ T30] audit: type=1326 audit(1766706306.361:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 473.414497][ T5995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.422915][ T30] audit: type=1326 audit(1766706306.361:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 473.460250][ T89] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 473.477497][T12467] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 473.484261][T12467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 473.544938][T12467] vhci_hcd vhci_hcd.0: Device attached [ 473.606176][T12468] vhci_hcd: connection closed [ 473.608960][ T6229] vhci_hcd vhci_hcd.3: stop threads [ 473.619501][ T89] usb 6-1: no configurations [ 473.620145][ T6229] vhci_hcd vhci_hcd.3: release socket [ 473.624150][ T89] usb 6-1: can't read configurations, error -22 [ 473.667509][ T89] usb usb6-port1: unable to enumerate USB device [ 473.674087][ T6229] vhci_hcd vhci_hcd.3: disconnect device [ 473.683631][ T30] audit: type=1326 audit(1766706306.361:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99d818df90 code=0x7ffc0000 [ 473.745068][ T30] audit: type=1326 audit(1766706306.361:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99d818f34b code=0x7ffc0000 [ 473.782315][ T30] audit: type=1326 audit(1766706306.361:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99d818f34b code=0x7ffc0000 [ 473.806841][ T30] audit: type=1326 audit(1766706306.391:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 473.960546][ T30] audit: type=1326 audit(1766706306.451:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99d818df90 code=0x7ffc0000 [ 473.985082][ T30] audit: type=1326 audit(1766706306.451:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 474.016728][ T30] audit: type=1326 audit(1766706306.451:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 474.041051][ T30] audit: type=1326 audit(1766706306.451:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12451 comm="syz.4.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 474.070806][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 474.089503][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 474.254065][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.263080][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.274801][T12479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1496'. [ 474.350658][ T974] libceph: connect (1)[c::]:6789 error -101 [ 474.356729][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 474.551587][T12438] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 474.570593][ T5995] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 474.580189][ T5995] zl10353_read_register: readreg error (reg=127, ret==-32) [ 474.589951][ T5995] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 474.780924][ T974] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 474.820087][T12474] ceph: No mds server is up or the cluster is laggy [ 474.841053][ T5995] usb 1-1: USB disconnect, device number 76 [ 474.953266][ T89] libceph: connect (1)[c::]:6789 error -101 [ 474.953448][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 474.959312][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 474.969817][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 475.030363][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 475.049928][ T974] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 475.060258][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.079710][ T974] usb 6-1: Product: syz [ 475.085362][ T974] usb 6-1: Manufacturer: syz [ 475.101635][ T974] usb 6-1: SerialNumber: syz [ 475.119325][ T974] usb 6-1: config 0 descriptor?? [ 475.130861][ T974] gspca_main: se401-2.14.0 probing 047d:5003 [ 475.264258][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.273146][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 475.285061][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 475.294057][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.617693][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.629502][T12484] ceph: No mds server is up or the cluster is laggy [ 475.640084][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.827585][T12501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.847446][T12501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.895545][ T974] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 475.903383][ T974] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 475.913089][ T974] usb 6-1: USB disconnect, device number 31 [ 476.465401][T12520] overlayfs: failed to resolve './file0': -2 [ 476.596690][T12528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12528 comm=syz.4.1510 [ 476.679013][T12528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12528 comm=syz.4.1510 [ 476.699186][T12528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12528 comm=syz.4.1510 [ 476.712861][T12528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12528 comm=syz.4.1510 [ 476.759090][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 478.653818][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 479.225116][T12557] set match dimension is over the limit! [ 479.606744][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.618029][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.630367][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.640727][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.750621][ T5812] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 479.813419][T12571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1522'. [ 479.885032][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 479.912325][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 479.926889][ T5812] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 479.936867][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.945298][ T5812] usb 6-1: Product: syz [ 479.949669][ T5812] usb 6-1: Manufacturer: syz [ 479.954386][ T5812] usb 6-1: SerialNumber: syz [ 479.962102][ T5812] usb 6-1: config 0 descriptor?? [ 480.455512][ T5812] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 480.688398][T12586] overlayfs: failed to resolve './file0': -2 [ 480.710422][T11163] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 480.716879][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 480.962422][T12592] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1527'. [ 481.505989][ T5861] libceph: connect (1)[c::]:6789 error -13 [ 481.570257][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 481.612734][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 481.612748][ T30] audit: type=1400 audit(1766706314.691:808): avc: denied { ioctl } for pid=12603 comm="syz.0.1530" path="socket:[36626]" dev="sockfs" ino=36626 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 481.871351][ T974] libceph: connect (1)[c::]:6789 error -13 [ 481.878111][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 481.991151][ T89] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 482.004624][T12596] ceph: No mds server is up or the cluster is laggy [ 482.146001][ T89] usb 1-1: device descriptor read/64, error -71 [ 482.792533][ T5812] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 482.970541][ T89] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 482.991601][T12622] overlayfs: failed to resolve './file0': -2 [ 483.033010][ T974] usb 6-1: USB disconnect, device number 32 [ 483.156153][ T89] usb 1-1: device descriptor read/64, error -71 [ 483.261535][ T30] audit: type=1400 audit(1766706316.341:809): avc: denied { map } for pid=12628 comm="syz.4.1536" path="/proc/1257/task" dev="proc" ino=36651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 483.270423][ T89] usb usb1-port1: attempt power cycle [ 484.527730][ T30] audit: type=1400 audit(1766706316.631:810): avc: denied { associate } for pid=12640 comm="syz.5.1538" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 484.581608][ T89] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 484.811480][ T89] usb 1-1: device descriptor read/8, error -71 [ 486.296628][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.342924][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.081496][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 487.107463][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 487.224262][T12661] ceph: No mds server is up or the cluster is laggy [ 487.290902][T12671] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 487.441032][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 487.447121][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 487.848164][ T974] IPVS: starting estimator thread 0... [ 487.950276][T12683] IPVS: using max 38 ests per chain, 91200 per kthread [ 488.259048][T12697] random: crng reseeded on system resumption [ 488.281720][ T30] audit: type=1400 audit(1766706321.331:811): avc: denied { write } for pid=12695 comm="syz.0.1550" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 488.544049][ T30] audit: type=1400 audit(1766706321.331:812): avc: denied { open } for pid=12695 comm="syz.0.1550" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 489.133857][T12702] input: syz1 as /devices/virtual/input/input32 [ 489.242683][T12703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1551'. [ 489.274771][T12703] comedi comedi0: comedi_config --init_data is deprecated [ 489.884273][T12711] input: syz1 as /devices/virtual/input/input33 [ 490.078293][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.190786][T12716] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1555'. [ 490.287053][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.090128][ T974] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 491.131275][T12728] bond3: entered promiscuous mode [ 491.136317][T12728] bond3: entered allmulticast mode [ 491.208911][T12728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.365775][ T974] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 491.391108][ T30] audit: type=1326 audit(1766706324.461:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958f749 code=0x7ffc0000 [ 491.403724][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.438161][ T974] usb 7-1: config 0 descriptor?? [ 491.446452][ T974] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 491.475914][ T30] audit: type=1326 audit(1766706324.461:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3aa958f749 code=0x7ffc0000 [ 491.605082][ T30] audit: type=1326 audit(1766706324.461:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958f749 code=0x7ffc0000 [ 491.878504][T12722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.888832][T12722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.897526][ T30] audit: type=1326 audit(1766706324.461:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3aa958f749 code=0x7ffc0000 [ 491.953130][ T30] audit: type=1400 audit(1766706324.461:817): avc: denied { mount } for pid=12733 comm="syz.3.1561" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 492.013802][ T30] audit: type=1326 audit(1766706324.461:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958f749 code=0x7ffc0000 [ 492.070138][ T30] audit: type=1326 audit(1766706324.461:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3aa958f749 code=0x7ffc0000 [ 492.117398][ T30] audit: type=1326 audit(1766706324.461:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa958f749 code=0x7ffc0000 [ 492.290642][T12737] syzkaller0: entered promiscuous mode [ 492.296108][T12737] syzkaller0: entered allmulticast mode [ 492.547932][ T974] usb 7-1: USB disconnect, device number 8 [ 493.071769][ T974] libceph: connect (1)[c::]:6789 error -101 [ 493.077771][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 493.350394][ T974] libceph: connect (1)[c::]:6789 error -101 [ 493.356401][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 493.634141][T12755] ceph: No mds server is up or the cluster is laggy [ 494.020197][ T89] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 494.183521][ T89] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.199157][ T89] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 494.209881][ T89] usb 6-1: config 1 has no interface number 0 [ 494.230213][ T89] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.242367][ T89] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 494.260094][ T89] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 494.276289][ T89] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.295643][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.305762][ T89] usb 6-1: Product: syz [ 494.309943][ T89] usb 6-1: Manufacturer: syz [ 494.315522][ T89] usb 6-1: SerialNumber: syz [ 494.347026][T12765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 494.740903][T12752] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 494.780933][T12765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 494.810800][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 494.810816][ T30] audit: type=1400 audit(1766706327.881:832): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 495.031619][T12776] netlink: 'syz.6.1572': attribute type 1 has an invalid length. [ 495.074725][ T89] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 495.327762][ T89] cdc_ncm 6-1:1.1: bind() failure [ 495.351765][ T89] usb 6-1: USB disconnect, device number 33 [ 495.361951][T12776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.622484][ T974] libceph: connect (1)[c::]:6789 error -101 [ 495.629148][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 495.712633][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.721191][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.827703][T12782] bond1: (slave veth3): Enslaving as an active interface with a down link [ 495.862264][T12789] bond1: (slave dummy0): making interface the new active one [ 495.884136][T12789] dummy0: entered promiscuous mode [ 495.897119][T12789] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 496.048034][T12792] bond1 (unregistering): (slave veth3): Releasing active interface [ 496.146357][ T974] libceph: connect (1)[c::]:6789 error -101 [ 496.156096][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 496.165095][T12792] bond1 (unregistering): (slave dummy0): Releasing active interface [ 496.185849][T12785] ceph: No mds server is up or the cluster is laggy [ 496.193015][T12792] bond1 (unregistering): Released all slaves [ 496.729148][ T30] audit: type=1400 audit(1766706329.791:833): avc: denied { map } for pid=12803 comm="syz.0.1577" path="socket:[37509]" dev="sockfs" ino=37509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.775840][ T30] audit: type=1400 audit(1766706329.801:834): avc: denied { accept } for pid=12803 comm="syz.0.1577" path="socket:[37509]" dev="sockfs" ino=37509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 497.398201][ T30] audit: type=1400 audit(1766706330.471:835): avc: denied { mount } for pid=12818 comm="syz.6.1581" name="/" dev="rpc_pipefs" ino=37534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 497.851298][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 497.864345][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 497.880141][ T974] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 498.050256][ T974] usb 7-1: Using ep0 maxpacket: 8 [ 498.058351][ T974] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 498.067620][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.076133][ T974] usb 7-1: Product: syz [ 498.080420][ T974] usb 7-1: Manufacturer: syz [ 498.085141][ T974] usb 7-1: SerialNumber: syz [ 498.092328][ T974] usb 7-1: config 0 descriptor?? [ 498.099019][ T974] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 498.108493][ T974] dvb-usb: bulk message failed: -22 (2/0) [ 498.114400][ T974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.124228][ T974] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 498.134098][ T974] usb 7-1: media controller created [ 498.140552][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 498.147540][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 498.147914][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.169860][ T974] dvb-usb: bulk message failed: -22 (1/0) [ 498.176177][ T974] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 498.187536][ T974] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input34 [ 498.199929][ T974] dvb-usb: schedule remote query interval to 50 msecs. [ 498.206896][ T974] dvb-usb: bulk message failed: -22 (2/0) [ 498.212997][ T974] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 498.223662][ T9] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 498.242455][ T5995] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 498.260193][ T974] dvb-usb: bulk message failed: -22 (1/0) [ 498.271656][ T974] dvb-usb: error while querying for an remote control event. [ 498.298387][ T5812] usb 7-1: USB disconnect, device number 9 [ 498.326129][ T5812] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 498.342729][T12823] ceph: No mds server is up or the cluster is laggy [ 498.407836][ T9] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.420258][ T5995] usb 1-1: Using ep0 maxpacket: 16 [ 498.427159][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.438321][ T5995] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 498.451177][ T9] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 498.451205][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 498.451236][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 498.451258][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.453100][ T9] usb 6-1: config 0 descriptor?? [ 498.476341][ T5995] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 499.512755][T12834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.519390][T12828] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 499.521493][T12834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.560196][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.581494][ T5995] usb 1-1: config 0 descriptor?? [ 500.215267][ T5995] logitech 0003:046D:C623.0013: item fetching failed at offset 8/69 [ 500.217364][ T9] logitech 0003:046D:C24F.0014: unbalanced collection at end of report description [ 500.260448][ T9] logitech 0003:046D:C24F.0014: parse failed [ 500.262989][ T5995] logitech 0003:046D:C623.0013: parse failed [ 500.272743][ T9] logitech 0003:046D:C24F.0014: probe with driver logitech failed with error -22 [ 500.278189][ T5995] logitech 0003:046D:C623.0013: probe with driver logitech failed with error -22 [ 500.349627][ T9] usb 1-1: USB disconnect, device number 81 [ 500.509398][T12858] overlayfs: failed to resolve './file0': -2 [ 500.544662][ T30] audit: type=1400 audit(1766706333.601:836): avc: denied { sys_admin } for pid=12856 comm="syz.6.1591" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 500.706489][ T5995] usb 6-1: USB disconnect, device number 34 [ 500.813123][T12862] uprobe: syz.3.1593:12862 failed to unregister, leaking uprobe [ 500.862321][T12862] fuse: Bad value for 'fd' [ 500.954629][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.572003][ T5995] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 501.781287][ T5995] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.828746][ T5995] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.874857][ T5995] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 501.929448][ T5995] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.986740][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.415344][T12896] random: crng reseeded on system resumption [ 502.445710][ T30] audit: type=1400 audit(1766706335.521:837): avc: denied { ioctl } for pid=12883 comm="syz.3.1599" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 502.774414][ T5995] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.811376][ T5995] usb 7-1: invalid MIDI out EP 0 [ 502.988109][ T5995] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 503.026359][ T5995] usb 7-1: USB disconnect, device number 10 [ 503.171268][T10980] udevd[10980]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.120908][T12914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.268467][T12914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.296908][ T5897] libceph: connect (1)[c::]:6789 error -13 [ 504.309075][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 504.626460][T12929] netlink: 'syz.0.1609': attribute type 4 has an invalid length. [ 504.841192][ T9] libceph: connect (1)[c::]:6789 error -13 [ 504.882060][T12930] lo speed is unknown, defaulting to 1000 [ 504.898703][T12930] lo speed is unknown, defaulting to 1000 [ 504.913980][T12930] lo speed is unknown, defaulting to 1000 [ 504.990228][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 504.996522][T12916] ceph: No mds server is up or the cluster is laggy [ 505.050734][T12933] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 505.062578][ T30] audit: type=1400 audit(1766706338.101:838): avc: denied { map } for pid=12925 comm="syz.5.1608" path="socket:[37720]" dev="sockfs" ino=37720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 505.366755][T12935] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 505.740921][ T5995] lo speed is unknown, defaulting to 1000 [ 505.751972][T12937] vivid-002: disconnect [ 505.756270][T12937] vivid-002: reconnect [ 505.801099][T12930] infiniband syz0: set down [ 505.805937][T12930] infiniband syz0: added lo [ 505.818571][T12930] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 505.824427][T12930] infiniband syz0: Couldn't open port 1 [ 506.229931][ T30] audit: type=1400 audit(1766706339.211:839): avc: denied { lock } for pid=12944 comm="syz.4.1613" path="socket:[37856]" dev="sockfs" ino=37856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 506.581148][T12930] RDS/IB: syz0: added [ 506.600457][T12930] smc: adding ib device syz0 with port count 1 [ 506.611464][T12930] smc: ib device syz0 port 1 has no pnetid [ 506.617603][ T30] audit: type=1326 audit(1766706339.221:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 506.690496][T12930] lo speed is unknown, defaulting to 1000 [ 506.699845][ T30] audit: type=1326 audit(1766706339.221:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 506.770796][ T9] lo speed is unknown, defaulting to 1000 [ 506.800120][ T30] audit: type=1326 audit(1766706339.221:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 506.897338][ T30] audit: type=1326 audit(1766706339.221:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 506.985763][ T30] audit: type=1326 audit(1766706339.221:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 507.049567][ T30] audit: type=1326 audit(1766706339.221:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 507.120884][ T30] audit: type=1326 audit(1766706339.221:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 507.158475][T12930] lo speed is unknown, defaulting to 1000 [ 507.165096][ T30] audit: type=1326 audit(1766706339.221:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 507.218984][ T30] audit: type=1326 audit(1766706339.221:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d818f749 code=0x7ffc0000 [ 507.261538][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.281268][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.763802][T12959] vivid-004: ================= START STATUS ================= [ 507.781067][T12959] vivid-004: Radio HW Seek Mode: Bounded [ 507.931218][T12959] vivid-004: Radio Programmable HW Seek: false [ 507.937537][T12959] vivid-004: RDS Rx I/O Mode: Block I/O [ 508.367344][T12959] vivid-004: Generate RBDS Instead of RDS: false [ 508.387577][T12959] vivid-004: RDS Reception: true [ 508.394038][T12930] lo speed is unknown, defaulting to 1000 [ 508.409896][T12959] vivid-004: RDS Program Type: 0 inactive [ 508.420911][T12959] vivid-004: RDS PS Name: inactive [ 508.434267][T12959] vivid-004: RDS Radio Text: inactive [ 508.454090][T12959] vivid-004: RDS Traffic Announcement: false inactive [ 508.461148][T12959] vivid-004: RDS Traffic Program: false inactive [ 508.469754][T12959] vivid-004: RDS Music: false inactive [ 508.478018][T12959] vivid-004: ================== END STATUS ================== [ 508.527741][T12930] lo speed is unknown, defaulting to 1000 [ 508.650095][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 508.672691][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.708407][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.732261][T12930] lo speed is unknown, defaulting to 1000 [ 508.819563][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 508.835374][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.864408][ T9] usb 6-1: config 0 descriptor?? [ 509.389209][T12930] lo speed is unknown, defaulting to 1000 [ 509.581870][ T9] ath6kl: Failed to read usb control message: -71 [ 509.588341][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 509.620988][ T9] ath6kl: unable to read target info byte count: -71 [ 509.648191][ T9] ath6kl: Failed to init ath6kl core: -71 [ 509.687330][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 509.714311][ T9] usb 6-1: USB disconnect, device number 35 [ 510.313494][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.322332][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.483816][T12996] ip6gre1: entered promiscuous mode [ 510.511906][T12996] ip6gre1: entered allmulticast mode [ 510.737818][T13006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.747494][T13006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.840127][ T5812] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 510.940130][ T89] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 511.010215][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 511.017074][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.028233][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.038196][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.051892][ T5812] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.061237][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.071948][ T5812] usb 1-1: config 0 descriptor?? [ 511.090100][ T89] usb 7-1: Using ep0 maxpacket: 32 [ 511.096429][ T89] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 511.104850][ T89] usb 7-1: config 0 has no interface number 0 [ 511.111040][ T89] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.122691][ T89] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 511.131769][ T89] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.139767][ T89] usb 7-1: Product: syz [ 511.143997][ T89] usb 7-1: Manufacturer: syz [ 511.148588][ T89] usb 7-1: SerialNumber: syz [ 511.156871][ T89] usb 7-1: config 0 descriptor?? [ 511.167892][ T89] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 511.177680][ T89] em28xx 7-1:0.132: Video interface 132 found: [ 511.220108][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 511.370996][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 511.403029][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 511.414472][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.427958][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.447245][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 511.459828][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 511.473061][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.485909][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.486379][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 511.505836][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.508105][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.620125][T13017] loop7: detected capacity change from 0 to 16384 [ 511.661462][T13017] loop7: detected capacity change from 16384 to 0 [ 511.666123][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.798342][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.845699][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.853366][ T89] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 511.856957][ T9] usb 6-1: USB disconnect, device number 36 [ 511.863530][ T5812] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 511.877873][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.900080][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.909286][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.922950][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.930418][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.938353][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.946208][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.954887][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 511.965828][ T5812] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 512.043899][ T5812] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 512.056739][ T5812] microsoft 0003:045E:07DA.0015: no inputs found [ 512.067329][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 512.067344][ T30] audit: type=1400 audit(1766706345.141:915): avc: denied { mounton } for pid=13003 comm="syz.6.1628" path="/proc/157/cgroup" dev="nsfs" ino=4026533916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 512.099370][ T5812] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 512.112012][ T5812] usb 1-1: USB disconnect, device number 82 [ 512.220120][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 512.380262][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 512.389900][ T9] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 512.400081][ T9] usb 6-1: config 0 has no interface number 0 [ 512.406390][ T9] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 512.426102][ T9] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 512.441746][ T9] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 512.453992][ T9] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 512.463963][ T9] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 512.478302][ T9] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 512.488879][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.498901][ T9] usb 6-1: Product: syz [ 512.505066][ T9] usb 6-1: Manufacturer: syz [ 512.509885][ T9] usb 6-1: SerialNumber: syz [ 512.517401][ T9] usb 6-1: config 0 descriptor?? [ 512.532225][T13021] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 512.895815][ T9] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 513.030777][ T89] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 513.045344][ T89] em28xx 7-1:0.132: board has no eeprom [ 513.091514][ T9] etas_es58x 6-1:0.219: could not parse product info: '424242424242' [ 513.120815][ T89] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 513.150140][ T89] em28xx 7-1:0.132: analog set to bulk mode. [ 513.159169][ T5812] em28xx 7-1:0.132: Registering V4L2 extension [ 513.193890][ T89] usb 7-1: USB disconnect, device number 11 [ 513.214569][ T89] em28xx 7-1:0.132: Disconnecting em28xx [ 513.280907][ T9] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 513.409506][ T5812] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 513.427636][ T5812] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 513.438595][T11163] Bluetooth: hci2: command tx timeout [ 513.457836][ T5812] em28xx 7-1:0.132: No AC97 audio processor [ 513.462027][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 513.483073][ T5812] usb 7-1: Decoder not found [ 513.489437][ T30] audit: type=1400 audit(1766706346.561:916): avc: denied { accept } for pid=13050 comm="syz.4.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.490278][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 513.520378][ T5812] em28xx 7-1:0.132: failed to create media graph [ 513.526751][ T5812] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 513.532734][T13054] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1638'. [ 513.551100][ T5812] em28xx 7-1:0.132: Remote control support is not available for this card. [ 513.576417][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 513.579755][ T89] em28xx 7-1:0.132: Closing input extension [ 513.605084][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.621232][ T9] usb 1-1: Product: syz [ 513.628769][ T9] usb 1-1: Manufacturer: syz [ 513.636587][ T89] em28xx 7-1:0.132: Freeing device [ 513.651626][ T9] usb 1-1: SerialNumber: syz [ 513.667360][ T30] audit: type=1400 audit(1766706346.741:917): avc: denied { getopt } for pid=13059 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 514.039512][ T30] audit: type=1400 audit(1766706347.111:918): avc: denied { lock } for pid=13071 comm="syz.6.1642" path="socket:[39052]" dev="sockfs" ino=39052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 514.086856][ C1] etas_es58x 6-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 514.096256][ C1] etas_es58x 6-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 514.105619][ C1] etas_es58x 6-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 514.114978][ C1] etas_es58x 6-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 514.129209][ T5480] etas_es58x 6-1:0.219 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 514.138342][ C1] etas_es58x 6-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 514.149366][ T5480] etas_es58x 6-1:0.219 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 514.728607][T13084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.738928][T13084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.757815][T13084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.768457][T13084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.975788][ T5812] usb 6-1: USB disconnect, device number 37 [ 514.986303][ T5812] etas_es58x 6-1:0.219: Disconnecting syz syz [ 516.400508][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input36 [ 516.661656][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 516.688126][ T9] usb 1-1: USB disconnect, device number 83 [ 516.688212][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 516.753083][T13109] overlayfs: failed to resolve './file0': -2 [ 516.785120][ T9] appletouch 1-1:1.0: input: appletouch disconnected [ 517.736192][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 517.746978][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 518.844670][T13139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.853293][T13139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.007248][T13143] netlink: 'syz.4.1658': attribute type 10 has an invalid length. [ 519.017967][T13143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1658'. [ 519.033599][T13143] veth0_vlan: entered allmulticast mode [ 519.042571][T13143] bridge0: port 3(veth0_vlan) entered blocking state [ 519.051091][T13143] bridge0: port 3(veth0_vlan) entered disabled state [ 519.070326][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 519.083704][T13143] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 519.167334][T13150] lo speed is unknown, defaulting to 1000 [ 519.246285][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 519.253575][ T9] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 519.263122][ T9] usb 1-1: config 0 has no interface number 0 [ 519.269188][ T9] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 519.290121][ T9] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 519.310138][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 519.321924][ T9] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 519.354960][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 519.386333][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 519.406084][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.424306][ T9] usb 1-1: Product: syz [ 519.428574][ T9] usb 1-1: Manufacturer: syz [ 519.438667][ T9] usb 1-1: SerialNumber: syz [ 519.496225][ T9] usb 1-1: config 0 descriptor?? [ 519.502013][T13137] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 520.178397][ T9] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 520.390858][ T9] etas_es58x 1-1:0.219: could not parse product info: '424242424242' [ 520.636494][T13173] FAT-fs (loop5): unable to read boot sector [ 520.659946][ T30] audit: type=1400 audit(1766706353.701:919): avc: denied { bind } for pid=13167 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 522.839070][ T5995] usb 1-1: USB disconnect, device number 84 [ 522.886042][ T5995] etas_es58x 1-1:0.219: Disconnecting syz syz [ 523.808943][T13229] input: syz1 as /devices/virtual/input/input37 [ 523.912481][T13238] 9pnet_fd: p9_fd_create_tcp (13238): problem connecting socket to 127.0.0.1 [ 524.566793][ T30] audit: type=1400 audit(1766706357.311:920): avc: denied { append } for pid=13239 comm="syz.3.1676" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 524.595388][T13248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.608073][T13249] input: syz1 as /devices/virtual/input/input38 [ 525.100787][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 525.141638][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 525.411104][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 525.417621][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 525.460101][ T5812] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 525.626979][T13258] ceph: No mds server is up or the cluster is laggy [ 525.752861][T13270] CIFS mount error: No usable UNC path provided in device string! [ 525.752861][T13270] [ 525.762950][T13270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 526.082778][ T9] libceph: connect (1)[c::]:6789 error -101 [ 526.088868][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 526.320535][ T5897] libceph: connect (1)[c::]:6789 error -13 [ 526.326533][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 526.400100][ T5812] usb 7-1: Using ep0 maxpacket: 32 [ 526.565082][ T5812] usb 7-1: config 0 has an invalid interface number: 219 but max is 0 [ 526.732124][ T5897] libceph: connect (1)[c::]:6789 error -13 [ 526.741113][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 526.852227][ T5812] usb 7-1: config 0 has no interface number 0 [ 526.853812][T13271] ceph: No mds server is up or the cluster is laggy [ 527.328971][ T5812] usb 7-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 527.399526][ T5812] usb 7-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 527.430147][ T5812] usb 7-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 527.480855][T13290] lo speed is unknown, defaulting to 1000 [ 527.496722][ T5812] usb 7-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 527.506874][ T5812] usb 7-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 527.519139][ T5812] usb 7-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 527.528556][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.547391][T13288] overlayfs: failed to resolve './file0': -2 [ 527.765315][ T5812] usb 7-1: Product: syz [ 527.769629][ T5812] usb 7-1: Manufacturer: syz [ 527.777599][ T5812] usb 7-1: SerialNumber: syz [ 527.795777][ T5812] usb 7-1: config 0 descriptor?? [ 527.904068][T13264] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 528.278681][ T5812] etas_es58x 7-1:0.219: Starting syz syz (Serial Number syz) [ 528.286979][ T5812] etas_es58x 7-1:0.219: could not retrieve the product info string [ 529.028356][ T5812] usb 7-1: USB disconnect, device number 12 [ 529.058970][ T5812] etas_es58x 7-1:0.219: Disconnecting syz syz [ 529.217394][T13307] overlayfs: failed to resolve './file0': -2 [ 529.737032][ T5897] libceph: connect (1)[c::]:6789 error -13 [ 529.770231][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 530.173610][ T5928] libceph: connect (1)[c::]:6789 error -13 [ 530.179606][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 530.308109][T13344] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1 [ 530.576027][T13326] ceph: No mds server is up or the cluster is laggy [ 530.745736][ T5928] libceph: connect (1)[c::]:6789 error -13 [ 530.776901][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 530.809931][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 530.833319][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 530.839328][T13349] ceph: No mds server is up or the cluster is laggy [ 530.927234][T13358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.979916][T13358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.094909][ T5928] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 531.176806][T13371] netlink: 'syz.6.1701': attribute type 5 has an invalid length. [ 531.191151][T13371] netlink: 'syz.6.1701': attribute type 29 has an invalid length. [ 531.203856][T13371] netlink: 'syz.6.1701': attribute type 29 has an invalid length. [ 531.212744][T13371] netlink: 'syz.6.1701': attribute type 29 has an invalid length. [ 531.232035][T13371] netlink: 'syz.6.1701': attribute type 29 has an invalid length. [ 531.246530][T13371] netlink: 'syz.6.1701': attribute type 29 has an invalid length. [ 531.261521][ T5928] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 531.272403][T13371] netlink: 'syz.6.1701': attribute type 29 has an invalid length. [ 531.299132][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.312512][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'. [ 531.315202][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 531.324874][T13375] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1701'. [ 531.358381][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 531.374384][T13371] netlink: 'syz.6.1701': attribute type 29 has an invalid length. [ 531.374489][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'. [ 531.401285][ T5928] usb 1-1: Product: syz [ 531.416936][ T5928] usb 1-1: Manufacturer: syz [ 531.421688][T13375] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1701'. [ 531.431201][ T5928] usb 1-1: SerialNumber: syz [ 531.436301][ T5951] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.495214][ T5951] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.495259][ T5928] usb 1-1: config 0 descriptor?? [ 531.505867][ T5951] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.522133][ T5951] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.574661][ T5928] usb 1-1: selecting invalid altsetting 0 [ 531.672279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.684513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.697071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.709302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.721496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.733624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.745809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.757929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.770147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.782315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.816068][ T9] usb 1-1: USB disconnect, device number 85 [ 532.960067][T13386] ceph: No mds server is up or the cluster is laggy [ 533.307535][T13354] overlayfs: failed to resolve './file0': -2 [ 533.331306][ T5897] libceph: connect (1)[c::]:6789 error -13 [ 534.193774][T13391] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 534.207114][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 534.593053][T13391] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 534.607067][ T30] audit: type=1326 audit(1766706367.681:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 534.819217][ T30] audit: type=1326 audit(1766706367.711:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 534.948401][ T30] audit: type=1326 audit(1766706367.991:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b40f2b829 code=0x7ffc0000 [ 535.112449][ T30] audit: type=1326 audit(1766706367.991:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 535.287856][ T30] audit: type=1326 audit(1766706367.991:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 535.472595][ T974] libceph: connect (1)[c::]:6789 error -101 [ 536.085395][T13401] ceph: No mds server is up or the cluster is laggy [ 536.277398][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 536.285945][T13407] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 536.356517][ T30] audit: type=1326 audit(1766706368.001:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 536.587114][ T974] libceph: connect (1)[c::]:6789 error -101 [ 536.593950][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 536.680014][ C1] net_ratelimit: 18394 callbacks suppressed [ 536.680033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.698464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.710934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.723416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.735916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.748385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.760863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.773359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.785809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.798278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.178924][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1708'. [ 537.273303][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 537.291540][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 537.310531][ T30] audit: type=1326 audit(1766706368.241:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 537.569112][ T30] audit: type=1326 audit(1766706368.241:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 537.623423][ T5897] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 537.770242][ T30] audit: type=1326 audit(1766706369.341:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 537.820088][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 537.826347][T13416] lo speed is unknown, defaulting to 1000 [ 537.878111][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.891626][ T30] audit: type=1326 audit(1766706369.341:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13378 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b40f8f749 code=0x7ffc0000 [ 537.941787][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 537.982869][ T5897] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 538.000389][ T5897] usb 6-1: Manufacturer: syz [ 538.058121][T13426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.118835][ T5897] usb 6-1: config 0 descriptor?? [ 538.128420][T13426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.659628][T13438] overlayfs: failed to resolve './file0': -2 [ 539.741876][ T49] usb 6-1: USB disconnect, device number 38 [ 541.690315][ C1] net_ratelimit: 16073 callbacks suppressed [ 541.690333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.708722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.721195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.733633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.746078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.758548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.770969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.783418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.795835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.808128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.956643][T13450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.254765][T13457] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 546.700251][ C1] net_ratelimit: 20282 callbacks suppressed [ 546.700266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.727540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.739773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.752014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.764366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.776592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.788976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.801215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.813399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.825602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.047147][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.626249][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.052496][T13470] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 548.085833][T13470] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 548.110087][ T974] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 548.270108][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 548.811459][ T974] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 548.819757][ T974] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.841139][ T974] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 550.320188][ T974] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 550.376690][ T974] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.158149][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.169659][ T974] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 551.169691][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.240483][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.710283][ C1] net_ratelimit: 19429 callbacks suppressed [ 551.710306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.728604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.740946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.753395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.765704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.778118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.790385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.802625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.814895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.827137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.002331][ T974] usb 6-1: can't set config #16, error -71 [ 553.532995][T13484] netlink: 'syz.4.1727': attribute type 2 has an invalid length. [ 553.549919][T13484] netlink: 'syz.4.1727': attribute type 2 has an invalid length. [ 553.560264][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.568991][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.695166][ T974] usb 6-1: USB disconnect, device number 39 [ 555.244456][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 555.244474][ T30] audit: type=1400 audit(1766706388.321:946): avc: denied { execute } for pid=13486 comm="syz.6.1730" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 556.487357][T13507] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 556.720034][ C1] net_ratelimit: 16859 callbacks suppressed [ 556.720053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.747562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.759966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.772372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.784764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.797127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.808609][T13512] lo speed is unknown, defaulting to 1000 [ 556.810195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.827159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.839381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.851595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.660079][ T974] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 560.020089][ T974] usb 7-1: Using ep0 maxpacket: 16 [ 560.031079][ T974] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 560.070613][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.100288][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.141183][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.171302][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.190651][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.228043][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.259682][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.291392][ T974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.369049][ T974] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 560.398211][T13521] lo speed is unknown, defaulting to 1000 [ 560.408499][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.440084][ T974] usb 7-1: Product: syz [ 560.444277][ T974] usb 7-1: Manufacturer: syz [ 560.448863][ T974] usb 7-1: SerialNumber: syz [ 560.582536][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.595441][ T974] usb 7-1: config 0 descriptor?? [ 560.622732][ T974] usb 7-1: can't set config #0, error -71 [ 560.650335][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.680326][ T974] usb 7-1: USB disconnect, device number 13 [ 561.006017][T13535] netlink: 'syz.6.1740': attribute type 12 has an invalid length. [ 561.730168][ C1] net_ratelimit: 15160 callbacks suppressed [ 561.730182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.748443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.760664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.772847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.784974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.797152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.809270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.821450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.833758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.845944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.453548][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.269545][T13552] fuse: Unknown parameter '$' [ 566.735905][T13556] netlink: 'syz.0.1738': attribute type 4 has an invalid length. [ 566.740206][ C1] net_ratelimit: 19518 callbacks suppressed [ 566.740221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.744890][T13556] syz0: rxe_newlink: already configured on lo [ 566.749863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.780327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 566.792536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.804701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.816849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 566.829026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.841186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.853418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 566.865608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.990085][ T9] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 569.176989][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.190175][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 569.210423][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.263498][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.300404][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.330091][ T9] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 569.353541][T11163] Bluetooth: hci3: command 0x0c1a tx timeout [ 570.630283][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 570.706491][ T9] usb usb1-port1: attempt power cycle [ 571.750039][ C1] net_ratelimit: 18236 callbacks suppressed [ 571.750058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.768315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.780461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 571.792805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.805463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.817586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 571.829769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.841916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.855204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 571.867409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.885431][ T9] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 571.980089][ T9] usb 1-1: device descriptor read/8, error -71 [ 572.326761][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.414211][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.445482][ T30] audit: type=1400 audit(1766706405.521:947): avc: denied { append } for pid=13579 comm="syz.0.1751" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 572.536239][T13587] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1750'. [ 573.043071][T13592] netlink: 'syz.6.1753': attribute type 2 has an invalid length. [ 573.060828][T13591] netlink: 'syz.3.1752': attribute type 4 has an invalid length. [ 573.081125][T13592] netlink: 'syz.6.1753': attribute type 2 has an invalid length. [ 573.210062][ T5897] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 573.342150][T13603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.420043][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 576.760170][ C1] net_ratelimit: 23323 callbacks suppressed [ 576.760184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.778276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 576.790455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.802727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.814838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 576.827032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.839169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.851280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 576.863469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.875607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.770077][ C1] net_ratelimit: 25972 callbacks suppressed [ 581.770092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.788099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 581.800249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.812468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.824689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.836839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 581.848996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.861103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.873247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.885396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 586.780093][ C1] net_ratelimit: 26006 callbacks suppressed [ 586.780107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.798123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 586.810257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.822345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.834499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.846580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 586.858711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.870824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.882954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.895054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 591.790087][ C1] net_ratelimit: 25963 callbacks suppressed [ 591.790101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 591.808253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.820350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.832500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.844745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 591.856914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.869014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.881167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.893264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 591.905386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.800062][ C1] net_ratelimit: 25930 callbacks suppressed [ 596.800076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 596.818126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.830239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.842402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.854523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 596.866675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.878792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.890975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.903257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 596.915421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.810035][ C1] net_ratelimit: 18913 callbacks suppressed [ 601.810049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.828534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 601.840680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.852800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.864957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.877540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 601.889720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.901840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.913977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.926544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 606.820060][ C1] net_ratelimit: 16345 callbacks suppressed [ 606.820075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.838165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.850762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 606.862917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.875010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.887150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.899744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 606.911908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.924010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.936160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.830114][ C1] net_ratelimit: 16322 callbacks suppressed [ 611.830127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.848208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.860886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 611.873075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.885306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.897484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.910146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 611.922349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.934450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.946653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.840169][ C1] net_ratelimit: 16334 callbacks suppressed [ 616.840184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.858232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.870766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 616.882919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.895009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.907149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.919696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 616.931838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.943962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.956109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.850033][ C1] net_ratelimit: 16351 callbacks suppressed [ 621.850047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.868490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 621.880636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.892750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.904877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.917421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 621.929583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.941679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.953819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.966365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 626.860460][ C1] net_ratelimit: 16355 callbacks suppressed [ 626.860473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 626.878543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.890716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.902919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.915545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 626.927690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.939814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.951955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.964491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 626.976684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.870135][ C1] net_ratelimit: 16356 callbacks suppressed [ 631.870148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.888239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.900917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 631.913062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.925154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.937324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.949883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 631.962056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.974169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.986318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.880046][ C1] net_ratelimit: 16294 callbacks suppressed [ 636.880061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.898124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.910672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 636.922845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.934938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.947092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.959864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 636.972056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.984276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.996538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.890194][ C1] net_ratelimit: 16310 callbacks suppressed [ 641.890207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.908387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.921172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 641.933346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.945449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.957692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.970477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 641.982663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.994816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.006980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.900045][ C1] net_ratelimit: 16303 callbacks suppressed [ 646.900059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.918531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 646.930688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.942821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.955021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.967643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 646.979915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.992028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.004462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.017023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 651.910058][ C1] net_ratelimit: 16316 callbacks suppressed [ 651.910071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.928086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.940242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.952795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 651.964994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.977106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.989282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.001852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 652.014002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.026124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.920103][ C1] net_ratelimit: 16363 callbacks suppressed [ 656.920116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.938166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.950738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 656.962877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.975119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.987273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.999823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 657.011955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.024055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.036192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.930157][ C1] net_ratelimit: 16374 callbacks suppressed [ 661.930171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.948186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.960729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 661.972862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.984941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.997111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.009694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 662.021847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.033933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.046072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.940448][ C1] net_ratelimit: 16336 callbacks suppressed [ 666.940463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 666.958542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.970655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.982824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.995380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 667.007522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.019729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.031862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.044394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 667.056526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.950635][ C1] net_ratelimit: 16334 callbacks suppressed [ 671.950648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 671.968686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.980808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.992949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.005516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 672.017664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.029773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.041924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.054470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 672.066618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.960491][ C1] net_ratelimit: 16346 callbacks suppressed [ 676.960506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 676.978635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.990766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.002908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.015476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 677.027624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.039733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.051906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.064482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 677.076635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.369956][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 678.376913][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13589/1:b..l [ 678.385333][ C1] rcu: (detected by 1, t=10502 jiffies, g=56121, q=419 ncpus=2) [ 678.393018][ C1] task:syz.3.1752 state:R running task stack:27160 pid:13589 tgid:13581 ppid:5811 task_flags:0x400040 flags:0x00080000 [ 678.407094][ C1] Call Trace: [ 678.410352][ C1] [ 678.413260][ C1] ? __schedule+0x10b9/0x6150 [ 678.417913][ C1] __schedule+0x1139/0x6150 [ 678.422393][ C1] ? find_held_lock+0x2b/0x80 [ 678.427049][ C1] ? __pfx___schedule+0x10/0x10 [ 678.431871][ C1] ? mark_held_locks+0x49/0x80 [ 678.436608][ C1] preempt_schedule_irq+0x51/0x90 [ 678.441604][ C1] irqentry_exit+0x1d8/0x8c0 [ 678.446168][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.452120][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 678.458161][ C1] Code: e9 4d 1b 5e 00 be 03 00 00 00 5b e9 72 df ed 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 98 c9 f3 11 65 8b 05 a9 c9 f3 11 a9 00 01 ff 00 74 1d [ 678.477741][ C1] RSP: 0018:ffffc9000452f6b0 EFLAGS: 00000202 [ 678.483777][ C1] RAX: ffffffff8b71cb6e RBX: 0000000000000001 RCX: ffffffff8b71cb8f [ 678.491719][ C1] RDX: ffff88802cfb24c0 RSI: ffffffff8b71d006 RDI: 0000000000000005 [ 678.499658][ C1] RBP: 1ffff920008a5efb R08: 0000000000000005 R09: 0000000000000000 [ 678.507610][ C1] R10: 0000000000000001 R11: ffff88802cfb2ff0 R12: 0000000000000001 [ 678.515561][ C1] R13: ffffc9000452f7f8 R14: ffffffffffffffff R15: 00002000000b9000 [ 678.523519][ C1] ? mt_find+0x13e/0xa20 [ 678.527745][ C1] ? mt_find+0x15f/0xa20 [ 678.531969][ C1] ? mt_find+0x5d6/0xa20 [ 678.536193][ C1] mt_find+0x5d6/0xa20 [ 678.540241][ C1] ? __pfx_mt_find+0x10/0x10 [ 678.544808][ C1] ? __mutex_unlock_slowpath+0x161/0x790 [ 678.550424][ C1] find_vma+0xbf/0x140 [ 678.554477][ C1] ? __pfx_find_vma+0x10/0x10 [ 678.559137][ C1] lock_mm_and_find_vma+0x62/0x6e0 [ 678.564239][ C1] do_user_addr_fault+0x2ac/0x1370 [ 678.569335][ C1] ? rcu_is_watching+0x12/0xc0 [ 678.574072][ C1] exc_page_fault+0x64/0xc0 [ 678.578553][ C1] asm_exc_page_fault+0x26/0x30 [ 678.583379][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 678.589088][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 c7 c0 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 678.608675][ C1] RSP: 0018:ffffc9000452f9e8 EFLAGS: 00050246 [ 678.614712][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000b9030 [ 678.622662][ C1] RDX: 0000000000080000 RSI: ffffffff893b4863 RDI: 0000000000000005 [ 678.630606][ C1] RBP: ffffc9000452fd88 R08: 0000000000000005 R09: 0000000000000000 [ 678.638544][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 678.646483][ C1] R13: 00002000000b9000 R14: ffffc9000452fdcc R15: 0000000000000002 [ 678.654435][ C1] ? ____sys_recvmsg+0x2e3/0x6b0 [ 678.659350][ C1] ____sys_recvmsg+0x2ee/0x6b0 [ 678.664087][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 678.669352][ C1] ? ___sys_recvmsg+0xed/0x1a0 [ 678.674086][ C1] ? ___sys_recvmsg+0xf7/0x1a0 [ 678.678821][ C1] ___sys_recvmsg+0x114/0x1a0 [ 678.683469][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 678.688645][ C1] ? __pfx___might_resched+0x10/0x10 [ 678.693903][ C1] do_recvmmsg+0x2fe/0x750 [ 678.698294][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 678.703211][ C1] ? find_held_lock+0x2b/0x80 [ 678.707865][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 678.712859][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 678.718377][ C1] do_syscall_64+0xcd/0xf80 [ 678.722854][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.728720][ C1] RIP: 0033:0x7f3aa958f749 [ 678.733115][ C1] RSP: 002b:00007f3aaa43c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 678.741499][ C1] RAX: ffffffffffffffda RBX: 00007f3aa97e6090 RCX: 00007f3aa958f749 [ 678.749444][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 678.757385][ C1] RBP: 00007f3aa9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 678.765329][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 678.773271][ C1] R13: 00007f3aa97e6128 R14: 00007f3aa97e6090 R15: 00007ffe877c3c48 [ 678.781222][ C1] [ 678.784215][ C1] rcu: rcu_preempt kthread starved for 10534 jiffies! g56121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 678.795461][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 678.805400][ C1] rcu: RCU grace-period kthread stack dump: [ 678.811255][ C1] task:rcu_preempt state:R running task stack:28208 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 678.824702][ C1] Call Trace: [ 678.827950][ C1] [ 678.830856][ C1] ? __schedule+0x10b9/0x6150 [ 678.835518][ C1] __schedule+0x1139/0x6150 [ 678.839999][ C1] ? __pfx___schedule+0x10/0x10 [ 678.844821][ C1] ? find_held_lock+0x2b/0x80 [ 678.849474][ C1] ? schedule+0x2d7/0x3a0 [ 678.853778][ C1] schedule+0xe7/0x3a0 [ 678.857818][ C1] schedule_timeout+0x123/0x290 [ 678.862638][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 678.867980][ C1] ? __pfx_process_timeout+0x10/0x10 [ 678.873237][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 678.879016][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 678.884467][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 678.889230][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 678.894517][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 678.899719][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 678.904636][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 678.909468][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 678.915259][ C1] rcu_gp_kthread+0x26d/0x380 [ 678.919918][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.925096][ C1] ? rcu_is_watching+0x12/0xc0 [ 678.929839][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 678.935021][ C1] ? __kthread_parkme+0x19e/0x250 [ 678.940021][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.945195][ C1] kthread+0x3c5/0x780 [ 678.949237][ C1] ? __pfx_kthread+0x10/0x10 [ 678.953803][ C1] ? rcu_is_watching+0x12/0xc0 [ 678.958538][ C1] ? __pfx_kthread+0x10/0x10 [ 678.963101][ C1] ret_from_fork+0x983/0xb10 [ 678.967662][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 678.972747][ C1] ? __switch_to+0x7af/0x10d0 [ 678.977395][ C1] ? __pfx_kthread+0x10/0x10 [ 678.981957][ C1] ret_from_fork_asm+0x1a/0x30 [ 678.986709][ C1] [ 678.989701][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 678.995994][ C1] Sending NMI from CPU 1 to CPUs 0: [ 679.001173][ C0] NMI backtrace for cpu 0 [ 679.001187][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.001207][ C0] Tainted: [L]=SOFTLOCKUP [ 679.001212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.001220][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 679.001241][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 679.001255][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 679.001267][ C0] RAX: 00000000025d9db7 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 679.001277][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 679.001286][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 679.001296][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 679.001306][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 679.001316][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 679.001331][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.001341][ C0] CR2: 00005645b29e5be0 CR3: 000000007562d000 CR4: 00000000003526f0 [ 679.001351][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 679.001360][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 679.001370][ C0] Call Trace: [ 679.001375][ C0] [ 679.001380][ C0] default_idle+0x13/0x20 [ 679.001404][ C0] default_idle_call+0x6c/0xb0 [ 679.001423][ C0] do_idle+0x38d/0x510 [ 679.001445][ C0] ? __pfx_do_idle+0x10/0x10 [ 679.001468][ C0] cpu_startup_entry+0x4f/0x60 [ 679.001489][ C0] rest_init+0x16b/0x2b0 [ 679.001500][ C0] ? acpi_subsystem_init+0x133/0x180 [ 679.001515][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 679.001530][ C0] start_kernel+0x3ef/0x4d0 [ 679.001551][ C0] x86_64_start_reservations+0x18/0x30 [ 679.001572][ C0] x86_64_start_kernel+0x130/0x190 [ 679.001593][ C0] common_startup_64+0x13e/0x148 [ 679.001615][ C0] [ 681.970115][ C1] net_ratelimit: 13476 callbacks suppressed [ 681.970134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.988176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.000705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 682.012850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.024931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.037074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.049613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 682.061770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.073866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.086011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.980015][ C1] net_ratelimit: 16316 callbacks suppressed [ 686.980029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 686.998122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.010254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.022407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.034992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 687.047157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.059308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.071448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.084023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:50:bc:f7:eb:94, vlan:0) [ 687.096193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)