last executing test programs: 13m37.863189393s ago: executing program 2 (id=637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) futex_waitv(&(0x7f0000002940)=[{0x0, &(0x7f0000001000), 0x82}, {0x0, &(0x7f0000001040), 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x0, &(0x7f00000010c0), 0x82}, {0x0, &(0x7f0000001100), 0x82}, {0x0, &(0x7f0000001140), 0x82}, {0x0, &(0x7f0000001180)}, {0x0, &(0x7f00000011c0)}, {0x0, &(0x7f0000001200)}, {0x0, &(0x7f0000001240)}, {0x0, &(0x7f0000001280)}, {0x0, &(0x7f00000012c0)}, {0x0, &(0x7f0000001300)}, {0x0, &(0x7f0000001340)}, {0x0, &(0x7f0000001380)}, {0x0, &(0x7f00000013c0)}, {0x0, &(0x7f0000001400)}, {0x0, &(0x7f0000001440)}, {0x0, &(0x7f0000001480)}, {0x0, &(0x7f00000014c0)}, {0x0, &(0x7f0000001500)}, {0x0, &(0x7f0000001540)}, {0x0, &(0x7f0000001580)}, {0x0, &(0x7f00000015c0)}, {0x0, &(0x7f0000001600)}, {0x0, &(0x7f0000001640)}, {0x0, &(0x7f0000001680)}, {0x0, &(0x7f00000016c0)}, {0x0, &(0x7f0000001700)}, {0x0, &(0x7f0000001740)}, {0x0, &(0x7f0000001780)}, {0x0, &(0x7f00000017c0)}, {0x0, &(0x7f0000001800)}, {0x0, &(0x7f0000001840)}, {0x0, &(0x7f0000001880)}, {0x0, &(0x7f00000018c0)}, {0x0, &(0x7f0000001900)}, {0x0, &(0x7f0000001940)}, {0x0, &(0x7f0000001980)}, {0x0, &(0x7f00000019c0)}, {0x0, &(0x7f0000001a00)}, {0x0, &(0x7f0000001a40)}, {0x0, &(0x7f0000001a80)}, {0x0, &(0x7f0000001ac0)}, {0x0, &(0x7f0000001b00)}, {0x0, &(0x7f0000001b40)}, {0x0, &(0x7f0000001b80)}, {0x0, &(0x7f0000001bc0)}, {0x0, &(0x7f0000001c00)}, {0x0, &(0x7f0000001c40)}, {0x0, &(0x7f0000001c80)}, {0x0, &(0x7f0000001cc0)}, {0x0, &(0x7f0000001d00)}, {0x0, &(0x7f0000001d40)}, {0x0, &(0x7f0000001d80)}, {0x0, &(0x7f0000001dc0)}, {0x0, &(0x7f0000001e00)}, {0x0, &(0x7f0000001e40)}, {0x0, &(0x7f0000001e80)}, {0x0, &(0x7f0000001ec0)}, {0x0, &(0x7f0000001f00)}, {0x0, &(0x7f0000001f40)}, {0x0, &(0x7f0000001f80)}, {0x0, &(0x7f0000001fc0)}, {0x0, &(0x7f0000002000)}, {0x0, &(0x7f0000002040)}, {0x0, &(0x7f0000002080)}, {0x0, &(0x7f00000020c0)}, {0x0, &(0x7f0000002100)}, {0x0, &(0x7f0000002140)}, {0x0, &(0x7f0000002180)}, {0x0, &(0x7f00000021c0)}, {0x0, &(0x7f0000002200)}, {0x0, &(0x7f0000002240)}, {0x0, &(0x7f0000002280)}, {0x0, &(0x7f00000022c0)}, {0x0, &(0x7f0000002300)}, {0x0, &(0x7f0000002340)}, {0x0, &(0x7f0000002380)}, {0x0, &(0x7f00000023c0)}, {0x0, &(0x7f0000002400)}, {0x0, &(0x7f0000002440)}, {0x0, &(0x7f0000002480)}, {0x0, &(0x7f00000024c0)}, {0x0, &(0x7f0000002500)}, {0x0, &(0x7f0000002540)}, {0x0, &(0x7f0000002580)}, {0x0, &(0x7f00000025c0)}, {0x0, &(0x7f0000002600)}, {0x0, &(0x7f0000002640)}, {0x0, &(0x7f0000002680)}, {0x0, &(0x7f00000026c0)}, {0x0, &(0x7f0000002700)}, {0x0, &(0x7f0000002740)}, {0x0, &(0x7f0000002780)}, {0x0, &(0x7f00000027c0)}, {0x0, &(0x7f0000002800)}, {0x0, &(0x7f0000002840)}, {0x0, &(0x7f0000002880)}, {0x0, 0x0}, {0x0, &(0x7f0000002900)}], 0x65, 0x0, &(0x7f0000003300), 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRES16=r0, @ANYRES16=r1, @ANYRES32], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 13m36.886602525s ago: executing program 2 (id=642): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) iopl(0x3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/85, 0x55}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffeff, 0x10000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000080)=0x20000c) 13m33.751465857s ago: executing program 2 (id=653): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="40060100000034"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x2, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x5, 0x4}, @as_header={0x7, 0x24, 0x1, 0x80, 0x1, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x98, 0x10, "09e3"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf9, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8f, 0x8, 0x0, {0x7, 0x25, 0x1, 0x82, 0x9, 0x64}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x2, 0x6, 0x5, "61ffbd9b7aa79220e2"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0xff, 0x18, "dd7f"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x80, 0x9, 0x0, {0x7, 0x25, 0x1, 0x82, 0x5b, 0x8}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x8, 0x7, 0x9, 0x10, 0xfb}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x1, [{0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "96cb72e97831113d54e4624ea456c3c2ca564deed85b5ad1c95288f684509801f241d53c1c97a059c9939b47b3d4348fb9d4acb74376367a26adc2b9c11bc3637d576206a10356dd4d9a77b9bffe933a37d072969ba15235af4f0d1ebe9e2a614ebc4e72d3504db158fb909f055dad9a79f2cb09c8b7faf5c577640c2eda11c85ff9c19ad27b31360447ee8476575e0e9972746a5e50579b52a1fa88fdc84de662d219f48cf411"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x20, 0x23, 0x54, {0x54, 0x21, "7ce57d77a3591c3baacbbec195cedd42162407d25cd1becf2a3b5c9d67b2aa2ae1590ce6ed1c8229ab3c3b87c2045bae8700c96470d6ef8f5c164687b16a09a2cba4902807568cf6a5a779ffc531765ebd54"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f0000000840)={0x34, &(0x7f0000000580)={0x20, 0x9, 0xd6, "e14e006102d41c1d64bc41c2df4f92ea14be88bf1febc59f6ab98c5a7078ca4abd64f634864a3fc6dc5de1d48e3abca0047132a6bf20aca3c7f7431bc90a95fd7b0fd5979984b4683e496169a5e8cffa2dc731647894451e25ef828140352f49cde391bd6466e427fb9b4214b23439d4c3422a29b0ed846380e32fbce71e2097593a1109f413edf0da386abf9c9c3b40ec602619e08a100e915c807e7d3706d73ae2a2bb73bd116eba223a67fd28708b9770521455994d4933ea273f8e4bddb0dcda8007328db0cb71431739ed81ce4da5c8ca496bc6"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0xa8, {0xa6, "54f4540c194223c0eea540024ffc9ede3c5f9c78191ecce2556bcf703ab269592852d863637bc6592cf0272ac0bb2f90d6e91efdafe57a5f70284f7479da6a12f5387c8d9435befc233735442f060ee5a8da0c9cff732853bd066bcdde595595f564766f65924e9009a166f0ce44625d8e1ed44d6a318a36a6c2806f54f75bcdac2c687aaedec32f3983ac65c3f49053772681a88a78f3a51a533790b210dda2e26fec179db8"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x4}}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 13m28.448949524s ago: executing program 2 (id=668): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 13m24.483206431s ago: executing program 2 (id=676): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d479", 0xcb}, {&(0x7f0000000d80)="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", 0x386}], 0x2, 0x0, 0x0, 0x8004}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x100000001, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) 13m23.065153988s ago: executing program 2 (id=678): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x400}) r1 = socket(0x2b, 0x1, 0x1) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) io_uring_enter(r0, 0x5e4c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x2f, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c0001"], 0x58}}, 0x0) 13m7.674034133s ago: executing program 32 (id=678): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x400}) r1 = socket(0x2b, 0x1, 0x1) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) io_uring_enter(r0, 0x5e4c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x2f, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c0001"], 0x58}}, 0x0) 2m42.276387911s ago: executing program 1 (id=2827): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x8001, 0x8, 0xd9b5, 0x5, 0x2, 0x6, 0x1, 0x2}}) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0xc, @sliced={0x400, [0x4f11, 0x2608, 0x7, 0x4, 0x6, 0x7cb8, 0x9, 0xffff, 0x1, 0x5, 0x5, 0x7, 0x800, 0x8000, 0x60, 0x5, 0xfff, 0x9, 0xab, 0x1ff, 0x80, 0x5, 0x9, 0x5, 0xfffc, 0x5, 0x4, 0x7f, 0x2, 0xffff, 0x0, 0x84, 0x0, 0x5, 0x4, 0x0, 0x9, 0x1, 0x8, 0x5, 0x80, 0x81, 0xe, 0x9, 0x0, 0x7f, 0x3, 0x8], 0x9}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 2m41.521573576s ago: executing program 1 (id=2831): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) getsockopt$inet_mreqsrc(r6, 0x0, 0xe, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000001bc0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.507489306s ago: executing program 5 (id=2832): io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x88}) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f00000000c0)='\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m41.178496217s ago: executing program 5 (id=2834): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') 2m40.413882785s ago: executing program 1 (id=2836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xeeee8000, 0x4, 0x3, 0xf, 0xff, 0x8, 0x4, 0x4, 0xea, 0xad, 0x6, 0xa}, {0x2, 0xffff1000, 0x0, 0x6, 0x6, 0x3, 0x0, 0x55, 0x6, 0x6e}, {0x2, 0x8000000, 0x3, 0x13, 0x82, 0x4, 0xf9, 0x72, 0x2, 0x4, 0x8, 0xa}, {0xeeee8000, 0xdddd1000, 0x9, 0x3, 0x8e, 0x1, 0x8, 0x9, 0x0, 0x25, 0x7, 0xa2}, {0x8000000, 0x5000, 0x4, 0x3, 0x2, 0x1, 0x2, 0x5, 0x3, 0x31, 0x1, 0x7}, {0x10000, 0xeeef0000, 0x4, 0x5, 0x6, 0x40, 0x3, 0x3, 0x1, 0xb, 0x0, 0xff}, {0x100000, 0x4, 0x15, 0x2, 0x8, 0x85, 0x1, 0x1, 0x4, 0xf8, 0x3, 0x54}, {0x80a0000, 0x80a0000, 0xd, 0x1, 0x5, 0x90, 0x7, 0x5, 0x3, 0x1, 0xe, 0x8}, {0x8000000, 0x133d}, {0xffff1000, 0x5}, 0xa0040002, 0x0, 0xeeef0000, 0x60011, 0x0, 0x8000, 0xeeee0000, 0x1, [0xfffffffffffffffe, 0x3, 0x9, 0x7e]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m40.311287613s ago: executing program 5 (id=2838): getgroups(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0xf000}, 0x0) 2m39.710518449s ago: executing program 1 (id=2841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x1, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x32b4, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80000003, 0x445, 0xfffff83a, 0x88a8}}]}]}]}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000ccc4b3a170360eadd7fecc70100144a3b138095cd82889c8d7fb9340c912ccd8554a5dc1430e6bde1ddc0a1c83c1c57ba9cb3292816a393f0ab13a2d3f0b5d0c11d15620728521d6c174f9a3732c235f818636990d0f8448a331ff298a78d78c9f784571bdc1cede1d166c8f5efedb2f7f32a037d0146567ee06525bdc3e70ec68723e8d52b0517b921ab8e4d20891b28d7aae05703bbf04"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="02804830005fa59350a193b4ebc726c483751e9a98ac08004500002c000000000806907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES16=r1, @ANYRES32=0x0], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2m36.968633105s ago: executing program 5 (id=2845): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf71308703b0c936a8d010203010902120001000000000000f900002ac59800"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x3, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) socket$unix(0x1, 0x2, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000001c0)='-{-#}$\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000006140)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89045798707bed4dca141a780f0f8e00000000", 0x7, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/45, 0x2d, 0x20, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1e, 0x805, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r9, 0x0) fallocate(r9, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m35.730907419s ago: executing program 1 (id=2849): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85000000ae000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r2, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffb}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000005b574e69622bf8"], 0x0}, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000001600)) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207641a, 0x8000, 0x20}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b0000000000000004800000000000000020000000000000000000000000000000100000001000000ea70ffffffffffff000100000700000003000000000000000700000000000000f7fffffffffffffff9ffbfffffffffff010000000000000000000000000000000700000000000000030000000020000003000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="08003af2ffffffffffff0000040000000000000000000000010000000100"], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_io_uring_complete(r5) sendmmsg$unix(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)="90dd86b2a8858575b5014280e8f18c41f432e67dbbcbba7ba6b30256d2c6fc70a7a56031f8e03526ef6a7f8ee88fa3b017b5e53cd57da376880f4d5df297fe7aa64b2832d095fa4e94f1bd774d6c0e9acc90f9d699af87dbf80a5bffa42d6707fe678f9f447d1f8a9700ff0d409d518f29db76c5bcb7af27cb1c8e347bd0c0a735fa578b34705a1ddb50bb73c9a7b214e41975833cd16f82bc743120dd7cb236825ae3f71255f6a243cbbc19b41f717130c2806200f545aa5999b7e8b41409f50609b849029008449b48f1ffa015c574477a3d647151c1", 0xd7}, {&(0x7f00000002c0)="4b30100db251fed2d6", 0x9}], 0x2, 0x0, 0x0, 0x40090}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="155db9802ab2af210fd2b29e8769b4c3e29f05dad9936e3e839529bf593634acccfa077a6971ebd516799b72532e9ca11c79076cc84aa56841dae58b9036c962d3566abb5bdce1c00a7b4d35e59eabee6623788ff2f58efd4efb3e00f6225a4f657e52cd7a1b8f3ebdf793b5202c4367b9bf8725d55d3aa725ad519004f25a2c7a8b36fcaeb489ad91e77b1bd220f60cf120701f42fb3d477ec53ff332d379516c61783c1360e9b918be273fadfc47482235be87f0a49c4660f542c596fdeb201867b2ebed859c0fc3e783f5e0bc6e36e83455c6cafdbfaee5c1b2914262e401d22521f638cd989917baa89fdf01c9ef0c22afbfdb700a", 0xf7}, {&(0x7f0000000580)="df78825983ec091bf6d546021a72d5a402c61eb1a07012e8538f4ce38b27739dc274e587c7178303423ea849bcf6e05009418368b841c84847be79eb2938e7bd62cd1c3f53be5384cf9e37db34397783683717b0beaa07f247713e290bcc0e63106b30dc7d837e44a92b38", 0x6b}, {&(0x7f0000000500)="b24f3d", 0x3}, {&(0x7f0000000b40)="af9c449764d08945d50be470f9e987e729b30f5e1fb91db5926096902ce07894960b43307072d22c580036a035d80e691e71b33d49a3efd7f68cdb7083b6419fe2131dfd5a4ed6c3e7c4b1221a26e3db644e478ac45ecc6dc327dd61f54f06344e7b49f3de78a7a535c4dbe075b771b07d156ce38ce0fb3b58dc89357c265aea15f8e6eb9ba5320a3d1a568bebc97c5cb300726605a7d23167ad853527f82da1caf41dcc9c59d63c47c5cb6e5cea7a33bb96771ba19d91dcebd0c2bb8fc215fb4d3b5ffd40a6b0f90ab4e5e99c3a51901a0a409a1fffa24a92881749bd83dfe960a7ccd9c3a575", 0xe7}, {&(0x7f0000000700)="de3383687f27a7d307c0737124ed4a1b9ec10297d4e4a05f22831f83bea7b6fe99db0f97f61d947c974b12ce42741aec8480e24c182488452d16cbe803c21dd33b7b1bbc1641f66961adebcc4fb3ec627c83d61a77b95885942bcc3b997dd445871a717ad99bef479270cad46a6502a5bc45d73a5326421d0eceaf99", 0x7c}, {&(0x7f0000000680)="e9d42ff2f9416160c9067fef8d2c3052c6ab56fb", 0x14}, {&(0x7f0000000a40)="bd6f36dc02cedb3982d7a2c929affad33b82595e28af051bc355d97dca98c6c3a4d63530eef64b6f77c7a2c7fbbef519c2e35cd0b789df724b0bac4e643ca7e96aa3cacce26b9b508bd191754cd124f9fd1f6180f379734893216e8e897b3b1a80272df05afb6fad", 0x68}, {&(0x7f0000000780)}], 0x8, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r0, r3]}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r2, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98, 0x2000c100}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f40)="45a1a3161f467a244ca9525a477ce37adc951b09cdd3176e858de73ef3e62df856c3f7c72eb62fe96ffec8747405deeded12386c0f85db7515c58fba145878f4af159d25fc97e94044b0f57e5fb2d75c9386b43bfcc87dee", 0x58}, {&(0x7f0000003c80)="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", 0x1000}, {&(0x7f0000004c80)="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", 0x1000}, {&(0x7f0000000fc0)="a9aefb57903d827f1d3d61400b1b81cc8519d09625d21951bfa5c936d938a5a7d1d4231b3d3d4e519c1033e470d7824ebb3cb110f3e2474f8b5d5f7f5a0360ff8aad8f90c07a903df0a21bb059fc578f073544eb37cdf825bcca786139f4846770a26358e256f9f7ab9747929c36f698d31c3c56bf9b98", 0x77}], 0x4, &(0x7f0000001200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x38, 0x1, 0x1, [r2, r1, r1, 0xffffffffffffffff, r1, r10, r0, r0, r3, r4]}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r3, r2, r1]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0, 0x14}}], 0x3, 0xd0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f0000003c40)="597f4215dca8bf37c412ccdb5e08", 0x0, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 2m33.798741513s ago: executing program 5 (id=2860): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0xf, {0xf, 0x35, "00f49eff437ad268de99e4340a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0xf, {0xf, 0x35, "00f49eff437ad268de99e4340a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x1ff) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r7 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0xfffc, @empty}}]}, 0x110) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, r7) (async) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, r7) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 2m31.394579531s ago: executing program 1 (id=2865): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$qrtr(r2, 0x0, 0x0) close_range(0xffffffffffffffff, r2, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x100, 0x1, 0x9, 0x7, 0x9, 0x0, 0x8, 0x10000000000, 0x4}) 2m29.388493527s ago: executing program 5 (id=2868): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x30000, 0x0, 0xc1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 2m16.032456278s ago: executing program 33 (id=2865): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$qrtr(r2, 0x0, 0x0) close_range(0xffffffffffffffff, r2, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x100, 0x1, 0x9, 0x7, 0x9, 0x0, 0x8, 0x10000000000, 0x4}) 2m14.031910733s ago: executing program 34 (id=2868): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x30000, 0x0, 0xc1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 13.063298619s ago: executing program 3 (id=3307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x240dc1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, 0x0, &(0x7f0000000200)) r6 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x1018, 0x1, 0xbfdffffc, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x7323, 0x0, 0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r9, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x51}}], 0x2, 0x0, 0x0) sendmmsg$inet(r9, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="001804000000a7c3adb84e89"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r10, 0x4068aea3, 0x0) 12.530757812s ago: executing program 7 (id=3308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x63, 0x6011, 0x0, 0x0}], 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000004060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500700009078000f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0xae, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0cdfef72d4a308004cb500a000680000010690780102ac1414bb440878a0ffffffff94040000860c00000002000617ad0d87000000004e214e240000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="91c2000690780000030301030345fe07a1d90b3cc1000000094346f0bf399a3a05874f3964bf3b4691ceb09371e0be68d4f943b5647f32f302190d9b3a7d6aeefd98bf31f25341e670c0d84ca139d8aa76bcef3da1ce05f24fe5d081f46fb2475148488e"], 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000806028003000600020007006983b139017706ff0000000000000000000000864db2547e452e84000000000000000000000000010006000000000000070fe550e411dfe7d6ad0ec841472fc8ad050291f7c910ff010000000000000000000000000001c2040000000201060000000000000000000108040410100700fc0000000000000000000000000000010000000000000000000000000000000020010000000000000000000000000001200100000000000000000000000000024e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8102000890780005fe0cf989f5a7052ec59a41d7c153e9e7188408c6e7d0f0235771e105128d64864a925d5c5e73240c02b0fef2bc4cad1191a037f0500165c337f092f7c1d4d08ca4c85da8d85f15500935beb1f86d30be80cbfb5869ae9386183e9b574581f2530975ef506e22c80cacdbe7a52efec153cef8dda62b0ba438efa28c30253b76b9fc7f25b2170041084257181c8bb3cf0576fa260c0981d0d0665c00b796b43e2c6478afe6f236b7eae753505be32f9cd670daf20599069f50f556d28a460925619066f7e59797332fad1bd5bd1e7f2838c8e79d7b2412a75824bb6a"], 0x1ad) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7fff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fchdir(r9) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) 10.180728527s ago: executing program 0 (id=3311): mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x500) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x100042, &(0x7f00000006c0)={[{@uuid_auto}, {@redirect_dir_off}], [{@audit}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00"/206], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r0) 10.177803464s ago: executing program 4 (id=3312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, &(0x7f00000001c0)) r4 = socket$inet(0x2, 0x2, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='macsec0\x00', 0x10) socket$inet6(0xa, 0x5, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x3) r7 = socket$inet6(0xa, 0x6, 0x400000) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.52323006s ago: executing program 7 (id=3313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) syz_open_dev$swradio(0x0, 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x1fb, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0xc2a5c7b511b397c}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, &(0x7f00000003c0)="252237e8d16b294825d36199bdd8a817d15a4cc81eba8c7937db6461dbfe8c6518694e2a92266354a391b113bc6f896c9ed1e42a2562b1f1ba881503e297c0d36cb033ca6d08aa6ce9e4725936abfc8f08ac97f52f1abe077ccd58021e685926de948e9a17d9d9cbbc9c4cc10ee937e4dcb0ff01a6362c7d1fd0bd53860064e9ce17f371abfe9fc21865f71121fb33982d4a8bc98ec144a04594d659a71137c7677e37d0ac2fde95632aa8b80c3d5b70992df7e6a84e24ee80e3a8b4115a35c8b010e6f35fa415a3b5ff09697730ef022325104a290cc7aab0a3b96726e58af43175647aa112c6a1a93b31242f29", 0xee, 0x4008004, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x0, 0x80000005, 0xb, 0x4, 0x1}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xa, 0x0, &(0x7f0000000500)="1cc1110ec1e9abc89b00", 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8.884563783s ago: executing program 7 (id=3314): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030000000921050000012205ffffffff030002000007"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x1]}, 0x8) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) fcntl$lock(r4, 0x25, &(0x7f00000001c0)={0x2, 0x4, 0x14, 0x2, r5}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'syz_tun\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000040)="b0005c7b") bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = accept$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000340)={0x0, 'gretap0\x00', {0x1}, 0xfff7}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r8 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x2001, 0x63) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000140)=r8) 8.882266892s ago: executing program 6 (id=3315): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = fanotify_init(0x0, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x18, "0076ba7d82000000002700000000f7ff6fd800"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) fanotify_mark(r1, 0x1, 0x40001012, r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) fcntl$setsig(0xffffffffffffffff, 0xa, 0x41) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0xfffffffc, 0x6, 0x4, {0x9, @sliced={0x1, [0x0, 0x5, 0x6, 0x3, 0x0, 0x3000, 0x6, 0x4ffb, 0x9, 0x2, 0x8, 0x5, 0x7ff, 0x5, 0x5, 0x9, 0x7fff, 0x40, 0x3, 0x8, 0xb, 0x0, 0x7, 0x0, 0x400, 0x5, 0x3c, 0x0, 0x4, 0xfb2, 0x9, 0x1, 0x80, 0xffff, 0x7f, 0xe0, 0x6, 0x1, 0x8000, 0xd, 0xc94, 0x7, 0xfffb, 0x5, 0xffff, 0x34c, 0x6, 0x4], 0x9}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r8], 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000906010800000000000020000200feff0900020073797a310000000008000940000004390500010007000000100008800c00078008000940"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000082ffff4400000d0000000000850000003600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) semget(0x3, 0x2, 0x281) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600}, {@private}, {@broadcast}, {@dev}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 8.60529231s ago: executing program 4 (id=3316): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) openat$autofs(0xffffffffffffff9c, 0x0, 0x204000, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x88, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x3, &(0x7f00000001c0), &(0x7f0000048000), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x5}, 0x50) 8.551076169s ago: executing program 0 (id=3317): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@empty, 0x4e21, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008002}, 0xc096) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="110025bd686cc86732615e722878230600ce", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 8.308065208s ago: executing program 6 (id=3318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) time(0xfffffffffffffffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$inet6(0xa, 0x3, 0x8000000003c) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 7.431254068s ago: executing program 6 (id=3319): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) 7.380224797s ago: executing program 4 (id=3320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r6, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_io_uring_setup(0x5f7f, &(0x7f0000000180)={0x0, 0x4f70, 0x1, 0x1, 0x11a}, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x17, 0x6, r1, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@in={0x2, 0x0, @initdev}}) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000001500)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000240)="df1ae4a1318b7ee6ce29950dc61ee67ca65befe966fd6cbcebc220dd727853ad4a3b", 0x22}], 0x1, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.577376961s ago: executing program 6 (id=3321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18fffa000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.444517832s ago: executing program 4 (id=3322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff00"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) setuid(0xee00) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) io_uring_setup(0x4a47, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000002e8dd13b0e2168100000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000020000000400"/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) 6.358168316s ago: executing program 3 (id=3323): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x12, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c"], 0x20}}], 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x80000000], [0xfa]], '\x00', [{0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0xa01, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a000005"], 0x0) 5.53535399s ago: executing program 7 (id=3324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def", 0x4}], 0x1}}], 0x2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) 4.334558716s ago: executing program 0 (id=3325): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x80181) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="146f5c34be8a06110000c6d724970e07fc9205b78af0ab77a3b49dd49b4579166d9132f45455c20678774cde1928bf0dc1f3ebecbcd6b5473f3cc4cb15fcad0a3a3883435a478b2f0d81fd4590e01070633b9d48a0d902bea1f188523feab54ebd0e15485cfefb3262e9188d371464308d2c9adfb2dae5685ad9cd87266b5963bfb09f2731947aae5b2c5fc2f1bfcfaf7ca98b7810cc2aab660e992632b8217d551f6623b122889a6f92f271d312ae4e30104d7b9c8c689f841b5d651d5f6cba5fcbf760ca057eee8b364eddc40c43e7b3404cc051f65acd3b92d103e056b3129df701527ee5fa7430425d518920b402c2f019a0c84cb36c50008355cb488c6edd0e8d2bc73a768595b311bf56ad33486bfb0277cf71de", @ANYRES16=r5, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x39b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x1, 0x0, 0x3001, 0x5, 0x3, 0x6}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="318300bd700000000000190000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) (fail_nth: 1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, {0x3, 0xd, 0x311, 0x2fc}}) 3.445273908s ago: executing program 6 (id=3326): unshare(0x26020480) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x1, 0x71, 0x0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x41202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0xf9fdffffffffffff, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.035474529s ago: executing program 0 (id=3327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, &(0x7f00000001c0)) r4 = socket$inet(0x2, 0x2, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='macsec0\x00', 0x10) socket$inet6(0xa, 0x5, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x3) r7 = socket$inet6(0xa, 0x6, 0x400000) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.034576549s ago: executing program 3 (id=3328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x14305, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket(0xa, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.632962048s ago: executing program 4 (id=3329): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x26, 0x7, 0xc, 0x22}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5bbc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.328296286s ago: executing program 7 (id=3330): ptrace(0x10, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000005c0)={0x19, 0x2, 0x2, "11000100b600005c4b7c15000000000000000000ed00", 0x494e4f4b}) 1.732457389s ago: executing program 7 (id=3331): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040), 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.714481657s ago: executing program 6 (id=3332): syz_usb_connect(0x5, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x1c, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() dup3(r0, r0, 0x80000) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) read$FUSE(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000002c0)={r5, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xe79, @loopback, 0x1}]}, &(0x7f0000000340)=0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000200)=r8, 0x1c) lseek(r6, 0x80000000004, 0x0) 1.699689933s ago: executing program 0 (id=3333): socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x6, 0x4}, 0x20) getpeername$l2tp6(r3, 0x0, &(0x7f00000002c0)) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r8, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0xfec7}, {&(0x7f0000000880)="9f3846581b1b5159fa75b369536aed7fc089b18592fd1bd099864f1ed35c7046e78c84f4cf0e59594f6dac655efbe84343ff8c186af752f7691c612987b6c089fc2ac412de8edab1f67d0300a1acf9ef331f2b436ff4322adcde8648bcd1e193eb1cb83b0ff2de12d2", 0xfdb9}, {&(0x7f0000000300)='b', 0x1}], 0x28, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r9) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x3, 0x1, 0xffffffff, {0xa, 0x4e23, 0x9, @loopback, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="7d1aadf6cf37"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x15, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x42, &(0x7f0000000580)=""/66, 0x41100, 0xc, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0xf, 0x5, 0x10001}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000680)=[r8, r9], &(0x7f00000006c0)=[{0x1, 0x4, 0x8, 0xb}, {0x5, 0x0, 0x6, 0x6}, {0x5, 0x5, 0xa, 0x7}, {0x1, 0x2, 0x10, 0xa}, {0x0, 0x4, 0xd, 0x5}, {0x4, 0x3, 0xe, 0xc}, {0x2, 0x1, 0x6, 0x6}, {0x4, 0x5, 0x1, 0x1}, {0x3, 0x1, 0x4, 0x6}], 0x10, 0x400}, 0x94) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x9, 0x61, 0x100, &(0x7f00000000c0)="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"}) 1.665472236s ago: executing program 3 (id=3334): ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000380)={0x28, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r6}) close_range(r4, 0xffffffffffffffff, 0x3f000000) 243.29024ms ago: executing program 3 (id=3335): r0 = memfd_secret(0x80000) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000680)={0x2, &(0x7f0000000440)=[{0x6ce3, 0x5, 0x5, 0x6}, {0x5, 0x3, 0x3, 0x3}]}) r2 = dup2(r0, r1) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x7) memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000288199967818360700000000002f7c3f4be7f8ba5d2b02000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) syz_clone3(&(0x7f00000005c0)={0x1080000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x10}, &(0x7f0000000380)=""/173, 0xad, &(0x7f0000000440), &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) sched_setscheduler(r7, 0x1, &(0x7f0000000640)=0x1) io_uring_enter(r4, 0x221f, 0x0, 0x23, 0x0, 0x0) 146.264402ms ago: executing program 4 (id=3336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x97ff}, {&(0x7f0000000240)="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", 0x5bb}], 0x1}, 0x4000000) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'pim6reg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x101301) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x2, 0x9, 0x400, @broadcast, 'macvlan1\x00'}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a, 0x8000800000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x120, 0x120, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10}]}, @ptr={0x8}, @enum64={0x10, 0x3, 0x0, 0x13, 0x1, 0x1, [{0xa, 0x5, 0x2582}, {0x3, 0x2160, 0x3}, {0x8, 0x1, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0xd, 0x1}, {0x0, 0x5}]}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x12e3}, {0xf, 0x8}]}, @const={0xa, 0x0, 0x0, 0xa, 0x1}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x80000001, [{0xb, 0x3, 0x4}, {0x0, 0x5, 0x4}, {0x1, 0x2, 0x3a}, {0x5, 0x4, 0x4}, {0xf, 0x4, 0x1}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x6, 0x0, 0x80000000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffff3}}]}, {0x0, [0x0, 0x61, 0x61, 0x0, 0x0]}}, &(0x7f0000000940)=""/161, 0x13f, 0xa1, 0x0, 0x1000}, 0x28) 6.021578ms ago: executing program 0 (id=3337): syz_usb_connect(0x5, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x1c, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000200)=r6, 0x1c) lseek(r4, 0x80000000004, 0x3000000) 0s ago: executing program 3 (id=3338): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) (async, rerun: 32) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000940)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_FPU(r6, 0x81a0ae8c, &(0x7f0000000040)) (async) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xe7) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1000}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 32) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000000380)=r12) kernel console output (not intermixed with test programs): ci2: unexpected cc 0x0c23 length: 249 > 4 [ 967.381014][ T5920] usb 5-1: config 0 has no interfaces? [ 967.386468][ T5920] usb 5-1: string descriptor 0 read error: -22 [ 967.391753][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 967.393671][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 967.413601][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.432937][ T5920] usb 5-1: config 0 descriptor?? [ 967.440082][T25566] wg1 speed is unknown, defaulting to 1000 [ 967.447932][T25566] wg1 speed is unknown, defaulting to 1000 [ 967.564195][ T8193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.575733][ T8193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.710348][ T8193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.742193][ T8193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.859704][T25611] fuse: blksize only supported for fuseblk [ 967.998819][ T30] audit: type=1400 audit(1755128714.506:1013): avc: denied { ioctl } for pid=25537 comm="syz.4.2883" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 968.023643][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.114119][ T8193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.127588][ T8193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.206146][ T8193] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.217398][ T8193] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.233067][T25566] chnl_net:caif_netlink_parms(): no params data found [ 968.358517][T25566] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.367649][T25566] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.376425][T25566] bridge_slave_0: entered allmulticast mode [ 968.384380][T25566] bridge_slave_0: entered promiscuous mode [ 968.392476][T25566] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.400007][T25566] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.407180][T25566] bridge_slave_1: entered allmulticast mode [ 968.414646][T25566] bridge_slave_1: entered promiscuous mode [ 968.435410][ T5920] wg1 speed is unknown, defaulting to 1000 [ 968.441822][ T5920] syz0: Port: 1 Link DOWN [ 968.477967][ T5920] wg1 speed is unknown, defaulting to 1000 [ 968.492353][T25566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.509510][T11763] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 968.525172][T25566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.534880][ T8193] bridge_slave_1: left allmulticast mode [ 968.541816][ T8193] bridge_slave_1: left promiscuous mode [ 968.547465][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.556053][ T8193] bridge_slave_0: left allmulticast mode [ 968.562792][ T8193] bridge_slave_0: left promiscuous mode [ 968.568451][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.589602][ T5906] usb 5-1: USB disconnect, device number 117 [ 968.674514][T11763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 968.686408][T11763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.696383][T11763] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 968.706517][T11763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.736721][T11763] usb 1-1: config 0 descriptor?? [ 968.933684][ T8193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.945229][ T8193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.958244][ T8193] bond0 (unregistering): (slave team0): Releasing backup interface [ 968.969353][ T8193] tipc: Resetting bearer [ 968.981798][ T8193] tipc: Resetting bearer [ 968.988006][ T8193] bond0 (unregistering): (slave bond2): Releasing backup interface [ 969.003783][ T8193] bond0 (unregistering): Released all slaves [ 969.023914][ T8193] bond1 (unregistering): Released all slaves [ 969.176166][ T8193] bond2 (unregistering): Released all slaves [ 969.344612][ T8193] bond3 (unregistering): (slave veth5): Releasing active interface [ 969.356014][ T8193] bond3 (unregistering): Released all slaves [ 969.458953][T21930] Bluetooth: hci2: command tx timeout [ 969.498126][ T8193] bond4 (unregistering): (slave veth7): Releasing active interface [ 969.507909][ T8193] bond4 (unregistering): Released all slaves [ 969.641772][ T8193] bond5 (unregistering): (slave veth9): Releasing active interface [ 969.651690][ T8193] bond5 (unregistering): Released all slaves [ 969.811803][ T8193] bond6 (unregistering): (slave veth11): Releasing active interface [ 969.825170][ T8193] bond6 (unregistering): Released all slaves [ 969.988154][ T8193] bond7 (unregistering): (slave veth13): Releasing active interface [ 970.044035][ T8193] bond7 (unregistering): Released all slaves [ 970.141493][T25801] 9pnet_fd: Insufficient options for proto=fd [ 970.579034][ T5913] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 970.629965][ T8193] bond8 (unregistering): (slave veth15): Releasing active interface [ 970.640577][ T8193] bond8 (unregistering): Released all slaves [ 970.739396][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 970.753676][ T5913] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 970.762732][ T5913] usb 5-1: config 0 has no interface number 0 [ 970.768925][ T5913] usb 5-1: config 0 interface 184 has no altsetting 0 [ 970.778666][ T5913] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 970.787935][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.796089][ T5913] usb 5-1: Product: syz [ 970.796585][ T8193] bond9 (unregistering): (slave veth17): Releasing active interface [ 970.803740][ T5913] usb 5-1: Manufacturer: syz [ 970.813547][ T5913] usb 5-1: SerialNumber: syz [ 970.819611][ T8193] bond9 (unregistering): Released all slaves [ 970.831638][ T5913] usb 5-1: config 0 descriptor?? [ 970.850138][ T5913] smsc75xx v1.0.0 [ 970.855150][ T5913] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 970.874275][ T5913] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 970.961590][ T8193] bond10 (unregistering): (slave veth19): Releasing active interface [ 970.972527][ T8193] bond10 (unregistering): Released all slaves [ 971.085274][ T8193] bond11 (unregistering): Released all slaves [ 971.120104][ T5920] usb 5-1: USB disconnect, device number 118 [ 971.143364][T25566] team0: Port device team_slave_0 added [ 971.153508][T25566] team0: Port device team_slave_1 added [ 971.235934][T25566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.243565][T25566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.271097][T25566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.289991][ T8193] tipc: Disabling bearer [ 971.314479][ T8193] tipc: Left network mode [ 971.318892][T25566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.330411][T25566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.356703][T25566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.380576][ T8193] IPVS: stopping master sync thread 23578 ... [ 971.440621][T25566] hsr_slave_0: entered promiscuous mode [ 971.446842][T25566] hsr_slave_1: entered promiscuous mode [ 971.454536][T25566] debugfs: 'hsr0' already exists in 'hsr' [ 971.462583][T25566] Cannot create hsr debugfs directory [ 971.530723][T21930] Bluetooth: hci2: command tx timeout [ 971.805636][T11763] usbhid 1-1:0.0: can't add hid device: -71 [ 971.826669][T11763] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 971.848278][ T8193] hsr_slave_0: left promiscuous mode [ 971.857393][T11763] usb 1-1: USB disconnect, device number 101 [ 971.881898][ T8193] hsr_slave_1: left promiscuous mode [ 971.932423][ T8193] veth1_macvtap: left promiscuous mode [ 971.937927][ T8193] veth0_macvtap: left promiscuous mode [ 971.949686][ T8193] veth1_vlan: left promiscuous mode [ 971.954936][ T8193] veth0_vlan: left promiscuous mode [ 972.833197][T21930] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 973.043007][ T8193] team0 (unregistering): Port device team_slave_1 removed [ 973.077105][ T8193] team0 (unregistering): Port device team_slave_0 removed [ 973.193770][ T5920] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 973.233413][ T13] smc: removing ib device syz0 [ 973.327900][ T8193] team0 (unregistering): Port device dummy0 removed [ 973.409215][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 973.425845][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 973.437890][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 973.451102][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 973.467112][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 973.476515][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.490499][ T5920] usb 5-1: config 0 descriptor?? [ 973.621742][T21930] Bluetooth: hci2: command tx timeout [ 974.097150][T25987] netlink: 'syz.4.2892': attribute type 1 has an invalid length. [ 974.479225][T25987] 8021q: adding VLAN 0 to HW filter on device bond9 [ 974.639932][T26010] bond9: (slave veth15): Enslaving as an active interface with a down link [ 974.696709][T26013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 974.747435][T26013] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 974.790045][T11763] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 974.872771][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 974.885799][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 974.894350][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 974.905197][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 974.915179][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 975.060817][T26069] wg1 speed is unknown, defaulting to 1000 [ 975.322039][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 975.328922][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 975.347560][ T5920] usb 5-1: USB disconnect, device number 119 [ 975.398007][ T8193] IPVS: stop unused estimator thread 0... [ 975.437067][T26069] chnl_net:caif_netlink_parms(): no params data found [ 975.452589][T25566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 975.465061][T25566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 975.472427][T11763] usb 1-1: device descriptor read/64, error -71 [ 975.498635][T25566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 975.513793][T25566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 975.558997][T26069] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.566212][T26069] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.576207][T26069] bridge_slave_0: entered allmulticast mode [ 975.583923][T26069] bridge_slave_0: entered promiscuous mode [ 975.593869][T26069] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.601235][T26069] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.608357][T26069] bridge_slave_1: entered allmulticast mode [ 975.615216][T26069] bridge_slave_1: entered promiscuous mode [ 975.649288][T26069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.662568][T26069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.690166][ T5856] Bluetooth: hci2: command tx timeout [ 975.706598][T26069] team0: Port device team_slave_0 added [ 975.713385][T11763] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 975.724756][T26069] team0: Port device team_slave_1 added [ 975.754208][T26069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.761429][T26069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.788892][T26069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.846689][T26069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.863135][T26069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.899273][T26069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.920103][T11763] usb 1-1: Using ep0 maxpacket: 32 [ 975.942959][T11763] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 975.999214][T11763] usb 1-1: config 0 has no interface number 0 [ 976.032434][T11763] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 976.042225][T11763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.059950][T11763] usb 1-1: Product: syz [ 976.068989][T11763] usb 1-1: Manufacturer: syz [ 976.083626][T11763] usb 1-1: SerialNumber: syz [ 976.099299][T11763] usb 1-1: config 0 descriptor?? [ 976.101607][T26069] hsr_slave_0: entered promiscuous mode [ 976.111218][T11763] smsc95xx v2.0.0 [ 976.132048][T26069] hsr_slave_1: entered promiscuous mode [ 976.138149][T26069] debugfs: 'hsr0' already exists in 'hsr' [ 976.164569][T26069] Cannot create hsr debugfs directory [ 976.270342][T21930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 976.284195][T21930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 976.293049][T21930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 976.315197][T21930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 976.324832][T21930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 976.454645][T26392] wg1 speed is unknown, defaulting to 1000 [ 976.474551][T25566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.547154][T25566] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.572359][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.579545][ T8195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.645674][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.652815][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.679530][T26069] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 976.692143][T26069] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 976.715429][T26069] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 976.729112][T26069] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 976.927423][T11763] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 976.957353][T26392] chnl_net:caif_netlink_parms(): no params data found [ 976.971014][T21930] Bluetooth: hci5: command tx timeout [ 978.340502][T11763] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 978.378857][T11763] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 978.390843][T26392] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.398079][T26392] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.402892][T11763] usb 1-1: USB disconnect, device number 103 [ 978.407289][T26392] bridge_slave_0: entered allmulticast mode [ 978.411432][T21930] Bluetooth: hci6: command tx timeout [ 978.426609][T26392] bridge_slave_0: entered promiscuous mode [ 978.465135][T26392] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.472381][T26392] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.479590][T26392] bridge_slave_1: entered allmulticast mode [ 978.487582][T26632] hub 8-0:1.0: USB hub found [ 978.512295][T26632] hub 8-0:1.0: 1 port detected [ 978.643665][T26392] bridge_slave_1: entered promiscuous mode [ 978.705729][T26069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.776926][T26392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.814074][T26392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.878808][T26392] team0: Port device team_slave_0 added [ 978.887465][T26069] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.905090][T25566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.914917][T26392] team0: Port device team_slave_1 added [ 978.932621][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.939810][ T8202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.985789][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.992986][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.012191][T26392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.019157][T26392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.047114][T26392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.062931][T21930] Bluetooth: hci5: command tx timeout [ 979.078025][T26392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.085516][T26392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.093411][T26714] netlink: 'syz.4.2902': attribute type 1 has an invalid length. [ 979.119238][T26392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.208103][T26392] hsr_slave_0: entered promiscuous mode [ 979.216606][T26392] hsr_slave_1: entered promiscuous mode [ 979.224240][T26392] debugfs: 'hsr0' already exists in 'hsr' [ 979.230055][T26392] Cannot create hsr debugfs directory [ 979.287765][T25566] veth0_vlan: entered promiscuous mode [ 979.347801][T25566] veth1_vlan: entered promiscuous mode [ 979.444920][T25566] veth0_macvtap: entered promiscuous mode [ 979.479832][T25566] veth1_macvtap: entered promiscuous mode [ 979.539607][T26825] netlink: 11124 bytes leftover after parsing attributes in process `syz.0.2903'. [ 979.541522][T25566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.585435][T25566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.598121][T26392] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 979.609451][T26392] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 979.623015][T26392] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 979.639207][ T30] audit: type=1400 audit(1755128726.244:1014): avc: denied { view } for pid=26822 comm="syz.0.2903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 979.664295][T26392] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 979.681526][ T8197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.692678][ T8197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.702169][ T8197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.718397][ T8197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.752421][T26069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.085719][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.118560][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.207369][ T8197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.220221][ T5927] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 980.256655][ T8197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.303084][T26392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.306070][ T30] audit: type=1400 audit(1755128726.914:1015): avc: denied { mounton } for pid=25566 comm="syz-executor" path="/root/syzkaller.5hnk3c/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=59809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 980.405496][T26875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2884'. [ 980.405562][T26392] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.430849][T26875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29712 sclass=netlink_route_socket pid=26875 comm=syz.3.2884 [ 980.447033][T26069] veth0_vlan: entered promiscuous mode [ 980.456524][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 980.481481][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.488595][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.496096][T21930] Bluetooth: hci6: command tx timeout [ 980.506408][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 980.518122][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 980.528737][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 980.542892][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.552200][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.592789][ T5927] usb 5-1: config 0 descriptor?? [ 980.628135][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.635337][ T8195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.732904][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'. [ 980.755228][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'. [ 980.986698][T26069] veth1_vlan: entered promiscuous mode [ 981.033710][T26857] netlink: 'syz.4.2905': attribute type 1 has an invalid length. [ 981.071042][ T5987] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 981.099736][T26857] 8021q: adding VLAN 0 to HW filter on device bond10 [ 981.125630][T26069] veth0_macvtap: entered promiscuous mode [ 981.140889][T21930] Bluetooth: hci5: command tx timeout [ 981.145346][T26069] veth1_macvtap: entered promiscuous mode [ 981.213282][T26857] bond10: (slave veth19): Enslaving as an active interface with a down link [ 981.250257][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 981.285707][ T5987] usb 4-1: config 2 has an invalid interface number: 185 but max is 0 [ 981.294212][ T5987] usb 4-1: config 2 has no interface number 0 [ 981.304805][T26890] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 981.317908][ T5987] usb 4-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 981.328379][T26890] bond10: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 981.346853][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.360689][ T5987] usb 4-1: Product: syz [ 981.364867][ T5987] usb 4-1: Manufacturer: syz [ 981.375014][ T5987] usb 4-1: SerialNumber: syz [ 981.396952][ T5987] usb-storage 4-1:2.185: USB Mass Storage device detected [ 981.432090][ T5987] usb-storage 4-1:2.185: Quirks match for vid 05ac pid 120a: 10 [ 981.495579][T26069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.544327][T26069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.585805][ T3481] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.620449][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 981.657340][ T3481] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.667025][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 981.686108][ T8197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.686686][ T5927] usb 5-1: USB disconnect, device number 120 [ 981.712210][ T5987] apple-mfi-fastcharge 4-1: USB disconnect, device number 88 [ 981.768908][ T8197] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.824518][T26392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.905870][ T8197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.926826][ T8197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.986161][ T8197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.005814][ T8197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.129430][T26999] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2894'. [ 982.581761][T21930] Bluetooth: hci6: command tx timeout [ 982.586483][T27004] 9pnet_fd: Insufficient options for proto=fd [ 982.847900][T27011] netlink: 'syz.6.2912': attribute type 1 has an invalid length. [ 983.255736][T21930] Bluetooth: hci5: command tx timeout [ 983.452445][T26392] veth0_vlan: entered promiscuous mode [ 983.667140][T26392] veth1_vlan: entered promiscuous mode [ 983.880093][T26392] veth0_macvtap: entered promiscuous mode [ 983.907334][T26392] veth1_macvtap: entered promiscuous mode [ 983.927649][T26392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.966089][T26392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.014183][ T8195] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.151154][ T8195] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.273636][ T8195] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.282486][ T8195] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.651236][T21930] Bluetooth: hci6: command tx timeout [ 984.670701][T11763] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 984.947451][ T8195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.966587][T11763] usb 4-1: Using ep0 maxpacket: 8 [ 984.985572][ T8195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.996388][T11763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.016588][T11763] usb 4-1: config 0 has no interfaces? [ 985.027782][ T30] audit: type=1326 audit(1755128731.634:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27068 comm="syz.6.2918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56f918ebe9 code=0x0 [ 985.057762][ T8202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.067256][T11763] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 985.071868][ T8202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.077408][T11763] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 985.106202][T11763] usb 4-1: Product: syz [ 985.117515][T11763] usb 4-1: Manufacturer: syz [ 985.125055][T11763] usb 4-1: SerialNumber: syz [ 985.145149][T11763] usb 4-1: config 0 descriptor?? [ 985.191107][ T5906] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 985.408245][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.424376][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 985.439352][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 985.489674][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 985.660844][ T5906] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 985.877579][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.895909][ T5906] usb 5-1: config 0 descriptor?? [ 986.491971][T27108] netlink: 'syz.0.2924': attribute type 1 has an invalid length. [ 986.684357][T27065] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 987.208663][T27065] 8021q: adding VLAN 0 to HW filter on device bond11 [ 987.269004][ T5920] usb 4-1: USB disconnect, device number 89 [ 987.470633][T27111] bond11: (slave veth21): Enslaving as an active interface with a down link [ 987.501884][T27115] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 987.517883][T27115] bond11: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 987.761235][ T5920] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 987.803873][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 987.969723][T27208] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2927'. [ 988.005327][T27207] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2927'. [ 988.170558][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 988.228280][ T5906] usb 5-1: USB disconnect, device number 121 [ 988.241604][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 988.267133][ T5920] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 988.276270][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.287566][ T5920] usb 4-1: Product: syz [ 988.292114][ T5920] usb 4-1: Manufacturer: syz [ 988.297083][ T5920] usb 4-1: SerialNumber: syz [ 988.330699][ T5920] usb 4-1: config 0 descriptor?? [ 988.369145][ T5920] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 988.385722][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 988.401891][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 988.422385][ T5920] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 988.429003][T27224] sg_write: data in/out 65495/14 bytes for SCSI command 0x0-- guessing data in; [ 988.429003][T27224] program syz.0.2930 not setting count and/or reply_len properly [ 988.451887][ T5920] usb 4-1: media controller created [ 988.536393][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 988.584500][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 988.911611][ T5920] DVB: Unable to find symbol mt352_attach() [ 988.917531][ T5920] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 988.979519][ T30] audit: type=1326 audit(1755128735.583:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27242 comm="syz.0.2933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6e7d8ebe9 code=0x0 [ 989.121212][ T5920] rc_core: IR keymap rc-dvico-portable not found [ 989.164279][ T5920] Registered IR keymap rc-empty [ 989.182721][ T5920] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 989.392519][ T5920] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input36 [ 989.506046][ T5920] dvb-usb: schedule remote query interval to 100 msecs. [ 989.590297][ T5920] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 989.620242][T27261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.748026][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 989.845517][ T5920] usb 4-1: USB disconnect, device number 90 [ 990.149311][ T30] audit: type=1400 audit(1755128736.753:1018): avc: denied { listen } for pid=27275 comm="syz.4.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 990.888579][ T5920] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 991.522801][T27307] FAULT_INJECTION: forcing a failure. [ 991.522801][T27307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.536089][T27307] CPU: 1 UID: 0 PID: 27307 Comm: syz.4.2942 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 991.536115][T27307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 991.536126][T27307] Call Trace: [ 991.536132][T27307] [ 991.536140][T27307] dump_stack_lvl+0x16c/0x1f0 [ 991.536172][T27307] should_fail_ex+0x512/0x640 [ 991.536194][T27307] _copy_to_user+0x32/0xd0 [ 991.536216][T27307] simple_read_from_buffer+0xcb/0x170 [ 991.536238][T27307] proc_fail_nth_read+0x197/0x240 [ 991.536261][T27307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.536284][T27307] ? rw_verify_area+0xcf/0x6c0 [ 991.536311][T27307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.536332][T27307] vfs_read+0x1e1/0xc60 [ 991.536353][T27307] ? __pfx___mutex_lock+0x10/0x10 [ 991.536371][T27307] ? __pfx_vfs_read+0x10/0x10 [ 991.536396][T27307] ? __fget_files+0x20e/0x3c0 [ 991.536424][T27307] ksys_read+0x12a/0x250 [ 991.536442][T27307] ? __pfx_ksys_read+0x10/0x10 [ 991.536459][T27307] ? irq_work_single+0x13a/0x260 [ 991.536487][T27307] do_syscall_64+0xcd/0x4c0 [ 991.536506][T27307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.536524][T27307] RIP: 0033:0x7fb7a418d5fc [ 991.536540][T27307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 991.536557][T27307] RSP: 002b:00007fb7a4f2a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 991.536575][T27307] RAX: ffffffffffffffda RBX: 00007fb7a43b6180 RCX: 00007fb7a418d5fc [ 991.536587][T27307] RDX: 000000000000000f RSI: 00007fb7a4f2a0a0 RDI: 0000000000000007 [ 991.536598][T27307] RBP: 00007fb7a4f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 991.536609][T27307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.536620][T27307] R13: 00007fb7a43b6218 R14: 00007fb7a43b6180 R15: 00007ffd1dff18c8 [ 991.536645][T27307] [ 991.998298][T27315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input37 [ 992.103705][ T5920] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 992.283569][ T30] audit: type=1400 audit(1755128738.883:1019): avc: denied { create } for pid=27319 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 992.341326][ T30] audit: type=1400 audit(1755128738.883:1020): avc: denied { setopt } for pid=27319 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 992.796449][ T30] audit: type=1400 audit(1755128738.933:1021): avc: denied { ioctl } for pid=27316 comm="syz.6.2945" path="socket:[61582]" dev="sockfs" ino=61582 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 992.796688][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.834015][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 992.837602][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.847655][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.937057][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 992.982933][ T5920] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 993.012408][T27354] syz.4.2948: attempt to access beyond end of device [ 993.012408][T27354] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 993.019234][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.081602][ T5920] usb 1-1: Product: syz [ 993.086032][ T5920] usb 1-1: Manufacturer: syz [ 993.094926][T27354] hpfs: hpfs_map_sector(): read error [ 993.277153][ T5920] usb 1-1: SerialNumber: syz [ 993.307677][T27358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2948'. [ 993.453916][ T5920] usb 1-1: config 0 descriptor?? [ 993.460832][ T5920] usb 1-1: no audio or video endpoints found [ 994.129261][T27345] pim6reg: entered allmulticast mode [ 994.159795][T27345] pim6reg: left allmulticast mode [ 994.490300][T11763] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 994.516882][ T30] audit: type=1400 audit(1755128741.022:1022): avc: denied { connect } for pid=27386 comm="syz.6.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 994.646035][ T30] audit: type=1326 audit(1755128741.252:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27396 comm="syz.7.2952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46c18ebe9 code=0x0 [ 994.713540][T11763] usb 4-1: config 252 has an invalid interface number: 62 but max is 0 [ 994.722933][T11763] usb 4-1: config 252 has no interface number 0 [ 994.741290][T11763] usb 4-1: config 252 interface 62 has no altsetting 0 [ 994.771935][T11763] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0186, bcdDevice=aa.75 [ 994.788395][T11763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.796493][T11763] usb 4-1: Product: syz [ 994.800699][T11763] usb 4-1: Manufacturer: syz [ 994.805710][T11763] usb 4-1: SerialNumber: syz [ 994.826695][T11763] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 994.848333][T11763] usb 4-1: no configuration chosen from 1 choice [ 995.025079][ T5927] usb 1-1: USB disconnect, device number 104 [ 995.463553][T11763] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 995.751505][ T30] audit: type=1400 audit(1755128742.352:1024): avc: denied { create } for pid=27398 comm="syz.6.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 995.811270][T11763] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 995.824618][T11763] usb 5-1: config 0 has no interface number 1 [ 995.862100][T11763] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 995.872869][T11763] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 995.886458][T11763] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 995.896251][T11763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 995.904399][T11763] usb 5-1: SerialNumber: syz [ 995.981807][T11763] usb 5-1: config 0 descriptor?? [ 996.070249][T27438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.344750][ T30] audit: type=1400 audit(1755128742.952:1025): avc: denied { connect } for pid=27434 comm="syz.7.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 996.552205][T11763] usb 5-1: Found UVC 0.00 device (0002:0000) [ 996.562994][T11763] usb 5-1: No valid video chain found. [ 996.600258][T11763] usb 5-1: USB disconnect, device number 122 [ 997.111202][ T5927] usb 4-1: USB disconnect, device number 91 [ 997.377900][T27484] overlayfs: failed to resolve './file1': -2 [ 997.389422][ T30] audit: type=1400 audit(1755128743.982:1026): avc: denied { mounton } for pid=27475 comm="syz.0.2961" path="/598/file0/bus" dev="ramfs" ino=61741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 997.742425][T11763] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 997.851961][T27501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2966'. [ 997.872245][T27501] netlink: 'syz.6.2966': attribute type 18 has an invalid length. [ 997.880692][T27501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2966'. [ 997.902419][T11763] usb 1-1: Using ep0 maxpacket: 16 [ 997.913211][T11763] usb 1-1: config 2 has an invalid interface number: 185 but max is 0 [ 997.927961][T11763] usb 1-1: config 2 has no interface number 0 [ 997.936477][T27505] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 997.942987][T27505] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 997.958611][T11763] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 997.968481][T11763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.051393][T11763] usb 1-1: Product: syz [ 998.088702][T11763] usb 1-1: Manufacturer: syz [ 998.112385][T27505] vhci_hcd vhci_hcd.0: Device attached [ 998.161481][T11763] usb 1-1: SerialNumber: syz [ 998.168403][T27515] vhci_hcd: connection closed [ 998.168742][ T6131] vhci_hcd: stop threads [ 998.193916][T11763] usb-storage 1-1:2.185: USB Mass Storage device detected [ 998.204542][ T6131] vhci_hcd: release socket [ 998.204768][T11763] usb-storage 1-1:2.185: Quirks match for vid 05ac pid 120a: 10 [ 998.223406][ T6131] vhci_hcd: disconnect device [ 998.410279][T27484] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 998.433524][ T30] audit: type=1400 audit(1755128745.032:1027): avc: denied { relabelto } for pid=27475 comm="syz.0.2961" name="bus" dev="ramfs" ino=61741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 998.460950][T27491] tmpfs: Unknown parameter 'qu_inode_hardlimit' [ 998.489186][ T30] audit: type=1400 audit(1755128745.082:1028): avc: denied { associate } for pid=27475 comm="syz.0.2961" name="bus" dev="ramfs" ino=61741 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mouse_device_t:s0" [ 999.079754][T27548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2967'. [ 999.675292][T27557] usb usb8: usbfs: process 27557 (syz.7.2968) did not claim interface 0 before use [ 999.786285][T27555] netlink: 'syz.3.2969': attribute type 2 has an invalid length. [ 999.887154][T27561] ref_ctr_offset mismatch. inode: 0x69 offset: 0x0 ref_ctr_offset(old): 0x200000000180 ref_ctr_offset(new): 0x0 [ 999.910002][T27563] loop2: detected capacity change from 0 to 1 [ 1000.068821][T27563] Dev loop2: unable to read RDB block 1 [ 1000.091828][T27563] loop2: unable to read partition table [ 1000.120442][T27563] loop2: partition table beyond EOD, truncated [ 1000.231966][T26980] apple-mfi-fastcharge 1-1: USB disconnect, device number 105 [ 1000.418470][T21930] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1000.429041][T21930] Bluetooth: hci6: Injecting HCI hardware error event [ 1000.438447][ T5856] Bluetooth: hci6: hardware error 0x00 [ 1000.440914][T27563] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1000.602573][ T5218] Dev loop2: unable to read RDB block 1 [ 1000.608185][ T5218] loop2: unable to read partition table [ 1000.623238][ T5218] loop2: partition table beyond EOD, truncated [ 1000.729250][T27568] wg1 speed is unknown, defaulting to 1000 [ 1002.740355][ T5856] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1002.947930][T27665] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.2980'. [ 1003.289315][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2984'. [ 1003.889852][T27699] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2987'. [ 1004.195919][T27705] kernel read not supported for file /eth0 (pid: 27705 comm: syz.6.2988) [ 1004.206372][T21930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1004.217746][T21930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1004.225894][T21930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1004.240225][T21930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1004.249199][T21930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1004.300264][T27711] 9pnet_fd: Insufficient options for proto=fd [ 1004.349423][ T30] audit: type=1800 audit(1755128750.931:1029): pid=27705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2988" name="eth0" dev="mqueue" ino=61129 res=0 errno=0 [ 1004.443792][T27704] wg1 speed is unknown, defaulting to 1000 [ 1004.488977][T27719] /dev/sg0: Can't lookup blockdev [ 1004.859679][ T30] audit: type=1400 audit(1755128751.461:1030): avc: denied { mounton } for pid=27718 comm="syz.3.2990" path="/16/file0" dev="rpc_pipefs" ino=61233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 1005.057166][T27704] chnl_net:caif_netlink_parms(): no params data found [ 1005.235551][T27704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.247996][T27704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.258142][T27704] bridge_slave_0: entered allmulticast mode [ 1005.268370][T27704] bridge_slave_0: entered promiscuous mode [ 1005.278583][T27704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.327528][T27704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.337383][T27704] bridge_slave_1: entered allmulticast mode [ 1005.350588][T27704] bridge_slave_1: entered promiscuous mode [ 1005.503890][T27894] netlink: 'syz.4.2993': attribute type 1 has an invalid length. [ 1005.522790][T27704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.531981][ T30] audit: type=1400 audit(1755128752.101:1031): avc: denied { unmount } for pid=25566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1005.982082][T27894] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1006.080422][T27915] bond12: (slave veth23): Enslaving as an active interface with a down link [ 1006.182084][T27704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.200617][T27928] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1006.207771][T27928] bond12: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1006.301008][T27973] overlayfs: failed to resolve './file0': -2 [ 1006.407837][ T5856] Bluetooth: hci0: command tx timeout [ 1006.840432][T27704] team0: Port device team_slave_0 added [ 1006.849171][T27704] team0: Port device team_slave_1 added [ 1006.914295][T27957] mmap: syz.6.2995 (27957): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1007.009839][T28034] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2998'. [ 1007.011163][T27704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.092667][T27704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.324740][T27704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.500353][T27704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.555971][T27704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.814774][T27704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.901169][T27704] hsr_slave_0: entered promiscuous mode [ 1007.907787][T27704] hsr_slave_1: entered promiscuous mode [ 1007.914323][T27704] debugfs: 'hsr0' already exists in 'hsr' [ 1007.920254][T27704] Cannot create hsr debugfs directory [ 1008.494902][ T5856] Bluetooth: hci0: command tx timeout [ 1008.662263][T26980] libceph: connect (1)[c::]:6789 error -101 [ 1008.681267][T26980] libceph: mon0 (1)[c::]:6789 connect error [ 1008.739711][T27704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.752697][T27704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.759328][T28151] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1008.845916][T27704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.856616][T27704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.003843][T26980] libceph: connect (1)[c::]:6789 error -101 [ 1009.207168][T28006] ceph: No mds server is up or the cluster is laggy [ 1009.217899][T26980] libceph: mon0 (1)[c::]:6789 connect error [ 1009.271080][T27704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.284420][T27704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.309607][T28171] sctp: [Deprecated]: syz.3.3005 (pid 28171) Use of int in maxseg socket option. [ 1009.309607][T28171] Use struct sctp_assoc_value instead [ 1009.334633][T28171] netlink: 'syz.3.3005': attribute type 10 has an invalid length. [ 1009.410393][T28171] veth0_vlan: left promiscuous mode [ 1009.426028][T28171] veth0_vlan: entered promiscuous mode [ 1009.441980][T28171] team0: Device veth0_vlan failed to register rx_handler [ 1009.664961][T27704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.677711][T27704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.708749][T28179] tipc: Started in network mode [ 1009.718235][T28179] tipc: Node identity e204a0473c2b, cluster identity 4711 [ 1009.731504][T28179] tipc: Enabled bearer , priority 0 [ 1009.740871][T28177] syzkaller0: entered promiscuous mode [ 1009.749270][T28177] syzkaller0: entered allmulticast mode [ 1009.810642][T28177] tipc: Resetting bearer [ 1009.850383][T28176] tipc: Resetting bearer [ 1009.872588][T28176] tipc: Disabling bearer [ 1010.002262][T27704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1010.042846][T27704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1010.196364][T27704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1010.236433][T27704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1010.503678][T11763] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1010.602593][ T5856] Bluetooth: hci0: command tx timeout [ 1010.653482][T27704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.670850][T27704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.684200][T11763] usb 5-1: Using ep0 maxpacket: 16 [ 1010.690184][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.697255][ T8193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.707397][T11763] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.722326][T11763] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1010.745185][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.752261][ T8193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.760054][T11763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1010.771305][T11763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 57408, setting to 1024 [ 1010.791049][T27704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.811935][T11763] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1010.826502][T11763] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.876641][T11763] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1010.897387][T11763] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1010.928910][T11763] usb 5-1: Manufacturer: syz [ 1010.995293][T11763] usb 5-1: config 0 descriptor?? [ 1011.196019][T27704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.292786][ T10] usb 5-1: USB disconnect, device number 123 [ 1011.372186][T27704] veth0_vlan: entered promiscuous mode [ 1011.462775][T27704] veth1_vlan: entered promiscuous mode [ 1011.567103][T27704] veth0_macvtap: entered promiscuous mode [ 1011.580590][T27704] veth1_macvtap: entered promiscuous mode [ 1011.709707][T27704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.720303][T27704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.787868][ T8202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.796657][ T8202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.820151][ T8202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.836497][ T8202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.755226][ T5856] Bluetooth: hci0: command tx timeout [ 1012.961889][T28240] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1013.294314][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.302449][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.447601][ T8197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.487054][ T8197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.584522][ T5920] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1013.603802][T26980] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1013.878019][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.969548][ T5920] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1014.142850][T26980] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1014.297389][T26980] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1014.304668][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.309728][T26980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1014.324553][T26980] usb 8-1: Product: syz [ 1014.328974][T26980] usb 8-1: Manufacturer: syz [ 1014.333573][T26980] usb 8-1: SerialNumber: syz [ 1014.394721][ T5920] usb 5-1: config 0 descriptor?? [ 1014.583646][ T5906] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1014.615496][T26980] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1014.686794][T28301] Invalid source name [ 1014.690842][T28301] UBIFS error (pid: 28301): cannot open "./file0", error -22 [ 1014.701782][T28301] binder: 28290:28301 ioctl 40046210 0 returned -14 [ 1014.724476][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3022'. [ 1014.807909][T28301] team0: Port device team_slave_1 removed [ 1015.133326][T20137] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1015.154317][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 1015.351424][ T5920] hid_mf 0003:0079:1846.006F: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 1015.450759][T20137] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1015.771438][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.782657][ T5920] hid_mf 0003:0079:1846.006F: Invalid report, this should never happen! [ 1015.793140][T20137] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1015.809720][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1015.821602][ T5920] hid_mf 0003:0079:1846.006F: Force feedback init failed. [ 1015.828885][T20137] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1015.843783][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1015.859174][ T5920] usb 5-1: USB disconnect, device number 124 [ 1015.875449][T20137] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1015.893336][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 57408, setting to 1024 [ 1015.908409][T20137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.917687][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1015.922384][T28321] fido_id[28321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1015.934094][T28285] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1015.957025][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.979079][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1015.994818][ T5906] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1016.002916][ T5906] usb 4-1: Manufacturer: syz [ 1016.011663][ T5906] usb 4-1: config 0 descriptor?? [ 1016.260632][T26980] usb 4-1: USB disconnect, device number 92 [ 1016.562683][T21930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1016.591481][T21930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1016.601132][T21930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1016.621319][T21930] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1016.633363][T21930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1016.682142][T28345] wg1 speed is unknown, defaulting to 1000 [ 1016.888841][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.055451][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.117354][T28345] chnl_net:caif_netlink_parms(): no params data found [ 1017.184572][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.319380][ T13] bond0: (slave netdevsim0): Releasing backup interface [ 1017.333267][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.375246][T28345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.388338][T28345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.403780][T28345] bridge_slave_0: entered allmulticast mode [ 1017.411594][T28345] bridge_slave_0: entered promiscuous mode [ 1017.440215][T28345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.450294][T28345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.459824][T28345] bridge_slave_1: entered allmulticast mode [ 1017.472057][T28345] bridge_slave_1: entered promiscuous mode [ 1017.511539][T28451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.523488][T28451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.555840][T28451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.573918][T28451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.639225][T28345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.693472][T28345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.826020][T28345] team0: Port device team_slave_0 added [ 1017.832375][ T13] bridge_slave_1: left allmulticast mode [ 1017.847221][ T13] bridge_slave_1: left promiscuous mode [ 1017.854353][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.866807][ T13] : left allmulticast mode [ 1017.871416][ T13] : left promiscuous mode [ 1017.881710][ T13] bridge0: port 1() entered disabled state [ 1017.923385][ T13] bond_slave_0: left promiscuous mode [ 1017.931963][ T13] bond_slave_1: left promiscuous mode [ 1017.937877][ T13] team_slave_0: left promiscuous mode [ 1017.944006][ T13] team_slave_1: left promiscuous mode [ 1017.949454][ T13] dummy0: left promiscuous mode [ 1017.995096][T20137] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1018.013997][T20137] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input39 [ 1018.649702][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.672839][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.699883][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 1018.719469][ T13] bond0 (unregistering): Released all slaves [ 1018.737998][T21930] Bluetooth: hci7: command tx timeout [ 1018.966162][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 1018.978157][ T13] bond1 (unregistering): Released all slaves [ 1019.115318][ T13] bond2 (unregistering): Released all slaves [ 1019.252814][ T13] bond3 (unregistering): (slave veth5): Releasing active interface [ 1019.264866][ T13] bond3 (unregistering): Released all slaves [ 1019.395573][ T13] bond4 (unregistering): (slave veth7): Releasing active interface [ 1019.405716][ T13] bond4 (unregistering): Released all slaves [ 1019.533976][ T13] bond5 (unregistering): (slave veth9): Releasing active interface [ 1019.545569][ T13] bond5 (unregistering): Released all slaves [ 1019.674007][ T13] bond6 (unregistering): (slave veth11): Releasing active interface [ 1019.683737][ T13] bond6 (unregistering): Released all slaves [ 1019.811087][ T13] bond7 (unregistering): (slave veth13): Releasing active interface [ 1019.821074][ T13] bond7 (unregistering): Released all slaves [ 1019.947070][ T13] bond8 (unregistering): Released all slaves [ 1020.066408][ T13] bond9 (unregistering): (slave veth15): Releasing active interface [ 1020.076772][ T13] bond9 (unregistering): Released all slaves [ 1020.198094][ T13] bond10 (unregistering): (slave veth19): Releasing active interface [ 1020.209488][ T13] bond10 (unregistering): Released all slaves [ 1020.331305][ T13] bond11 (unregistering): (slave veth21): Releasing active interface [ 1020.342393][ T13] bond11 (unregistering): Released all slaves [ 1020.469481][ T13] bond12 (unregistering): (slave veth23): Releasing active interface [ 1020.479604][ T13] bond12 (unregistering): Released all slaves [ 1020.498103][T28345] team0: Port device team_slave_1 added [ 1020.607802][T28345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.632417][T28345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.674141][T28345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.698541][T28345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.706176][T28345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.725168][ T5987] usb 1-1: USB disconnect, device number 106 [ 1020.732289][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1020.750880][T28345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.812398][ T13] tipc: Left network mode [ 1020.815323][T21930] Bluetooth: hci7: command tx timeout [ 1021.150167][T28345] hsr_slave_0: entered promiscuous mode [ 1021.183125][T28345] hsr_slave_1: entered promiscuous mode [ 1021.216578][T28345] debugfs: 'hsr0' already exists in 'hsr' [ 1021.250869][T28345] Cannot create hsr debugfs directory [ 1021.551736][ T13] hsr_slave_0: left promiscuous mode [ 1021.559632][ T13] hsr_slave_1: left promiscuous mode [ 1021.570049][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.581717][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.597972][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.609056][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.642901][ T13] veth1_macvtap: left promiscuous mode [ 1021.669014][ T13] veth0_macvtap: left promiscuous mode [ 1021.674749][ T13] veth1_vlan: left promiscuous mode [ 1021.681312][ T5906] usb 8-1: USB disconnect, device number 2 [ 1021.707092][ T5906] usblp0: removed [ 1021.716089][ T13] veth0_vlan: left promiscuous mode [ 1021.922057][T28741] FAULT_INJECTION: forcing a failure. [ 1021.922057][T28741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.944100][T28741] CPU: 0 UID: 0 PID: 28741 Comm: syz.7.3031 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1021.944118][T28741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1021.944125][T28741] Call Trace: [ 1021.944129][T28741] [ 1021.944133][T28741] dump_stack_lvl+0x16c/0x1f0 [ 1021.944155][T28741] should_fail_ex+0x512/0x640 [ 1021.944168][T28741] _copy_to_user+0x32/0xd0 [ 1021.944182][T28741] simple_read_from_buffer+0xcb/0x170 [ 1021.944195][T28741] proc_fail_nth_read+0x197/0x240 [ 1021.944208][T28741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1021.944222][T28741] ? rw_verify_area+0xcf/0x6c0 [ 1021.944239][T28741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1021.944251][T28741] vfs_read+0x1e1/0xc60 [ 1021.944264][T28741] ? __pfx___mutex_lock+0x10/0x10 [ 1021.944274][T28741] ? __pfx_vfs_read+0x10/0x10 [ 1021.944289][T28741] ? __fget_files+0x20e/0x3c0 [ 1021.944305][T28741] ksys_read+0x12a/0x250 [ 1021.944315][T28741] ? __pfx_ksys_read+0x10/0x10 [ 1021.944330][T28741] do_syscall_64+0xcd/0x4c0 [ 1021.944342][T28741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.944353][T28741] RIP: 0033:0x7fd46c18d5fc [ 1021.944363][T28741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1021.944373][T28741] RSP: 002b:00007fd46cfcf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1021.944384][T28741] RAX: ffffffffffffffda RBX: 00007fd46c3b5fa0 RCX: 00007fd46c18d5fc [ 1021.944391][T28741] RDX: 000000000000000f RSI: 00007fd46cfcf0a0 RDI: 0000000000000004 [ 1021.944397][T28741] RBP: 00007fd46cfcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.944404][T28741] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 1021.944412][T28741] R13: 00007fd46c3b6038 R14: 00007fd46c3b5fa0 R15: 00007fff3af768f8 [ 1021.944425][T28741] [ 1022.911961][T21930] Bluetooth: hci7: command tx timeout [ 1024.265330][ T5906] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1024.932502][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 1024.961217][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.997903][T21930] Bluetooth: hci7: command tx timeout [ 1025.023620][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1025.056126][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1025.090972][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 57408, setting to 1024 [ 1025.103036][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1025.119595][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.291055][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1025.444671][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1025.475462][ T5906] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1025.493677][ T5906] usb 1-1: Manufacturer: syz [ 1025.503257][ T5906] usb 1-1: config 0 descriptor?? [ 1025.510761][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1025.740293][T11763] usb 1-1: USB disconnect, device number 107 [ 1025.862384][ T13] team0 (unregistering): Port device dummy0 removed [ 1026.118741][ T30] audit: type=1326 audit(1755128772.719:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28807 comm="syz.3.3038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff10278ebe9 code=0x0 [ 1027.947394][T28345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1027.982103][T28345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1028.021456][T28345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1028.242771][T28345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1028.649708][T28886] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3046'. [ 1028.987259][ T30] audit: type=1400 audit(1755128775.588:1033): avc: denied { append } for pid=28888 comm="syz.3.3048" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1029.029639][T28345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.071350][T28893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3049'. [ 1029.217359][T28345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.447944][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.455024][T18316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.575161][T18316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.582281][T18316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.715906][ T5987] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1030.284732][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.315506][ T5987] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1030.368320][T28345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.421607][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.520502][ T5987] usb 8-1: config 0 descriptor?? [ 1031.269455][T28934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1031.310682][T28345] veth0_vlan: entered promiscuous mode [ 1031.358545][T28345] veth1_vlan: entered promiscuous mode [ 1031.621020][T28345] veth0_macvtap: entered promiscuous mode [ 1031.678336][T28345] veth1_macvtap: entered promiscuous mode [ 1031.790284][T28345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.906770][T28345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.937015][ T8202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.965045][ T8202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.396923][T26980] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1032.670155][ T8202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.710394][ T8202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.779556][ T8202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.791619][ T8202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.979788][T28961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3058'. [ 1033.018754][T26980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1033.096048][T26980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1033.107455][T26980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1033.124278][T26980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.137967][T26980] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.153371][T26980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.195109][T26980] usb 1-1: config 0 descriptor?? [ 1033.202177][ T8202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.244707][ T8202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.382955][T28973] netlink: 'syz.4.3024': attribute type 11 has an invalid length. [ 1033.688196][T26980] hid_parser_main: 49 callbacks suppressed [ 1033.688209][T26980] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0 [ 1033.756665][ T5927] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1033.760711][T26980] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0 [ 1033.764353][ T30] audit: type=1400 audit(1755128780.358:1034): avc: denied { sqpoll } for pid=28972 comm="syz.4.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1033.818327][T26980] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0 [ 1033.825958][T26980] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0 [ 1033.833649][ T5987] usbhid 8-1:0.0: can't add hid device: -71 [ 1033.842852][ T5987] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1033.872973][ T5987] usb 8-1: USB disconnect, device number 3 [ 1033.885059][T28937] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 1033.888328][T26980] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0 [ 1033.931482][T26980] plantronics 0003:047F:FFFF.0070: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1033.954983][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1033.993252][ T5927] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1034.038455][ T5927] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.083763][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1034.107938][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1034.126454][ T5927] usb 4-1: Product: syz [ 1034.134014][ T5927] usb 4-1: Manufacturer: syz [ 1034.148086][ T5927] usb 4-1: SerialNumber: syz [ 1034.162565][ T1207] usb 1-1: USB disconnect, device number 108 [ 1034.418643][ T5927] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1035.702536][T29055] netlink: 'syz.7.3061': attribute type 30 has an invalid length. [ 1036.039751][ T30] audit: type=1326 audit(1755128782.638:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.6.3064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56f918ebe9 code=0x0 [ 1036.062692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1036.336958][T21930] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1036.348078][T21930] Bluetooth: hci5: Injecting HCI hardware error event [ 1036.402210][T21930] Bluetooth: hci5: hardware error 0x00 [ 1036.413515][ T5927] usb 4-1: USB disconnect, device number 93 [ 1036.488056][ T5927] usblp0: removed [ 1037.543459][ T30] audit: type=1400 audit(1755128784.147:1036): avc: denied { setattr } for pid=29127 comm="syz.3.3070" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1037.567483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1037.691655][T29138] FAULT_INJECTION: forcing a failure. [ 1037.691655][T29138] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.716292][T29138] CPU: 0 UID: 0 PID: 29138 Comm: syz.7.3071 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1037.716323][T29138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1037.716334][T29138] Call Trace: [ 1037.716341][T29138] [ 1037.716349][T29138] dump_stack_lvl+0x16c/0x1f0 [ 1037.716382][T29138] should_fail_ex+0x512/0x640 [ 1037.716398][T29138] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1037.716421][T29138] should_failslab+0xc2/0x120 [ 1037.716442][T29138] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1037.716459][T29138] ? __d_alloc+0x32/0xae0 [ 1037.716484][T29138] __d_alloc+0x32/0xae0 [ 1037.716506][T29138] d_alloc_pseudo+0x1c/0xc0 [ 1037.716529][T29138] alloc_file_pseudo_noaccount+0xcf/0x230 [ 1037.716557][T29138] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 1037.716590][T29138] bdev_file_open_by_dev+0x143/0x210 [ 1037.716618][T29138] blkdev_bszset+0x170/0x240 [ 1037.716642][T29138] ? __pfx_blkdev_bszset+0x10/0x10 [ 1037.716666][T29138] ? hook_file_ioctl_common+0x145/0x410 [ 1037.716694][T29138] blkdev_ioctl+0x44e/0x6d0 [ 1037.716714][T29138] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1037.716733][T29138] ? selinux_file_ioctl+0x180/0x270 [ 1037.716753][T29138] ? selinux_file_ioctl+0xb4/0x270 [ 1037.716775][T29138] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1037.716798][T29138] __x64_sys_ioctl+0x18e/0x210 [ 1037.716827][T29138] do_syscall_64+0xcd/0x4c0 [ 1037.716845][T29138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.716861][T29138] RIP: 0033:0x7fd46c18ebe9 [ 1037.716876][T29138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.716892][T29138] RSP: 002b:00007fd46cfae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.716909][T29138] RAX: ffffffffffffffda RBX: 00007fd46c3b6090 RCX: 00007fd46c18ebe9 [ 1037.716920][T29138] RDX: 0000200000000980 RSI: 0000000040081271 RDI: 0000000000000008 [ 1037.716931][T29138] RBP: 00007fd46cfae090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.716941][T29138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.716951][T29138] R13: 00007fd46c3b6128 R14: 00007fd46c3b6090 R15: 00007fff3af768f8 [ 1037.716975][T29138] [ 1037.930407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1038.497436][T21930] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1038.697260][ T5987] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1038.937764][ T5987] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1038.949332][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.957565][ T5987] usb 4-1: Product: syz [ 1038.961872][ T5987] usb 4-1: Manufacturer: syz [ 1038.966464][ T5987] usb 4-1: SerialNumber: syz [ 1038.972570][ T5987] usb 4-1: config 0 descriptor?? [ 1038.986089][ T5987] usb 4-1: interface 1 not found [ 1039.289156][T21930] Bluetooth: hci2: Malformed Event: 0x02 [ 1039.337059][ T5987] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1039.569943][ T5906] usb 4-1: USB disconnect, device number 94 [ 1039.687234][ T5987] usb 1-1: Using ep0 maxpacket: 8 [ 1039.695884][ T5987] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1039.711571][ T5987] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.738398][ T5987] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.777134][ T5987] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1039.791934][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.811886][ T5987] usbtmc 1-1:16.0: bulk endpoints not found [ 1040.010031][T29169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.069565][T29169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.095099][ T5987] usb 1-1: USB disconnect, device number 109 [ 1040.407100][ T5927] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1041.303979][ T5927] usb 8-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1041.313326][ T5927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.321994][ T5927] usb 8-1: Product: syz [ 1041.326374][ T5927] usb 8-1: Manufacturer: syz [ 1041.331226][ T5927] usb 8-1: SerialNumber: syz [ 1041.358659][ T5927] usb 8-1: config 0 descriptor?? [ 1041.369303][ T30] audit: type=1326 audit(1755128787.937:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29226 comm="syz.3.3084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff10278ebe9 code=0x0 [ 1041.374779][ T5927] usb 8-1: interface 1 not found [ 1041.567946][T29244] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1041.923170][ T5913] usb 8-1: USB disconnect, device number 4 [ 1042.297331][ T5987] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1042.500187][T21930] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1042.512966][T21930] Bluetooth: hci2: Injecting HCI hardware error event [ 1042.514146][ T5987] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1042.538566][ T5856] Bluetooth: hci2: hardware error 0x00 [ 1042.628707][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.694255][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1042.722411][ T5987] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1042.734321][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.850105][ T5987] usb 5-1: config 0 descriptor?? [ 1043.300540][T29291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.308127][T29291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.316945][T29291] bridge0: entered promiscuous mode [ 1043.322215][T29291] bridge0: entered allmulticast mode [ 1043.334696][T29291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.341839][T29291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.349275][T29291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.356366][T29291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.498108][ T5906] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1043.640817][T29311] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3096'. [ 1043.896916][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.927576][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1043.955336][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1043.997474][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.023383][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.052918][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.056894][ T30] audit: type=1400 audit(1755128790.657:1038): avc: denied { write } for pid=29317 comm="syz.7.3099" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1044.077945][ T5906] usb 4-1: config 0 descriptor?? [ 1044.113305][T29319] rose7: entered allmulticast mode [ 1044.575861][ T5906] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1044.618534][ T5906] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1044.626019][ T5906] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1044.635027][ T5906] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1044.642712][ T5906] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 1044.657903][ T5906] plantronics 0003:047F:FFFF.0071: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1044.843082][T29300] netlink: 'syz.3.3095': attribute type 1 has an invalid length. [ 1044.917790][ T5856] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1044.978943][T29300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1046.007940][ T5906] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 1046.431129][T29346] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1046.573643][ T5987] usbhid 5-1:0.0: can't add hid device: -71 [ 1046.575026][T29373] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1046.594874][T29373] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1046.645267][ T5987] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1046.712455][T29406] futex_wake_op: syz.7.3102 tries to shift op by -1; fix this program [ 1046.997581][ T5987] usb 5-1: USB disconnect, device number 125 [ 1047.081762][ T30] audit: type=1400 audit(1755128793.686:1039): avc: denied { read } for pid=29428 comm="syz.6.3106" path="socket:[65142]" dev="sockfs" ino=65142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1047.138384][ T5906] usb 4-1: device descriptor read/64, error -71 [ 1047.144882][T29434] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3106'. [ 1047.397893][ T5906] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 1047.573334][ T5906] usb 4-1: device firmware changed [ 1047.631194][ T1207] usb 4-1: USB disconnect, device number 95 [ 1047.868243][ T1207] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1048.177500][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.190534][ T1207] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1048.200036][ T1207] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1048.218065][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.288440][ T1207] usb 4-1: config 0 descriptor?? [ 1048.672378][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3111'. [ 1048.687037][ T30] audit: type=1400 audit(1755128795.276:1040): avc: denied { name_connect } for pid=29471 comm="syz.6.3111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1049.398190][T29478] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3104'. [ 1050.463028][ T43] usb 4-1: USB disconnect, device number 96 [ 1050.478299][T11763] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1050.810893][T11763] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1050.933551][T11763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1050.986315][T11763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1051.014012][T11763] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1051.105061][T11763] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1051.131677][T11763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.627301][T11763] usb 1-1: config 0 descriptor?? [ 1051.908455][ T43] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1052.047894][T29542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3124'. [ 1052.076106][T29542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.078752][T11763] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0 [ 1052.098547][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1052.114426][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.124925][T11763] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0 [ 1052.150821][ T43] usb 4-1: Product: syz [ 1052.162875][ T43] usb 4-1: Manufacturer: syz [ 1052.168222][T11763] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0 [ 1052.186149][ T43] usb 4-1: SerialNumber: syz [ 1052.201837][T11763] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0 [ 1052.209455][T11763] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0 [ 1052.214516][ T43] usb 4-1: config 0 descriptor?? [ 1052.239919][T11763] plantronics 0003:047F:FFFF.0072: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1052.261856][ T43] usb 4-1: interface 1 not found [ 1052.322150][T29488] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 1052.719525][T29488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1052.856925][T29562] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1052.912399][T29593] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1052.925633][T29593] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1053.072506][T11763] usb 4-1: USB disconnect, device number 97 [ 1053.100059][ T5987] usb 1-1: USB disconnect, device number 110 [ 1053.137971][T29622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.039457][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.247374][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.482197][T11763] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1054.678035][T11763] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1054.686672][T11763] usb 8-1: not running at top speed; connect to a high speed hub [ 1054.687716][T11763] usb 8-1: config 10 has an invalid interface number: 68 but max is 0 [ 1054.687741][T11763] usb 8-1: config 10 has no interface number 0 [ 1054.687760][T11763] usb 8-1: config 10 interface 68 has no altsetting 0 [ 1054.689875][T11763] usb 8-1: New USB device found, idVendor=4b97, idProduct=38b5, bcdDevice=b9.5a [ 1054.689895][T11763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.689907][T11763] usb 8-1: Product: syz [ 1054.689916][T11763] usb 8-1: Manufacturer: syz [ 1054.689925][T11763] usb 8-1: SerialNumber: syz [ 1055.009718][T11763] usb 8-1: bad CDC descriptors [ 1055.014971][T11763] usb 8-1: USB disconnect, device number 5 [ 1055.113499][T29646] could not allocate digest TFM handle sha1-generic [ 1055.414049][T29646] netlink: 'syz.4.3128': attribute type 72 has an invalid length. [ 1055.414112][T29646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1057.209746][T29723] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3142'. [ 1057.229425][T29723] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3142'. [ 1057.532889][ T1207] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1057.689211][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 1057.771266][ T1207] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1057.791101][ T1207] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1057.814385][ T1207] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1057.887595][ T1207] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1057.925934][ T1207] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1057.943772][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.539560][ T1207] usb 4-1: GET_CAPABILITIES returned 0 [ 1058.545353][ T1207] usbtmc 4-1:16.0: can't read capabilities [ 1059.480393][T29764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3149'. [ 1059.622513][T29764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.675425][T29764] batadv_slave_0: entered promiscuous mode [ 1060.049584][ T1207] usb 4-1: USB disconnect, device number 98 [ 1060.129328][ T5987] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1060.999456][ T5987] usb 5-1: device descriptor read/64, error -71 [ 1061.093491][T29784] netlink: 'syz.0.3153': attribute type 4 has an invalid length. [ 1061.525217][ T5987] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1061.708667][T29802] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1061.779519][ T5987] usb 5-1: device descriptor read/64, error -71 [ 1062.329958][ T30] audit: type=1326 audit(1755128808.925:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.7.3157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46c18ebe9 code=0x0 [ 1062.350544][ T5987] usb usb5-port1: attempt power cycle [ 1062.740609][ T5987] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1063.079053][T29818] FAULT_INJECTION: forcing a failure. [ 1063.079053][T29818] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.091871][T29818] CPU: 1 UID: 0 PID: 29818 Comm: syz.0.3159 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1063.091890][T29818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1063.091897][T29818] Call Trace: [ 1063.091901][T29818] [ 1063.091906][T29818] dump_stack_lvl+0x16c/0x1f0 [ 1063.091927][T29818] should_fail_ex+0x512/0x640 [ 1063.091937][T29818] ? fs_reclaim_acquire+0xae/0x150 [ 1063.091953][T29818] ? tomoyo_encode2+0x100/0x3e0 [ 1063.091967][T29818] should_failslab+0xc2/0x120 [ 1063.091980][T29818] __kmalloc_noprof+0xd2/0x510 [ 1063.091992][T29818] ? d_absolute_path+0x136/0x1a0 [ 1063.092010][T29818] tomoyo_encode2+0x100/0x3e0 [ 1063.092026][T29818] tomoyo_encode+0x29/0x50 [ 1063.092039][T29818] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1063.092057][T29818] tomoyo_path_number_perm+0x245/0x580 [ 1063.092069][T29818] ? tomoyo_path_number_perm+0x237/0x580 [ 1063.092082][T29818] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1063.092113][T29818] ? find_held_lock+0x2b/0x80 [ 1063.092127][T29818] ? hook_file_ioctl_common+0x145/0x410 [ 1063.092146][T29818] ? __fget_files+0x20e/0x3c0 [ 1063.092161][T29818] security_file_ioctl+0x9b/0x240 [ 1063.092176][T29818] __x64_sys_ioctl+0xb7/0x210 [ 1063.092193][T29818] do_syscall_64+0xcd/0x4c0 [ 1063.092205][T29818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.092217][T29818] RIP: 0033:0x7faee118ebe9 [ 1063.092226][T29818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.092237][T29818] RSP: 002b:00007faee20ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.092248][T29818] RAX: ffffffffffffffda RBX: 00007faee13b5fa0 RCX: 00007faee118ebe9 [ 1063.092254][T29818] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000006 [ 1063.092261][T29818] RBP: 00007faee20ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.092267][T29818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.092273][T29818] R13: 00007faee13b6038 R14: 00007faee13b5fa0 R15: 00007ffeea626478 [ 1063.092287][T29818] [ 1063.092297][T29818] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1063.370697][ T5987] usb 5-1: device descriptor read/8, error -71 [ 1063.963576][ T1207] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1064.138760][ T1207] usb 8-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1064.374785][ T1207] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.405735][ T1207] usb 8-1: Product: syz [ 1064.499848][ T1207] usb 8-1: Manufacturer: syz [ 1064.506851][ T1207] usb 8-1: SerialNumber: syz [ 1064.525317][ T1207] usb 8-1: config 0 descriptor?? [ 1064.565089][ T1207] usb 8-1: interface 1 not found [ 1064.635007][ T30] audit: type=1400 audit(1755128811.234:1042): avc: denied { write } for pid=29852 comm="syz.6.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1064.947069][T29858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.159504][T29866] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3170'. [ 1065.702016][ T1207] usb 8-1: USB disconnect, device number 6 [ 1066.489829][T29897] lo speed is unknown, defaulting to 1000 [ 1066.496715][T29897] lo speed is unknown, defaulting to 1000 [ 1066.503118][T29897] lo speed is unknown, defaulting to 1000 [ 1066.582096][T29897] infiniband sz1: set active [ 1066.586783][T29897] infiniband sz1: added lo [ 1066.637885][T29897] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1066.643653][T29897] infiniband sz1: Couldn't open port 1 [ 1066.668089][ T1207] lo speed is unknown, defaulting to 1000 [ 1066.686592][T29897] RDS/IB: sz1: added [ 1066.690728][T29897] smc: adding ib device sz1 with port count 1 [ 1066.701139][T29897] smc: ib device sz1 port 1 has pnetid [ 1066.843824][T29897] lo speed is unknown, defaulting to 1000 [ 1066.942622][T29897] lo speed is unknown, defaulting to 1000 [ 1067.028229][T29897] lo speed is unknown, defaulting to 1000 [ 1067.120342][T29897] lo speed is unknown, defaulting to 1000 [ 1067.205823][T29897] lo speed is unknown, defaulting to 1000 [ 1067.327550][T29897] lo speed is unknown, defaulting to 1000 [ 1067.411966][T29897] lo speed is unknown, defaulting to 1000 [ 1067.495999][T29897] lo speed is unknown, defaulting to 1000 [ 1067.621503][ T5906] lo speed is unknown, defaulting to 1000 [ 1067.823609][ T30] audit: type=1400 audit(1755128814.404:1043): avc: denied { rename } for pid=29914 comm="syz.6.3180" name="file1" dev="overlay" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1067.930612][ T30] audit: type=1400 audit(1755128814.424:1044): avc: denied { setattr } for pid=29914 comm="syz.6.3180" name="#10e" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1069.372510][ T30] audit: type=1400 audit(1755128815.804:1045): avc: denied { write } for pid=29928 comm="syz.0.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1069.422559][T29937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 1069.476572][T29937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.820047][T29955] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1070.602829][T11763] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1070.767244][T11763] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1070.801056][T11763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.889275][T11763] usb 5-1: config 0 descriptor?? [ 1071.140799][ T30] audit: type=1400 audit(1755128817.714:1046): avc: denied { accept } for pid=29950 comm="syz.4.3189" lport=45113 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1071.161399][T29951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.234339][T29951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.250622][ T30] audit: type=1400 audit(1755128817.724:1047): avc: denied { write } for pid=29950 comm="syz.4.3189" lport=45113 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1071.325793][T11763] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 1071.371620][ T30] audit: type=1400 audit(1755128817.734:1048): avc: denied { setopt } for pid=29950 comm="syz.4.3189" lport=45113 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1071.381197][T11763] hackrf 5-1:0.0: Could not detect board [ 1071.871870][T11763] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 1072.004711][ T30] audit: type=1326 audit(1755128817.854:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.0.3196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faee118ebe9 code=0x0 [ 1072.070883][T11763] usb 5-1: USB disconnect, device number 4 [ 1073.468638][T30042] ubi: mtd0 is already attached to ubi31 [ 1073.678121][T30048] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1073.969964][T30055] FAULT_INJECTION: forcing a failure. [ 1073.969964][T30055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.156680][T30059] Bluetooth: MGMT ver 1.23 [ 1074.162003][T30055] CPU: 1 UID: 0 PID: 30055 Comm: syz.4.3209 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1074.162019][T30055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1074.162025][T30055] Call Trace: [ 1074.162029][T30055] [ 1074.162034][T30055] dump_stack_lvl+0x16c/0x1f0 [ 1074.162054][T30055] should_fail_ex+0x512/0x640 [ 1074.162067][T30055] _copy_to_user+0x32/0xd0 [ 1074.162081][T30055] simple_read_from_buffer+0xcb/0x170 [ 1074.162094][T30055] proc_fail_nth_read+0x197/0x240 [ 1074.162108][T30055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1074.162121][T30055] ? rw_verify_area+0xcf/0x6c0 [ 1074.162138][T30055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1074.162150][T30055] vfs_read+0x1e1/0xc60 [ 1074.162163][T30055] ? __pfx___mutex_lock+0x10/0x10 [ 1074.162174][T30055] ? __pfx_vfs_read+0x10/0x10 [ 1074.162188][T30055] ? __fget_files+0x20e/0x3c0 [ 1074.162205][T30055] ksys_read+0x12a/0x250 [ 1074.162215][T30055] ? __pfx_ksys_read+0x10/0x10 [ 1074.162230][T30055] do_syscall_64+0xcd/0x4c0 [ 1074.162241][T30055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.162253][T30055] RIP: 0033:0x7fe58c38d5fc [ 1074.162262][T30055] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1074.162273][T30055] RSP: 002b:00007fe58a5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1074.162284][T30055] RAX: ffffffffffffffda RBX: 00007fe58c5b5fa0 RCX: 00007fe58c38d5fc [ 1074.162291][T30055] RDX: 000000000000000f RSI: 00007fe58a5f60a0 RDI: 0000000000000004 [ 1074.162297][T30055] RBP: 00007fe58a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.162303][T30055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.162310][T30055] R13: 00007fe58c5b6038 R14: 00007fe58c5b5fa0 R15: 00007ffd82461d48 [ 1074.162326][T30055] [ 1074.449341][T30061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.498560][T30075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1075.761371][ T5927] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1075.941913][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 1075.948409][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.977325][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1076.051213][T11763] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1076.101048][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1076.151184][ T5927] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1076.179335][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.313798][T11763] usb 5-1: config 0 has no interfaces? [ 1076.320487][T11763] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1076.340900][ T5927] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1076.808501][T11763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.826471][T11763] usb 5-1: config 0 descriptor?? [ 1076.832648][ T5927] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1076.863818][ T5927] usb 4-1: Manufacturer: syz [ 1076.935436][ T5927] usb 4-1: config 0 descriptor?? [ 1077.089625][T30125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.140349][T30125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.301251][T30107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.419096][T30107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.505371][T30165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.537426][T30107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.548943][T30165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.573106][T30107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.925579][T30171] program syz.3.3215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1077.982688][ T5913] usb 5-1: USB disconnect, device number 5 [ 1078.394915][ T5927] rc_core: IR keymap rc-hauppauge not found [ 1078.416715][ T5927] Registered IR keymap rc-empty [ 1078.466699][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.531586][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.568605][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1078.666778][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 1078.717319][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.742694][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.762510][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.801700][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.841847][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.882845][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.931955][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1078.953458][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1079.011601][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1079.061884][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1079.095342][ T5927] mceusb 4-1:0.0: Registered  with mce emulator interface version 1 [ 1079.125793][ T5927] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1079.174448][ T5927] usb 4-1: USB disconnect, device number 99 [ 1079.412890][T30216] veth1_macvtap: left promiscuous mode [ 1079.438865][T30216] macsec0: entered promiscuous mode [ 1079.447755][T30216] macsec0: entered allmulticast mode [ 1079.457875][T30216] veth1_macvtap: entered promiscuous mode [ 1079.464762][T30216] veth1_macvtap: entered allmulticast mode [ 1079.470887][T30216] macsec0: left promiscuous mode [ 1079.476630][T30216] macsec0: left allmulticast mode [ 1079.481971][T30216] veth1_macvtap: left allmulticast mode [ 1079.501114][T30222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3230'. [ 1079.539040][T30229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.682121][T26980] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1079.864922][T26980] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1079.900694][T26980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.920281][T26980] usb 5-1: Product: syz [ 1079.931952][T26980] usb 5-1: Manufacturer: syz [ 1079.954398][T26980] usb 5-1: SerialNumber: syz [ 1080.011493][T26980] usb 5-1: config 0 descriptor?? [ 1080.114862][T26980] usb 5-1: interface 1 not found [ 1080.605470][ T5856] Bluetooth: hci7: Malformed Event: 0x02 [ 1080.833618][ T5927] usb 5-1: USB disconnect, device number 6 [ 1080.849872][T30293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1080.867471][T30293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1081.671801][ T30] audit: type=1400 audit(1755128828.092:1050): avc: denied { remount } for pid=30310 comm="syz.0.3242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1081.837969][T30309] netlink: 'syz.7.3241': attribute type 31 has an invalid length. [ 1081.872816][T30316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.349158][T26980] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1083.462801][ T5856] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1083.473368][ T5856] Bluetooth: hci7: Injecting HCI hardware error event [ 1083.483722][T21930] Bluetooth: hci7: hardware error 0x00 [ 1083.526740][T26980] usb 4-1: Using ep0 maxpacket: 8 [ 1083.555385][T26980] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1083.575851][T26980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.586860][T26980] usb 4-1: Product: syz [ 1083.591042][T26980] usb 4-1: Manufacturer: syz [ 1083.599314][T26980] usb 4-1: SerialNumber: syz [ 1083.608857][T26980] usb 4-1: config 0 descriptor?? [ 1083.633162][T26980] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1083.982659][T30369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'. [ 1084.066569][ T5927] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1084.313553][ T5927] usb 8-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1084.337285][ T5927] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1084.362551][ T5927] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1084.387864][ T5927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.420653][ T5927] usb 8-1: config 0 descriptor?? [ 1084.432531][ T5913] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1084.657450][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.676465][ T5913] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1084.705191][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.737730][ T5913] usb 1-1: config 0 descriptor?? [ 1084.751146][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 1084.852399][ T5987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1084.967872][T30376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.981171][T30376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.062210][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 1085.071499][ T5987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.108441][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1085.148591][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1085.181234][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1085.201469][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.227559][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1085.236989][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 1085.253196][ T5987] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1085.262341][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1085.272847][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 1085.280681][ T5987] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1085.300264][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 1085.306837][ T5987] usb 5-1: Manufacturer: syz [ 1085.313101][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 1085.325661][ T5987] usb 5-1: config 0 descriptor?? [ 1085.339090][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 1085.357732][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 1085.370606][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 1085.589819][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 1085.612320][T26980] gspca_sonixj: i2c_w8 err -110 [ 1085.622719][T21930] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1085.647155][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 1085.656390][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 1085.666566][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 1085.673806][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 1085.680649][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 1085.695463][ T5913] pwc: Registered as video103. [ 1085.702093][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43 [ 1085.717616][T26980] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1085.726718][ T5987] rc_core: IR keymap rc-hauppauge not found [ 1085.733011][ T5987] Registered IR keymap rc-empty [ 1085.737964][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1085.760226][ T5913] usb 1-1: USB disconnect, device number 111 [ 1085.793683][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1085.814549][ T5987] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1085.831154][ T5987] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input42 [ 1085.846779][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1085.882817][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1085.913470][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1085.942921][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1085.962641][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1085.984000][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1086.003207][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1086.033779][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1086.072339][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1086.102790][ T5987] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1086.534262][ T30] audit: type=1800 audit(1755128832.832:1051): pid=30427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3255" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1086.718972][ T5906] usb 4-1: USB disconnect, device number 100 [ 1086.903573][ T5987] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1086.949653][T30422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 1086.953371][ T5987] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1087.247015][ T5987] usb 8-1: USB disconnect, device number 7 [ 1087.569647][T30487] IPv6: addrconf: prefix option has invalid lifetime [ 1087.583385][T30466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1088.090459][T30504] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1088.117983][T30466] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1088.127705][T30466] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1088.160954][ T5906] usb 5-1: USB disconnect, device number 7 [ 1089.059736][ T30] audit: type=1400 audit(1755128835.492:1052): avc: denied { compute_member } for pid=30541 comm="syz.3.3267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1090.392807][ T5913] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1090.580036][ T5913] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1090.634226][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1090.660426][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1090.672653][ T5913] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1090.689650][ T5913] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1090.701513][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.720102][ T5913] usb 8-1: config 0 descriptor?? [ 1090.809379][T30586] vivid-000: disconnect [ 1091.036296][T30590] syz.4.3277: attempt to access beyond end of device [ 1091.036296][T30590] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1091.050303][T30590] EXT4-fs (nbd4): unable to read superblock [ 1091.453566][ T5913] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1091.460998][ T5913] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1091.648421][T30586] random: crng reseeded on system resumption [ 1091.744838][ T5913] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1091.754821][T30591] netlink: 'syz.7.3273': attribute type 1 has an invalid length. [ 1091.755130][ T5913] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1091.776459][ T5913] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 1091.917309][T30585] vivid-000: reconnect [ 1091.935939][T30591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1092.033231][ T5913] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1092.081557][T30559] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1092.118540][T30591] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1092.131203][T30591] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1092.149554][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.289192][ T5913] usb 8-1: USB disconnect, device number 8 [ 1092.397684][T30677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1092.442016][T30714] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1092.462553][T30677] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1092.477118][T30677] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1093.212051][T30750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1094.134312][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1095.826390][T30826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1095.993927][ T30] audit: type=1326 audit(1755128842.571:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.4.3301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe58c38ebe9 code=0x0 [ 1096.017758][T30863] bond1: (slave veth5): Enslaving as an active interface with an up link [ 1096.087213][T30826] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1096.121404][T30826] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1096.205623][T30886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1097.648412][T30908] syz.7.3308: attempt to access beyond end of device [ 1097.648412][T30908] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1099.230992][ T30] audit: type=1400 audit(1755128844.221:1054): avc: denied { mount } for pid=30902 comm="syz.7.3308" name="/" dev="configfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1100.214288][ T30] audit: type=1400 audit(1755128844.221:1055): avc: denied { search } for pid=30902 comm="syz.7.3308" name="/" dev="configfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1100.433936][ T5927] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1100.490164][ T30] audit: type=1400 audit(1755128844.231:1056): avc: denied { search } for pid=30902 comm="syz.7.3308" name="/" dev="configfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1100.513562][ T30] audit: type=1400 audit(1755128846.230:1057): avc: denied { read write } for pid=28345 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1100.539070][ T30] audit: type=1400 audit(1755128846.230:1058): avc: denied { open } for pid=28345 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1100.563583][ T30] audit: type=1400 audit(1755128846.230:1059): avc: denied { ioctl } for pid=28345 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1100.794496][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 1100.805968][ T5927] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1100.814488][ T5927] usb 4-1: config 0 has no interface number 0 [ 1100.961814][ T5927] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1101.020360][T30932] batman_adv: batadv0: Adding interface: ipvlan2 [ 1101.027972][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.036457][T30932] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.061963][T30932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.074085][T30932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.086198][T30932] batman_adv: batadv0: Interface activated: ipvlan2 [ 1101.102180][ T5927] usb 4-1: Product: syz [ 1101.117053][ T5927] usb 4-1: Manufacturer: syz [ 1101.122980][ T5927] usb 4-1: SerialNumber: syz [ 1101.130705][ T5927] usb 4-1: config 0 descriptor?? [ 1101.141867][ T5927] smsc95xx v2.0.0 [ 1101.244118][T11763] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1101.556856][T11763] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.248543][T11763] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1102.302606][T11763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.454036][T11763] usb 8-1: config 0 descriptor?? [ 1102.656601][T30976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.159056][T11763] usbhid 8-1:0.0: can't add hid device: -71 [ 1103.224936][T11763] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1103.253153][T11763] usb 8-1: USB disconnect, device number 9 [ 1103.444032][ T5927] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1103.644376][ T5927] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1103.733606][ T5927] usb 4-1: USB disconnect, device number 101 [ 1103.774387][T11763] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1104.004292][T11763] usb 8-1: Using ep0 maxpacket: 16 [ 1104.026223][T11763] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1104.050735][T11763] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1104.094398][ T5927] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1104.106368][T11763] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1104.154021][T11763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.180767][T11763] usb 8-1: config 0 descriptor?? [ 1104.245855][T11763] usb 8-1: can't set config #0, error -71 [ 1104.274567][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 1104.287085][T11763] usb 8-1: USB disconnect, device number 10 [ 1104.303176][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.333323][ T5927] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1104.349830][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.364183][ T5927] usb 4-1: Product: syz [ 1104.368881][ T5927] usb 4-1: Manufacturer: syz [ 1104.373568][ T5927] usb 4-1: SerialNumber: syz [ 1105.487996][ T5927] usb 4-1: config 0 descriptor?? [ 1106.306130][ T30] audit: type=1326 audit(1755128852.900:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31032 comm="syz.0.3325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faee118ebe9 code=0x0 [ 1106.331064][ T5927] cdc_ether 4-1:0.0: skipping garbage [ 1106.336719][ T5927] usb 4-1: bad CDC descriptors [ 1106.347373][ T5927] usb 4-1: unsupported MDLM descriptors [ 1106.771230][ T5913] usb 4-1: USB disconnect, device number 102 [ 1109.273757][T31084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.594579][ T30] audit: type=1400 audit(1755128856.179:1061): avc: denied { getopt } for pid=31074 comm="syz.0.3333" lport=57795 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1109.719938][ T30] audit: type=1400 audit(1755128856.289:1062): avc: denied { read } for pid=31070 comm="syz.7.3331" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1109.882031][ T30] audit: type=1400 audit(1755128856.289:1063): avc: denied { open } for pid=31070 comm="syz.7.3331" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1110.008254][ T30] audit: type=1400 audit(1755128856.349:1064): avc: denied { ioctl } for pid=31070 comm="syz.7.3331" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1110.071644][ T30] audit: type=1400 audit(1755128856.559:1065): avc: denied { set_context_mgr } for pid=31094 comm="syz.4.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1110.510858][ T31] INFO: task syz.5.2868:25358 blocked for more than 144 seconds. [ 1110.537417][ T31] Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 [ 1110.627706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1110.653932][ T31] task:syz.5.2868 state:D stack:27784 pid:25358 tgid:25347 ppid:8891 task_flags:0x400140 flags:0x00004004 [ 1110.681766][ T31] Call Trace: [ 1110.719634][ T31] [ 1110.745120][ T31] __schedule+0x1190/0x5de0 [ 1110.749730][ T31] ? __pfx___schedule+0x10/0x10 [ 1110.755128][ T31] ? find_held_lock+0x2b/0x80 [ 1110.759985][ T31] ? schedule+0x2d7/0x3a0 [ 1110.764548][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1110.770632][ T31] schedule+0xe7/0x3a0 [ 1110.774842][ T31] schedule_preempt_disabled+0x13/0x30 [ 1110.828666][ T31] __mutex_lock+0x82a/0x10b0 [ 1110.840799][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1110.863627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1110.886530][ T31] ? __build_skb_around+0x278/0x3b0 [ 1110.907434][ T31] ? skb_put+0x138/0x1b0 [ 1110.929310][ T31] ? __nlmsg_put+0x152/0x1c0 [ 1110.940416][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1110.963418][ T31] nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1110.991302][ T31] ? arch_stack_walk+0xa6/0x100 [ 1111.003796][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1111.028182][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1111.057540][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1111.078785][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1111.096737][ T31] ? stack_depot_save_flags+0x29/0x9c0 [ 1111.102327][ T31] ? stack_trace_save+0x8e/0xc0 [ 1111.138427][ T31] ? genl_get_cmd+0x194/0x580 [ 1111.160682][ T31] ? netlink_alloc_large_skb+0x69/0x130 [ 1111.180715][ T31] ? netlink_sendmsg+0x6a1/0xdd0 [ 1111.194925][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 1111.273503][ T31] genl_rcv_msg+0x55c/0x800 [ 1111.294449][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1111.300936][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1111.357662][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1111.399332][ T31] netlink_rcv_skb+0x158/0x420 [ 1111.421822][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1111.458935][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1111.470375][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1111.476626][ T31] ? selinux_netlink_send+0x578/0x830 [ 1111.483152][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 1111.490650][ T31] genl_rcv+0x28/0x40 [ 1111.494694][ T31] netlink_unicast+0x5a7/0x870 [ 1111.501566][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1111.510344][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1111.518063][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1111.524224][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.533298][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1111.539791][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1111.551003][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1111.557735][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1111.563086][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1111.575987][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.620266][ T31] __sys_sendmsg+0x16d/0x220 [ 1111.631929][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1111.648607][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1111.664640][ T31] do_syscall_64+0xcd/0x4c0 [ 1111.682738][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.719749][ T31] RIP: 0033:0x7f2d3bb8ebe9 [ 1111.728116][ T31] RSP: 002b:00007f2d3c921038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.740845][ T31] RAX: ffffffffffffffda RBX: 00007f2d3bdb5fa0 RCX: 00007f2d3bb8ebe9 [ 1111.750160][ T31] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006 [ 1111.762488][ T31] RBP: 00007f2d3bc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1111.772846][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.784848][ T31] R13: 00007f2d3bdb6038 R14: 00007f2d3bdb5fa0 R15: 00007ffcf75c4f98 [ 1111.793072][ T31] [ 1111.800866][ T31] [ 1111.800866][ T31] Showing all locks held in the system: [ 1111.813269][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 1111.826108][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1111.838361][ T31] 1 lock held by khungtaskd/31: [ 1111.843297][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1111.853503][ T31] 2 locks held by getty/5610: [ 1111.858282][ T31] #0: ffff88803614e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1111.868866][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1111.879183][ T31] 3 locks held by kworker/u8:13/8194: [ 1111.884626][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1111.894658][ T31] #1: ffffc9000c427d10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1111.907944][ T31] #2: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0x159/0x1030 [ 1111.917871][ T31] 3 locks held by kworker/u8:4/20996: [ 1111.923333][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1111.940024][ T31] #1: ffffc9001fa57d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1111.951719][ T31] #2: ffffffff9037ed88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1111.961251][ T31] 2 locks held by syz.1.2865/25315: [ 1111.966551][ T31] #0: ffffffff90422190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1111.974873][ T31] #1: ffffffff8e9d74c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1111.985081][ T31] 2 locks held by syz.5.2868/25358: [ 1111.991064][ T31] #0: ffffffff90422190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1112.000536][ T31] #1: ffffffff8e9d74c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1112.012935][ T31] 2 locks held by syz.4.3336/31094: [ 1112.021180][ T31] #0: ffffffff9037ed88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1112.031546][ T31] #1: ffffffff8e5cc6f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1112.044954][ T31] 1 lock held by syz.4.3336/31100: [ 1112.052797][ T31] [ 1112.063231][ T31] ============================================= [ 1112.063231][ T31] [ 1112.084031][ T31] NMI backtrace for cpu 0 [ 1112.084049][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1112.084070][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1112.084079][ T31] Call Trace: [ 1112.084086][ T31] [ 1112.084093][ T31] dump_stack_lvl+0x116/0x1f0 [ 1112.084122][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1112.084141][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1112.084164][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1112.084189][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1112.084212][ T31] watchdog+0xf0e/0x1260 [ 1112.084233][ T31] ? __pfx_watchdog+0x10/0x10 [ 1112.084250][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1112.084277][ T31] ? __kthread_parkme+0x19e/0x250 [ 1112.084301][ T31] ? __pfx_watchdog+0x10/0x10 [ 1112.084319][ T31] kthread+0x3c5/0x780 [ 1112.084336][ T31] ? __pfx_kthread+0x10/0x10 [ 1112.084352][ T31] ? rcu_is_watching+0x12/0xc0 [ 1112.084366][ T31] ? __pfx_kthread+0x10/0x10 [ 1112.084380][ T31] ret_from_fork+0x5d4/0x6f0 [ 1112.084391][ T31] ? __pfx_kthread+0x10/0x10 [ 1112.084401][ T31] ret_from_fork_asm+0x1a/0x30 [ 1112.084421][ T31] [ 1112.084439][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1112.208099][ C1] NMI backtrace for cpu 1 [ 1112.208113][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1112.208130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1112.208138][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1112.208162][ C1] Code: 3c 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 62 17 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1112.208175][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1112.208188][ C1] RAX: 0000000005267d61 RBX: 0000000000000001 RCX: ffffffff8b92ac29 [ 1112.208197][ C1] RDX: 0000000000000000 RSI: ffffffff8de4e7b1 RDI: ffffffff8c161100 [ 1112.208206][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1112.208215][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1112.208223][ C1] R13: ffff88801e2ea440 R14: ffffffff90aaff90 R15: 0000000000000000 [ 1112.208232][ C1] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 1112.208247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1112.208256][ C1] CR2: 00005555585695c8 CR3: 0000000029099000 CR4: 00000000003526f0 [ 1112.208265][ C1] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 1112.208273][ C1] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1112.208282][ C1] Call Trace: [ 1112.208287][ C1] [ 1112.208292][ C1] default_idle+0x13/0x20 [ 1112.208306][ C1] default_idle_call+0x6d/0xb0 [ 1112.208319][ C1] do_idle+0x391/0x510 [ 1112.208337][ C1] ? __pfx_do_idle+0x10/0x10 [ 1112.208353][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1112.208369][ C1] cpu_startup_entry+0x4f/0x60 [ 1112.208385][ C1] start_secondary+0x21d/0x2b0 [ 1112.208405][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1112.208425][ C1] common_startup_64+0x13e/0x148 [ 1112.208445][ C1] [ 1112.614752][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1112.621638][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1112.633073][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1112.643098][ T31] Call Trace: [ 1112.646350][ T31] [ 1112.649266][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1112.653846][ T31] vpanic+0x6e8/0x7a0 [ 1112.657807][ T31] ? __pfx_vpanic+0x10/0x10 [ 1112.662295][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1112.668168][ T31] panic+0xca/0xd0 [ 1112.671866][ T31] ? __pfx_panic+0x10/0x10 [ 1112.676264][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1112.681643][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1112.687817][ T31] ? watchdog+0xd78/0x1260 [ 1112.692216][ T31] ? watchdog+0xd6b/0x1260 [ 1112.696608][ T31] watchdog+0xd89/0x1260 [ 1112.700827][ T31] ? __pfx_watchdog+0x10/0x10 [ 1112.705473][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1112.710648][ T31] ? __kthread_parkme+0x19e/0x250 [ 1112.715658][ T31] ? __pfx_watchdog+0x10/0x10 [ 1112.720317][ T31] kthread+0x3c5/0x780 [ 1112.724355][ T31] ? __pfx_kthread+0x10/0x10 [ 1112.728913][ T31] ? rcu_is_watching+0x12/0xc0 [ 1112.733649][ T31] ? __pfx_kthread+0x10/0x10 [ 1112.738223][ T31] ret_from_fork+0x5d4/0x6f0 [ 1112.742790][ T31] ? __pfx_kthread+0x10/0x10 [ 1112.747347][ T31] ret_from_fork_asm+0x1a/0x30 [ 1112.752089][ T31] [ 1112.755291][ T31] Kernel Offset: disabled [ 1112.759588][ T31] Rebooting in 86400 seconds..