last executing test programs: 5m53.310223086s ago: executing program 32 (id=62): fanotify_init(0x8, 0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = syz_io_uring_setup(0xef5, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000240)="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"}, 0x20) r5 = syz_clone(0x10100400, &(0x7f00000000c0)="17ffba7db10ad7743d680ffdc8b87db7f397b0293de372b83158f7e3478396ef562bd3ec2da46aac29f1c3680ad099529fa1e6222c4bf4ec0b2d6a4a691c6b029d2c7600de82e936cdfdc76f6345ee882f69d62186f68d6ab853137c51c7017627521ae4f716a9a98e0cf8fe88ddcc5f0eb9c13b82018e5141c28a043924d373afefdeb3d98881c640160555ef3d5d6a98915ac2930e54f32abc523651acf36698135926e689e71e301e2fdc3ff22306868b30b9b8c10f1521d688afa89490ec7433a4889eac9b673f7c0a776e55c1", 0xcf, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="769f31b61e85345f8d0470194914aea8b9e2470d15d2c9941618d0106806b273bdde24e5e7521ed0") r6 = syz_open_procfs(r5, &(0x7f0000000040)='fdinfo/3\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02}]}) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) 5m0.26334847s ago: executing program 3 (id=249): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 5m0.149367584s ago: executing program 3 (id=251): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) modify_ldt$read(0x0, &(0x7f0000000980)=""/4096, 0x1000) (async) modify_ldt$read(0x0, &(0x7f0000000980)=""/4096, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) move_pages(r1, 0xa, &(0x7f0000000100)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000b08000/0x3000)=nil, &(0x7f00001df000/0x4000)=nil, &(0x7f00007ce000/0x1000)=nil, &(0x7f000024d000/0x1000)=nil, &(0x7f00006e3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ace000/0x4000)=nil, &(0x7f00005e8000/0x2000)=nil, &(0x7f00003fc000/0x4000)=nil], &(0x7f0000000340)=[0xe, 0x10000, 0x9, 0x9], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r7, 0x409, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0xd) timer_delete(0x0) (async) timer_delete(0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@caif=@rfm={0x25, 0xa110, "835f32f0a27aaddce3e2f8641a448f98"}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) (async) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5m0.101761938s ago: executing program 4 (id=253): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x1e) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80800) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r2], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000040)="3aee4111c72b", 0x0, 0x612, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x6}, 0x50) 4m59.73745125s ago: executing program 3 (id=255): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095650f04514c4e809106480177e5aa3c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe5, &(0x7f0000000640)={@random="3189665c23b6", @empty, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "eb72ba", 0xa7, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, @dev={0xfe, 0x80, '\x00', 0x1f}, {[], @param_prob={0x4, 0x1, 0x0, 0x4, {0x0, 0x6, "000010", 0xfffb, 0x89, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@hopopts={0x3a}], "f6ca597cfab040b6f9fee832ed54e1805743072d1fe4550888a88845d4b0c5596bdc2e2a2de2f0dfb867c9b735e9814e25c423bbd0eecaa987fe5223a73b5c6f2940edad3ffac938b917b80c3a5fa6bc6b02c7bf1e34b5e9fbe3ee1437e16c9203a39d1c4d110fb17f3eac954e3ac3"}}}}}}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="28af4ea4fc207e093fb9f682c99aae6e5a25be19", @ANYRES16=r8, @ANYBLOB="01032cbd7000fedbdf25000000001400020077673100"/34, @ANYBLOB="1a6cda2ddabb20d4321552bb57e2297d1658c66d317deb410bccfe5752eeb5b8c9a7dcb2a19908cf0b9db7c2ded624e64032ada9bee00d48bacf4a12baafb30d02a134c7bc20dfc3b10cabf7e10d69b3a3401751c3bf53243a4e61a5fc55929bc11e341c61b73d3350908ce78299d35f9aa24a9cb25eb82c72c4d38db492ffb53a12851701a68d8f920a9b256ed6d24d8c8d34af69982b4608232d6bcc0f577514c796d98cfd01696a19f92bf8e63dbe23bbc2a3dbe7c5911ef49f796fd0e1df0a", @ANYRESHEX=r1, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)}}, {{0x0, 0x0, &(0x7f00000017c0)}}], 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x92200000000c, 0x11) r9 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x7ffffff7, 0x884e1, 0x2f, 0x2007, 0x7, 0x8, 0x80ffe, 0x1, 0x4, 0x8500, 0x1003, 0x1000004, 0xb, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x8, 0x10, 0x40000, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x7fff]}) 4m59.644435096s ago: executing program 4 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfee0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = dup(r4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000140)=0x10000200) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) sched_setscheduler(0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 4m59.242922415s ago: executing program 2 (id=257): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000540)={@rand_addr=0x64010100, @rand_addr=0x64010102}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0) (async) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000540)={@rand_addr=0x64010100, @rand_addr=0x64010102}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) 4m58.826850883s ago: executing program 2 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0xfc, 0x0, @tick, {0x0, 0xfd}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x62, {0x1}, 0xfffffffe, 0x100000}) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0xffffffffffffff98}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r8, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0], 0x78) sendfile(r6, r8, &(0x7f00000001c0), 0x8) fcntl$addseals(r8, 0x409, 0x8) fallocate(r8, 0x3, 0x9100, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x10000, 0x0, 0xff, 0xd, 0x0, 0x2}, 0x20) syz_extract_tcp_res(&(0x7f0000000040), 0xa, 0x8001) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @irqchip={0x2, 0x9050}}]}) signalfd4(r2, &(0x7f0000000100)={[0x3918]}, 0x8, 0x800) 4m58.477227582s ago: executing program 3 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x2d, 0x2, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0xa0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newtaction={0xc0, 0x30, 0xffffffffffffffff, 0x70bd2d, 0x0, {}, [{0xac, 0x1, [@m_skbedit={0xa8, 0xd, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x5, 0x8, 0x2, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x400, 0xff, 0x10000000, 0x9, 0x3ff}}]}, {0x9, 0x6, "b46c884a4b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xc0}}, 0x80) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 4m57.326417019s ago: executing program 3 (id=265): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x80, 0x0}, 0x8) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x7f, 0x8}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x4042) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x801, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x400}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xfd, &(0x7f0000000080)=""/253, 0x41100, 0x78, '\x00', 0x0, @fallback=0x1b, r0, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x2, 0x6, 0x80000000}, 0x10, r1, r2, 0x6, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4, r5], &(0x7f00000003c0)=[{0x4, 0x5, 0x8}, {0x4, 0x1, 0xc, 0x7}, {0x1, 0x3, 0x7, 0x7}, {0x1, 0x3, 0x10, 0x5}, {0x0, 0x1, 0xe, 0x6}, {0x5, 0x3, 0xc, 0xb}], 0x10, 0x8}, 0x94) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000540)={0x1, 0x0, 0x7, &(0x7f0000000500)={0x15, "0be636674bbf7577588c37460909b8f594d91ebb09f591105040154263404dda0f"}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r6, r2, 0xa, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x3ff, 0xfffffffffffffc01, 0x278, 0x4, 0x100], &(0x7f0000000600)=[0x4], 0x800, 0x5, 0x1}}, 0x40) ioctl$RTC_WIE_OFF(r2, 0x7010) r7 = gettid() prlimit64(r7, 0x9, &(0x7f0000000680)={0x8}, &(0x7f00000006c0)) setrlimit(0xe, &(0x7f0000000700)={0x3, 0x7}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000740)={0x6, 0x1, {0x1, 0x7, 0xe, 0x17, 0x8, 0x2, 0x5, 0xd3, 0x1}}) recvfrom$inet6(r2, &(0x7f0000000780)=""/182, 0xb6, 0x1, &(0x7f0000000840)={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffc0000}, 0x1c) ioctl$I2C_TIMEOUT(r0, 0x702, 0xb7b) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000880)={0x0, 0xf606}) socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RSYMLINK(r4, &(0x7f00000008c0)={0x14, 0x11, 0x1, {0x80, 0x3, 0x8}}, 0x14) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000900)={0x1, 'veth1_to_batadv\x00', {}, 0x8}) r8 = openat(r5, &(0x7f0000000940)='./file0\x00', 0x400, 0x180) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, r9, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x17}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}}, 0x4044004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001200)={'vxcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001280)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000012c0)={0x0, @remote, @initdev}, &(0x7f0000001300)=0xc) sendmsg$inet(r4, &(0x7f0000001500)={&(0x7f0000000b40)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000b80)="871c052f926fa5052e927554a2ac5b42b48f0ac70a819bbb675b8cdcfcf52810a9ae46edad18b1d7b10a708133c0c06ee87db07284799a6f301df77bb13376f33cb48fb7443a2c12036c352fdfffe0b614c483d657c295d8def7c69602bdba65d763a27111fdb0fa9a8cb1176cbffeac984516c28cf3cdaa4d4c4e27bfcfa6675d68ac5ceba4", 0x86}, {&(0x7f0000000c40)="7c238d0e8965373339914a0342d5e87570f9a2adc0356e82743093a5e34c861dff8d15d967b4f61265233a15f68546a0568673d36bd9e3bc76b6abe96a09ff4181a7420b52eba13048ce9a9712f45c61a0fd2fc2d40fd3c5e18951892076a01fac54bd17b17501e1beb6cdcba13615e57aad09e53bcfa23dd875dc7ef2166a0adb60624aa13376c66df7a0156be82ea5d0465915d7971fd11e243d22826446f756b80e6e92ea223a6dbc1f3b2ef52478557a0073c6f041518c327ff74fbb1c7e", 0xc0}, {&(0x7f0000000d00)="d7c16306c2253df4a454d4e5689c05ecfa11632fab996ac424381a7ebcb8169fa80f4a7f8169477a2e5605a033ffaec2e82d332728f47c97ddc9103bccafdfd29ed7e47777c7db0136b942727e00987b5fc27c59ccca3cfc5323bb0ac9fef85e3027859f0d742fc43cabd89d75e21e02cc4ac15bd3dd1711eafe5da25780c174404aa25e54b2", 0x86}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="1f1c6f78239b6824a7149a8f231c68604387e1bbb6411cfa38f1a05095cb0173efc7de49769e795ebcca34d32e5db7077f9c991e0636dee9e29571273b1924ee3ae395579a271e1a5c5a6c4266c6afd121f36edba592486918159f2aff73247a60c099d807f9234bd70b272567dc7e838d32a2df1479b4a723ef7facdf6d95", 0x7f}, {&(0x7f0000000e80)="4939d4a748ea23c854cf6349590378def1a798555417beb5617546c0f382da48941395d01ff42dc857f492df2db7aba381e182a89b1ca4d967001077384159c42a910614cb202b067f1f3c62cb46deb330777b4078901d4fa093bee8fc9a018f95fa1bea8d5d02b0e640c2eca5722927fa8ac1caf65aa1e9a0a404b7a8aaefa5a88143e7b200c6010ed238bfaff9fb43a97d0288d29b5e385e9dd2f904ded03d2a8f7becaf9e6f68844633e1521f737dddb7b12b948cc3e0044acab3a4575d060f6d89", 0xc3}, {&(0x7f0000000f80)="5f98405a9245196570e225a1a985c94f622bf404545b2310721e2330b0b4650d4aa167294a75134426b57db18a7dfa04098dd8f2c79ef163fe3b3c871ae31bf17f99cbfd9ff6d79fe3e42693db071e0f581b68693b4c77ffd3bf37077f2f742535e2f383f7aa07ead9935603a57ff35a62e9e892228803a60c25a4f4a873eaeca8d6595e50cb94b64adf4a0253691b8e4568fb2374104834e3e4a0", 0x9b}, {&(0x7f0000001040)="70232a8814c5ccd967b852182f3d0966690fc74a2a1497c78dd972d8e9e3b8f5f21f4f1d807e6e15f3755ace784759275e29c7a202458b7a322dfa94bf09407ee19f669a34b1c18d03ceddc89b5bb7008bbd139f2dc0f10c7ec802917fa9027386686adbf1ef482755fcd81f7a50b72c3e6e4d462d0eaacbc53881df5b493c12aa7063fdba1821bdbb669854d9da72ccaf9efeebf1fcf54ce9030c05fef44f04dbb7ce3e6106507ea571ff975943bdf8ccfe87f0c00717c3e41282793bc0bbf9217b69c55dcf30ea1e98f2429adc9ac7998d3bd50df2f71c2567aa736b5e", 0xde}], 0x8, &(0x7f0000001340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @multicast2}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@cipso={0x86, 0x35, 0x3, [{0x1, 0x9, "5e8d6efae0f0ad"}, {0x5, 0x9, "74f9cd27510b80"}, {0x2, 0x5, "a1be37"}, {0x7, 0x7, "cd59c5c07c"}, {0x7, 0x9, "a9c19b8c12269c"}, {0x5, 0x2}, {0x6, 0x6, "05e323d7"}]}, @ssrr={0x89, 0xb, 0xa0, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp_prespec={0x44, 0x1c, 0x2a, 0x3, 0xb, [{@multicast2, 0x83}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x2}]}, @rr={0x7, 0x13, 0xd3, [@remote, @multicast2, @remote, @private=0xa010101]}, @ssrr={0x89, 0x7, 0xbb, [@empty]}, @cipso={0x86, 0x15, 0x2, [{0x6, 0xf, "440183bd80bfb16245f86b8a5d"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x198}, 0x80) mount$fuse(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x813, &(0x7f00000015c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}], [{@appraise_type}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, '.%'}}, {@appraise_type}, {@obj_user={'obj_user', 0x3d, 'batadv0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@flag='silent'}]}}) 4m57.325914152s ago: executing program 2 (id=266): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x4000, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc}) read$FUSE(r2, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_procfs(r5, &(0x7f00000021c0)='net/sockstat\x00') ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000002200)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000002280)=""/241) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000023c0)={&(0x7f0000002380)='objagg_destroy\x00', r2, 0x0, 0x489}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002400), 0x14800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000029c0)={r1, 0xe0, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f00000027c0)=[{}, {}], 0x10, 0x10, &(0x7f0000002800), &(0x7f0000002840), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000002880)}}, 0x10) r10 = openat2(r6, &(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)={0x0, 0x5, 0x11}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x15, 0x38, &(0x7f0000002440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x606588c749cea8da, 0x3, 0x4, 0x3, 0x2, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002600)='GPL\x00', 0x80000001, 0x1e, &(0x7f0000002640)=""/30, 0x0, 0x3, '\x00', 0x0, @sk_reuseport=0x27, r1, 0x8, &(0x7f0000002680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000026c0)={0x5, 0xb, 0x3, 0x5}, 0x10, r9, r2, 0x5, &(0x7f0000002a80)=[0xffffffffffffffff, r10, r1, r6, r6, r6, r1], &(0x7f0000002ac0)=[{0x1, 0x4, 0x2}, {0x4, 0x3, 0x6, 0x8}, {0x4, 0x3, 0xf, 0x5}, {0x5, 0x3, 0xf, 0x8}, {0x5, 0x1, 0xe, 0xa}], 0x10, 0x4}, 0x94) clock_gettime(0x0, &(0x7f0000002c00)={0x0, 0x0}) write$input_event(r6, &(0x7f0000002c40)={{r11, r12/1000+10000}, 0x5, 0x100}, 0x18) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) r13 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0) write$yama_ptrace_scope(r13, &(0x7f0000002cc0)='0\x00', 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f0000002d00), &(0x7f0000002d40)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000002d80)={[{0x3, 0x400, 0x1, 0x4, 0x3, 0x9, 0x1, 0x2, 0x3e, 0xf8, 0x2d, 0x4, 0x7f}, {0xfffffff8, 0x9, 0x40, 0x7, 0xfc, 0x8, 0x6, 0x7f, 0xe, 0xd4, 0x0, 0xf5, 0x4}, {0x7, 0x3, 0x9, 0x4, 0xf, 0x3, 0x11, 0xff, 0x8, 0x60, 0x81, 0x6, 0x3}], 0x1000}) getsockname(r7, &(0x7f0000002e00)=@caif=@dgm, &(0x7f0000002e80)=0x80) r14 = dup2(r13, r13) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x98, 0x2, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x44009011}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, r8, {r3, r4}}, './file0\x00'}) fsetxattr$system_posix_acl(r14, &(0x7f0000003040)='system.posix_acl_access\x00', &(0x7f00000030c0)={{}, {0x1, 0x7}, [{0x2, 0x1, r3}, {0x2, 0x1, r15}, {0x2, 0x7, r3}], {0x4, 0x5}, [{0x8, 0x5, r4}, {0x8, 0x0, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x4, r4}, {0x8, 0x5, r4}, {0x8, 0x0, r4}, {0x8, 0x2, r4}], {0x10, 0x4}, {0x20, 0x4}}, 0x84, 0x3) syz_open_dev$sg(&(0x7f0000003180), 0x6, 0xf6d93e6a70644359) 4m57.135747222s ago: executing program 2 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='percpu_alloc_percpu_fail\x00', r0, 0x0, 0x100003}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2c, 0x802, 0x7) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x805}, 0x40000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x400000a9}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34327241, 0x1, [], [0x20002b8, 0x9], [0x0, 0x0, 0x7], [0x73, 0xfffffffffffffffe, 0x0, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace$setopts(0x4206, 0x0, 0x4, 0x100002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, 0x5b, 0x0, 0xfffffffffffffca2}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x0, 0x12, 0x1, 0x3, 0x0, 0x4, 0x0}) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000), 0x2, 0x2) r8 = socket$kcm(0x10, 0x9, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52f40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00230db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d50400ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}, {&(0x7f0000000000)="53f644cf223e37a1896b2be827acea323fc6d2f53a7b396111b8b8ac9e8a929ba5f5db3c900af0a74771bcf9a29d97115e0c28cee70818c04809fe15724f4cf12c81838562e2940e9d4291b45662a0d2d28cf02d3ce2c4e6f2b7bba371bc7653663d4c1611333522381e52f084ef4bf1d81e5038f001267844d52535bc7ab66999f78502763671ee5a84130640a38af21074c65190fea4a72dffce5bb7e9fbdd11dfaf6dc7e0c4b6", 0xa8}, {&(0x7f0000000100)="f6813a04e4d37c2dcdd0f297caa97056a9b7e20802ed8631c86c01c1b05ce791d04df31254536fbd5c54a44cd725b59e6d", 0x31}], 0x3}, 0x80080) 4m56.365904428s ago: executing program 3 (id=270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x30000000, 0xdd3f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=@getnetconf={0x14, 0x52, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, 0x0, 0x20040000) syz_io_uring_setup(0x23c, 0x0, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0x7, 0xb}, {0xfffa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) 4m56.305191257s ago: executing program 4 (id=271): syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f4ed11f80000000000008500000083000000bf09000000000000550901000000be009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000581a1b3638c2f300411acc85feed97c8f5adb2d850878c9efb3824bc28ef19ab4c7a39273fcc9c95411a48884b0fb5fcd1a40868616200d158ce2b515739dd42fbfe37fea25643c2ff685ee1c9170f2f4cd5b943bf330cac505c6e33a53e26ab"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x482c4400, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x848, &(0x7f0000000040)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x9, 0x4) 4m56.018791759s ago: executing program 2 (id=272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x24}, 0x6}}]}, 0x60}, 0x1, 0x7}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = timerfd_create(0x0, 0x800) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%(0.', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r8, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x23b) 4m55.164535404s ago: executing program 4 (id=273): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000006000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb5111132c32e4187}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x210000, 0x0) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x2, 0x125, &(0x7f0000000940)}) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x120}}, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x5}, 0x18) r5 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x140) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) (async) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000000)={0x0, 0x8a}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x4, 0x4000103e, r4, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) (async, rerun: 64) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x84) (rerun: 64) 4m54.922970073s ago: executing program 4 (id=275): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4m54.722779113s ago: executing program 2 (id=276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) (async) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{0x1, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r6, 0x5501) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0xfcdd) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f00002a0000/0x4000)=nil) (async) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x400, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4m53.775950954s ago: executing program 4 (id=280): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4m18.768769121s ago: executing program 33 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x44}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000400)={0x1, 0x0, [{0x80000003, 0x8000, 0x4f91, 0x7, 0xc5}]}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000d00)=""/102400, 0xffffffba) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000440)={0x80, "56f535531571d4f20aaaf9bf6798c45d50bff7bb935ef95f81fa1fa7d022a924"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000756c6c2500000000060020207b1af8ff00000000bfa10000000000000701000002feffffb702000008000000b70300000000000085000000c700000095000000000000005b31548cf1f4986482ae9e1b8662310831"], &(0x7f0000001540)='GPL\x00'}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) 4m17.881851654s ago: executing program 34 (id=278): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/158, 0x9e}], 0x1, 0x4, 0xfffffffe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0xc402) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7dffeffc) close(r3) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x21, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffd, 0x0, 0x4e24, 0x9, 0x2, 0x0, 0x20, 0x2f, 0x0, 0xee00}, {@in=@local, 0x22, 0x32}, @in6=@remote, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x4, 0x6}, {0x100000003, 0xa, 0xcc, 0x4}, {0x7, 0x0, 0x9}, 0x0, 0x3505, 0x2, 0x0, 0x1, 0x8}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x60, "efad0c"}}]}, 0x140}}, 0x4804) (async) r7 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r7, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x2, @mcast1, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b80)="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", 0x481}], 0x1}}], 0x2, 0xc004) restart_syscall() (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000f35401ef5c118a93ce4403d6a96bd674d571cf5ef442f93536b8b9723a9710c6aef6a7f4749bce0f7d8195bb6ce3d11b108a98a81eb3441cfaba0ffac370b731cc505cc4b8666c9bb82661fafb3aed3c502e7e9166651015c9eeea122adddbdc32a4cd05ae196f51981d296f157b2cba2db2a4ad81e1a4", @ANYRES16=r2, @ANYBLOB="01002dbd700002800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0xd1}, 0x4000004) (async) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x1, 0x4000000) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)={0x0, 0xf9, "e45e2c733d1ec84719a91296fc7f7e455aa33fb5444f58bd97f831fe0a42eaa7421fc033ad26215e962db4a53df019ed806e28ffb40eb7ba3cd35a281057506c71dfd36287d0e2fc4d8e52dcc69551b6ef399e28e79f09f256b8de991c503046bb4a53dbe5a5b74cac3fc8fa2b3b867717108bee52658ff6661dd4cb4daacba1ba694a17e242bd11f6fd309be3e81d161bcb730e38d1bee27c7392040d7bb9d85f3f9634274b5590f71bcaf611a830c74e405db0a9e2ecf3bd84013d935cf0e262df1d751164f4cba42e3e26cc5b95a064e3146cc0aebd25ed24e7223df593bec9ce139879714a6145912192380c035e9d5b1ef5b71b8677d9"}, &(0x7f0000000240)=0x101) 4m17.686472363s ago: executing program 35 (id=276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) (async) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{0x1, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r6, 0x5501) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0xfcdd) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f00002a0000/0x4000)=nil) (async) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x400, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4m17.617184778s ago: executing program 36 (id=270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x30000000, 0xdd3f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=@getnetconf={0x14, 0x52, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, 0x0, 0x20040000) syz_io_uring_setup(0x23c, 0x0, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0x7, 0xb}, {0xfffa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) 4m17.433140438s ago: executing program 37 (id=280): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000ab8af8ff00000000bfa200000000000007020000f8ffffff0000000000000000b7040000000000008500000059000093423f957ff3f769b5814547a4a306f953c5ad4386e69df03d247f44721995f1d9f16ceb92453e1c7ce461a54d9bb879757a4587d872eb8b983850e29a0de14dc9cd868aa48c101b5a2f702f590ca7ac07e515b5e30cf78a86d759517ce916f4ed5ab4b6e8da9186a5c87818685adb18c5e6d672560bdf9b4bac8e37c13122902193b139aee7ebc3fa66e28f4b8c595a0000000000000000dee006f189baa5c99812edaba198c53b42f5015ee7f1a304273fc3c130a1a0a17a50f00f1cf8339b8f42a33c31407f0b2fe26e4d68c24812966f03cb380cfe5d25e77dcca7fe8030b9b4f77826514dcd91ee707b317142e3c0ffc6b8b2e671d98936edf222d90ec8ff02031c2925c37d738700000000000000003dae2b4314b75a41df75140fe6bd71459e6ae61b249cd766786c7a1d0ca6f408ff457684c5451d718b437e9145b918b100b287ffe5344b025f"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3m7.981924844s ago: executing program 9 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004719a49dc0c71de7b2119258e1448af6e931644774542cf8e435f8f0a2dc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e1ffffff000000000000000000000840d2659fdc2ccbb4230000000016000000000000002af4b8f11865f37f06be67eca43020a341247c870b14894fbaf0ab5168c70bfe805aed63f3d06a30cb"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000510e9792a82421000000000000000007000000430e00009ebb5a9c71a219f49aa3cde5386e7c6a3407ef7e9cdd2cd2fd730efb415bae80be1bbd0151306da2a6a2ca784be543210452e5cb414accb9d82b58fb1f2739ccdebdbcd850f6869ad1e22987b6fb51", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchmodat(r6, &(0x7f0000000240)='./file0\x00', 0x24) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x400}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000300)=r7) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 3m6.88499692s ago: executing program 9 (id=474): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_clone(0x80, &(0x7f0000000240)="7fa1c694a549bf476a3140573f4d93ce204b7a7417cc4d8571de18265066a96c5ce9228eccd55495e26dc78173523406bc671b8d49cefa", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="eb82334e0b48c10de29b3ba041087d210d8b1b3570797b658fdcd89a2742a6383ea6232f8f9fe94ca6ef28e85b710be81cb29ce003b5d09fa4276f5c946d1aa66bdb4d8b44d8c558f434e803f5c59418dac8ed34f71de2a322012e2081fc4e8d47306a10d5b486c10a0b7bf5cce1c838113b11fc8e770fcf812aa32342f57c4947ad86d4c959c32cde7d5264ab5cb5dcd47acf50ac9150ab7248777d1609104872a52980af49cdb51d09") write$binfmt_script(r3, &(0x7f0000000180), 0xfffffffffffffdfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m6.51861792s ago: executing program 9 (id=476): socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fchdir(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000000100), 0x0) sendfile(r6, r5, 0x0, 0x40001) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$COMEDI_SETWSUBD(r7, 0x6411) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) 3m4.081161212s ago: executing program 9 (id=481): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200005, 0x4, 0x2, 0x0, 0x40], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)='proc\x00', 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x1, 0x0, 0x3}, 0xfd}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m0.766934638s ago: executing program 9 (id=499): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) bind$netrom(r0, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getscheduler(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x3505, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfe, 0x4}]) 3m0.390852658s ago: executing program 9 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x7, 0x2, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000280)={0x180000, 0x0, {[0x6, 0x2, 0x1, 0x4, 0x6, 0xe, 0x0, 0x8]}}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r10, &(0x7f00000034c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) 2m59.434505731s ago: executing program 38 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x7, 0x2, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000280)={0x180000, 0x0, {[0x6, 0x2, 0x1, 0x4, 0x6, 0xe, 0x0, 0x8]}}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r10, &(0x7f00000034c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) 1m26.624952824s ago: executing program 7 (id=891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0xc080) syz_genetlink_get_family_id$nl80211(0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xdd1fea4f81337d3f, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x1d, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xfffe, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000100)=""/105}, {&(0x7f0000000440)=""/116}, {&(0x7f0000000200)=""/58}, {&(0x7f0000000240)=""/36}, {&(0x7f0000000280)=""/35}], 0x2}, 0x0) 1m26.125187589s ago: executing program 7 (id=894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='signal_generate\x00', r0, 0x0, 0x7}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000280)='rfdno', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) fanotify_mark(r3, 0x2, 0x5000001b, r2, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xc, 0x0, r1, 0x4, '\x00', r4, r1, 0x2, 0x4}, 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x14081, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}, {@access_uid}]}}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r8, 0x1, 0xc, 0x0, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x23c143, 0x43) 1m25.883238152s ago: executing program 7 (id=897): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f00001db000/0x4000)=nil, 0x4000) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d", 0x2b}], 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X', @ANYRES16=r1], 0x58}}, 0x4014) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0x4, r0, 'id0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x41030) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="86000000", @ANYRES16=r4, @ANYBLOB="04002bbd7000fddbdf256a0000000c009900190c0000070000000500d200090000000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r7 = getpid() sched_setaffinity(r7, 0x8, &(0x7f0000000540)=0xfffffffffffff75c) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000800)=""/84, 0x54}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) 1m25.4627991s ago: executing program 7 (id=898): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x32}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x800) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x32}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000040)={[{@huge_advise}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r0, 0x472e) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_clone3(&(0x7f00000003c0)={0xad023080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f00000003c0)={0xad023080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m25.335465675s ago: executing program 7 (id=899): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000340)={r0}, &(0x7f0000000240)={'enc=', 'pkcs1', ' hash=', {'sha224-asm\x00'}}, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000000), 0xfffffffffffffe44, r0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, &(0x7f00000000c0)) pipe(0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) socket$netlink(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r4, 0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) 1m25.065803823s ago: executing program 7 (id=901): syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x401) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000500)="9bfdf9f3133e8e43eaeae98e3841bd9e823a4cc4227ba6e48363a734ef7919cd35d2e9ac5887e636c7d43bc894bd92690e67e0106dd224a9af25fda671816e99256ce505f85c2993c9327d9372c85f8a090667a5e8d3efd485b7a547a90c7015e1045a8bd9e89a872a7654bb5008bb69f7fb8faf639649cf23bd6b83d4179c1a03d33e904efa67ef4004946ce47b793a428e716116269e759e702432329d6d0d65a15481145abf79ae5ad6cba9cad8fee463749d1926b5c07559e59f4bb3eb192add8491385b2ffb52c4916ba706fd818b7f1ec8749245ceedd3ed9273d8335ef3f72884c4e0e3168862ae1d24f9b0166e787d761749f45a", 0xf8}], 0x1, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0xd0, 0x40005}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000880)='(', 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000092ee840feef4769b010000007da86bb87f85c3ab1dbed2932a406455f27ceb039cb5e7e280c35346a3e58ee4c914b1dc3403b1f5470e0693a4edfb36c9bd35ae0954ed2780d4d24430ab221e86cb224077ffadc99c479f00d5af01f6ab206ba7b61f9c3ce43eefb2a2cbb048a72bdaeb00eeac8c445b1c3f96eddb234b9aa29166d310093245", @ANYRES32, @ANYRES32], 0x18, 0x4004048}}, {{&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="59634fdcfa07520fbc3102c345322921", 0x10}, {&(0x7f0000000b00)="0cb8bfe7f480f0941d87f139e3c22f82c9634b7e89618c6b2f04833b927603fab3d63f0b342df4f644f810450ef077ffeddabf7153c194d96059f265f1ccda9e368a51e5f9da83d9d9acced3daa8a6df96af87f6fec49ba0b66196f058c3d74a93bec3a1c7d8d61b7e9d005e5609d3ee0c42c2b59a3ac0ddfdc77eec1f98a339d60a86c181db5f8b7c550dc14930bc09172ade6bed1417217340406930186e99b2d3949e0b614e1946751b07675fb46cd8d6ac7891a810b321e48e88755fe981e3b5b2c41577f1fbb882e19a1a0ab3f35df641af1dd9", 0xd6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e80d7a15332aec2294dc4e877a"], 0x60, 0x4000040}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x46a4, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0xa) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x46}, 0x22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200), 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={0x0, 0x300}) 1m24.940312786s ago: executing program 39 (id=901): syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x401) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000500)="9bfdf9f3133e8e43eaeae98e3841bd9e823a4cc4227ba6e48363a734ef7919cd35d2e9ac5887e636c7d43bc894bd92690e67e0106dd224a9af25fda671816e99256ce505f85c2993c9327d9372c85f8a090667a5e8d3efd485b7a547a90c7015e1045a8bd9e89a872a7654bb5008bb69f7fb8faf639649cf23bd6b83d4179c1a03d33e904efa67ef4004946ce47b793a428e716116269e759e702432329d6d0d65a15481145abf79ae5ad6cba9cad8fee463749d1926b5c07559e59f4bb3eb192add8491385b2ffb52c4916ba706fd818b7f1ec8749245ceedd3ed9273d8335ef3f72884c4e0e3168862ae1d24f9b0166e787d761749f45a", 0xf8}], 0x1, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0xd0, 0x40005}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000880)='(', 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000092ee840feef4769b010000007da86bb87f85c3ab1dbed2932a406455f27ceb039cb5e7e280c35346a3e58ee4c914b1dc3403b1f5470e0693a4edfb36c9bd35ae0954ed2780d4d24430ab221e86cb224077ffadc99c479f00d5af01f6ab206ba7b61f9c3ce43eefb2a2cbb048a72bdaeb00eeac8c445b1c3f96eddb234b9aa29166d310093245", @ANYRES32, @ANYRES32], 0x18, 0x4004048}}, {{&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="59634fdcfa07520fbc3102c345322921", 0x10}, {&(0x7f0000000b00)="0cb8bfe7f480f0941d87f139e3c22f82c9634b7e89618c6b2f04833b927603fab3d63f0b342df4f644f810450ef077ffeddabf7153c194d96059f265f1ccda9e368a51e5f9da83d9d9acced3daa8a6df96af87f6fec49ba0b66196f058c3d74a93bec3a1c7d8d61b7e9d005e5609d3ee0c42c2b59a3ac0ddfdc77eec1f98a339d60a86c181db5f8b7c550dc14930bc09172ade6bed1417217340406930186e99b2d3949e0b614e1946751b07675fb46cd8d6ac7891a810b321e48e88755fe981e3b5b2c41577f1fbb882e19a1a0ab3f35df641af1dd9", 0xd6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e80d7a15332aec2294dc4e877a"], 0x60, 0x4000040}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x46a4, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0xa) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x46}, 0x22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200), 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00001100ff8a9ec64ab8068fcd7dc5ea86b299f42e6eccc1962f4820ebc2a82324763e4734dbdef83e111878f45b6554061a5dec7ea2583a2276bafc68ea11ce9ba2fd482b60b68c15d52e8fa6765a0454c7ed400349f0513b4bcd2b8368cfdbd1bb0a421b30ce868ad82653325eea40631e5f3686ace6366a5cc3cea66e4b3351e5a6a8078590d30300000000000000b9ea6cbc9e428ff1535e71b7eee7b3071299702e06b11de926390622d90f5996e6ea6d16f76e59fb76e1c7da3dccc33bba68a7dbb1480b129bef14f3a4b43af4c718b18e3008074cc66084dc6ffc3dce54f742cb95d38084e9ec3fe5e410ce52d520bcf56c2558be4b43b71a51bd4b1438b724ae14a20dd64344ccb922b4629ef9166b16cdba78c58867bfeb3d68f7dfac70cbc83589ecf5df4e9c7d509ed3ab4432f198ad41eaeb995789cb9a223a9eff1977ed6a293fd7addbfe4ba7d5ba5fe31146657ee129cf"], 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={0x0, 0x300}) 9.199709463s ago: executing program 1 (id=1309): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='vfat\x00', 0x18, &(0x7f0000000340)='debug') setrlimit(0x3, &(0x7f0000000000)={0x3, 0x6}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = gettid() prlimit64(r1, 0x9, 0x0, &(0x7f0000000040)) 9.056448946s ago: executing program 1 (id=1310): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x8000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000004c0)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x830c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e20, 0xf9a, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffa}, @in6={0xa, 0x4e24, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x3}, @in6={0xa, 0x4e20, 0x56, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}, @in={0x2, 0x4e21, @remote}], 0xac) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x76, 0x14) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e", 0x23}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000d02343487a11df4586a77eecd0298fb31819c68407bdcb1b420e1447804e31f70f2f0b4ff89dc25e92d0735058cc4e4a0cea0b8ae209762a17e46cc9167507e480bd3e99ff07a17473877cca8c2ae8dfbd87ce26165d098807bf40519d"], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESHEX=r0, @ANYBLOB="00000600"/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) 8.768367171s ago: executing program 1 (id=1311): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) (async) r0 = syz_io_uring_setup(0x230, &(0x7f00000001c0)={0x0, 0x20, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) (async) io_uring_enter(r0, 0x7a98, 0xe0a9, 0x0, 0x0, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000240)={0x9, "a2ba321e3c9d303debfaaad0c6e82b9dccea5ef951b003761242279c8be1d7c25db870a25b10888fd713dfabb5a38692cd54c1b7e25613f97d993dfdfc085ac4f9d5ed22fbf00216719114bc48a269c46a69ab071a2e660ec7653fdd804c252cd9c14c76a406b05ad55a95ed5b657b334111b5bd6b504a00239a57e35fb864da7c9c7439ec47516fe38a2447402c0366d1a657e77e7cc15c048f0632f0aca2b423194cf5210d16a0787da4e114b311a1b4b369420b1a93ce52551dd3680ee87d6a0fc14e0882ef5d99ae233e8d8d77fae1d0f354769aae2427ad15c7ae7d615e28597181cbd012ab4f3765a5c5643e95a6d079bc9dd9aa21aebc0e8465b0b8761c5768b27a42492075e821ebd2a987baf76d1eb7198a931b722cd808c4cd0e0d836ba1a0ef4de727f642255ee075750b272be462e75b27ad2a2690640e6988f4f58ec63064be9ebd0bf107d36bc04bed58d81ea613a631ea751fa252ab8bb2058e81ad547288089ca36f086aee8501e961e809b65a9cc748b8756a21a8e446b02fd13aa99df6d9156904d69c9fcf3b993c75f7eb43a78db64ed6a99bf6bdc60c3306a87c7d761aae8a2189cecc318afd6404738286ad77fdddd95264fd67b2588d3625a77083828a882e78f942377f0121276a61e2a78da90d78e17dd9e059e673de08a66e29297bbf220872fd7f322a45d828e899a09b1808807d723979e8bc"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000552a5920240401c0dfaa0102030d09022400010000100009040a00029428b023090507020002020000090584020002000000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x4800, &(0x7f0000000300)={[{}]}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff68, &(0x7f0000000180)=[{&(0x7f0000000480)="eb435a15b6516a024578c1bb7da8841ba487f40c176cb13a2af089875cdb8f7baa58b2f1152605a8ebada1289dd7afcbfde3738127b6b5471aad01021cc23bbb396f9d276bdcc67999cd3da4f197618ee9333418eaa05b885c614099b8ec3c6b9595ca212d26a9d1b74af9759fc9fc8baf070e3d8b2ed551a051733a532058e4d1f2828193b9a1f814738323cc6ed0815c60"}], 0x16}, 0x30000080) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) (async) fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) 8.591611926s ago: executing program 5 (id=1313): rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') 8.55225192s ago: executing program 5 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x90, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r3, r3, r3], &(0x7f0000000600)=[{0x3, 0x2, 0xd}, {0x5, 0x2, 0x1, 0xa}, {0x5, 0x5, 0x4, 0x9}], 0x10, 0x5da}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x59, 0x7f, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x403, 0x7fff, 0x16, "b0bfd0ff40000096004e149b78ef4100"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0xff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RWALK(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="640000006f0200070010040000000700000000000000080400000000000000000000009c040000000200000000000000000400001d08000000000000000404000000040000000000000002020000000400f8ffffff080002030000000400000000000000"], 0x64) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d6c6f6361370200006c61746976653a342c372c00d3fa987533568ffc7d854216be71ccc2c4589b3c7de017bbfd0dbb9bbff656fdb80cadf9dda5a78d363bfd5484af96f2ea42da4ef2ee52"]) 7.675006725s ago: executing program 0 (id=1315): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0xf, 0x4, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x600) 5.099570931s ago: executing program 5 (id=1317): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x3, 0x0, 0x4}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000700)={{r4}, r9, 0x10, @inherit={0x50, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000000001000000000000000800000000000000ffffffff000000000a00000000000000fcffffffffffffff0900000000000000020000000000000000000000000000000500000000000000faa57f2969705950171d0358cfe80e501fff83484f5c3795d9eb8aa6aebb49f4959c5d1d45138e9353a4db88f2ac54ff5309bfdc3ce511556867403b15502b76745c065155868af7780dcd9b91dec2335e2dacdc3b974704810b25cdc6ada57e"]}, @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$RNDADDENTROPY(r10, 0x40085203, &(0x7f0000004180)=ANY=[]) 4.922051924s ago: executing program 1 (id=1319): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0x6, &(0x7f0000000280)=0x2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x240c0006) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000fb00f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x6a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r6, r6, 0x2e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.54170455s ago: executing program 0 (id=1321): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="240000002c000701e3bd7000ffdbdf25077c0000080001"], 0x24}}, 0x2000c004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r2, 0x0, 0x20, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r4, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40011) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r8, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0xc010) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.711927837s ago: executing program 5 (id=1324): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='squashfs\x00', 0x2010004, &(0x7f0000000180)='\'n](:$.$!\x00') r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0xe54aef35e9c2845d, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept4$ax25(r0, 0x0, 0x0, 0x80000) 3.561666583s ago: executing program 8 (id=1326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3, @loopback, 0xad}, 0x1c, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000300)="126c94c8f4d9a9ba4882fc5541a636f2c55c2a568d1f1c6ca86552f53ad0f1971aebfe4ca951c4c0cc8b59df6b1b9ba53b97a4571009ddb27e04cdab2aeea066daf8d970ad58850b69ed3549007622c388e3b874c0cd0cf6ba3162548be94c33ad44b3ae8d070ef09f54a434e08a403ed40eae78952b2264c841b2ba55b0f6c131a2b9f9a90ca93586ebe87a0f283ec54e55de993f6d03676b8b6bbaab7e125a506bdbaa230a0de78aafd2499be9f8a94d0ac3233525a484937c8c9f5ebe7b0d91576d38022aff36204ba7905b43e5429c478bce6d", 0xd5}, {&(0x7f0000001440)="4f872c43ce76b4f0b0b1342b035107cfc8334a75ff0d35005246adec857d0036528a58cd54d7fad2d85607684ff47d9fa903000000cdae56070702592261261af27de1acc14e00"/82, 0x52}, {&(0x7f0000000400)="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", 0xfc0}], 0x4, &(0x7f0000002a80)=ANY=[@ANYBLOB="c00000000000000029000000370000005c14000000000000c91000000000000000000000000000000000c20400000000c2040000000407200000000106810600fdfffffffffffffff10b000000000000010000000000000005020003050200070001004a547088f8c5fdb5489984d6bf8aae32e875557bf165db01da2d67fe3efcea668be534c1fd70f29dc3cac2e636b423d646b4b1ca70461aff8b57fc8661710c42c126a916af5ac36f9b2af6837145e8cab6066e5eaec200000000000000180000000000000029000000370000006700000000000000680000000000000029000000370000005e090000000000000414cc37c295288b65bcf0382fc8fdb6e22a25e9a4ed0001000100040108c910fe80000000000000000000000000003e010900000000000000000005020006c20400000007c2040000010100000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=r7, @ANYBLOB="000000001dfa533dcd3e04e5c40e125730344ed2f41e6fdefe127e621b509b0e2f4305088a7eb267382ac7f7730a3f7ed3f04a48a9f5a26e83bca9403dce772b785eea85b8c1baf9c2bf7cf7f6ac1cef56684a5ffbb63de82a9d03f7ff25521e7d627d601a136d179c23f07784f594e62dce636716736553773a9f00b8654f3e6cfda7a89a37bc498b568b79f448152eacab8f79c4d7119f2e1d3cf57d607f4ebbbb8fe51bd20fdb690dc484bbec31c114a2cae0eca9bdf8214a6957bec7d15715294ab437738b28ec7cd721fe2ac68b55b72e7f2f4e029c90e492a18173546ceb61"], 0x168}}, {{&(0x7f0000001640)={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000001700)="879dabc8158488dc982ae34903b057dd60e01a8850b8cba601a7fd117d8a94847a2219a1d27e5909dc8c31554772bb614369b74f90e5385e11210dad79cad8563bf6509f533d0b8e7e23b0d22c5ee6e70b9bd22b59893cff338866ac158fd4516deea1c0df05c57eb9df605e5ff09b75b39621741b4eac2f344e2c4df3a71dfbc1ae84e1204d2674a97076d140f69923653b8b80cd381aa13ffd8c69b8fb3ac52f40073a097aa5603cec8616", 0xac}, {&(0x7f00000017c0)="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", 0xfe9}, {&(0x7f00000027c0)="2e020f98a0c8d835bbb5419a018c0cd27bd8118e015402b8e87844e02cb7d7a62a76aef0175957e0e700e703f5155b11e50f3a11d4ea4231c5a39cde5623c51daf0b37e872e86535acc198c1628b7d73256199c16a5e73814e9b3d", 0x5b}, {&(0x7f0000002840)="cef13c04eea4a117bf42e360f50cb8e31a24e5080820959d23a3da7adcf802f6957cc01198ad8b433bf2602dead4c88ff9703196187e2c96c466a4bef7", 0x3d}, {&(0x7f0000002880)="b668ce5dde5916a85d70f6f8e4b7c6617c90473aeba071d10db79e888c2fec9c1c74efaa01124d2a993fcb132af331dc6275c18b6d01630f96ac3ef10229b94b8e33e7e8e00463bd978ed3cb43a8b93a3089c23ee47dde708eeb582a6e080dc574f9527d3bd4c8d739fb67545d9fe15853d2014e9b377b4c694c7ffd", 0x7c}, {&(0x7f0000002940)="3acd4e94bb3a1f0c4cd0a73eb489aaaf30978906997ec8d7b5940d", 0x1b}], 0x6}}], 0x2, 0x44040) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[@ANYBLOB="b936f5f20d285a19221500000065ffff02000000b482fb062ece225899c88bdaf008003950323030306e4c169776e2ea3eafc99395e84b2697787dcd40129833b4a693510564f1ed71"], 0x15) 3.389121772s ago: executing program 8 (id=1327): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0078c345b90000", @ANYRES16=r2, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400a00e08000600", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x3, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xa0602, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES16=r5, @ANYRES64=r6], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r7 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r7, &(0x7f0000002440)=""/181, 0xb5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1bb2512b86180a81, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, 0xfffffffffffffffe) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x6, 0x2b, 0x8003, 0x0, 0x1, 0x6, 0x40007, 0x4fd27d96, 0x4}, 0x0) fsopen(&(0x7f0000000280)='pipefs\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000002840)=ANY=[@ANYBLOB="2c0400001b0001002bbd7000fddbdf25ac1e0101000000000000000000000000ff0200000000000000000000000000014e2100054e2100020a00800042000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000002140)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x148}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.17876972s ago: executing program 0 (id=1329): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r9, 0x0, 0x0}, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024392d5204c05c3067aeb010203010902240001088770070904cb01024f3eafb509059302000409052e09058802"], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv4_deladdr={0x30, 0x15, 0x2, 0x70bd26, 0x25dfdbfb, {0x2, 0x8, 0x5b, 0xfd, r2}, [@IFA_ADDRESS={0x8, 0x1, @local}, @IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008845}, 0x0) 2.554771397s ago: executing program 1 (id=1330): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x21}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007729042024040199beb3a4c403010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x4, "0300253f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 2.470126143s ago: executing program 5 (id=1331): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0xb, @mcast2, 0x800}}, 0x443b, 0x5, 0x9, 0x5, 0x5, 0x3, 0xc8}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x0, 0x4e, 0x0, 0xfffffffc}, 0x28) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x8800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r5, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x6b) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r6 = syz_io_uring_setup(0x7e, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f00000001c0)=0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 2.387090509s ago: executing program 8 (id=1333): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\x\xacK-^{', 0x3a, './file1', 0x3a, [0x0, 0x43, 0x50]}, 0x40) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x0, 0x3, {0xa, 0x4e24, 0x6, @private2, 0x4}}}, 0x3a) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800cb0e2a4300002e00090027bd7000000000000400000004001e000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000fdc1a88d00", @ANYRES16=r8, @ANYBLOB="01002cbd701004000000050000000800110001000000080009000200000008000a000400000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x7}, 0x0) 2.178168426s ago: executing program 6 (id=1336): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x39b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x58}}, 0x8001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x28, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x49}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) socketpair(0x29, 0x2, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000400)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000005c0)={0x1, 0x1, 0x2, 0x6, @vifc_lcl_ifindex=r8, @private=0xa010101}, 0x10) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000600)) connect$unix(r0, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1fc, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x5d1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x88}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xff}, @NL80211_ATTR_IE={0x76, 0x2a, [@tim={0x5, 0x60, {0x7f, 0x4d, 0x1, "051e2dfd70c1d5be6b2fd6ac975d3f036ba54afbc5ee1b4dbda8928420c852939d105510e181a9f56151bf5aa2686f4746b4826765b5f1632b0a3029d190c181170ca7034d9f7fa11406682f1cc3471021fab2ee9faeb24e62baef107f"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @cf={0x4, 0x6, {0x6, 0x8, 0x1, 0x8}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @supported_rates]}, @NL80211_ATTR_IE={0x121, 0x2a, [@challenge={0x10, 0x1, 0xc3}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0xc3, {0x8, 0x34, 0x10, "724e8a28b9b7231713b7d263e3052ce9f40daafcd2835bc5041067824ed32ad0222ff4ab748c3de41fb8e6f14fac15fc511f632fdc1c4a7288f06cdc015db5cead99decd1700aa175b0c9259a4f0ba3ab7c2257807363c642cf467a91e9dfd1a02702551e55601ff2c654ed29c531c712e88de9746f4a082e4b0948e6d8fe622a81e2ce1ab84c42c80b953e57bf678954802bf30bcc46cfec5140c5f21cbfb4a3d54e6fbe8594fa8c1f5d39ce6e8e00ccfa8c333b9f883d7058a5925822c7e51"}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x0, 0x0, {0x7, 0x40, 0x0, 0x10, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x2, 0x9}}, @challenge={0x10, 0x1, 0xe8}, @measure_req={0x26, 0x24, {0x0, 0xf7, 0x1, "fd2810ccd590577e94ddd5a3c39aa801577ceabc5ed5d1a7249d18f0cefd578759"}}, @cf={0x4, 0x6, {0x4, 0x0, 0x1, 0x2}}]}, @NL80211_ATTR_IE={0x2b, 0x2a, [@cf={0x4, 0x6, {0x5, 0xc, 0x0, 0xd2fe}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x1, 0x1, @broadcast, 0x200, 0x4, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x24000001}, 0x8010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x2000)=nil) r9 = semget(0x0, 0x1, 0x20) semctl$IPC_STAT(r9, 0x0, 0x2, &(0x7f0000000b80)=""/192) r10 = syz_usb_connect(0x4, 0x742, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0x9f, 0x4c, 0x86, 0xff, 0x90a, 0x1050, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x730, 0x2, 0x8, 0x2, 0x10, 0x3, [{{0x9, 0x4, 0xcb, 0x7f, 0x10, 0xd5, 0x57, 0x3c, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "3186"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x3, 0x8, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0x3}, @obex={0x5, 0x24, 0x15, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x401, 0x8, 0x2, 0xf, 0x1, 0x6f}, @obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x2, 0x6, 0x1, 0x9, 0xb7}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x5, 0x1}]}], [{{0x9, 0x5, 0x8, 0x8, 0x400, 0xc, 0x5, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x10}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0xd, 0x5, 0x3, [@generic={0x42, 0x23, "96fe0298dae2335c03f487f463e91ca49a915a8cc5d9a0c79d94f758029c7fb9e04aa60de60785dbd914e09550ebb82f2d68e9a2b56cb06108e92501193a5546"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x1, 0x2, [@generic={0xbd, 0x7, "5465b285231498f517920ef2b1ca7bf16c086e6c55284177cc5ad8dda21c4876d72a88ba0643e27607d60c74936abfaf2f27c754048fbbfc8c7c004c7078026635c98f5e0a1858b3a6c0a84656c884ddf17536ee684f7276ae95a4e81ac3fc30ff4af3ad30aa1f9211c2890092e43411aa63b1bce302a8f34d3ecdd77989eacb1d69803769980949b184f2d952d975c7c462651e8d85c1319d5759b7a53d401b91314932d4363547460ba1e7c30ca6d4d01851107d6487eeba8979"}, @uac_iso={0x7, 0x25, 0x1, 0x83}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x81, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xda, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x80, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x74, 0x5, 0x8, [@generic={0xb5, 0x21, "79c338ea2d8a48b3ae0a2dbc228c9f084e75a2342c4357ab2509aef275f318f23fc25fb7ac05defc64bb6fd17e48c00c47ed48bb3d68ea6a5dda3006f6c58c4fe7777623d39cddf12e1f072610ef814eac446b252669d606751daf31dc84c4f5f674a1e59b9976488fec116145b078e02c364f9e0dc1d9ff2a6d2d333f1acdb36fe2ad1dfbb59a1d284a33416a3bc8e0a168cfce66c0c48da5501644a5bbfe6b1a8f89f98921b1d0955d6e6df12b60e843798f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x85, 0x1, 0x5a, [@generic={0xa5, 0x0, "9cd7048255e0ddf636762b277c6f7892c0662d6e97c211873f252c620d974cbf514a5def849f5f7d6184476804d78407debc9f8003e5a9a9d17b138bcfbec214755ffdc79ae0351d8de054773272b04f9c2a62a6216e5bda7ee059c59d1ecbe7121d5c3da18c2352bbb25e46e61793303e5f6253e9416090a32611d656e1afcf4bda910ea13fdda3cb8996718aa16b3a827197b234fe5ed3bcff493a721980ebb39edf"}]}}, {{0x9, 0x5, 0x80, 0x4, 0xc, 0xd, 0x20, 0x2}}, {{0x9, 0x5, 0x3cf8b0998d957eb6, 0x8, 0x200, 0x4, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0xc38}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x8, 0x1, 0x4}}, {{0x9, 0x5, 0x8, 0x7, 0x0, 0x16, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}, @generic={0xd0, 0xc, "219ceb135992944a9a39a9b4c214970569f3b2000d955e3d492cb1909ed845ede0216844b55f988257f128bb8eb1a262ccfe17919985eb540d280b568733e33a7703a1ca0c18bb983bf70a7b033cc25582cb2c1c66501321a52c2ad383580fd5859d4fdd2e9548855de293c92cc365d0d8b7082beca80046048b075ebd9649d963e4e5721d8eef3d178612c8c95b38b09d8f35205b24e28f6eee8f8323e58087957ad9e3766a8b7b5f4987967ef10c9db46389fd9abbb65919b5aff532ed61fdf85f6163beefb69c6da72e3c64dc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0x6d, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x1, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x7, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xaa, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x28, 0x48d8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x27, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}, @generic={0x50, 0x31, "a0c53b04e068d95f065692cb588b4fc63874be0d71cb1904d84de0f05c9ff1edd465bddf2ab2590aa574aa51c3677ac6ad4c738115aa3599969fa1b4d14cea9b6d25cd99c053e684001a7767dc4d"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x6, 0xe4, 0x5}}]}}, {{0x9, 0x4, 0x99, 0x4, 0x9, 0x44, 0x21, 0x9a, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0x9b}}], [{{0x9, 0x5, 0x5, 0x4, 0x10, 0xe7, 0x5, 0x4, [@generic={0x48, 0x11, "c8b16e0ab63962c48eca4b2db5488358d30c6f320544057a55a762b54e6e9705fac99ce8e8ca6d2562b750c3326b996c0986492d67fa4c09cdc38a0de0810c70efc1ad78dd8e"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x9, 0x0, 0xc2}}, {{0x9, 0x5, 0x5, 0x2, 0x0, 0x3, 0xf6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x6fb}, @generic={0x6b, 0x24, "b9bc7b1f29494b26ce12d8b048f909db7d02f127151c3fd66296fb0503fb8c27a4682618513ada95cc6ac07961b0ad6338863ce7e9af5a0b07f253aa42299e031ea4d839afecf76fc80ed168873a9ee0de777130c1404f1169790a6e36e8bc03f3460326087cd2c67c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xf8, 0xff, 0x1, [@generic={0x64, 0x9, "1e7909ac596fe86edb578028ab6f13695fe273c8146b98278918c867fefa46848cb8952d0353a1545eaa8568e29c406872406942bea371737a9e7d379bb675998ceae397d443b51b24adc10d38504c43fa5e850e3395962a5499c03cf6591f56c780"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x5, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0x0, 0x47, [@generic={0x84, 0x22, "b709ad308daa512a20b95365d4bfec5f3799be458d0bfcd793ddeddc6b28da2123e0f8eed90c0ea54b52b824ec45ad96f23caa9b45a13ce57e973e32f3e4dac3db76cf8edbc5ecc6d8092c9059eeb3a8ff13659d9adde774bc768ad46db764432328684f771770156ef65057a4627c2b7ecc5f8805a961a10be2c309c8d1cec13ff2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0xfc, 0xfb, 0x8}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0xc4, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x400}, @generic={0x56, 0x4, "404fb404de1b0c4738e23d2dfca30f3e54ad75f4ac90f7619135e7b9ee4c5a1b73a18c516e88026ab67690d3ce87239655d92c8a0a5a8c7dfdeec4418a8368c4c32618f415dd6fd65622a5a6b59d256532b69e25"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xd, 0x0, 0x9, [@generic={0xf, 0x1, "8a20f8cecb5dd7d2838cb6c6a3"}]}}]}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x201, 0x3, 0x80, 0x10, 0x8f, 0x9}, 0x269, &(0x7f0000001400)={0x5, 0xf, 0x269, 0x5, [@generic={0xfd, 0x10, 0xb, "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"}, @generic={0x89, 0x10, 0xa, "4a9ab85d1747f63b2d4d01a31297977a716b07a61ba985b24614ef2c53418926cd81b0a164e773f382b20f1015ecd3870240f902cb3bf4effd9fbafbef8205f6fbaecc3e516934acfadf574f6c57e69797024f65b3af8e0e8b7251aa1a5cdc3c667902b6dffc0655e581fd03bf28b97963a1e27f6fd2f11595c26fb8ffe0b3b6fb5fe54c610b"}, @generic={0xc4, 0x10, 0xb, "e5dd03d08384ae8f4403b3f132da480be22c9372a79888b342b5a7e4ef553d170a6b358db181dcd451031fbd5fb879823ba59af65ae5fbb86562584f016b040ee9c8cd194dec669ef83a8d68f005659422f434d6d5105e6d1e8d4e95a39f18e41714402b19c650c80c9fec6cea4aea4e8d6953574d633ea028050ec49a1d774b2ac91bf1effd7eb2e18e4ce5b38422fa995609fe8a86c5e0790b43c890174acdd42cd65e0c95b948ee7859d85d36760566a780d23e2202efdfdccdc3632647db60"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0xceb1, 0xf0f, 0x7, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x4c, 0x9154}]}, 0x1, [{0xce, &(0x7f0000001680)=@string={0xce, 0x3, "774dab706da1dd262ec40c6d5d41561987beffec844c261ef0cfb40e1ae6890eb43fb29888b153ec2d307240153a76376e5a7401f6ad11acc64a97a261ebf627999d267a7d543e027bf7a451e984d95a88dc32c943f845cc79282bd237e58b1298c62c42e7dbfcf60e70e8db620df95b4d01b6212afb0c7fbe00123912b3c38aa1af57220351a2f2dee451ba6822983c54336c4265585906875b45219c428f408e33102f8bd7a7795bb45fb273efa2bbd042abf5e06609853b682c4a3b5e67b01ca193fee3091d9baa820272"}}]}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0x90, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x90}, 0x1, 0x0, 0x0, 0x5}, 0x4000854) ppoll(&(0x7f0000001940), 0x0, &(0x7f0000001980), &(0x7f00000019c0)={[0x1]}, 0x8) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001a00), 0x84100, 0x0) ioctl$TFD_IOC_SET_TICKS(r11, 0x40085400, &(0x7f0000001a40)=0x1) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r12, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040044}, 0x20000800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000001bc0)=0xf, 0x4) syz_usb_control_io(r10, &(0x7f0000001dc0)={0x2c, &(0x7f0000001c00)={0x20, 0x9, 0x80, {0x80, 0x33, "b8493700443a17eec1485a4d867e78bf4b68e012b9d86a56934f9b0c669359386dcb4014fbebaae5fadc806d153d34d2eb13989edc38a52d6dce56ee0c571cad59fdfcb157bde42bf2b2c30a6b2d176415b66164491cc2fa61a3b0fc86676aedc6f5766630683a0b1df9e2bb66be8c4466fd2ca2632f34fc9649425e5f57"}}, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000001d00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3a, 0x18, 0x7f, 0xca, "e058b682", "dd4fe42e"}}, &(0x7f0000001d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0xf, 0x3, 0x5a, 0x81, 0x7f}}}, &(0x7f0000002240)={0x84, &(0x7f0000001e00)={0x20, 0x16, 0x79, "80d2c38889150d8f35d98ffec3b2149c72c552b40aa8d1304d62ef9fc215503d5d5b4f1b5e20ee74ad024c4e3056d6a193e07297b5ad8084109fff486443ff350998f484d9e53abc3849aab66d74839cf2351380ea0397c4ed12bd236eeea09f3be2ab8f8b20d1b93b001f1a0d2f7e7601232d945b2ab43894"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001f40)={0x20, 0x0, 0x8, {0x40, 0x40, [0xf0]}}, &(0x7f0000001f80)={0x40, 0x7, 0x2, 0x9910}, &(0x7f0000001fc0)={0x40, 0x9, 0x1, 0x4d}, &(0x7f0000002000)={0x40, 0xb, 0x2, "0eaa"}, &(0x7f0000002040)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000002080)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000020c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002100)={0x40, 0x19, 0x2, "ffed"}, &(0x7f0000002140)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000002180)={0x40, 0x1c, 0x1}, &(0x7f00000021c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002200)={0x40, 0x21, 0x1, 0x9}}) 1.510845559s ago: executing program 6 (id=1337): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="4399ffd800aed5b51c0012800b00010067726574617000000c00028008000700ffffffff0800040000050000"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 1.334679053s ago: executing program 6 (id=1338): socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 64) read$msr(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) (async, rerun: 64) listen(r4, 0x5) (async, rerun: 64) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x80800) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r6 = dup(r5) (async) r7 = socket(0xa, 0x3, 0xff) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x400c084) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0x11, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) fsopen(0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 1.066189115s ago: executing program 8 (id=1339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x48900, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) setresuid(0x0, 0xee00, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r9, 0x409, 0x7) 871.572037ms ago: executing program 6 (id=1340): prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000002c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000340)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000380)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000003c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000400)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000440)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000480)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000004c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000500)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000540)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000580)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000005c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000600)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000640)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000680)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000006c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000700)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000740)) 870.726587ms ago: executing program 1 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7151, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f0000000407000000000000000200000002000000020000f5ffffff030000000000000061"], &(0x7f0000000f40)=""/4110, 0x45, 0x100e, 0x9}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c00210100000000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="40a1ff020a000200aaaaaaaaaa1c"], 0x34}, 0x1, 0x0, 0x0, 0x48911}, 0x20000040) 770.740553ms ago: executing program 6 (id=1342): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x16000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001140)={'erspan0\x00', &(0x7f00000010c0)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0xfffffffb, 0x9, {{0x9, 0x4, 0x0, 0x29, 0x24, 0x66, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0xf, 0x18, [@empty, @multicast2, @multicast2]}]}}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x0, 0x5, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x9, 0x9, 0x4, 0x4, 0x8}]}, &(0x7f0000000fc0)='syzkaller\x00', 0x5, 0x81, &(0x7f0000001000)=""/129, 0x41100, 0x26, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000001180)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000011c0)=[r1], &(0x7f0000001200)=[{0x1, 0x2, 0x6, 0x4}, {0x3, 0x4, 0x9, 0x5}, {0x5, 0x2, 0x0, 0x5}, {0x5, 0x5, 0xa, 0x4c3ad619b733113c}], 0x10, 0x1}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000e80)={0x0, 0xfea1, 0x8, [0x4, 0xdb4, 0x8, 0x3, 0x0, 0x3d, 0x1, 0x0]}, &(0x7f0000000ec0)=0x18) ioctl$int_in(r3, 0x5452, &(0x7f0000001300)=0x6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000f00)={r4, 0x2}, &(0x7f0000000f40)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@orangefs={0x14, 0x1, {"308bc688ee1173dc995e8e257e447006"}}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000140)=0x84) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 246.221547ms ago: executing program 5 (id=1343): syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r6, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) r7 = fanotify_init(0x8, 0x800) sendmmsg$unix(r5, &(0x7f0000000500)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000540)="b494ee73b4dca471864b8a29f0a455e9fa255e5caf91874f05afe0df81dc62fce5354e89c03456ce1488becff2573ad8307a0c22b0b208080d393b0faffcbbc5825bc66a8b6ccd0c9e1b630fe44085adb108457552d7292adfb9820fde7b9ef1677131dd4dd09c9870767354eefbabf6c725a195063cecd6ba9170d97e79d3b6b254846e2aa237729ae026c0074404d6e221673c4c4ba67291634502de44d4a58a88fdbd91a15ca1306fa4010836251306255c84929f41d080e40e2b69e07ddeece891b709931e96332ce2b7ac5be78add9d97a506e5a56b8e", 0xd9}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2800000000020001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x8840}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0xc88c0, &(0x7f0000000840)={[{@uuid_on}, {@nfs_export_off}, {@index_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@uid_eq={'uid', 0x3d, r10}}]}) sendfile(r8, r9, 0x0, 0x10001) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a000400aaaaaa000000000000000000aaaaaaaa98aa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 244.045503ms ago: executing program 6 (id=1344): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x20a8, 0x0, r4}}, 0x40) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x3ff) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xdaf}}, './file0\x00'}) r8 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 208.8788ms ago: executing program 0 (id=1345): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) pipe(&(0x7f0000000080)) 107.370519ms ago: executing program 0 (id=1346): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x60040050) 106.455968ms ago: executing program 8 (id=1347): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x80000000000, &(0x7f0000006680)) (async) rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @p_u16=&(0x7f0000000040)=0x8}}) 64.925281ms ago: executing program 0 (id=1348): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x7803, 0x2, {"00000000000000000000000000000001"}, 0x8000, 0x100005, 0x1}}}, 0x90) recvfrom$inet6(r0, &(0x7f0000000080)=""/206, 0xce, 0x40000000, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000280)='|', 0x1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x9c21) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0xc, @vbi={0xf9d, 0x5, 0x0, 0x41416770, [0x8, 0x7fff], [0x8, 0x7], 0x1}}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x7803, 0x2, {"00000000000000000000000000000001"}, 0x8000, 0x100005, 0x1}}}, 0x90) (async) recvfrom$inet6(r0, &(0x7f0000000080)=""/206, 0xce, 0x40000000, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) (async) openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) write$binfmt_register(r4, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) sendto$inet6(r3, &(0x7f0000000280)='|', 0x1, 0x0, 0x0, 0x0) (async) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x9c21) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0xc, @vbi={0xf9d, 0x5, 0x0, 0x41416770, [0x8, 0x7fff], [0x8, 0x7], 0x1}}) (async) 0s ago: executing program 8 (id=1349): r0 = socket$inet6(0xa, 0xa, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x2000, 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xfffffff9}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={0xffffffffffffffff, 0x0, 0x6f, 0x1000, &(0x7f0000000100)="51652c343090d858335f88c29a297dd80c753cc8637a49128c9e56ef69452ef8dfeb629ad9cf411cb24daa674f9af3f1157d43bdd90d4538e1e4b0b2e5f2645846e195e6bc0cf9a98eac3351adf0aefa6331e97c46f032440880978bb2124924ccd8bf4883983ce3f11aff8b290491", &(0x7f0000000180)=""/4096, 0x3, 0x0, 0x33, 0xf, &(0x7f0000001180)="bd902ae5752b063a21616054e06a1489e0efdd968705583afdaee0dc6e5f7713ae71f68b7c9730ee172a1870cac13845ba6338", &(0x7f00000011c0)="0fa3b620921173fd9578c87833fd9f", 0x7, 0x0, 0xfffffffc}, 0x50) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000001280)=""/184, &(0x7f0000001340)=0xb8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vivid(&(0x7f0000001380), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000013c0)={0xf, 0x9, "f348a068e8fa55e6664f8ae670727c0088fcdf5bdfe2c8da2c948db14a15d49a", 0x100, 0x6, 0xe69, 0xb4, 0xa0}) accept$inet6(r0, 0x0, &(0x7f0000001440)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = syz_usb_connect$cdc_ncm(0x6, 0x141, &(0x7f00000014c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12f, 0x2, 0x1, 0x0, 0x80, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "975c162223"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xfe, 0x7, 0x200, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffa, 0xfc, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3, 0x7, 0x9}, @mdlm_detail={0xa1, 0x24, 0x13, 0x2, "6f5917d074e4e7305adc260dd77932dcdcf55b6f7ccdf7ee5ffb53ecaee5509a55b57bd251aec79ae97d7049db8e9170a83caf3562f3cd43c949953d0f0bdd5c9cdf076d89abe2047aa03c8998b858f204189efd2bf4fecf2d62419d20f50a22be5a245bfe001d3978345d10f665098c9d3dd55945b4088ffe14d89697adb37730d20eaea2257d7b4c3639acee51e76d78ae71dd533b4ce72b64ffb3a2"}, @call_mgmt={0x5, 0x24, 0x1, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xf, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7e, 0x5, 0x1}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x310, 0xaa, 0x8, 0x2, 0x40, 0xc9}, 0x19, &(0x7f0000001680)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "da9c886d63aeddf552e72c205d359e71"}]}, 0x7, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x200a}}, {0xc3, &(0x7f0000001740)=@string={0xc3, 0x3, "db3dd2e3be0921c0e362251a090972c5e54fe47f70568301c86bc92a22fa0b34587b01f7f9dd0ebcd9fbc1eff3e735caa4e3170216fe09a1a82cbeea3699c604940e84c4fb3568df247b66d2dd752de5f59ba181c1da661254163ee17aa19bf2d4175a6a1476f6357e98f02bc15d3cdad1003f39f32ac7e563aa8fa923674ffd7e563a96447d7354a4dd7aa5926936803eee1015abbe579e181671885efde81245fe69003bcb4b08c63602a741ffa94c7e56c980a275813f9796dadd5969ae5990"}}, {0x1b, &(0x7f0000001840)=@string={0x1b, 0x3, "83e84218fa0a381dabe60325eba4264efe16a89eaaaa7d55c0"}}, {0x50, &(0x7f0000001880)=@string={0x50, 0x3, "9c608189dab65a6a0d4bedf2c2dafd54e9e84187f3de0a9a31f0ef6a620024f49ccba4d5bfb9e7ab0587ef2afbc4a9f31a7a2d539d5323ac66383b8742a6353f66b5f3543db45ca591d6019c2de8"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000001940)=@string={0x4, 0x3, "d44f"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000001a80)={0x14, &(0x7f0000001a00)={0x20, 0xd, 0x16, {0x16, 0x9, "03aba96d11a4e2e8538981d4a20e0a6cbd6b8cf4"}}, &(0x7f0000001a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d00)={0x44, &(0x7f0000001ac0)={0x40, 0xf, 0x4d, "62e1d98d4bb6675e982c249a38f447005d9808a09f8971db9abb2b93dcf8850353b9b6113d3f1dadb111fcbfb8d03cd3ea4e4f1d76afe5558af4704654771832332b35b5491f10afad91564b4b"}, &(0x7f0000001b40)={0x0, 0xa, 0x1}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000001bc0)={0x20, 0x80, 0x1c, {0x3, 0x8, 0x5, 0x5, 0x401, 0x6, 0x7, 0x4, 0x0, 0x9, 0x6, 0x1}}, &(0x7f0000001c00)={0x20, 0x85, 0x4, 0x710}, &(0x7f0000001c40)={0x20, 0x83, 0x2}, &(0x7f0000001c80)={0x20, 0x87, 0x2, 0xcb6}, &(0x7f0000001cc0)={0x20, 0x89, 0x2, 0x1}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001d80), 0xb51003, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000001dc0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001e40)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000001ec0)={0x28, 0x2, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000001e80)}) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000001f00)={0x4e58, "6a2512485293bd991ee290ea292fcabe12a2b96de55e84bd4bac96cb2356f612", 0x800, 0x8, 0x8000, 0x1, 0x5}) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001f80), 0x8000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x2) flistxattr(r2, &(0x7f0000001fc0)=""/13, 0xd) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002140)={'gre0\x00', &(0x7f0000002040)={'syztnl1\x00', 0x0, 0x2b77aa6c5d3639f4, 0x80, 0x4912, 0x7, {{0x29, 0x4, 0x0, 0xa, 0xa4, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@rr={0x7, 0x27, 0x6e, [@private=0xa010101, @empty, @loopback, @loopback, @local, @broadcast, @broadcast, @loopback, @remote]}, @rr={0x7, 0x7, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x15, 0x2, [{0x7, 0x5, "414ef6"}, {0x6, 0xa, "50f42664958707b6"}]}, @timestamp={0x44, 0x8, 0xcf, 0x0, 0xc, [0x80000000]}, @rr={0x7, 0x17, 0x17, [@dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @empty, @rand_addr=0x64010102, @empty]}, @rr={0x7, 0x7, 0x67, [@remote]}, @timestamp={0x44, 0x24, 0x7f, 0x0, 0xc, [0x1, 0x7fffffff, 0x0, 0xfff, 0x1, 0x5, 0x1, 0x4]}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000002200)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)=@getchain={0x34, 0x66, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x10, 0x2}, {0x7, 0xfff3}, {0xa, 0x2}}, [{0x8}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xf, 0x5}, {0xc, 0xb}, {0x5, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000000) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002340), 0x10402, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r11, 0x3b71, &(0x7f0000002400)={0x20, 0x3, &(0x7f0000002380)="024d94f97a68fbf01f6ed26e075a771f30bfa0c3b9b319ca82d732f22e3fab4c39815808a0bdb4323367119a2d62a19b74c1abae767fbb0461cca25cb48969b150856b3976dfd5f0728513b4deba90ef067dc93b71da15594a16baf30dfb1b2b0bffbed4ab69462546a434649fb5", 0x5, 0x4}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002440)={0x1b, 0x0, 0x0, 0xf, 0x0, r9, 0x2b, '\x00', r10, r9, 0x1, 0x3, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0x19, 0x2, 0x2, 0x7, 0x80, r12, 0xff, '\x00', r10, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) kernel console output (not intermixed with test programs): [ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.795255][ T10] usb 9-1: config 0 descriptor?? [ 347.908866][T10943] netlink: 168 bytes leftover after parsing attributes in process `syz.7.891'. [ 347.910063][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 348.198851][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 348.229675][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 348.257402][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 348.274503][ T7248] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 348.290112][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 348.305684][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 348.313163][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 348.319972][ T30] audit: type=1400 audit(1766782970.160:672): avc: denied { watch watch_reads } for pid=10954 comm="syz.7.894" path="/110/file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 348.354349][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 348.361132][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 348.375139][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 348.392070][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 348.409208][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 348.432096][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 348.460551][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 348.467028][ T7248] usb 7-1: Using ep0 maxpacket: 8 [ 348.483709][ T7248] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 348.494703][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 348.509228][ T7248] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 348.517924][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 348.533878][ T7248] usb 7-1: Product: syz [ 348.538268][ T7248] usb 7-1: Manufacturer: syz [ 348.542949][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.553908][ T7248] usb 7-1: SerialNumber: syz [ 348.565475][ T10] pwc: Registered as video103. [ 348.574532][T10958] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1 [ 348.581894][ T7248] usb 7-1: config 0 descriptor?? [ 348.602969][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26 [ 348.627955][ T7248] usbtest 7-1:0.0: FX2 device [ 348.632638][ T7248] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 348.681737][ T10] usb 9-1: USB disconnect, device number 37 [ 348.851909][ T7248] usb 7-1: USB disconnect, device number 28 [ 349.063900][ T10] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 349.234326][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 349.250886][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 349.276566][ T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 349.304070][ T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 349.312440][ T10] usb 9-1: Product: syz [ 349.323960][ T10] usb 9-1: Manufacturer: syz [ 349.332354][ T10] usb 9-1: SerialNumber: syz [ 349.345995][ T10] usb 9-1: config 0 descriptor?? [ 349.354604][T10955] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 349.483908][ T6924] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 349.619676][ T5925] usb 9-1: USB disconnect, device number 38 [ 349.633955][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.657487][ T6924] usb 1-1: Using ep0 maxpacket: 32 [ 349.694704][ T6924] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.730900][ T1000] bridge_slave_1: left allmulticast mode [ 349.751307][ T6924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 349.759526][ T1000] bridge_slave_1: left promiscuous mode [ 349.780205][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.788237][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.798114][ T6924] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 349.808569][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.819007][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.827920][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.835364][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.844071][ T6924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.855777][ T6924] usb 1-1: config 0 descriptor?? [ 349.882985][ T1000] bridge_slave_0: left allmulticast mode [ 349.897349][ T1000] bridge_slave_0: left promiscuous mode [ 349.916698][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.081898][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.092091][ T30] audit: type=1400 audit(1766782971.940:673): avc: denied { write } for pid=10984 comm="syz.6.903" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 350.129486][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.145117][ T1000] bridge0 (unregistering): left promiscuous mode [ 350.483028][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.646159][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.657966][ T1000] bond0 (unregistering): Released all slaves [ 350.673949][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.713124][ T1000] hsr_slave_0: left promiscuous mode [ 351.718553][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.752044][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.771317][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.874597][ T5822] Bluetooth: hci1: command tx timeout [ 352.166250][ T30] audit: type=1400 audit(1766782974.020:674): avc: denied { map } for pid=11019 comm="syz.5.910" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 352.574244][ T6556] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 352.658891][ T6924] usbhid 1-1:0.0: can't add hid device: -71 [ 352.667156][ T6924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 352.691090][ T6924] usb 1-1: USB disconnect, device number 30 [ 352.753946][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.777646][ T6556] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.810841][ T6556] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.845339][ T6556] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.875059][ T6556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.895318][ T6556] usb 9-1: SerialNumber: syz [ 353.045058][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 353.127922][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 353.296995][ C1] raw-gadget.2 gadget.8: ignoring, device is not running [ 353.312767][ T6556] usb 9-1: 0:2 : does not exist [ 353.349629][ T6556] usb 9-1: USB disconnect, device number 39 [ 353.422992][ T8010] udevd[8010]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.793923][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.830769][T11050] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 353.954119][ T5822] Bluetooth: hci1: command tx timeout [ 354.312068][T10986] chnl_net:caif_netlink_parms(): no params data found [ 354.347780][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 354.439374][T10986] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.448710][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.450917][T11068] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.919'. [ 354.456409][T10986] bridge_slave_0: entered allmulticast mode [ 354.457950][T10986] bridge_slave_0: entered promiscuous mode [ 354.477127][T11068] openvswitch: netlink: Message has 8 unknown bytes. [ 354.483033][T10986] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.493088][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.500173][T10986] bridge_slave_1: entered allmulticast mode [ 354.506968][T10986] bridge_slave_1: entered promiscuous mode [ 354.560786][T10986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.578613][T10986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.609561][T10986] team0: Port device team_slave_0 added [ 354.617601][T10986] team0: Port device team_slave_1 added [ 354.639889][T10986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.646893][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.676089][T10986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.689798][T10986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.697836][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.728936][T10986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.833904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.039312][T10986] hsr_slave_0: entered promiscuous mode [ 355.056007][T10986] hsr_slave_1: entered promiscuous mode [ 355.063551][T10986] debugfs: 'hsr0' already exists in 'hsr' [ 355.070508][T10986] Cannot create hsr debugfs directory [ 355.109345][T11086] ptrace attach of "./syz-executor exec"[7266] was attempted by "./syz-executor exec"[11086] [ 355.375338][T11090] vlan2: entered promiscuous mode [ 355.391236][T11090] vlan2: entered allmulticast mode [ 355.410033][T11090] hsr_slave_1: entered allmulticast mode [ 355.883905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.045501][ T5822] Bluetooth: hci1: command tx timeout [ 356.051235][ T30] audit: type=1400 audit(1766782977.900:675): avc: denied { bind } for pid=11094 comm="syz.8.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.153611][T10986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.182856][T10986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.225169][ T30] audit: type=1400 audit(1766782978.080:676): avc: denied { attach_queue } for pid=11100 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 356.245807][T10986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.261834][T10986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.322937][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 356.322937][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 356.322958][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 356.331737][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 356.331759][T11102] netlink: 'syz.0.928': attribute type 12 has an invalid length. [ 356.331777][T11102] netlink: 'syz.0.928': attribute type 11 has an invalid length. [ 356.373790][T11101] netlink: 'syz.0.928': attribute type 12 has an invalid length. [ 356.381681][T11101] netlink: 'syz.0.928': attribute type 11 has an invalid length. [ 356.427629][T10986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.446197][ T7248] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 356.449778][T10986] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.475166][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.482231][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.492334][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.499409][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.523933][ T10] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 356.584095][ T7248] usb 7-1: device descriptor read/64, error -71 [ 356.695583][ T10] usb 9-1: config 39 has an invalid interface number: 32 but max is 0 [ 356.717327][ T10] usb 9-1: config 39 has no interface number 0 [ 356.726648][ T10] usb 9-1: config 39 interface 32 has no altsetting 0 [ 356.747937][ T10] usb 9-1: New USB device found, idVendor=0738, idProduct=1f5e, bcdDevice=ae.6a [ 356.767679][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 356.775204][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.777053][T10986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.784513][ T10] usb 9-1: Product: syz [ 356.784531][ T10] usb 9-1: Manufacturer: syz [ 356.784546][ T10] usb 9-1: SerialNumber: syz [ 356.834334][ T7248] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 356.848529][ T30] audit: type=1400 audit(1766782978.700:677): avc: denied { bind } for pid=11122 comm="syz.5.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 356.872113][T11123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11123 comm=syz.5.931 [ 356.898297][ T30] audit: type=1400 audit(1766782978.750:678): avc: denied { ioctl } for pid=11122 comm="syz.5.931" path="socket:[32695]" dev="sockfs" ino=32695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 356.898689][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 356.923893][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.942623][T10986] veth0_vlan: entered promiscuous mode [ 356.952005][T10986] veth1_vlan: entered promiscuous mode [ 356.960818][T11123] sit0: Master is either lo or non-ether device [ 356.987703][T10986] veth0_macvtap: entered promiscuous mode [ 356.994748][ T7248] usb 7-1: device descriptor read/64, error -71 [ 357.006332][T10986] veth1_macvtap: entered promiscuous mode [ 357.018675][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.026166][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.933'. [ 357.036387][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.050319][ T10] hub 9-1:39.32: bad descriptor, ignoring hub [ 357.057097][ T10] hub 9-1:39.32: probe with driver hub failed with error -5 [ 357.071606][T10986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.095718][ T10] usb 9-1: USB disconnect, device number 40 [ 357.102349][T10986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.110927][ T7248] usb usb7-port1: attempt power cycle [ 357.127945][ T6469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.137030][ T6556] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 357.145321][ T6469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.169451][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.182212][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.255556][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.267764][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.290462][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.299617][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.311005][ T6556] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 357.327822][ T6556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.354414][ T6556] usb 1-1: Product: syz [ 357.358581][ T6556] usb 1-1: Manufacturer: syz [ 357.363162][ T6556] usb 1-1: SerialNumber: syz [ 357.381892][T11137] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 357.388387][T11137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.402497][T11137] vhci_hcd vhci_hcd.0: Device attached [ 357.454332][ T7248] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 357.474061][ T6924] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 357.477679][ T7248] usb 7-1: device descriptor read/8, error -71 [ 357.577991][ T30] audit: type=1400 audit(1766782979.430:679): avc: denied { mounton } for pid=11124 comm="syz.0.932" path="/139/file0" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 357.618464][ T6556] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 357.629519][ T6556] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 357.641368][ T5925] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 357.645736][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 357.651618][ T6556] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 357.679423][T11142] input: syz0 as /devices/virtual/input/input27 [ 357.688452][ T6924] usb 6-1: too many configurations: 33, using maximum allowed: 8 [ 357.698290][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.935'. [ 357.708146][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 357.718216][ T6924] usb 6-1: config 0 has no interface number 0 [ 357.734590][ T7248] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 357.735000][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 357.753399][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 357.767291][ T6556] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 357.777543][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 357.778453][ T7248] usb 7-1: device descriptor read/8, error -71 [ 357.795233][ T6556] usb 1-1: USB disconnect, device number 31 [ 357.803903][ T10] usb 2-1: device descriptor read/64, error -71 [ 357.824246][ T6556] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 357.850003][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 357.863377][ T6556] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 357.875258][ T6924] usb 6-1: config 0 has no interface number 0 [ 357.881340][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 357.892766][ T6556] visor 1-1:1.0: device disconnected [ 357.899736][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 357.914063][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 357.921399][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 357.931106][ T6924] usb 6-1: config 0 has no interface number 0 [ 357.937617][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 357.948963][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 357.954292][ T7248] usb usb7-port1: unable to enumerate USB device [ 357.963203][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 357.968468][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.983148][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 357.991385][ T24] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 357.999159][ T6924] usb 6-1: config 0 has no interface number 0 [ 358.005678][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 358.016861][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 358.030025][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 358.038657][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 358.046904][ T6924] usb 6-1: config 0 has no interface number 0 [ 358.052979][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 358.053931][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 358.064623][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 358.085591][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 358.092895][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 358.100923][ T6924] usb 6-1: config 0 has no interface number 0 [ 358.107046][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 358.120307][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 358.123956][ T5822] Bluetooth: hci1: command tx timeout [ 358.133537][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 358.147597][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 358.155881][ T6924] usb 6-1: config 0 has no interface number 0 [ 358.161937][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 358.173188][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 358.186867][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 358.195127][ T10] usb 2-1: device descriptor read/64, error -71 [ 358.203701][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.211752][ T24] usb 9-1: config 0 has no interface number 0 [ 358.218901][ T6924] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 358.227078][ T6924] usb 6-1: config 0 has no interface number 0 [ 358.233177][ T6924] usb 6-1: too many endpoints for config 0 interface 3 altsetting 77: 170, using maximum allowed: 30 [ 358.245082][ T6924] usb 6-1: config 0 interface 3 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 358.258570][ T6924] usb 6-1: config 0 interface 3 has no altsetting 0 [ 358.265737][ T24] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 358.275936][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.285909][ T24] usb 9-1: Product: syz [ 358.290074][ T24] usb 9-1: Manufacturer: syz [ 358.294979][ T24] usb 9-1: SerialNumber: syz [ 358.300599][ T6924] usb 6-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 358.313622][ T6924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.314472][ T10] usb usb2-port1: attempt power cycle [ 358.321671][ T6924] usb 6-1: Product: syz [ 358.331464][ T6924] usb 6-1: Manufacturer: syz [ 358.336840][ T24] usb 9-1: config 0 descriptor?? [ 358.342706][ T6924] usb 6-1: SerialNumber: syz [ 358.349047][ T24] usb 9-1: selecting invalid altsetting 1 [ 358.356691][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 358.363550][ T6924] usb 6-1: config 0 descriptor?? [ 358.369415][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 358.420452][ T24] DVB: Unable to find symbol stv0299_attach() [ 358.475268][ T24] DVB: Unable to find symbol tda8083_attach() [ 358.481337][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 358.536046][T11148] kvm_intel: kvm [11147]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 358.554878][ T5924] usb 9-1: USB disconnect, device number 41 [ 358.586744][ T6924] go7007-loader 6-1:0.3: can't handle multiple config [ 358.593489][ T6924] go7007-loader 6-1:0.3: probe failed [ 358.599645][ T30] audit: type=1400 audit(1766782980.430:680): avc: denied { name_bind } for pid=11131 comm="syz.5.934" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 358.648148][ T6924] usb 6-1: USB disconnect, device number 40 [ 358.684938][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 358.714733][ T10] usb 2-1: device descriptor read/8, error -71 [ 358.964955][ T6924] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 358.976146][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 359.004437][ T10] usb 2-1: device descriptor read/8, error -71 [ 359.115870][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 5440, setting to 64 [ 359.128540][ T10] usb usb2-port1: unable to enumerate USB device [ 359.131366][ T6924] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 359.169690][ T6924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.191527][ T6924] usb 1-1: Product: syz [ 359.198734][ T6924] usb 1-1: Manufacturer: syz [ 359.203490][ T6924] usb 1-1: SerialNumber: syz [ 359.240848][ T6924] usb 1-1: config 0 descriptor?? [ 359.255571][T11150] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 359.274524][T11159] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 359.474247][ T5924] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 359.482023][ T6924] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 359.667309][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 359.688918][ T5924] usb 6-1: can't read configurations, error -61 [ 359.834690][ T5924] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 359.973999][ T6924] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 359.996301][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 360.020083][ T5924] usb 6-1: can't read configurations, error -61 [ 360.027468][ T5924] usb usb6-port1: attempt power cycle [ 360.033923][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.153937][ T6924] usb 7-1: Using ep0 maxpacket: 16 [ 360.163820][ T6924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.186793][ T6924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.213897][ T6924] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.257905][ T6924] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 360.286472][ T6924] usb 7-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 360.323896][ T6924] usb 7-1: Manufacturer: syz [ 360.343173][ T6924] usb 7-1: config 0 descriptor?? [ 360.366374][ T5924] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 360.420776][T11139] vhci_hcd: connection reset by peer [ 360.428405][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 360.436995][ T66] usb 1-1: Failed to submit usb control message: -110 [ 360.448801][ T5924] usb 6-1: can't read configurations, error -61 [ 360.456225][ T6579] vhci_hcd vhci_hcd.1: stop threads [ 360.463994][ T66] usb 1-1: unable to send the bmi data to the device: -110 [ 360.471194][ T66] usb 1-1: unable to get target info from device [ 360.471847][ T6579] vhci_hcd vhci_hcd.1: release socket [ 360.494283][ T6579] vhci_hcd vhci_hcd.1: disconnect device [ 360.522683][ T66] usb 1-1: could not get target info (-110) [ 360.532799][ T66] usb 1-1: could not probe fw (-110) [ 360.585286][ T5924] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 360.603998][T11170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.629465][T11170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.649308][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 360.773636][ T5924] usb 6-1: can't read configurations, error -61 [ 360.784648][ T5924] usb usb6-port1: unable to enumerate USB device [ 360.792637][ T6924] usbhid 7-1:0.0: can't add hid device: -71 [ 360.808158][ T6924] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 360.830140][ T6924] usb 7-1: USB disconnect, device number 33 [ 361.083904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.822591][ T30] audit: type=1400 audit(1766782983.670:681): avc: denied { ioctl } for pid=11196 comm="syz.6.951" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 362.113909][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.314676][ T6924] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 362.507715][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 362.524480][ T7248] usb 1-1: USB disconnect, device number 32 [ 362.529349][ T6924] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 362.565639][ T6924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.581134][ T6924] usb 9-1: config 0 descriptor?? [ 362.678963][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 362.699900][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.719839][ T10] usb 7-1: Product: syz [ 362.733871][ T10] usb 7-1: Manufacturer: syz [ 362.738516][ T10] usb 7-1: SerialNumber: syz [ 362.795225][ T5925] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 362.860681][ T6924] hackrf 9-1:0.0: usb_control_msg() failed -71 request 0f [ 362.877500][ T6924] hackrf 9-1:0.0: Could not detect board [ 362.887041][ T6924] hackrf 9-1:0.0: probe with driver hackrf failed with error -71 [ 362.905990][T10047] Process accounting resumed [ 362.934112][ T6924] usb 9-1: USB disconnect, device number 42 [ 363.042187][T11224] __nla_validate_parse: 1 callbacks suppressed [ 363.042202][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'. [ 363.074199][T11224] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 363.153916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.228492][T11228] netlink: 'syz.8.960': attribute type 10 has an invalid length. [ 363.246888][T11228] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 363.264913][T11231] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 363.282035][T11228] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 363.385398][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 363.438274][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 363.477713][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 363.509806][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 363.540060][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 363.555447][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 363.578877][ T10] usb 7-1: USB disconnect, device number 34 [ 363.958018][T11254] netlink: 40 bytes leftover after parsing attributes in process `syz.8.970'. [ 364.193890][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.254246][ T5924] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 364.413880][ T5924] usb 9-1: Using ep0 maxpacket: 8 [ 364.420125][ T5924] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 364.431645][ T5924] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 364.442334][ T5924] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.452257][ T5924] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.465497][ T5924] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 364.474719][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.562453][T11262] blktrace: Concurrent blktraces are not allowed on nullb0 [ 364.652842][T11266] bridge0: port 3(gretap0) entered blocking state [ 364.659647][T11266] bridge0: port 3(gretap0) entered disabled state [ 364.667317][T11266] gretap0: entered allmulticast mode [ 364.676334][T11266] gretap0: entered promiscuous mode [ 364.700657][ T5924] usb 9-1: GET_CAPABILITIES returned 0 [ 364.710258][ T5924] usbtmc 9-1:16.0: can't read capabilities [ 364.743759][T11270] random: crng reseeded on system resumption [ 364.760982][T11270] Hibernate inconsistent memory map detected! [ 364.767982][T11270] PM: hibernation: Image mismatch: architecture specific data [ 364.788572][ T30] audit: type=1400 audit(1766782986.640:682): avc: denied { read write } for pid=11267 comm="syz.6.976" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 364.821265][ T30] audit: type=1400 audit(1766782986.660:683): avc: denied { open } for pid=11267 comm="syz.6.976" path="/142/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 364.846777][ T30] audit: type=1400 audit(1766782986.660:684): avc: denied { ioctl } for pid=11267 comm="syz.6.976" path="/142/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 364.900123][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 364.911344][T11258] usbtmc 9-1:16.0: Unable to send data, error -71 [ 364.920161][T10047] usb 9-1: USB disconnect, device number 43 [ 364.977866][ T30] audit: type=1400 audit(1766782986.830:685): avc: denied { accept } for pid=11274 comm="syz.6.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.984394][T11276] sg_write: data in/out 1530911619/2 bytes for SCSI command 0x8e-- guessing data in; [ 364.984394][T11276] program syz.0.978 not setting count and/or reply_len properly [ 365.244000][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.320005][ T30] audit: type=1400 audit(1766782987.170:686): avc: denied { connect } for pid=11284 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 365.516437][T11289] syzkaller0: entered promiscuous mode [ 365.521923][T11289] syzkaller0: entered allmulticast mode [ 365.532991][ T30] audit: type=1400 audit(1766782987.380:687): avc: denied { map } for pid=11290 comm="syz.8.985" path="/dev/sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 365.578396][T11291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.713905][ T5822] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 365.713923][ T5818] Bluetooth: hci2: command 0x1003 tx timeout [ 365.833298][T11299] overlayfs: failed to get inode (-116) [ 365.855906][T11299] overlayfs: failed to get inode (-116) [ 365.896012][T11300] overlayfs: failed to get inode (-116) [ 365.934123][T11300] overlayfs: failed to get inode (-116) [ 366.002509][T11303] Bluetooth: MGMT ver 1.23 [ 366.058094][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 366.284073][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.554130][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 366.733995][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 366.761043][ T10] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 366.801849][ T10] usb 1-1: config 0 has no interface number 0 [ 366.818313][ T10] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.854535][ T30] audit: type=1400 audit(1766782988.710:688): avc: denied { bind } for pid=11335 comm="syz.8.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.863084][ T10] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 366.903897][ T10] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 366.947317][ T10] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 367.006334][ T10] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.056191][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 367.094164][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.129163][ T10] usb 1-1: Product: syz [ 367.137856][ T10] usb 1-1: Manufacturer: syz [ 367.142452][ T10] usb 1-1: SerialNumber: syz [ 367.177481][ T10] usb 1-1: config 0 descriptor?? [ 367.313922][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.419538][ T10] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 367.635086][ T10] usb 1-1: USB disconnect, device number 33 [ 367.945297][T11365] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 367.945297][T11365] program syz.8.1015 not setting count and/or reply_len properly [ 368.014432][T11369] syzkaller0: entered promiscuous mode [ 368.042857][T11369] syzkaller0: entered allmulticast mode [ 368.105460][T11372] syzkaller0: entered promiscuous mode [ 368.110912][T11372] syzkaller0: entered allmulticast mode [ 368.353895][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.470574][T11393] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 368.480829][T11393] netlink: 'syz.8.1030': attribute type 10 has an invalid length. [ 368.503398][T11393] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 368.512264][T11393] netlink: 'syz.8.1030': attribute type 2 has an invalid length. [ 368.576774][ T30] audit: type=1400 audit(1766782990.430:689): avc: denied { remount } for pid=11399 comm="syz.8.1032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 368.604296][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 368.737819][ T374] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 368.744140][ T5924] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 368.793957][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 368.800867][ T10] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.811478][ T10] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 368.822112][ T10] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.838205][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 368.847276][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 368.856944][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.868274][ T10] usb 7-1: Product: syz [ 368.872476][ T10] usb 7-1: Manufacturer: syz [ 368.878051][ T10] usb 7-1: SerialNumber: syz [ 368.905103][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 368.919459][ T5924] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 368.932894][ T5924] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 368.944856][ T5924] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.956308][ T5924] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 368.971507][ T5924] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 368.980915][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.990217][ T5924] usb 2-1: Product: syz [ 369.017797][ T5924] usb 2-1: Manufacturer: syz [ 369.022459][ T5924] usb 2-1: SerialNumber: syz [ 369.040474][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 369.053309][ T5924] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input28 [ 369.099478][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 369.136473][T11417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11417 comm=syz.8.1037 [ 369.254399][ T5924] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 369.262803][ T5924] (id 0x00) [ 369.302248][ T30] audit: type=1400 audit(1766782991.150:690): avc: denied { read write } for pid=11384 comm="syz.6.1024" name="lp0" dev="devtmpfs" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 369.329257][ T5924] rc_core: IR keymap rc-imon-pad not found [ 369.337753][ T5925] usb 7-1: USB disconnect, device number 35 [ 369.345390][ T5924] Registered IR keymap rc-empty [ 369.354406][ T5925] usblp0: removed [ 369.358995][ T5924] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 369.375992][ T30] audit: type=1400 audit(1766782991.180:691): avc: denied { open } for pid=11384 comm="syz.6.1024" path="/dev/usb/lp0" dev="devtmpfs" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 369.406504][ T5924] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 369.417633][ T30] audit: type=1400 audit(1766782991.180:692): avc: denied { ioctl } for pid=11384 comm="syz.6.1024" path="/dev/usb/lp0" dev="devtmpfs" ino=3587 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 369.465240][ T5924] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 369.518102][ T5924] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input29 [ 369.548663][ T5924] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:21> initialized [ 369.675473][T11396] imon:send_packet: task interrupted [ 369.697676][T11396] imon:send_packet: packet tx failed (-512) [ 369.711115][T11396] imon:vfd_write: send packet #0 failed [ 369.718324][T11396] imon:send_packet: task interrupted [ 369.731513][T11396] imon:send_packet: packet tx failed (-512) [ 369.747091][T11396] imon:vfd_write: send packet #0 failed [ 369.753016][T11396] imon:send_packet: task interrupted [ 369.758535][T11396] imon:send_packet: packet tx failed (-512) [ 369.765188][T11396] imon:vfd_write: send packet #0 failed [ 369.771050][T11396] imon:send_packet: task interrupted [ 369.782089][T11396] imon:send_packet: packet tx failed (-512) [ 369.795969][T11396] imon:vfd_write: send packet #0 failed [ 369.804869][T11396] imon:send_packet: task interrupted [ 369.811161][T11396] imon:send_packet: packet tx failed (-512) [ 369.817948][T11396] imon:vfd_write: send packet #0 failed [ 369.824946][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1040'. [ 369.835167][T11396] imon:send_packet: task interrupted [ 369.840498][T11396] imon:send_packet: packet tx failed (-512) [ 369.846885][T11396] imon:vfd_write: send packet #0 failed [ 369.853017][T11396] imon:send_packet: task interrupted [ 369.858906][ T30] audit: type=1400 audit(1766782991.700:693): avc: denied { setopt } for pid=11426 comm="syz.8.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.885214][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1040'. [ 369.900294][T11396] imon:send_packet: packet tx failed (-512) [ 369.914859][T11396] imon:vfd_write: send packet #0 failed [ 369.920769][T11396] imon:send_packet: task interrupted [ 369.937767][T11396] imon:send_packet: packet tx failed (-512) [ 369.975042][T11396] imon:vfd_write: send packet #0 failed [ 369.987218][T11396] imon:send_packet: packet tx failed (-32) [ 369.999936][T11396] imon:vfd_write: send packet #0 failed [ 370.027626][ T10] usb 2-1: USB disconnect, device number 21 [ 370.271187][T11440] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 370.271187][T11440] program syz.1.1046 not setting count and/or reply_len properly [ 370.443927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.476296][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 370.537218][ T10] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.046274][T11465] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 371.046274][T11465] program syz.0.1055 not setting count and/or reply_len properly [ 371.166628][T11471] vlan0: entered promiscuous mode [ 371.233707][T11471] team0: Port device vlan0 added [ 371.473893][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.814052][ T30] audit: type=1400 audit(1766782993.670:694): avc: denied { read } for pid=11488 comm="syz.0.1064" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 372.246197][T11500] 9pnet_virtio: no channels available for device syz [ 372.368886][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1069'. [ 372.513909][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.521927][T11505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11505 comm=syz.6.1070 [ 372.548917][T11505] netlink: 'syz.6.1070': attribute type 1 has an invalid length. [ 372.608649][T11505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.649515][T11510] team0: Port device dummy0 removed [ 372.654967][T11489] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.665187][T11510] dummy0: left promiscuous mode [ 372.672499][T11510] bond0: (slave dummy0): making interface the new active one [ 372.676893][T11489] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 372.680753][ T5822] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 372.694311][T11510] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 372.726142][T11489] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 372.782135][T11489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.804541][T11489] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 372.820181][T11489] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 373.099294][ T30] audit: type=1400 audit(1766782994.950:695): avc: denied { setattr } for pid=11529 comm="syz.1.1079" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 373.553965][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.587205][T11590] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1102'. [ 374.603901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.793986][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 374.843975][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.633891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.673900][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.963914][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.969949][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.713904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.753905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.003910][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 379.024778][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.031062][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.843905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.874113][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.350185][T11613] sock: sock_timestamping_bind_phc: sock not bind to device [ 382.913915][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.146956][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1124'. [ 383.237940][T11636] can0: slcan on ttyS3. [ 383.335784][T11636] can0 (unregistered): slcan off ttyS3. [ 383.446197][ T4045] Bluetooth: hci2: Frame reassembly failed (-90) [ 383.618359][ T6410] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 383.783885][T10048] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 383.784351][ T6410] usb 7-1: not running at top speed; connect to a high speed hub [ 383.834472][ T6410] usb 7-1: config 10 has an invalid interface number: 3 but max is 2 [ 383.852359][ T6410] usb 7-1: config 10 has an invalid interface number: 232 but max is 2 [ 383.883873][ T6410] usb 7-1: config 10 has an invalid interface number: 30 but max is 2 [ 383.892365][ T6410] usb 7-1: config 10 has 4 interfaces, different from the descriptor's value: 3 [ 383.916341][ T6410] usb 7-1: config 10 has no interface number 0 [ 383.922499][ T6410] usb 7-1: config 10 has no interface number 1 [ 383.963889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.965868][ T6410] usb 7-1: config 10 interface 3 altsetting 144 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 383.974851][T10048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.003876][ T6410] usb 7-1: config 10 interface 3 altsetting 144 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 384.034328][ T6410] usb 7-1: config 10 interface 3 altsetting 144 has a duplicate endpoint with address 0x9, skipping [ 384.063934][T10048] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 384.064547][ T6410] usb 7-1: config 10 interface 232 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.105079][T10048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.134228][ T6410] usb 7-1: too many endpoints for config 10 interface 2 altsetting 15: 207, using maximum allowed: 30 [ 384.137142][T10048] usb 1-1: config 0 descriptor?? [ 384.163441][ T6410] usb 7-1: config 10 interface 2 altsetting 15 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 384.180341][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1131'. [ 384.190317][ T6410] usb 7-1: config 10 interface 2 altsetting 15 endpoint 0xE has an invalid bInterval 255, changing to 4 [ 384.202302][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1131'. [ 384.212744][T11666] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 384.232413][ T6410] usb 7-1: config 10 interface 2 altsetting 15 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 384.254087][ T6410] usb 7-1: config 10 interface 2 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 207 [ 384.280158][ T6410] usb 7-1: config 10 interface 30 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 384.305578][ T6410] usb 7-1: config 10 interface 30 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 384.324277][ T6410] usb 7-1: config 10 interface 30 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 384.336845][ T6410] usb 7-1: config 10 interface 30 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 384.364070][ T6410] usb 7-1: config 10 interface 3 has no altsetting 0 [ 384.370959][ T6410] usb 7-1: config 10 interface 2 has no altsetting 0 [ 384.376310][T11660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.383587][ T6410] usb 7-1: config 10 interface 30 has no altsetting 0 [ 384.388904][T11660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.395894][ T6410] usb 7-1: string descriptor 0 read error: -22 [ 384.407028][ T6410] usb 7-1: Dual-Role OTG device on HNP port [ 384.413298][ T6410] usb 7-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=b8.9e [ 384.423737][ T6410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.437594][ T6410] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 384.459374][ T6410] usb 7-1: no configuration chosen from 1 choice [ 384.627953][T10048] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 384.638974][T10048] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0010/input/input30 [ 384.732281][T10048] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 384.794148][ T6410] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 384.945367][ T6410] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.956381][ T6410] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 384.968721][ T6410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 384.979887][ T6410] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.993896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.995137][ T6410] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 385.009928][ T6410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.018334][ T6410] usb 6-1: Product: syz [ 385.022531][ T6410] usb 6-1: Manufacturer: syz [ 385.027211][ T6410] usb 6-1: SerialNumber: syz [ 385.033558][ T6410] usb 6-1: config 0 descriptor?? [ 385.044794][ T6410] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input31 [ 385.064742][ C1] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 385.266310][ T6924] usb 6-1: USB disconnect, device number 45 [ 385.302701][T11681] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1135'. [ 385.474975][ T5818] Bluetooth: hci2: command 0x1003 tx timeout [ 385.481939][ T5822] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 385.535445][ T5924] usb 1-1: USB disconnect, device number 34 [ 385.885284][T11685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11685 comm=syz.1.1136 [ 386.033889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.130946][ T30] audit: type=1400 audit(1766783007.980:696): avc: denied { associate } for pid=11692 comm="syz.5.1138" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 386.264527][T10048] usb 7-1: USB disconnect, device number 36 [ 386.289211][ T5822] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 386.324686][ T6410] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 386.616578][ T6410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.657356][ T6410] usb 2-1: not running at top speed; connect to a high speed hub [ 386.657793][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1143'. [ 386.695598][ T6410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.731783][ T6410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.740986][T11714] block nbd0: Unsupported socket: should be TCP or UNIX. [ 386.834144][ T6410] usb 2-1: string descriptor 0 read error: -22 [ 386.851667][ T6410] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.861730][ T6410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.890446][ T6410] usb 2-1: 0:2 : does not exist [ 387.083894][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.293913][T10048] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 387.465778][T10048] usb 6-1: not running at top speed; connect to a high speed hub [ 387.482995][T10048] usb 6-1: config 129 has an invalid interface number: 59 but max is 1 [ 387.501678][T10048] usb 6-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 387.526155][T10048] usb 6-1: config 129 has an invalid interface number: 108 but max is 1 [ 387.536255][T10048] usb 6-1: config 129 has no interface number 0 [ 387.542537][T10048] usb 6-1: config 129 has no interface number 1 [ 387.549170][T10048] usb 6-1: config 129 interface 59 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 387.561308][T10048] usb 6-1: config 129 interface 59 altsetting 250 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 387.641770][T10048] usb 6-1: config 129 interface 59 altsetting 250 endpoint 0xA has invalid maxpacket 1024, setting to 1023 [ 387.658330][T10048] usb 6-1: config 129 interface 59 altsetting 250 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 387.672518][T10048] usb 6-1: config 129 interface 59 altsetting 250 has a duplicate endpoint with address 0xE, skipping [ 387.684664][T10048] usb 6-1: config 129 interface 59 altsetting 250 has a duplicate endpoint with address 0xE, skipping [ 387.695935][T10048] usb 6-1: config 129 interface 59 altsetting 250 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 387.707568][T10048] usb 6-1: config 129 interface 59 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 388.056332][T10048] usb 6-1: config 129 interface 59 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 388.082851][T10048] usb 6-1: config 129 interface 59 altsetting 250 has a duplicate endpoint with address 0x4, skipping [ 388.113888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.122095][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.132711][T10048] usb 6-1: config 129 interface 108 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 388.164473][T10048] usb 6-1: config 129 interface 108 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 388.189033][T10048] usb 6-1: config 129 interface 108 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 388.217125][T10048] usb 6-1: config 129 interface 108 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 388.253366][T10048] usb 6-1: config 129 interface 108 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 388.279030][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.300549][T10048] usb 6-1: config 129 interface 108 altsetting 5 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 388.329245][T10048] usb 6-1: config 129 interface 108 altsetting 5 has a duplicate endpoint with address 0x85, skipping [ 388.367761][T10048] usb 6-1: config 129 interface 108 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 388.431595][T11748] random: crng reseeded on system resumption [ 388.446986][ T6410] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 388.454703][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 388.486354][T10048] usb 6-1: config 129 interface 59 has no altsetting 0 [ 388.494157][T10048] usb 6-1: config 129 interface 108 has no altsetting 0 [ 388.505352][T10048] usb 6-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=16.4c [ 388.517071][T10048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.523318][ T30] audit: type=1400 audit(1766783010.360:697): avc: denied { ioctl } for pid=11747 comm="syz.0.1152" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 388.525086][T10048] usb 6-1: Product: ࠐ [ 388.525102][T10048] usb 6-1: Manufacturer: ఁ [ 388.525117][T10048] usb 6-1: SerialNumber: 쮦䷞ꎝ蠻拍슡㲦ꍱࢳ詻፧㒆ﵴ֥㮹늑蒹⌌ꂺ袪궏瀼询채䍎ὐ墘ङ㋎ừᵣ鹍쳅䧢ᚰٺ듄㛽켎襝莋Ὶ準ઋ鑅ᤫ찥馞㢿❦罄雿☖✖鶘㡕옿诃ቡŢ趀ꋃ䴴䲲荽ͱ뀿ग़뫁睹‴䟜꘹蒘ሼ灃䋒ਲ죷䆀ꁤࡔᬑ짒鲩๶㾕˳᪺扜갿ᾊ慈辪ⲹ࿃Ⴋि菘맺䍅域ᡶ⎶ [ 388.595957][ T6410] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 388.616778][ T6410] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 388.644751][T11732] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 388.685205][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 388.704658][ T24] usb 7-1: config 205 has an invalid interface number: 62 but max is 0 [ 388.720687][ T24] usb 7-1: config 205 has no interface number 0 [ 388.853969][ T6410] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 388.862412][ T24] usb 7-1: config 205 interface 62 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 388.887686][ T6410] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 388.898768][ T24] usb 7-1: config 205 interface 62 altsetting 9 endpoint 0x87 has invalid maxpacket 495, setting to 64 [ 388.915343][T10048] ch341 6-1:129.59: ch341-uart converter detected [ 388.922301][T11754] netlink: 'syz.8.1154': attribute type 10 has an invalid length. [ 388.935722][T10048] usb 6-1: failed to receive control message: -71 [ 388.954775][ T6410] usb 2-1: USB disconnect, device number 22 [ 388.959278][T10048] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 388.995958][T11757] loop6: detected capacity change from 0 to 2640 [ 389.016486][T10048] ch341 6-1:129.108: ch341-uart converter detected [ 389.023312][T11757] buffer_io_error: 9 callbacks suppressed [ 389.023321][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.046986][T10048] usb 6-1: failed to receive control message: -71 [ 389.053355][T11756] ubi: mtd0 is already attached to ubi31 [ 389.060325][ T24] usb 7-1: config 205 interface 62 has no altsetting 0 [ 389.061042][T10048] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 389.085356][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.091959][ T24] usb 7-1: string descriptor 0 read error: -22 [ 389.106472][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.108879][T10048] usb 6-1: USB disconnect, device number 46 [ 389.114706][T11748] Restarting kernel threads ... [ 389.136162][ T24] usb 7-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=3d.92 [ 389.146426][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.155655][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.163897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.174029][T11748] Done restarting kernel threads. [ 389.179560][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.191044][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.192792][T10048] ch341 6-1:129.59: device disconnected [ 389.249773][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.261143][ T24] sierra 7-1:205.62: Sierra USB modem converter detected [ 389.265240][T10048] ch341 6-1:129.108: device disconnected [ 389.277545][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.290891][T11757] ldm_validate_partition_table(): Disk read failed. [ 389.300378][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.309077][T11757] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.320881][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.329830][T11757] Dev loop6: unable to read RDB block 0 [ 389.335911][T11757] loop6: unable to read partition table [ 389.341940][T11757] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 389.408261][ T7248] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 389.465720][T11763] vivid-007: disconnect [ 389.471496][T11743] vivid-007: reconnect [ 389.490488][ T24] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 389.544808][ T7248] usb 9-1: device descriptor read/64, error -71 [ 389.612287][ T24] usb 7-1: USB disconnect, device number 37 [ 389.720810][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 389.734288][ T24] sierra 7-1:205.62: device disconnected [ 389.793905][ T7248] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 389.951448][ T30] audit: type=1400 audit(1766783011.790:698): avc: denied { getopt } for pid=11773 comm="syz.1.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 389.975735][ T7248] usb 9-1: device descriptor read/64, error -71 [ 389.986312][ T30] audit: type=1400 audit(1766783011.790:699): avc: denied { write } for pid=11773 comm="syz.1.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 390.014840][T10048] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 390.034264][ T5185] ldm_validate_partition_table(): Disk read failed. [ 390.046296][ T5185] Dev loop6: unable to read RDB block 0 [ 390.104203][ T7248] usb usb9-port1: attempt power cycle [ 390.164437][ T5185] loop6: unable to read partition table [ 390.176712][T11776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1159'. [ 390.216029][T10048] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.253901][T10048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.282261][T10048] usb 1-1: Product: syz [ 390.286944][T10048] usb 1-1: Manufacturer: syz [ 390.302610][T10048] usb 1-1: SerialNumber: syz [ 390.321480][T10048] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.353677][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.368506][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.443933][ T7248] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 390.474310][ T7248] usb 9-1: device descriptor read/8, error -71 [ 390.724020][ T7248] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 390.764615][ T7248] usb 9-1: device descriptor read/8, error -71 [ 390.972064][ T7248] usb usb9-port1: unable to enumerate USB device [ 391.233895][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.309731][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.342220][ T5185] ldm_validate_partition_table(): Disk read failed. [ 391.354769][ T5185] Dev loop6: unable to read RDB block 0 [ 391.360604][ T5185] loop6: unable to read partition table [ 391.397683][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.483966][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 391.491058][ T10] ath9k_htc: Failed to initialize the device [ 391.557218][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 391.577642][T11797] input: syz0 as /devices/virtual/input/input32 [ 391.631298][T11795] sp0: Synchronizing with TNC [ 391.665438][ T30] audit: type=1400 audit(1766783013.520:700): avc: denied { append } for pid=11794 comm="syz.1.1164" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 392.128984][ T5946] kernel read not supported for file /dsp (pid: 5946 comm: kworker/1:8) [ 392.273909][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.289956][T11807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1167'. [ 392.445164][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.734140][ T5925] usb 1-1: USB disconnect, device number 35 [ 393.313897][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.328276][T11829] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 393.641783][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.751189][ T30] audit: type=1400 audit(1766783015.600:701): avc: denied { audit_write } for pid=11827 comm="syz.1.1171" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 393.889204][T11836] comedi comedi3: dt2817: I/O port conflict (0x2,5) [ 393.898830][T11833] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1172'. [ 393.909254][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1172'. [ 394.104411][ T5925] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 394.354596][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.477443][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.602296][T11849] Invalid logical block size (49666) [ 394.641122][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1176'. [ 394.688774][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.698359][ T5925] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 394.712410][ T5925] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 394.726396][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.736056][ T5925] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 394.754905][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.782853][ T5925] usb 1-1: config 0 descriptor?? [ 394.811143][T10047] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 395.393895][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.864056][ T30] audit: type=1400 audit(1766783017.010:702): avc: denied { lock } for pid=11856 comm="syz.6.1179" path="socket:[36625]" dev="sockfs" ino=36625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 395.952443][T10047] usb 9-1: device descriptor read/64, error -71 [ 395.958925][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.969592][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 395.993037][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.020395][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 396.044023][ T5925] usb 1-1: USB disconnect, device number 36 [ 396.214719][T10047] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 396.356150][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1178'. [ 396.400271][T11870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.593264][T10047] usb 9-1: device descriptor read/64, error -71 [ 396.607026][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1178'. [ 396.618581][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 396.683735][ T30] audit: type=1400 audit(1766783018.530:703): avc: denied { mount } for pid=11872 comm="syz.6.1182" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 396.711493][T11873] overlayfs: missing 'workdir' [ 396.744063][T10047] usb usb9-port1: attempt power cycle [ 396.760541][ T30] audit: type=1400 audit(1766783018.610:704): avc: denied { unmount } for pid=7260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 396.793996][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 396.833785][ T10] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 396.859465][ T10] usb 6-1: config 2 has no interface number 0 [ 396.871387][ T10] usb 6-1: config 2 interface 31 has no altsetting 0 [ 396.995870][ T10] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 397.122487][T11878] can0: slcan on ttyS3. [ 397.129475][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.139512][T11878] netlink: 'syz.6.1183': attribute type 39 has an invalid length. [ 397.240801][T10047] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 397.249569][ T10] usb 6-1: Product: syz [ 397.266562][T11878] hsr_slave_1 (unregistering): left promiscuous mode [ 397.298999][ T10] usb 6-1: Manufacturer: syz [ 397.303653][ T10] usb 6-1: SerialNumber: syz [ 397.310878][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 397.320687][T10047] usb 9-1: device descriptor read/8, error -71 [ 397.404667][T11877] can0 (unregistered): slcan off ttyS3. [ 397.483895][ C0] net_ratelimit: 4 callbacks suppressed [ 397.483911][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.547468][ T30] audit: type=1400 audit(1766783019.400:705): avc: denied { connect } for pid=11857 comm="syz.5.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 397.575449][T10047] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 397.585630][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.614964][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.642252][T11891] sp0: Synchronizing with TNC [ 397.669580][ T10] ch9200 6-1:2.31: probe with driver ch9200 failed with error -71 [ 397.680639][T11888] sp0: Found TNC [ 397.696510][T11886] [U] ` [ 397.706960][ T10] usb 6-1: USB disconnect, device number 47 [ 397.824084][T10047] usb 9-1: device not accepting address 51, error -71 [ 397.838124][T10047] usb usb9-port1: unable to enumerate USB device [ 398.036163][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.253899][T10047] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 398.436362][T10047] usb 9-1: Using ep0 maxpacket: 16 [ 398.456188][T11914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11914 comm=syz.6.1194 [ 398.471604][T10047] usb 9-1: config 240 has an invalid interface number: 243 but max is 1 [ 398.511933][T10047] usb 9-1: config 240 contains an unexpected descriptor of type 0x1, skipping [ 398.522138][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.552477][T10047] usb 9-1: config 240 has an invalid interface number: 63 but max is 1 [ 398.571422][T10047] usb 9-1: config 240 has no interface number 0 [ 398.593937][ T7248] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 398.601571][T10047] usb 9-1: config 240 has no interface number 1 [ 398.618691][T10047] usb 9-1: config 240 interface 243 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 398.661412][T10047] usb 9-1: config 240 interface 243 altsetting 3 bulk endpoint 0x8 has invalid maxpacket 1024 [ 398.673262][ T30] audit: type=1400 audit(1766783020.520:706): avc: denied { setopt } for pid=11915 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.697237][ T30] audit: type=1400 audit(1766783020.550:707): avc: denied { listen } for pid=11915 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.718947][T10047] usb 9-1: config 240 interface 243 altsetting 3 has an endpoint descriptor with address 0x77, changing to 0x7 [ 398.718961][ T30] audit: type=1400 audit(1766783020.550:708): avc: denied { accept } for pid=11915 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.789856][T10047] usb 9-1: config 240 interface 243 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 398.801260][ T7248] usb 2-1: Using ep0 maxpacket: 8 [ 398.816879][ T7248] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 398.833216][ T7248] usb 2-1: config 0 has no interface number 0 [ 398.841492][T10047] usb 9-1: config 240 interface 243 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 398.859095][ T7248] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.874164][T10047] usb 9-1: config 240 interface 243 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 398.895410][ T7248] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.905693][T10047] usb 9-1: config 240 interface 243 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 398.917871][ T7248] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 398.930959][T10047] usb 9-1: config 240 interface 243 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 398.942907][ T7248] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 398.954222][T10047] usb 9-1: config 240 interface 63 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 398.965175][ T7248] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.978552][T10047] usb 9-1: config 240 interface 63 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 398.990149][T10047] usb 9-1: config 240 interface 63 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 399.010812][T10047] usb 9-1: config 240 interface 63 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 399.024318][ T7248] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 399.043658][ T7248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.051855][T10048] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 399.068531][T10047] usb 9-1: config 240 interface 243 has no altsetting 0 [ 399.076627][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.084724][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.089434][ T7248] usb 2-1: Product: syz [ 399.099891][T10047] usb 9-1: config 240 interface 63 has no altsetting 0 [ 399.106986][ T7248] usb 2-1: Manufacturer: syz [ 399.112289][ T7248] usb 2-1: SerialNumber: syz [ 399.120805][T10047] usb 9-1: New USB device found, idVendor=19d2, idProduct=0063, bcdDevice=46.af [ 399.131930][T10047] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.140881][ T7248] usb 2-1: config 0 descriptor?? [ 399.146501][T10047] usb 9-1: Product: В [ 399.152690][T10047] usb 9-1: Manufacturer:   [ 399.157538][T10047] usb 9-1: SerialNumber: 뺱濈份ﵕ煣鞹เ햝쮻钥࢒8㧨㉋邊囸ᘵ倜뽖훅㿄崋߾ꫮ傖瓘堦꾨訠㐥ꀁ沛炲暛˫龨렠됐짲㼛勵ƣ팆탌ꎊ荣닏㔰ᧀ䨒꬟ᬧ쓿罋닐잕⊙醑ꑄ䇫흗鈦蔂웆빽㌠撈 [ 399.214032][T11890] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 399.214587][T10048] usb 7-1: Using ep0 maxpacket: 16 [ 399.243031][T11890] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 399.243319][T10048] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 399.269558][T10048] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.278912][T11890] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 399.279077][T10048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 399.296675][T10048] usb 7-1: SerialNumber: syz [ 399.371840][ T7248] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 399.516893][T10047] option 9-1:240.243: GSM modem (1-port) converter detected [ 399.553896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.589505][T10047] usb 9-1: USB disconnect, device number 52 [ 399.608440][T10047] option 9-1:240.243: device disconnected [ 399.622257][ T7248] usb 7-1: USB disconnect, device number 38 [ 399.704648][ T5946] usb 2-1: USB disconnect, device number 23 [ 400.013911][ T30] audit: type=1326 audit(1766783021.860:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.5.1199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad4c78f749 code=0x0 [ 400.121677][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.300756][ T30] audit: type=1400 audit(1766783022.150:710): avc: denied { getopt } for pid=11929 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 400.624280][ T7248] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 400.949342][T11944] bridge_slave_1: left allmulticast mode [ 400.955557][T11944] bridge_slave_1: left promiscuous mode [ 400.964641][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.633890][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.846957][T11944] bridge_slave_0: left allmulticast mode [ 401.852630][T11944] bridge_slave_0: left promiscuous mode [ 401.858460][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.879339][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.890856][ T7248] usb 6-1: Using ep0 maxpacket: 16 [ 402.021836][ T7248] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.040723][ T7248] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 402.053983][ T7248] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.673906][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.876294][T10048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.890150][ T7248] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.899357][ T7248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.907461][ T7248] usb 6-1: Product: syz [ 402.911658][ T7248] usb 6-1: Manufacturer: syz [ 402.916879][ T7248] usb 6-1: SerialNumber: syz [ 403.023619][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.222185][ T7248] usb 6-1: can't set config #1, error -71 [ 403.360984][ T7248] usb 6-1: USB disconnect, device number 48 [ 403.713884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.883899][T10048] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 404.043771][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.045467][T10048] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 404.108181][T10048] usb 1-1: config 0 has no interface number 0 [ 404.125650][T10048] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 404.154030][T10048] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.183239][T10048] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 404.208543][T10048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.225385][T10048] usb 1-1: Product: syz [ 404.753891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.063909][T10048] usb 1-1: Manufacturer: syz [ 405.068533][T10048] usb 1-1: SerialNumber: syz [ 405.137355][T10048] usb 1-1: config 0 descriptor?? [ 405.146034][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.319347][T11962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 405.363654][T10048] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 405.392742][T10048] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 405.568963][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 405.590893][ T30] audit: type=1400 audit(1766783027.440:711): avc: denied { write } for pid=11995 comm="syz.5.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 405.774926][T10048] usb 1-1: USB disconnect, device number 37 [ 405.787060][T10048] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 405.797766][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.806875][T10048] cyberjack 1-1:0.69: device disconnected [ 405.813919][ T5925] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 405.856197][ T5946] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 405.990340][T10048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.010113][ T30] audit: type=1400 audit(1766783027.860:712): avc: denied { accept } for pid=11999 comm="syz.8.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 406.053905][ T5925] usb 7-1: device descriptor read/64, error -71 [ 406.146016][ T5946] usb 6-1: not running at top speed; connect to a high speed hub [ 406.155667][ T5946] usb 6-1: config 151 has an invalid interface number: 50 but max is 2 [ 406.163899][T10048] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 406.173594][ T5946] usb 6-1: config 151 has an invalid interface number: 183 but max is 2 [ 406.182497][ T5946] usb 6-1: config 151 contains an unexpected descriptor of type 0x1, skipping [ 406.192008][ T5946] usb 6-1: config 151 has an invalid interface number: 13 but max is 2 [ 406.200932][ T7248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.204065][ T5946] usb 6-1: config 151 contains an unexpected descriptor of type 0x1, skipping [ 406.224884][ T5946] usb 6-1: config 151 has an invalid interface number: 79 but max is 2 [ 406.233230][ T5946] usb 6-1: config 151 contains an unexpected descriptor of type 0x2, skipping [ 406.242594][ T5946] usb 6-1: config 151 has an invalid descriptor of length 111, skipping remainder of the config [ 406.253480][ T5946] usb 6-1: config 151 has 4 interfaces, different from the descriptor's value: 3 [ 406.267022][ T5946] usb 6-1: config 151 has no interface number 0 [ 406.279862][ T5946] usb 6-1: config 151 has no interface number 1 [ 406.293899][ T5925] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 406.304954][ T5946] usb 6-1: config 151 has no interface number 2 [ 406.322920][ T5946] usb 6-1: config 151 has no interface number 3 [ 406.335653][T10048] usb 2-1: Using ep0 maxpacket: 16 [ 406.335863][ T5946] usb 6-1: config 151 interface 50 altsetting 13 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 406.352531][ T5946] usb 6-1: config 151 interface 50 altsetting 13 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 406.355501][T10048] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 406.378918][T10048] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.389419][T10048] usb 2-1: config 0 has no interface number 0 [ 406.392592][ T5946] usb 6-1: config 151 interface 50 altsetting 13 endpoint 0xD has invalid wMaxPacketSize 0 [ 406.413653][T10048] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 406.423686][T10048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.436793][ T5925] usb 7-1: device descriptor read/64, error -71 [ 406.443082][ T5946] usb 6-1: config 151 interface 50 altsetting 13 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 406.462721][T10048] usb 2-1: Product: syz [ 406.474971][T10048] usb 2-1: Manufacturer: syz [ 406.479641][ T5946] usb 6-1: config 151 interface 50 altsetting 13 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 406.495568][ T5946] usb 6-1: too many endpoints for config 151 interface 183 altsetting 131: 103, using maximum allowed: 30 [ 406.507087][ T5946] usb 6-1: config 151 interface 183 altsetting 131 has a duplicate endpoint with address 0xA, skipping [ 406.514573][T10048] usb 2-1: SerialNumber: syz [ 406.540876][ T5946] usb 6-1: config 151 interface 183 altsetting 131 has a duplicate endpoint with address 0x4, skipping [ 406.542796][T10048] usb 2-1: config 0 descriptor?? [ 406.555509][ T5925] usb usb7-port1: attempt power cycle [ 406.589481][ T5946] usb 6-1: config 151 interface 183 altsetting 131 has an invalid endpoint descriptor of length 2, skipping [ 406.612937][ T5946] usb 6-1: config 151 interface 183 altsetting 131 has a duplicate endpoint with address 0x6, skipping [ 406.637197][ T5946] usb 6-1: config 151 interface 183 altsetting 131 has a duplicate endpoint with address 0x8, skipping [ 406.666122][ T5946] usb 6-1: config 151 interface 183 altsetting 131 has 5 endpoint descriptors, different from the interface descriptor's value: 103 [ 406.694424][ T5946] usb 6-1: config 151 interface 13 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 406.705497][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 406.717023][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 406.728176][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 406.739021][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 406.761075][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has a duplicate endpoint with address 0x85, skipping [ 406.784929][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 406.795487][T12005] xt_hashlimit: max too large, truncated to 1048576 [ 406.809549][T12014] block device autoloading is deprecated and will be removed. [ 406.820328][T12014] program syz.0.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.842101][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 406.854782][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 406.869376][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 406.881843][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 406.913888][ T5925] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 406.936415][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 406.950530][ T5925] usb 7-1: device descriptor read/8, error -71 [ 406.986150][ T5946] usb 6-1: config 151 interface 13 altsetting 1 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 407.011626][ T5946] usb 6-1: config 151 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.047137][T10048] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 407.052006][ T5946] usb 6-1: config 151 interface 50 has no altsetting 0 [ 407.065315][ T5946] usb 6-1: config 151 interface 183 has no altsetting 0 [ 407.072308][ T5946] usb 6-1: config 151 interface 13 has no altsetting 0 [ 407.079942][ T5946] usb 6-1: config 151 interface 79 has no altsetting 0 [ 407.084147][T10048] uvcvideo 2-1:0.105: No valid video chain found. [ 407.090155][ T5946] usb 6-1: New USB device found, idVendor=0403, idProduct=ef50, bcdDevice=3f.cc [ 407.103175][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.111266][ T5946] usb 6-1: Product: О [ 407.117140][ T5946] usb 6-1: Manufacturer: 掮忁 [ 407.135021][T10048] usb 2-1: USB disconnect, device number 24 [ 407.141072][ T5946] usb 6-1: SerialNumber: 점↩௨ᣰ璺竻볭䘮蓣瞿旓 [ 407.176706][T11996] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 407.204662][ T5925] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 407.225244][ T5925] usb 7-1: device descriptor read/8, error -71 [ 407.262307][ T30] audit: type=1326 audit(1766783029.110:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.310841][ T30] audit: type=1326 audit(1766783029.110:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.335358][ T30] audit: type=1326 audit(1766783029.110:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.364075][ T5925] usb usb7-port1: unable to enumerate USB device [ 407.366543][ T30] audit: type=1326 audit(1766783029.110:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.398404][ T30] audit: type=1326 audit(1766783029.110:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.422461][ T30] audit: type=1326 audit(1766783029.120:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.446855][ T30] audit: type=1326 audit(1766783029.120:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.492173][ T30] audit: type=1326 audit(1766783029.140:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 407.734086][T10048] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 407.873974][ C0] net_ratelimit: 4 callbacks suppressed [ 407.873989][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.892806][T10048] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.907258][T10048] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 407.919511][T10048] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.943621][T10048] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.973619][T10048] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.998374][T10048] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.016401][T10048] usb 9-1: Product: syz [ 408.028848][T10048] usb 9-1: Manufacturer: syz [ 408.056929][T10048] cdc_wdm 9-1:1.0: skipping garbage [ 408.062180][T10048] cdc_wdm 9-1:1.0: skipping garbage [ 408.077608][T10048] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 408.164499][ T5925] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 408.278587][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.327657][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.344294][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 408.372813][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.374817][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.428292][T10048] usb 9-1: USB disconnect, device number 53 [ 408.438831][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.466662][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.502093][ T5925] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 408.514852][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.523734][ T5925] usb 2-1: Product: syz [ 408.528286][ T5925] usb 2-1: Manufacturer: syz [ 408.532938][ T5925] usb 2-1: SerialNumber: syz [ 408.557078][ T5925] usb 2-1: config 0 descriptor?? [ 408.590361][ T5925] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 408.605687][ T5925] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -8) [ 408.654884][ T5925] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 408.783412][ T5946] ftdi_sio 6-1:151.50: FTDI USB Serial Device converter detected [ 408.800792][ T5946] ftdi_sio ttyUSB0: unknown device type: 0x3fcc [ 408.829034][ T5946] ftdi_sio 6-1:151.183: FTDI USB Serial Device converter detected [ 408.852920][ T5946] ftdi_sio ttyUSB1: unknown device type: 0x3fcc [ 408.880431][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 408.890025][T12058] gretap0: left allmulticast mode [ 408.895743][T12058] gretap0: left promiscuous mode [ 408.900935][T12058] bridge0: port 3(gretap0) entered disabled state [ 408.909755][T12058] bridge_slave_1: left allmulticast mode [ 408.915480][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.922446][T12058] bridge_slave_1: left promiscuous mode [ 408.969698][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.015081][ T5946] ftdi_sio 6-1:151.13: FTDI USB Serial Device converter detected [ 409.015863][ T7248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.023580][ T5946] ftdi_sio ttyUSB2: unknown device type: 0x3fcc [ 409.049514][T12058] bridge_slave_0: left allmulticast mode [ 409.057221][ T5946] ftdi_sio 6-1:151.79: FTDI USB Serial Device converter detected [ 409.066525][T12058] bridge_slave_0: left promiscuous mode [ 409.069465][ T5946] ftdi_sio ttyUSB3: unknown device type: 0x3fcc [ 409.082332][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.114039][ T5946] usb 6-1: USB disconnect, device number 49 [ 409.159793][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.190375][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.193334][ T5946] ftdi_sio 6-1:151.50: device disconnected [ 409.198706][T10047] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 409.265175][ T5946] ftdi_sio 6-1:151.183: device disconnected [ 409.311285][ T5946] ftdi_sio 6-1:151.13: device disconnected [ 409.329184][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.347332][ T5946] ftdi_sio 6-1:151.79: device disconnected [ 409.364119][T10047] usb 1-1: device descriptor read/64, error -71 [ 409.624089][T10047] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 409.776698][T10047] usb 1-1: device descriptor read/64, error -71 [ 409.812387][T12077] x_tables: duplicate underflow at hook 1 [ 409.916196][T10047] usb usb1-port1: attempt power cycle [ 409.953979][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.240671][T12062] kexec: Could not allocate control_code_buffer [ 410.314151][T10047] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 410.347627][T10047] usb 1-1: device descriptor read/8, error -71 [ 410.367449][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.393901][ T5925] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 410.543960][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 410.551666][ T5925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.564321][ T5925] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 410.573502][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.593101][ T5925] usb 7-1: config 0 descriptor?? [ 410.605318][ T5925] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 410.609061][T10047] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 410.635747][T10047] usb 1-1: device descriptor read/8, error -71 [ 410.644280][T10048] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 410.744278][T10047] usb usb1-port1: unable to enumerate USB device [ 410.797038][T12096] netlink: 'syz.8.1247': attribute type 10 has an invalid length. [ 410.810814][T12096] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 410.819467][T10048] usb 6-1: Using ep0 maxpacket: 8 [ 410.826717][T10048] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 410.835376][T10048] usb 6-1: config 0 has no interface number 0 [ 410.841507][T10048] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.853369][T10048] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 410.863506][T10048] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 410.876080][T10048] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 410.887252][T10048] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.902357][T10048] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 410.912009][T10048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.914097][T12096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.920051][T10048] usb 6-1: Product: syz [ 410.934943][T10048] usb 6-1: Manufacturer: syz [ 410.939533][T10048] usb 6-1: SerialNumber: syz [ 410.950009][T12096] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 410.958688][T10048] usb 6-1: config 0 descriptor?? [ 410.968813][T12096] bond4: (slave macvlan0): Enslaving as a backup interface with an up link [ 410.980613][T12096] netlink: 'syz.8.1247': attribute type 21 has an invalid length. [ 410.988713][T12096] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1247'. [ 411.182708][T10048] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 411.388150][ T6556] usb 6-1: USB disconnect, device number 50 [ 411.401929][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.641729][ T6556] usb 2-1: USB disconnect, device number 25 [ 411.954178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.043879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.063737][T10048] usb 7-1: USB disconnect, device number 43 [ 412.197932][T12111] ceph: No mds server is up or the cluster is laggy [ 412.318801][T10047] libceph: connect (1)[c::]:6789 error -101 [ 412.328993][T10047] libceph: mon0 (1)[c::]:6789 connect error [ 413.073985][ C0] net_ratelimit: 2 callbacks suppressed [ 413.074002][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.250125][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 413.250144][ T30] audit: type=1400 audit(1766783035.100:730): avc: denied { execute } for pid=12124 comm="syz.0.1255" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=38695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 413.354066][T10048] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 413.412589][T12135] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1256'. [ 413.514938][T10048] usb 7-1: Using ep0 maxpacket: 16 [ 413.523200][T10048] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 413.549205][T10048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.582844][T10048] usb 7-1: Product: syz [ 413.594699][T10048] usb 7-1: Manufacturer: syz [ 413.608556][T10048] usb 7-1: SerialNumber: syz [ 413.638333][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.793984][ T5946] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 413.914975][T10048] usb 7-1: config 0 descriptor?? [ 414.066097][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.086330][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.106537][ T5946] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 414.118452][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.123898][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.155348][T10048] speedtch 7-1:0.0: speedtch_bind: wrong device class 68 [ 414.165243][T10048] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 414.170350][ T5946] usb 1-1: config 0 descriptor?? [ 414.351563][ T5925] usb 7-1: USB disconnect, device number 44 [ 414.374201][ T6556] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 414.494259][ T5946] usbhid 1-1:0.0: can't add hid device: -71 [ 414.500190][ T5946] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 414.605175][ T5946] usb 1-1: USB disconnect, device number 42 [ 414.612061][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.629510][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.639269][ T6556] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.652491][ T6556] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 414.662220][ T6556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.674518][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.684982][ T6556] usb 2-1: config 0 descriptor?? [ 415.142384][T10048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.153678][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 415.164061][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.174637][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 415.182358][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 415.898845][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.006656][T10047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.054873][ T30] audit: type=1326 audit(1766783037.900:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 416.078276][ T30] audit: type=1326 audit(1766783037.910:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 416.102353][ T30] audit: type=1326 audit(1766783037.950:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 416.125961][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 416.171862][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 416.189523][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 416.198481][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 416.203892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.224117][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 416.234063][ T30] audit: type=1326 audit(1766783037.970:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 416.311586][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 416.331743][ T30] audit: type=1326 audit(1766783037.970:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 416.397040][ T6556] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 416.433555][ T30] audit: type=1326 audit(1766783037.970:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 416.463958][T10048] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 416.490933][ T7248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.523669][ T30] audit: type=1326 audit(1766783037.990:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54ea78df90 code=0x7ffc0000 [ 416.538550][ T6556] hid-multitouch 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 416.683010][ T30] audit: type=1326 audit(1766783037.990:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f54ea790f77 code=0x7ffc0000 [ 416.706923][T10048] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 416.716614][T10048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.177475][ T30] audit: type=1326 audit(1766783038.000:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54ea78f749 code=0x7ffc0000 [ 417.206144][T10048] usb 6-1: config 0 descriptor?? [ 417.229263][T10048] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 417.715256][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.738087][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.866555][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.896443][ T10] usb 2-1: USB disconnect, device number 26 [ 417.928459][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.992785][T10048] gp8psk: usb in 128 operation failed. [ 418.013921][T10048] gp8psk: usb in 137 operation failed. [ 418.019405][T10048] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 418.069259][T10048] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 418.097322][T10048] usb 6-1: USB disconnect, device number 51 [ 418.273939][ C0] net_ratelimit: 3 callbacks suppressed [ 418.273956][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.277628][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.360636][T10048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.913942][T10048] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 419.091347][T10048] usb 6-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.129390][T10048] usb 6-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.161876][T10048] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.183135][T10048] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 419.232258][T10048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.257807][T10048] usb 6-1: config 0 descriptor?? [ 419.263966][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 419.313946][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 419.330606][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.424833][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 419.445126][ T10] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 419.475263][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 419.494035][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.512255][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 419.512269][ T30] audit: type=1400 audit(1766783041.360:746): avc: denied { unmount } for pid=12223 comm="syz.6.1280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 419.544156][ T10] usb 2-1: Product: syz [ 419.551281][ T10] usb 2-1: Manufacturer: syz [ 419.557438][ T7248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.565808][ T10] usb 2-1: SerialNumber: syz [ 419.582410][ T10] usb 2-1: config 0 descriptor?? [ 419.594977][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 419.604389][ T10] usb 2-1: setting power ON [ 419.608938][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 419.617813][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 419.628195][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 419.648462][ T10] usb 2-1: media controller created [ 419.697239][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.726157][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.744219][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.784169][ T10] usb 2-1: selecting invalid altsetting 6 [ 419.802608][ T10] usb 2-1: digital interface selection failed (-22) [ 419.947069][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.971056][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.983287][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 420.003308][ T10] usb 2-1: setting power OFF [ 420.015695][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 420.024039][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 420.033342][ T10] (NULL device *): no alternate interface [ 420.353933][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.555111][T10048] usbhid 6-1:0.0: can't add hid device: -71 [ 420.561088][T10048] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 420.568984][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.596729][T10048] usb 6-1: USB disconnect, device number 52 [ 420.751502][ T30] audit: type=1400 audit(1766783042.600:747): avc: denied { accept } for pid=12260 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 420.780984][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 420.832483][ T10] usb 2-1: USB disconnect, device number 27 [ 421.596365][ T30] audit: type=1400 audit(1766783043.450:748): avc: denied { map } for pid=12276 comm="syz.8.1292" path="socket:[39453]" dev="sockfs" ino=39453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.638914][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.742354][T12285] virtiofs: Unknown parameter 'always 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 20 batadv0 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 21 vxcan0 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 22 vxcan1 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 23 veth0 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 24 veth1 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 25 wg0 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 26 wg1 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 27 wg2 : 1 V3 [ 421.742354][T12285] 010000E0 1 0:00000000 0 [ 421.742354][T12285] 28 veth0_to_bridge: 1 ' [ 422.011465][T12299] netlink: 'syz.1.1294': attribute type 3 has an invalid length. [ 422.227803][ T30] audit: type=1400 audit(1766783044.030:749): avc: denied { cmd } for pid=12291 comm="syz.0.1297" path="socket:[39484]" dev="sockfs" ino=39484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 422.433890][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.792414][T12319] lo speed is unknown, defaulting to 1000 [ 422.798236][T12319] lo speed is unknown, defaulting to 1000 [ 422.804591][T12319] lo speed is unknown, defaulting to 1000 [ 422.819100][T12319] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 422.885072][T12319] lo speed is unknown, defaulting to 1000 [ 422.892149][T12319] lo speed is unknown, defaulting to 1000 [ 422.904813][T12319] lo speed is unknown, defaulting to 1000 [ 422.922692][T12319] lo speed is unknown, defaulting to 1000 [ 422.936507][T12319] lo speed is unknown, defaulting to 1000 [ 423.474122][ C0] net_ratelimit: 2 callbacks suppressed [ 423.474137][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.727819][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.287989][T12335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1305'. [ 424.513887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.761447][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.340255][T12318] syz.8.1303 (12318): drop_caches: 2 [ 425.553880][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.637507][T10048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.802278][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.379047][T12378] bridge2: entered promiscuous mode [ 426.384511][T12378] bridge2: entered allmulticast mode [ 426.556621][T12379] tmpfs: Bad value for 'mpol' [ 426.593884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.724350][ T5925] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 426.799620][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.813742][T12381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.821007][T12381] IPv6: NLM_F_CREATE should be set when creating new route [ 426.828228][T12381] IPv6: NLM_F_CREATE should be set when creating new route [ 426.844052][T12381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.847060][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.878674][T12383] bond4: option mode: unable to set because the bond device has slaves [ 427.874634][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 427.884553][ T5925] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 427.905202][ T5925] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 427.913279][ T5925] usb 2-1: config 0 has no interface number 0 [ 428.673882][ C0] net_ratelimit: 2 callbacks suppressed [ 428.673901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.997757][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.005996][T10048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.285279][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.532501][ T5925] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 429.586869][ T5925] usb 2-1: can't read configurations, error -71 [ 429.713882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.296252][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 430.305814][T10048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.367885][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.372490][ T30] audit: type=1400 audit(1766783052.220:750): avc: denied { ioctl } for pid=12440 comm="syz.8.1323" path="socket:[40495]" dev="sockfs" ino=40495 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 430.408052][T12430] futex_wake_op: syz.0.1321 tries to shift op by -1; fix this program [ 430.660499][T12432] syz.5.1317 (12432) used greatest stack depth: 19336 bytes left [ 430.722430][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 430.753883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.806633][T12433] team1: entered promiscuous mode [ 430.812638][T12433] team1: entered allmulticast mode [ 430.822151][ T30] audit: type=1400 audit(1766783052.670:751): avc: denied { setopt } for pid=12449 comm="syz.5.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 430.997868][T12453] netlink: 'syz.6.1325': attribute type 2 has an invalid length. [ 431.025590][ T30] audit: type=1400 audit(1766783052.760:752): avc: denied { accept } for pid=12449 comm="syz.5.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 431.094520][T12463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=12463 comm=syz.6.1328 [ 431.410436][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.851861][T12475] dlm: Unknown command passed to DLM device : 33 [ 431.851861][T12475] [ 432.071443][T12489] bond1 (unregistering): Released all slaves [ 432.103949][T10048] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 432.135153][ T44] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 432.156404][T12495] vivid-007: disconnect [ 432.274147][T10048] usb 2-1: Using ep0 maxpacket: 32 [ 432.281101][T10048] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 432.290141][T10048] usb 2-1: config 0 has no interface number 0 [ 432.306489][T10048] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=b3.be [ 432.323889][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 432.330210][T10048] usb 2-1: New USB device strings: Mfr=164, Product=196, SerialNumber=3 [ 432.350751][T10048] usb 2-1: Product: syz [ 432.355953][ T44] usb 1-1: config 8 has an invalid interface number: 203 but max is 0 [ 432.372391][ T44] usb 1-1: config 8 has no interface number 0 [ 432.385871][T10048] usb 2-1: Manufacturer: syz [ 432.392014][T10048] usb 2-1: SerialNumber: syz [ 432.392026][ T44] usb 1-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 432.410431][T10048] usb 2-1: config 0 descriptor?? [ 432.438753][T10048] smsc95xx v2.0.0 [ 432.451069][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.462765][ T44] usb 1-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 432.487737][ T44] usb 1-1: config 8 interface 203 altsetting 1 endpoint 0x88 has invalid maxpacket 65535, setting to 1024 [ 432.511637][ T44] usb 1-1: config 8 interface 203 altsetting 1 bulk endpoint 0x88 has invalid maxpacket 1024 [ 432.548859][ T44] usb 1-1: config 8 interface 203 has no altsetting 0 [ 432.600230][ T44] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 432.634219][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.665462][ T44] usb 1-1: Product: syz [ 432.681931][ T44] usb 1-1: Manufacturer: syz [ 432.691166][ T44] usb 1-1: SerialNumber: syz [ 432.729770][T12472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 432.744332][T12472] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 432.870513][T10048] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 432.909927][T12481] vivid-007: reconnect [ 432.936195][T10048] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 432.956899][T10048] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 433.028591][ T44] port100 1-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 433.047957][T10048] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 433.074086][ T44] usb 1-1: USB disconnect, device number 43 [ 433.120447][T10048] usb 2-1: USB disconnect, device number 30 [ 433.351468][ T30] audit: type=1326 audit(1766783055.200:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12510 comm="syz.8.1339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f49b8f749 code=0x0 [ 433.581481][T12520] overlayfs: failed to clone upperpath [ 433.874283][ C0] net_ratelimit: 3 callbacks suppressed [ 433.874302][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.072409][T12522] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=12522 comm=syz.1.1341 [ 434.099669][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 434.124240][T12522] bridge_slave_0: default FDB implementation only supports local addresses [ 434.394777][T12540] ------------[ cut here ]------------ [ 434.400466][T12540] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#0: syz.0.1348/12540 [ 434.410845][T12540] Modules linked in: [ 434.414999][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.0.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.426513][T12540] Tainted: [L]=SOFTLOCKUP [ 434.430829][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.441349][T12540] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 434.447444][T12540] Code: 89 ee e8 38 37 5b f6 40 84 ed 75 21 e8 ee 3c 5b f6 44 89 fe bf 07 00 00 00 e8 81 37 5b f6 41 83 ff 07 74 09 e8 d6 3c 5b f6 90 <0f> 0b 90 e8 cd 3c 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 434.467096][T12540] RSP: 0018:ffffc90003757828 EFLAGS: 00010293 [ 434.473153][T12540] RAX: 0000000000000000 RBX: ffff888034b4ea00 RCX: ffffffff8b63a98f [ 434.481538][T12540] RDX: ffff88808b7e4980 RSI: ffffffff8b63a99a RDI: 0000000000000005 [ 434.489553][T12540] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 434.497562][T12540] R10: 0000000000000008 R11: ffff88808b7e54b0 R12: ffff88806ab97080 [ 434.505571][T12540] R13: 1ffff920006eaf05 R14: ffff888057666000 R15: 0000000000000008 [ 434.513547][T12540] FS: 00007fcb977f66c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 434.522519][T12540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.529684][T12540] CR2: 00007f54ea9b42f8 CR3: 0000000035c0e000 CR4: 00000000003526f0 [ 434.537938][T12540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.545907][T12540] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 434.553886][T12540] Call Trace: [ 434.557153][T12540] [ 434.560055][T12540] ? __pfx_subflow_data_ready+0x10/0x10 [ 434.566752][T12540] ? __pfx_subflow_sched_work_if_closed+0x10/0x10 [ 434.573151][T12540] tcp_data_ready+0x114/0x5a0 [ 434.577892][T12540] ? tcp_fin+0x3b7/0x500 [ 434.582115][T12540] tcp_data_queue+0x1ac2/0x4ff0 [ 434.586971][T12540] ? tcp_urg+0x10f/0xb80 [ 434.591186][T12540] ? __pfx_tcp_data_queue+0x10/0x10 [ 434.596377][T12540] ? tcp_try_undo_loss+0x790/0x860 [ 434.601471][T12540] tcp_rcv_established+0xa7f/0x36e0 [ 434.606663][T12540] ? ip6_dst_check+0x352/0x950 [ 434.611400][T12540] ? __pfx_tcp_rcv_established+0x10/0x10 [ 434.617025][T12540] tcp_v6_do_rcv+0x11cd/0x1dc0 [ 434.621763][T12540] ? __local_bh_enable_ip+0xa4/0x120 [ 434.627411][T12540] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 434.632499][T12540] __release_sock+0x158/0x450 [ 434.637333][T12540] release_sock+0x5a/0x220 [ 434.641720][T12540] mptcp_connect+0x914/0xae0 [ 434.646295][T12540] __inet_stream_connect+0x915/0xf50 [ 434.651560][T12540] ? __pfx___inet_stream_connect+0x10/0x10 [ 434.657370][T12540] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.662721][T12540] ? __pfx_inet_stream_connect+0x10/0x10 [ 434.668344][T12540] ? __local_bh_enable_ip+0xa4/0x120 [ 434.673607][T12540] ? __pfx_inet_stream_connect+0x10/0x10 [ 434.679236][T12540] inet_stream_connect+0x57/0xa0 [ 434.684167][T12540] __sys_connect_file+0x141/0x1a0 [ 434.689171][T12540] __sys_connect+0x13b/0x160 [ 434.693736][T12540] ? __pfx___sys_connect+0x10/0x10 [ 434.698849][T12540] ? do_user_addr_fault+0x843/0x1370 [ 434.704124][T12540] __x64_sys_connect+0x72/0xb0 [ 434.708864][T12540] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.714078][T12540] do_syscall_64+0xcd/0xf80 [ 434.718568][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.724448][T12540] RIP: 0033:0x7fcb9958f749 [ 434.728833][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.748711][T12540] RSP: 002b:00007fcb977f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 434.757292][T12540] RAX: ffffffffffffffda RBX: 00007fcb997e6090 RCX: 00007fcb9958f749 [ 434.765265][T12540] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 434.773205][T12540] RBP: 00007fcb99613f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.781354][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.789336][T12540] R13: 00007fcb997e6128 R14: 00007fcb997e6090 R15: 00007ffe4d22c8f8 [ 434.797326][T12540] [ 434.800321][T12540] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 434.807584][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.0.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.818486][T12540] Tainted: [L]=SOFTLOCKUP [ 434.822778][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.832802][T12540] Call Trace: [ 434.836056][T12540] [ 434.838959][T12540] dump_stack_lvl+0x3d/0x1f0 [ 434.843524][T12540] vpanic+0x640/0x6f0 [ 434.847480][T12540] ? subflow_data_ready+0x40b/0x790 [ 434.852650][T12540] panic+0xca/0xd0 [ 434.856341][T12540] ? __pfx_panic+0x10/0x10 [ 434.860734][T12540] ? check_panic_on_warn+0x1f/0xb0 [ 434.865824][T12540] check_panic_on_warn+0xab/0xb0 [ 434.870740][T12540] __warn+0x108/0x3c0 [ 434.874694][T12540] __report_bug+0x2a0/0x520 [ 434.879170][T12540] ? subflow_data_ready+0x40b/0x790 [ 434.884342][T12540] ? __pfx___report_bug+0x10/0x10 [ 434.889339][T12540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 434.895206][T12540] ? mptcp_get_options+0x19c/0x2c50 [ 434.900380][T12540] ? release_sock+0x5a/0x220 [ 434.904942][T12540] ? mptcp_connect+0x914/0xae0 [ 434.909674][T12540] ? __inet_stream_connect+0x915/0xf50 [ 434.915109][T12540] ? subflow_data_ready+0x40b/0x790 [ 434.920281][T12540] report_bug+0xb2/0x220 [ 434.924493][T12540] ? subflow_data_ready+0x40b/0x790 [ 434.929664][T12540] handle_bug+0x127/0x260 [ 434.933969][T12540] exc_invalid_op+0x17/0x50 [ 434.938451][T12540] asm_exc_invalid_op+0x1a/0x20 [ 434.943273][T12540] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 434.949054][T12540] Code: 89 ee e8 38 37 5b f6 40 84 ed 75 21 e8 ee 3c 5b f6 44 89 fe bf 07 00 00 00 e8 81 37 5b f6 41 83 ff 07 74 09 e8 d6 3c 5b f6 90 <0f> 0b 90 e8 cd 3c 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 434.968632][T12540] RSP: 0018:ffffc90003757828 EFLAGS: 00010293 [ 434.974668][T12540] RAX: 0000000000000000 RBX: ffff888034b4ea00 RCX: ffffffff8b63a98f [ 434.982606][T12540] RDX: ffff88808b7e4980 RSI: ffffffff8b63a99a RDI: 0000000000000005 [ 434.990544][T12540] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 434.998483][T12540] R10: 0000000000000008 R11: ffff88808b7e54b0 R12: ffff88806ab97080 [ 435.006422][T12540] R13: 1ffff920006eaf05 R14: ffff888057666000 R15: 0000000000000008 [ 435.014367][T12540] ? subflow_data_ready+0x3ff/0x790 [ 435.019540][T12540] ? subflow_data_ready+0x40a/0x790 [ 435.024711][T12540] ? subflow_data_ready+0x40a/0x790 [ 435.029883][T12540] ? __pfx_subflow_data_ready+0x10/0x10 [ 435.035398][T12540] ? __pfx_subflow_sched_work_if_closed+0x10/0x10 [ 435.041786][T12540] tcp_data_ready+0x114/0x5a0 [ 435.046439][T12540] ? tcp_fin+0x3b7/0x500 [ 435.050655][T12540] tcp_data_queue+0x1ac2/0x4ff0 [ 435.055483][T12540] ? tcp_urg+0x10f/0xb80 [ 435.059697][T12540] ? __pfx_tcp_data_queue+0x10/0x10 [ 435.064876][T12540] ? tcp_try_undo_loss+0x790/0x860 [ 435.069970][T12540] tcp_rcv_established+0xa7f/0x36e0 [ 435.075150][T12540] ? ip6_dst_check+0x352/0x950 [ 435.079894][T12540] ? __pfx_tcp_rcv_established+0x10/0x10 [ 435.085505][T12540] tcp_v6_do_rcv+0x11cd/0x1dc0 [ 435.090243][T12540] ? __local_bh_enable_ip+0xa4/0x120 [ 435.095502][T12540] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 435.100592][T12540] __release_sock+0x158/0x450 [ 435.105242][T12540] release_sock+0x5a/0x220 [ 435.109629][T12540] mptcp_connect+0x914/0xae0 [ 435.114191][T12540] __inet_stream_connect+0x915/0xf50 [ 435.119455][T12540] ? __pfx___inet_stream_connect+0x10/0x10 [ 435.125237][T12540] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 435.130590][T12540] ? __pfx_inet_stream_connect+0x10/0x10 [ 435.136202][T12540] ? __local_bh_enable_ip+0xa4/0x120 [ 435.141468][T12540] ? __pfx_inet_stream_connect+0x10/0x10 [ 435.147083][T12540] inet_stream_connect+0x57/0xa0 [ 435.152000][T12540] __sys_connect_file+0x141/0x1a0 [ 435.157002][T12540] __sys_connect+0x13b/0x160 [ 435.161577][T12540] ? __pfx___sys_connect+0x10/0x10 [ 435.166673][T12540] ? do_user_addr_fault+0x843/0x1370 [ 435.171932][T12540] __x64_sys_connect+0x72/0xb0 [ 435.176670][T12540] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.181840][T12540] do_syscall_64+0xcd/0xf80 [ 435.186317][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.192178][T12540] RIP: 0033:0x7fcb9958f749 [ 435.196561][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.216146][T12540] RSP: 002b:00007fcb977f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 435.224530][T12540] RAX: ffffffffffffffda RBX: 00007fcb997e6090 RCX: 00007fcb9958f749 [ 435.232472][T12540] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 435.240412][T12540] RBP: 00007fcb99613f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.248357][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.256303][T12540] R13: 00007fcb997e6128 R14: 00007fcb997e6090 R15: 00007ffe4d22c8f8 [ 435.264254][T12540] [ 435.267507][T12540] Kernel Offset: disabled [ 435.271802][T12540] Rebooting in 86400 seconds..