last executing test programs: 27m14.667732331s ago: executing program 32 (id=73): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x200080, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x200080, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x131}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_USERDATA={0xd, 0xd, 0x1, 0x0, "615200e29411a652dd"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x150, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x8000000000000006}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xed, 0xc, "e2ab701211685367fc285486495236ec2b48a21c6837b4a4d45cf997ec5966f424e313a910a83bb2bc991065d6ba30eaa96194ae4868de9bf215b018b19644f1673028340d2dfac3384dd932ae501bbfc0db67a6d5163577f03cb4f91b3a07a24cb785e60fd37400331776d416b713e817ee2a36a4f2c5cebf1d79ba3965c1013b69f374d754bd9db7ac5cb1f927f91826d1a291701675caba6327315cb704ad239916dcec5fc1aa10cfd7a7b38c08073f455d8cd72876b41d0c465898381b5a756c293a3d102824413b12d602297853f3db3638ea14bc65fb6769515e1cee519ce8a95400aaec6193"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x131}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_USERDATA={0xd, 0xd, 0x1, 0x0, "615200e29411a652dd"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x150, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x8000000000000006}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xed, 0xc, "e2ab701211685367fc285486495236ec2b48a21c6837b4a4d45cf997ec5966f424e313a910a83bb2bc991065d6ba30eaa96194ae4868de9bf215b018b19644f1673028340d2dfac3384dd932ae501bbfc0db67a6d5163577f03cb4f91b3a07a24cb785e60fd37400331776d416b713e817ee2a36a4f2c5cebf1d79ba3965c1013b69f374d754bd9db7ac5cb1f927f91826d1a291701675caba6327315cb704ad239916dcec5fc1aa10cfd7a7b38c08073f455d8cd72876b41d0c465898381b5a756c293a3d102824413b12d602297853f3db3638ea14bc65fb6769515e1cee519ce8a95400aaec6193"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 25m0.42000877s ago: executing program 33 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00002c", @ANYRES16=r3, @ANYBLOB="050000000000000000005d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x4000080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002400)={0xc, {"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", 0x1000}}, 0x1006) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200"], 0x2c}}, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x402010) 21m14.146971195s ago: executing program 34 (id=1006): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x12) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10010, r0, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x7fc, 0x40) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x8, 0x14, "3eccd8000000000000000010000000040100"}) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000001440)=ANY=[], 0x1009, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000438000480340001800b0001006e756d67656e00002400028008000240000000000800014000000008080006400000000708000340000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000003400)=""/4119, 0x1017}], 0x1, 0x33, 0x0) r4 = eventfd(0xfffffffd) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r6 = open(&(0x7f0000000400)='./file0\x00', 0x12ab43, 0x98) fcntl$setlease(r6, 0x400, 0x1) fcntl$setlease(r6, 0x400, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000001c40)={r0, &(0x7f0000001b40)='&|\x00', 0x2000, &(0x7f0000001b80)={@_ha_fsid={[0x2, 0x1]}, {0xc, 0x3812, 0x2, 0x6}}, 0xdfb, &(0x7f0000001bc0)={@_ha_fsid}, &(0x7f0000001c00)}) io_submit(0x0, 0x8, &(0x7f0000001cc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xbbb, r0, &(0x7f0000000180)="b2d452732868514462944387c989dbe0c57903d3e871b52528f931680169098b474689010546a141dda76a519782e44bc6f9663d6ccf01a550f5813289c864d4e5f962ce1dd5c877cf7cc05e1cd46ea1f1a90e6637f56d8f5f5f1fbf3d31faba0a3153", 0x63, 0x1, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0xfffd, 0xffffffffffffffff, &(0x7f0000000500)="bdd711dd02e54296d61e764927681ddfb68e9051e595834f84d2e2d5cd7c6ca3758bd73cdaf0364e3bd96cef6b6ef1647c71d28ba1e6fcf4233578d99e0935d13398d69c67294e492a9f36260584162f8ce631252f4e777e095203b214fbb9e63080c5203157101fd858ee7632eac8e4ac72d878ec4ab37ed78c470c71462b135a44e3cea82ea33b4b825286696a", 0x8e, 0x80}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x40, 0xffffffffffffffff, &(0x7f0000000640)="8f5e553f0cff3ff029364db3e44cf3d34e5d0f6b208af623c896ac9b67bf0e95b87e48bdf75f6131c91d8ceb50e95d1818e06cca9a1f5579d878fa4ecf5414296c10d9e29c31788e1c8b55cd284ac9668480760a3cf1c320a3694bb30d5e1c9c68958b353eda56497c5a36eefb9c32313fc735038b14b4bb8fb60cd75ec4", 0x7e, 0x4, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000000700)="8552bad808bb2f5f898d5858d6834cf713a14becb3aec20f248458352e0bb59c0386da619641b0e7b2ce932a3caa784f901644bd8e2ec0e76b3f353287f31050cc1792bcdd90108e0c875065f0fa7595d8548f01106d14f3ee4a2300c83c01b2673c09ce5482b3a3efc78af13d818ae4bf89639244d913c860ed42803e63f2c57ca9751b3590556891e5d9f4fb6bbb9ccb6a940c1ce5368ee9e74a2700eaa978521f9231f22b3bbf8231034d7e6a1b723fb6661dd0f9651fed4263aa00065d877e5972a3", 0xc4, 0x3, 0x0, 0x1, r0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000840)="68296ea74269760b645f77e529228b82ea81b09a66ba64c61a8c9acd26583aad699778067167903d9a6c596b6e5dc8b4099264509f766aeeb97d8f877f", 0x3d, 0x4, 0x0, 0x650a19beb0a0ca95}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000000940)="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", 0x1000, 0x3ff, 0x0, 0x0, r4}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, &(0x7f0000001980)="f599dc779ff86bd6dfd037f64bd90634e0b80e3f994d0bf10f3ddd5695e76068df99869476630ff84609f36527692ae0699f3e535121a1e831a7596a4df8674f5e3636", 0x43, 0x7, 0x0, 0x0, r5}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x7, 0x9, r6, &(0x7f0000001a40)="c1f94dd3f5896684113b6bdb80cf7919ddff148e8f23000a462bc6bb949328bb6a31c7b91d0c0cb9f9fa09a8a2c0eaece94f1697ee7d11e3cfcf4f4dd04e5717ce1f940bb4f9b57316d32ec3523e44dd9129c9dc222876372ddb853d6eb794edd0ad47be1544802289458b2db943ffa2b9c42469496a5ffb40622ea325e7597e654002ede1545ea0633a59e1a858b9e7498aedd3c97bd1273a55f400ffd78a363d1b690b694ab2568868075e6b4f5efd16d6b123819b75690ff7345231cbf16cd7dc16f0", 0xc4, 0x4, 0x0, 0x1, r7}]) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20m14.39178071s ago: executing program 35 (id=1131): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x2a6, [0x200000000280, 0x0, 0x0, 0x2000000002b0, 0x2000000002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x31e) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000280)=""/25, 0x19}], 0x1}, 0x10102) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000040)={0xa, {0x9, 0x1, 0x3}}, 0x1014) 20m13.660024989s ago: executing program 36 (id=1135): futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000000000), 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) 20m4.188220412s ago: executing program 37 (id=1150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf803, 0x5, 0x0, 0x1}, 0x14) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000001000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) 19m56.679345806s ago: executing program 38 (id=1169): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180), &(0x7f0000000840)=ANY=[@ANYBLOB="656e633d706b63733120686173683d1f1c"], 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001280), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0xb8a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000840) sendto$packet(r6, &(0x7f0000000640)="e8b7", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x6, 0x6, @local}, 0x14) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TIOCMSET(r10, 0x5418, &(0x7f0000000000)=0x8001) socket$kcm(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r11 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) keyctl$read(0xb, r9, &(0x7f00000001c0)=""/89, 0x59) 19m46.987918092s ago: executing program 39 (id=1180): userfaultfd(0x80001) getsockopt(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x6, 0x1, 0x80000000, 0x7, 0x18, "2ea7f2d9173ab00f8b0295af605554830efd8f"}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000480)={[0x7]}, 0x8) socket(0x1e, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r1, 0x0, 0x0) write(r2, &(0x7f0000000440)="54a5195da791b92d7bee3d8c", 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000b00)={0x0, 0xeea1, 0x0, 0x1, 0x3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000180)) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x8}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) socket$inet6(0xa, 0x2, 0x0) 19m33.654244713s ago: executing program 40 (id=1178): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 19m19.866179806s ago: executing program 41 (id=1210): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0027bd3952010000000200000008a306d6d110735b3c00fd4c01000200"/39], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="00a3cc98ad1b58906362685a65c3bc623fb00074f2c1acdea1e2f751a128c09c93c3bf9d263c14dce66bce51292d9c2ada454046db27d40256e0030c5aa329f2e0c79fd8ccde86c84d9a6d03ea15bd98fe08c802e5ea2370e083e0c12998f44c28a69d5b3710fab5de03016d3f10f1d4be4cf1a3949bb1", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010427bd70000a0000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900eb050000350000000a0034000101010101010000040008013fdd209b79450905d72f3b799932210d40a9251b5ff9c802e65cd32771b79594068fa4ae2d8ff4c9eb6899bd7d0b591ddeb1d8e5a9baa70ed9ecfb1e0ea90bc10faa05644221b31fa5dedd404bb10f553cda32412249f084841f30ceb6345bc175768db4c90984e279945eab297318726a74d249b2aafb0164a0ec657e18101b923dc678d1f5323bfd3ff7c092c6000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r3, @ANYBLOB='\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) syz_open_dev$vim2m(0x0, 0xfffffff0, 0x2) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r10 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x7fffffff, 0x1fc, 0x70}, 0x5, 0x5, 0x0, 0x2, 0x0, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r11, &(0x7f00000004c0)='0fc5:1227:b,', 0xc) 19m19.347135689s ago: executing program 42 (id=1214): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560f, &(0x7f0000000000)) move_pages(r1, 0xa, &(0x7f0000000240)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], &(0x7f00000002c0)=[0x4, 0x400, 0x5], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000008000000811104000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 19m18.277369753s ago: executing program 43 (id=1217): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x800c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r5 = syz_open_pts(r4, 0x20800) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) r6 = dup(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000340)=0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa0}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x1000c090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x2a0, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x5}}}}, [@NL80211_ATTR_IE={0x142, 0x2a, [@perr={0x84, 0x6f, {0x4, 0x7, [{{0x0, 0x1}, @broadcast, 0x7, @value, 0x1e}, {{}, @device_a, 0x2, @void, 0x20}, {{}, @device_b, 0x80000001, @void, 0x1d}, {{}, @device_a, 0xfffffff8, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x31}, {{}, @broadcast, 0x1, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x1e}]}}, @tim={0x5, 0xcb, {0xf6, 0xec, 0x2, "299bda022366eb3835e4b511b48275dccae0847a487f2cffef8ee384329c58e7f2cdc92921ef6583bb998c99409da0d19906c296917fb10913ff79acd0fb927c50ba0c6c14528ccfc6c4a5762bb81c0a1f3265bebb718c97262f0bc2eb6b0bd834e3a928d4c5c428bf19b1912e697ab6f942876befbfa761082532a6646d873e4429b20d36f13a478c6b453612dc7d820aa3d66a822de08730c09bcf4320f853674d768e4ce22c426403d44390a1772d8e3e28151e59486dac1869f0071bf570ea0ba20d0551e218"}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xb8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xba0}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8a, 0x0, "ffbeb9ec1cf19e125f319e2afbdcffade969c0a4cf8a5339c652436b692e85947d55bd096688b1867bb1175ca012bb6922cd28ec4238cf3c6322ae3cb44dd33088a53a6b32be773395fe949064ae2b28c6f778658f60aa04427018baa7bf2f6d517eff6506ff2e0fdd47fda78e3a8c7a7642fc4a6c425ee9803dc9b100b25da90e0b83ef8412"}, @NL80211_BAND_2GHZ={0x8c, 0x0, "da9abe93efdb8253bfa043a8afc0ce9e0bd34c2b059d406278974a2f2bb163dd0b39754887073e4c5364e53c5668baf943bede09df016bc1ff3dad057be9ac53fd0d6b2acd2c34a454fa7276dff848ce808bbb5c2f1c4056d86007b647c74fd60b106df4ac792dca62e73a758746050d621d02d22f2d047e5893b9fb421199e425452bbf351ab208"}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x800}, 0x50) 19m6.370106659s ago: executing program 44 (id=1232): syz_usb_connect(0x0, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0xffffffffffffffda, r2, {0x0, 0x1}}, 0x20) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1) setreuid(0xee01, 0xee01) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000114) syz_usb_connect(0x0, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) getpid() (async) dup(r0) (async) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) (async) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0xffffffffffffffda, r2, {0x0, 0x1}}, 0x20) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) (async) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1) (async) setreuid(0xee01, 0xee01) (async) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x4000114) (async) 19m5.673954021s ago: executing program 45 (id=1235): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x30, 0x80001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0, 0x10000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_control_io$sierra_net(r3, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x0, 0x22, 0x6d, {0x6d, 0x10, "8b5a5f9c690ad8e8252132a520efff3fe34379e78780850cb5ddb260dcf175341d6c96917364a06f62bb32dbf09b34b08de8dc96c5bb56ef101e2006c215c556a42ff74269e0ddafb1bd5789e0e2d48c7940d6b79297dd394168df48d1f6f45ec42527931dbde53b43f611"}}, &(0x7f0000000280)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}}, &(0x7f0000000a80)={0x1c, &(0x7f0000000480)={0x20, 0x5, 0x9c, "19ae8efbadcfa767ea67fa2fe83c00444035594ab0ac6125a6ddb033f0fccd26598d8d9f82afb7491ecaf9aaceba5d9620e83380e42ea205098c73422108d769280ac305b589cabfdd177aeaf57ddbdcc2be710afd283e8c22804866ef63edbcc7fd2dc122e8235692171e4f81a748508154a1004996e8cebbae4878b922b378eb2a0e653f707683a041cc63e1b9bcf8e162accb1211c81504c36581"}, &(0x7f0000000600)={0xa1, 0x1, 0x400, "4cd9fe792e4e16ccb7bbfbbeb54dd703eea4db9b0836f28ac485796344798d2e5228ca90f1cc5cf1f0817052579cae504a8ccec0f511d9f7e0a04d8b2c693bb6c19db9d3d05805a48b62c407b09966cdfddd450471ddd2021e13388c675d0480f4e3f8724379a35ae6967cce1c1fcb0c9dbede853e16b084179c2552b8c91fd5d0ba75300142433f5fe845907bc1f3c1851db2b533a06c9c8562c00b9a5d7684f87fd815a64601414c038b7bb9524bd1c45d04307d2d534aa0a6a8d93addb05bdfe8923e96c75a5e89409a2ad24bb3c6eb95867a4b499b0618a5640d4db919d47f84eb8dafcfd0ffb4f730d08a1e1bb3f52136688cbbc9a4db201092d4f570c606e384017973c9c509e4183346433537e32a2a8fb0bf3881861bd244c068a21a87f972ea06b710acc2a76cfd170a7697c7e3145d6798683fdec702f6206c4aae2025df068851f621be7bd311da4aafda549b14cebe1e214048c8fe1e0d24f3a5fe67e0f8ecce29533056867ad2b3e88e151bc2716d4c7c5be7ac3167394c51cb80fd1786545d0e2bb06f236e9e704bd94c2ba347b520c0f026b4380205d38bb39af3fd1c23944e1e19dfee2e74e6a0cb958e2c8cfdaa3c879ffb19e930019a65805359b20024943eb29bd591163b21f190383342ebf8ed013c39748a27a0720c54793408290292bad0115033c7aa5039bcb205cfbc52d5d98c273951d8628744bdb927ecf2577ba6bc560a060fb0d1328577ee822ab800eb46524b08973300fd3510eb4c77d416ca98a46b54eb09b9236e29f9bb81ef86cb5a0a1f261fcb8262c2d64853cdde1b0880aa2ae4afdd642b11cdf0f1175166fae523fdb2151bb9fbb35314431dd4ead8fc4386b46ce428e14ada02e92fde58eed8aabacaf360e13ab6dfabb33dca3e6ddc58ff8803e79d9b574ebe0d972d54eecbfefa50d7d9260c7705ff739fbbc54c53eabbe99b6ca18891dff76ef9f5976c31516b568b796695af8d007006a005231d1bc93508fc0e37235ed997c8b1a8acdad7ed8e5a3510f2ab066935842f374de982caf04c1a62f72a062f67a8969f181d901cea913d2f48b994c8ab15bd9322dc18a2f3a423334ca1c2eaa41946a11c4c642f44e3c00bb11b17b6854a8516892ce07c1d534afaeb92bb8b379513da2e70fdb1b80d04dd38a859b6a98b51ef3ac28bdaaa443b7f7784f93ed40f9783f629903dffd91fa46b0f95ce6a65e11770dffe5643f54a539d26dee2c403565670f4ce87471d0ffeafdabdc409a13f8b1a9544a7d1d469f7a91eca3d134ca6091c34df4e20f54e96bec03754475e8e4f126a9e10d59a86b37ba78bd4bd91c0fc0d145209c90e8e129fef72d8e33c2348c8c2b7cb3d0974077bb071ff6ebc83fbeccf4f82038159c78e353be42ef4d7dc591bfd458bfea50f5c1d4e4d1e55451f5d012284cfc4d7cefc"}, &(0x7f0000000a40)={0x21, 0x0, 0x3, "fcf7b5"}}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220600000006"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000001040)={0x24, &(0x7f0000000e00)=ANY=[@ANYBLOB="001605"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 18m49.820634528s ago: executing program 46 (id=1242): set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@other={0x20300002000006a0, &(0x7f0000000200)}) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r7, 0x0, 0x480c4) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r8}, 0x10) fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff8000}]}) memfd_secret(0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 18m34.884313966s ago: executing program 47 (id=1254): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r2 = socket(0x2, 0x3, 0xb2) setsockopt(r2, 0xff, 0x100001, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000"], 0x0}, 0x0) file_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x12020, 0x10001, 0xa, 0x9, 0xc}, 0x5b, 0x1000) close_range(r3, r3, 0x0) 18m16.953657623s ago: executing program 48 (id=1277): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x78, 0x143e01) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x2b2, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0xbc, 0x2c, 0x15, 0xff, 0x5050, 0x8004, 0x7e1b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a0, 0x1, 0x3, 0xfa, 0x80, 0xf, "", [{{0x9, 0x4, 0x5, 0x2, 0xc, 0x16, 0xf, 0x5d, 0x2c, [@generic={0x13, 0x22, "aadaeadf60cf6c1f7ee2b626ee2ef02488"}, @hid_hid={0x9, 0x21, 0x8001, 0x1, 0x1, {0x22, 0xb59}}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x7, 0x4, [@generic={0xc3, 0x10, "e5298e77d4610639e45d974d4595d3287211b1a4142cc454d48d5fa28e4a18ad8953b71c9bc024a19dc5d4b9b4596c02c1c43370a140f277f5e2dd70aa8e2611a0c6d9f2f27a0999504dd8a461bb1bbdf3106e57e8a8c97e1abdad8a9c817ff5311b7fb157e5037eba08374d494db632ff2495229d04e0b9df38b51c94f74d1b6021be57fe9653997897e2949b2df2b31918f65ec8d111c555081bd2c74172cafe97e245d52e92e7ef535c3254c1285707ceac49335910d78322484843bdf738cd"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x5, 0x7, 0xf3}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1, 0x4, 0x4, [@generic={0x59, 0x23, "4c083f07a66cd0c4d4202edf11c698679e5c312ccf16a94d770a3eac01b77322efdc1cf1517c198c25dc82ad96ac05729f745e1dae98900bd9142eaecd8fd05a8a81445c30201e63a9dafba01999b1046cac9fef31e97a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x474b}]}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x97, 0x1, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x3, 0xc, 0xf7}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x9, 0x7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8c, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb9, 0x2fe1}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x1, 0x6, 0x6}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x7f, 0x9, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x9}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x7, 0x5, 0xe}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x6, 0xe, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0x1, 0x2, [@generic={0xc7, 0x0, "8fc9b3cc653ebac4272e7f46a3c86d9261131e91f23bad6d369eddb6268c7124b380530de6165dca79b418da6174747ff6f21e8b12d9c66089920321eaac60e9f10a25f574de0c4bba15d8f96d27c595b1e34449cecaeab7657937d7db29fbc0cd70233c4ae2a8cb20e76ccdc7aa239b3556835b05d1f4a05a253c37a4d97e3cc2b37ec6c1b105c7ae629c9a9facfaffbb35ffcd9128e01d285d49e54dc1895305c3e58570adbc8c23450c7b59ca96c47a072d35a8280c39ec810b4d2631a000e6168c2efb"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x8, 0x4, 0xf7}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x110, 0xf, 0x80, 0xa6, 0xff, 0x2}, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="a2b323ccfb050f100001001004fd4c2dfac8182803007b4c83"], 0x1, [{0x0, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x424}}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$KDSIGACCEPT(r3, 0x5607, 0x200000000000001b) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/hardlockup_count', 0x480280, 0xa0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) eventfd2(0x5, 0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 18m4.142884471s ago: executing program 49 (id=1256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'vcan0\x00', 0x20}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0xd, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) (async, rerun: 32) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (rerun: 32) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) (async) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x0, 0x6, 0x0) (async) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64) read$FUSE(r7, 0x0, 0x4a) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000540)={0x54000, 0x6000}) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) (async) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7) (async) r9 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r9, 0x0, 0x0) 18m3.796844497s ago: executing program 50 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800608210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 17m0.673539146s ago: executing program 51 (id=1378): socket(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020001000000080003000100000008000400", @ANYRES32=r4], 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000003c001a8006000000020000002c0005802800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x58}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYRES16], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdb1}, 0x94) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x20880, 0x0) ioperm(0x0, 0x2, 0x7e) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e26, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=r4, 0x1e, 0x1, 0x69a6, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800dcae0fe5cd576d758a000000000085100000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0xb1, 0xd9, &(0x7f0000000800)=""/217, 0x1f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x82}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x1, 0x21, 0x40}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[{0x3, 0x5, 0x87}, {0x1, 0x1, 0xb, 0xc}, {0x2, 0x5, 0x8, 0x5}, {0x0, 0x3, 0x3, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r5, r6, 0x16, 0x0, @val=@netkit={@void, @value, @void, @void, r8}}, 0x1c) 14m35.076651055s ago: executing program 52 (id=1544): socket$kcm(0x2b, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0x20000) 10m17.401095701s ago: executing program 53 (id=2395): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xdf, "1a071ccb28601802a82a7806d983ead2ec10b85d320e9fb1664e9149fe67bb43e17adb3f0a06c18d996d42c01e2e61881db26830093300b126fd69fadb789dd2d867d93d7ba653c7b0e6f51e439cde79997c39769c9e43467a5343a36dadf56f89ce145cfc07c08a6e6a1450c57583087e8a32ae083f8175bdd513f7eb94a616940dcc0d6b18188af3c72761202dd4aa3050836e4e804bf4a744638ae75fe418b01d5ed5b116e8f0cdc21bc91ef958d724e83f32491839cd2fd3bb94dde2b5c073b4ad30f1d3639a685fba21e3b4e80cd8e1261f0c40d37dabe853bc712e90"}, &(0x7f0000000180)=0xe7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x303bdb59}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000380)=""/108, 0x6c, 0x0, &(0x7f0000000400)=""/1, 0x1}}, 0x10) r4 = dup2(r0, r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x9, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0xc, 0xb, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x9, '\x00', r2, @lsm=0x1b, r0, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xc, 0x0, 0x2}, 0x10, r3, r0, 0x5, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x5, 0x2, 0x1, 0x6}, {0x5, 0x3, 0xa, 0x9}, {0x0, 0x1, 0xe, 0x8}, {0x0, 0x1, 0x10, 0x1}, {0x2, 0x5}]}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x14, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @jmp={0x5, 0x0, 0x1, 0x0, 0xb, 0x40, 0x4}, @jmp={0x5, 0x1, 0x5, 0x9, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit]}, &(0x7f0000000700)='GPL\x00', 0x3, 0x80, &(0x7f0000000740)=""/128, 0x100, 0x20, '\x00', r2, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, r4, 0x0, &(0x7f0000000800)=[r4, r0, r0, r0, 0x1], 0x0, 0x10, 0x80000001}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000900)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/mdstat\x00', 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x3, 0x28800) fsetxattr$security_selinux(r8, &(0x7f00000009c0), &(0x7f0000000a00)='system_u:object_r:auditd_etc_t:s0\x00', 0x22, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000a40)={0x4, 0x3, 0x8000, 0x0, 0x5, 0xaf}) socket$netlink(0x10, 0x3, 0x9) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f0000000c80)={{r5}, r10, 0x1a, @unused=[0x100, 0x140000000, 0x8, 0x2], @name="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"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000001c80)={0x8, 'pim6reg1\x00', {'bond_slave_0\x00'}, 0x7}) r11 = syz_io_uring_setup(0x235c, &(0x7f0000001cc0)={0x0, 0x3891, 0x2, 0x3, 0x96}, &(0x7f0000001d40)=0x0, &(0x7f0000001d80), &(0x7f0000001dc0)) r13 = mmap$IORING_OFF_CQ_RING(0x0, 0xc41, 0x3000006, 0x10, r7, 0x8000000) r14 = syz_io_uring_complete(r12, r13) socket$kcm(0x29, 0x5, 0x0) r15 = syz_ublk_setup_io_uring(0x1f60, &(0x7f0000001e00)={0x0, 0xdbc, 0x1000, 0x0, 0x226}, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r15, 0xa, 0x0, r16) ioctl$TIOCGSID(r14, 0x5429, &(0x7f0000001f40)=0x0) sched_setaffinity(r17, 0x8, &(0x7f0000001f80)=0x40) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r11, 0x12, 0x0, 0x0) dup(r11) 9m38.414810114s ago: executing program 54 (id=2447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x1, 0x10}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'ni_labpc\x00', [0x140, 0x40, 0x7, 0x2, 0x10000007, 0x9, 0x8002, 0x7fff, 0x7, 0xffffffff, 0x1ff, 0x7, 0x3, 0x1, 0x29, 0x72ef, 0x101, 0x5, 0xffffffff, 0xfffffffa, 0x4, 0x6, 0xa2d8, 0x5, 0x1000, 0x8, 0x471, 0x7, 0x384, 0x8001, 0x4]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000000)={@hyper, 0x100}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8m31.280394543s ago: executing program 8 (id=2578): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{0x1}, 0xa}}}, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xfffffffff7ff8518]}, 0xffffffffffffffff, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff2}, {0x3, 0xffe0}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 8m29.717072215s ago: executing program 8 (id=2581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(0x0, 0x145) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x29, 0x21, 0x0, &(0x7f0000001ffc)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r2, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}], 0x1) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) 8m13.892317876s ago: executing program 55 (id=2581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(0x0, 0x145) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x29, 0x21, 0x0, &(0x7f0000001ffc)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r2, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}], 0x1) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) 6m40.764511622s ago: executing program 56 (id=2685): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000440)=""/226, &(0x7f0000000540)=0xe2) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x7ffffffd, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0xc}}, './dev/mtdblock0\x00'}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) (async) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) utimes(&(0x7f0000000240)='./mnt\x00', 0x0) (async) utimes(&(0x7f0000000240)='./mnt\x00', 0x0) 5m43.707252621s ago: executing program 57 (id=2754): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x10000000008, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x4, 0xffffffffffffffff, 0x97, 0x5}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x605, 0xfffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x6f2}}}]}, 0x3c}}, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000007c0)=0x2) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r4) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m31.276143583s ago: executing program 58 (id=3058): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xa, 0x3ff, 0x60a8, 0x6, 0x94}, 0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x6e, "f6db5f29b3a94499069e9e6c6ac02654b70489bf7f2e700b3e4c6066d7579fdcaa8dc8c426831a912fd4c0da6db62043641783493a672a289bf64e971034c8ba0d57280f3633b2bfef334a924c0ac188258f4a23517063fe2585dedb63053a80bceb1287ff3e555532c0aa5cbc99"}, &(0x7f00000000c0)=0x76) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x1, 0x0, 0x6, 0x4}, &(0x7f0000000140)=0x18) getpeername(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80) sendmmsg$alg(r4, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="cabe47094f9d97212edf499b09da3a2aaef6f55e79bbf3a13653a9988420d86db0bf70f28e663c68fb823646a03a63a629398593e1854a6e4c73c00d8d709d51c6a593f585da0c36262fae6e505a0e58bdaab6d03e53bd7306df435b682a722713cebe3d675de8a9da588860eaa6c58c195223ef23742ed985036e4c9fc9f0e7b3897c4f8bd074dfeb108e28c8feb2ceb1062ef69eb4", 0x96}, {&(0x7f0000000300)="1dd2cf588546d149cbe74c30dd5f4a1695a9b2b90343e3cfa30ec34eee24db20d8a62f7c00a954b97bb5b6b84f4ec9ca606fdbef04c613fcf9d4833c0080fc9b4ca099a1db061d9df36715913dbf92acb3dbe5e249caf17fbe40bc36403f8e346bbe99263cd21dc6ed3ccf1a1eeca21413173bc0569b852fd068beada5a35437fedda1e0833596c159313461c643391c0d4a5e5cbba4811566dea77f2703f1414fc41eab43116a75f6739c7a5af11a79c620f16320715176a6b9cb8374a878ce645b5a0aa923", 0xc6}, {&(0x7f0000000400)="82f4d654d3d15d6aed5f68033b24bae8ec1d30f4f4962bf58ce8fd5b959b48cc9407f75e0bb6d0691fa8ad24e8d343c0b95ce785744ddc773a342692ffc3cfe7889e7077dbbd38d51bb1b8efe89f6e848e509d7cd250551bcc99a49996f85c80c67db92a4d4e8fca1c3f351a9e15be7aa2096ebcd80d49f8d17b193c652deb5398b12dc9c844221f6731c8", 0x8b}], 0x3, &(0x7f0000000500)=[@iv={0x28, 0x117, 0x2, 0x13, "ab79a8c008cd13de0380d8976102b387fbc98d"}, @iv={0xd8, 0x117, 0x2, 0xc4, "671d7d885a876469d1aec4f4aa6810f485761660453477e9350ae97b98b82a54755333d4a12e92525bb2a718385124719d996ec48ed47e574083d4304483a1ec8e02022cfde563b5b28020ab4828e9744bce3b76c7b73c10beb008681b96d65717ff653444d4d2bf98e9fcafc9f60a24070271804170ebe42adb7a836d5def19613c2d236001bfd4cd60768c42cd572a9176ad184a75ae79d7b53e37f4bb9a7d8ae68b8e34ebbd6d86b7c6f22eeae29c7b3184db2a17fc6e2dc1f6ae8626ada8de7bb73f"}, @iv={0xc8, 0x117, 0x2, 0xaf, "4a7f70eaf1e704d351fe16bc092602529e3bca2dd9e29cc41dd821997acb0b1633194a376536168e62f5eec0b70e47e4ab72a04489d8f3d69e76c69706c4bc67051077d5e9ee6988276b97997e31ae41e01e876713427433706460651a26593170bdb946e9fb955477f40ef50edabecb86ba7044e4d8cbfdd74c827cb78e7f533d98fcba1470d2b70dab27293ffe1aac51f1819b3f98eb3cfc8b868f91114de70c797d5dae0c70ced535b9e0e96adb"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1e0, 0x40090}], 0x1, 0x4001) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xec, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff7f}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x821801, 0x0) fcntl$getflags(r7, 0x40a) syz_ublk_setup_io_uring(0x2214, &(0x7f00000009c0)={0x0, 0x5b60, 0x400, 0x3, 0x2fe, 0x0, r5}, &(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) syz_io_uring_setup(0x6, &(0x7f0000000b00)={0x0, 0xe99d, 0x4, 0x3, 0x258, 0x0, r6}, &(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_ublk_setup_io_uring(0x29a3, &(0x7f0000000c40)={0x0, 0x970e, 0x400, 0x0, 0x261, 0x0, r5}, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r7, 0xc0207511, &(0x7f0000000d80)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000e00)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_del_dev_sqe={0x2e, 0x52, 0x0, r6, 0xc0207505, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x0, r11, '\x00', {r12}}) write$mtd(r5, &(0x7f0000000e80)="29809e7f54f5ce1b7756bee6d21334c7d31fa38c4923a7b82591085c7313e98dec49a943f4a7c1014aae13f7e886e812174d79a780ebdc429c71e9e0711aa5308a98209982772e1d1b13e039ab07eee63424dbc6c9e61fbfff7cb7d946fe9e2de1a5edfd813d403762500939ecc5a29506d3d3889443178aee161275a52053094e7e9568f7a27ffea04aec2a6de91f427ff3842a9dc121af9ab4f0ab592bac8379c429a0c4c5cbfb8bb40878075a22", 0xaf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f40)='./binderfs/custom1\x00', 0x3, 0x0) setsockopt(r1, 0xd4, 0x8, &(0x7f0000000f80)="1f04eee60e8480e92721165057edf5d5ffff51de94248ae9872158504f895cb361e7613f813e8f8f46dc00c436ced49b71de9c2c23b8462a8bd1ba9d7e0a1314f4e1ad29b723b67e8cbddb1df7daee6099e32e721055eef9e2cd569364d798e7", 0x60) syz_emit_vhci(&(0x7f0000001000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x7e3a, 0xcb}}}}, 0x11) sched_setscheduler(r13, 0x3, &(0x7f0000001040)=0x101) socket(0x9, 0x4, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000001080)) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r14, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r3, 0x2}, 0x8) ioctl$XFS_IOC_FSGROWFSDATA(r14, 0x4010586e, &(0x7f0000001100)={0x3, 0x7}) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001180)={{0x77359400}, {r15, r16/1000+60000}}, &(0x7f00000011c0)) 2m15.676652423s ago: executing program 7 (id=3118): mmap$IORING_OFF_SQES(0x0, 0x7, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) socket(0x1, 0x80805, 0x0) io_submit(0x0, 0x0, 0x0) 2m15.371373515s ago: executing program 7 (id=3119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r0, @ANYBLOB="4dd0113c2134e9b645f3a053dd60aee99f7159c3f42fe037f4fe2da3d432dbc432c080d7439f5105941123b53ceec44338286705bce21861231cc62768b1432ae407e23b9d20b06030cbb4ae45f7561b6e8a1fce145049ecbf2fc1a2703c4b"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) 2m15.087482549s ago: executing program 7 (id=3121): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd47e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) (async) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000000080)=0xd2dee2a87a646297) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x0, 0x40) ioctl$MTDFILEMODE(r3, 0x4d13, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x0, 0x1, 0xa7a8) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) sendfile(r0, r0, 0x0, 0x200000) 2m14.765556286s ago: executing program 7 (id=3122): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./pipefs/gssd/clntXX/gssd\x00', 0x105400, 0x2) r4 = socket(0x2b, 0x800, 0xfe) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'cgroup.typ\\\x00', 0x3a, '\x00c6Iw\x9a\x8b\x0e\x953\x02S\xb3\xb6(\xb0/V\xca\xc6\x16\x9f\xf8\x1f\x97\x9d[\x7f\xe7\xccxh\xa1\xf2\x02\xa3\xe9*e[\xe5\xc9\x9dKx0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xb, 0x7ffffffe}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m56.667788076s ago: executing program 2 (id=3159): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="0f114228131708d4a6b535069b7dac46350e10c264f611ef9c93743ca3b69304709d4a00908369c78984abba0096", 0x2e}], 0x1}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYRES8], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) fcntl$getflags(0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) io_uring_setup(0x5ddb, &(0x7f0000001040)={0x0, 0x9c16, 0x2000, 0xfffffffe, 0x1d2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001800)={0x800, 0x10000, 0x4, r2, 0x4}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'team0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xe}]}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x7, 0x10001, 0x10}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000b00)=[r6, r2, r2, r6, r6, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x3, 0x1, 0xd, 0x5}, {0x4, 0x3, 0x7, 0x5}, {0x7, 0x3, 0x4, 0x2}], 0x10, 0xb9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r2, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) 1m56.004538019s ago: executing program 2 (id=3162): syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff000000070581020002000705820200020007058302000200"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') set_mempolicy(0x2, &(0x7f0000000080)=0x20, 0x101) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000011c0)={r2}) io_uring_enter(r1, 0x4778, 0xdb2b, 0x82, &(0x7f0000000040)={[0x4]}, 0x7) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m52.078034623s ago: executing program 59 (id=3133): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/ping_group_range\x00', 0x40642, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xb, 0x7ffffffe}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m51.697169525s ago: executing program 2 (id=3168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8085) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$char_usb(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b04000000000000000002000000140004801000018008000100757000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a10"], 0x68}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="020708031e00000027bd7000fbdbdf2508001900000000000a004e2200000000fc020000000000000000000000000001e30000000a004e2000000007fc01000000000000000000000000000004000000010014000600000002000b00000000000100000000000000020013000000000027bd70000735000002000b0006000000000200000000000002001300070000002dbd70000135000005001a00ac1414bb0000000000000000000000007f0000010000000000000000000000001a00041404000300f9000000fbffffffffffffff020000000000000074a30000002818d146e2fbf47a00000028bd700007350000"], 0xf0}}, 0xd4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000740)={{[0x6, 0x4, 0x26b1, 0x9]}, 0x0, 0x3, 0xfff, 0x0, &(0x7f0000000600)=[{{@_ha_fsid={[0x180, 0x8]}, {0x7, 0x9, 0xcf, 0x3}}, 0x8, 0x0, '\x00'}, {{@_ha_fsid={[0x5, 0x9]}, {0x1, 0x200, 0x7}}, 0x598, 0x0, '\x00'}, {{@_ha_fsid={[0xe0c9, 0x8]}, {0x3, 0x101, 0x14, 0x5}}, 0x300e, 0x0, '\x00'}, {{@align=0x1, {0xffff, 0xf4, 0x200, 0xeb5}}, 0x9, 0x0, '\x00'}, {{@_ha_fsid={[0x81, 0x7]}, {0x4, 0x0, 0xf, 0x1}}, 0x5fe, 0x0, '\'/)\x00'}, {{@align=0x200, {0x80, 0xc0a, 0x5, 0x7d}}, 0x0, 0x0, '&#\x00'}, {{@_ha_fsid={[0x0, 0xc942]}, {0xfffb, 0x7, 0x4, 0x4}}, 0x9, 0x0, '+-\x00'}, {{@align=0xfffffffffffffc00, {0x7, 0x8, 0xfd5, 0x2}}, 0x3, 0x0, '}-[\x00'}]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) (async) syz_usb_disconnect(r1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8085) (async) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_disconnect(r2) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) write$char_usb(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b04000000000000000002000000140004801000018008000100757000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a10"], 0x68}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="020708031e00000027bd7000fbdbdf2508001900000000000a004e2200000000fc020000000000000000000000000001e30000000a004e2000000007fc01000000000000000000000000000004000000010014000600000002000b00000000000100000000000000020013000000000027bd70000735000002000b0006000000000200000000000002001300070000002dbd70000135000005001a00ac1414bb0000000000000000000000007f0000010000000000000000000000001a00041404000300f9000000fbffffffffffffff020000000000000074a30000002818d146e2fbf47a00000028bd700007350000"], 0xf0}}, 0xd4) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000740)={{[0x6, 0x4, 0x26b1, 0x9]}, 0x0, 0x3, 0xfff, 0x0, &(0x7f0000000600)=[{{@_ha_fsid={[0x180, 0x8]}, {0x7, 0x9, 0xcf, 0x3}}, 0x8, 0x0, '\x00'}, {{@_ha_fsid={[0x5, 0x9]}, {0x1, 0x200, 0x7}}, 0x598, 0x0, '\x00'}, {{@_ha_fsid={[0xe0c9, 0x8]}, {0x3, 0x101, 0x14, 0x5}}, 0x300e, 0x0, '\x00'}, {{@align=0x1, {0xffff, 0xf4, 0x200, 0xeb5}}, 0x9, 0x0, '\x00'}, {{@_ha_fsid={[0x81, 0x7]}, {0x4, 0x0, 0xf, 0x1}}, 0x5fe, 0x0, '\'/)\x00'}, {{@align=0x200, {0x80, 0xc0a, 0x5, 0x7d}}, 0x0, 0x0, '&#\x00'}, {{@_ha_fsid={[0x0, 0xc942]}, {0xfffb, 0x7, 0x4, 0x4}}, 0x9, 0x0, '+-\x00'}, {{@align=0xfffffffffffffc00, {0x7, 0x8, 0xfd5, 0x2}}, 0x3, 0x0, '}-[\x00'}]}) (async) 1m47.700582676s ago: executing program 2 (id=3179): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) pipe2(&(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./dev/kmsg\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 1m46.725228356s ago: executing program 4 (id=3184): openat$dsp(0xffffffffffffff9c, &(0x7f0000000400), 0x82042, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c08001ae6000000000000f0dbdf250a8080000006001c004e220000"], 0x2c}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) sendmsg$tipc(r5, 0x0, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r6, &(0x7f0000000180)='transport=tcp,traddr=.27.0.0.1,trsvcid=4420,nqn=nqn.2014-08.org.nvmexpress:uu', 0x4d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m46.594782043s ago: executing program 2 (id=3185): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000002000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002140)=""/112, 0x70}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000003740)=""/251, 0xfb}, {&(0x7f0000003840)=""/203, 0xcb}, {&(0x7f0000003940)=""/88, 0x58}], 0x5, &(0x7f0000003a40)=""/8, 0x8}, 0x8001}], 0x1, 0x42, 0x0) sendmsg$unix(r2, 0x0, 0x400a004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='pipefs\x00', 0x80882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x1fffffe, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=ANY=[@ANYBLOB="50010000000000000300000000000000040000000000000003000000000000000080020000000000030000000000000009000000010001000600000000000000090000000000000004000000000000000b000000000000000600000000000000000000000000000002000000010000000600000000800000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="e99309135eb2bdb9c542dedd3a0c533b660fec15f85118ad0a1047ae6d0a0a0fbfbf66ef8bc5b754c66dbec5ca21d40187abe12a6f79f6ac19a388682b91c3929b54e720c98d327b3c26cc518df5b73ccbd93a762921f08e8591bf256f4e80a83d7284963068cac2447111896304b4f30acc161d7e6f706b5c7f82f0fc241b6b5bf0f968f42df4f258815806cf47dd5085de45ae3e01956651d97155edaf73ddb8a73d0d502873f933d0ac24a49047b9b562a46429783551d102e0d7bb56b7328259ddd4a13cd70d1b1022c2076e24b9fc9775054f539f274c738448425093270dd326be969fb52a66f5", @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000000000000000070000000000000001000000000300"/44], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002640), &(0x7f0000002680)=0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00434341cc281898dcea6be04202d2fa6486a792940632e0cfa5be62afbf0a649f687e0c846da008de6ed6cd15f837a974d9ab19cb3d"]) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m46.178624188s ago: executing program 2 (id=3186): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xe14fe1afe8ab4915, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r7 = fsopen(&(0x7f0000000140)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f68, 0xb}, 0x30, 0x0) landlock_restrict_self(r8, 0xe) r9 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x5, &(0x7f0000000480)={0x0, 0x6, 0x1, @thr={&(0x7f0000000040)="d583d485bae8c7aa15696169673f2f71b8df772273e856f15c2f", &(0x7f00000003c0)="e2081777846a1f6e3233b1ec0d2be929a27b9e3a00bdf30a845619a876836291d004c2476c46867b89e1a1751c70ef39f841b31f029db0bd4727b37c2792552b697531bb774c2ed97682947c7a082f23ffa81e2ba3a9cafc1bed391752c32dcf1fece83ae99ece56a28dc145791623071118de96d1baceaaa02b697b023db3b1fa0ce04416204302e595911fd3132a43da3cf41317a13317823d2fb17d75aa6ee8359c7e4114c3e974"}}, &(0x7f0000000500)) sendmsg$sock(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0}, 0x0) r10 = fsmount(r7, 0x0, 0x1) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) lseek(r11, 0xfe, 0x0) getdents(r11, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xf}, 0x3e}) 1m44.55941992s ago: executing program 3 (id=3188): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) nanosleep(0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$selinux_load(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="89", 0xfffff, 0x4044880, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e79") 1m43.446949447s ago: executing program 3 (id=3191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x700}, 0x28) 1m43.2456831s ago: executing program 4 (id=3192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=ANY=[@ANYBLOB="500000001000010400000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="43300012800c05002eae3863766c616e00200002800a000400aaaaaaaaaa14000008000300010000000800010010000000"], 0x50}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xffffffffffffffff, 0x100) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, 0x0) r8 = getpid() r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd30, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000810) sendmmsg$inet(r9, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r13, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78409e88509de050000000000f2170e65e3e10327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) 1m43.015392546s ago: executing program 3 (id=3193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xffff, 0xd}, {0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xcec}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000010002000008000f40fe000000", 0x24) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="06004000", @ANYRES16=0x0, @ANYBLOB="00022bb97000fedbdf256200feff070003003273077fd710f5da4d76e68557929e1a66c116a216e476fe1936ba5a759e013fc8ef96740d5636f91766b21fa4d2c5d72d1c709dcae0e4ad252419e7b2df457e9d574d108729fd9558b4786afc676ebcc94fbf86423e691c603109c33cc22f3faab4a54d15e7cc32ccf4761023a26c755742dcd30bb798283c4decfc294c8d80e0c3969dcdec0e9b5a1209d8f21a2b284aacc80c349d453da79fee0aeabeb30e815ddf88cb177427ece0372f36b78f1e22e6b6474c8880300cd3ccff5d2a6892a021924baab40255317ce89cb6f389e5072f491db070ecf0c61d06e14e663b495485759fa0b99688ba0965a23ce5f32c961a3dcba8a3fe7a0bb60d190baff788c65889fe6b84aedfb127a676c087272c219514f604a6c02dcc29e79daa802b57d067255ddbaa78e25d2af2668027f26b6d549c67c62075af6e30e8562553bc5e9931d74789a1788dc385f8ff494c134f313ba1293321b8fb392149341dc8fc4a1f66f0fb0d9b7d897c622c0bda76f9511dabc49639650b99810450064eb21b00d9fc76b6c00b02282d00", @ANYRES32=0x0, @ANYBLOB="0600b400240300000600b400050700000600b400a10200000600b300030000000600b400500c00000600b4007a1300000600b40014080000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) close(0xffffffffffffffff) io_uring_setup(0x533a, &(0x7f0000000040)={0x0, 0x3cb2, 0x800, 0xb, 0x20002f7}) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xce, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e2409570c0eeb87eddb94c3a900"/29], 0x27) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 1m41.911447142s ago: executing program 4 (id=3196): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400) r5 = dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_bond\x00', {}, 0x3}) inotify_rm_watch(r5, r4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa72bb08004504001ce20000000002867800000000e001030011009078000000"], 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m39.167454775s ago: executing program 3 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x144, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@iptfs_drop_time={0x8, 0x24, 0x8}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x144}}, 0x20048080) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a310000000008000300000000063000048008000100"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x64, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x240040c0) 1m38.999742795s ago: executing program 4 (id=3199): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001800070125bd7000fbdbdf254b693f00040009000c00b8"], 0x24}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xaa182, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x8000000, 0x1000, 0x40000001}}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ncpfs\x00', 0x2000000, 0x0) 1m38.913432993s ago: executing program 3 (id=3200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6(0xa, 0x4, 0x7ffffffc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="66b85d008ed8c744240010c99bf9c74424020c000000c7442406000000000f011424c744240047000000c7442402fcffffffff2c24660f381e2f0f015a1db9800000c00f3235000800000f308fe878c28fe3ed00007c0f237265410fc7b10000000066470f38828e30000000", 0x6c}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000240)="3a078f711f7578f06dfc34a7a398b47ef8c6678fc07039fb475212e395bea793ad930a5e2870ff479f5d032e74c99428cd5c68d32b850f75a8c708ffba9e435060c9d45e86347ddb8644e4c0bf", 0x4d}, {&(0x7f0000000400)}, {&(0x7f0000000700)="9b09fbb580652c19b14d7051dee001728b1da0660e799c98ff59e62a4c09c47ef859d872ef93633a39b57212eacad26f6b2d163db72669dabac3510702346871656554dc7078c8674144cc39b56bc7c92ccf344d97e9cbdeec06d84d769dc73bce4d390a39d6cabecd8f9fd1679873d9c33c62b1a566abeb1090bf7feb7a9663f7eb7d73166fee2f3fd9f665d273ee609f2117e23ba90f6d7cd3a4ad2c14b963027efae02d0493dba4b3471854f2910d8984ea5edd12a9ae96d2ea61b7e566a6707868c41c8ccea48d87", 0xca}], 0x3, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0, 0xffffffffffffff0e}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000840)={'\x00', 0x10, 0xa2, 0x7f, 0x0, 0xe, 0x2, 0xe000, '\x00', 0x1}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 1m38.699143751s ago: executing program 4 (id=3202): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) setresuid(0xee01, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf25090000000500070004000000050008000000000008000100020000"], 0x2c}}, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x40001, 0x0) 1m38.152847568s ago: executing program 4 (id=3203): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000600)) socket$inet(0x2, 0x3, 0x2) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = socket(0x2b, 0x1, 0xa0c7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00'}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0xffffffffffffffff, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x10000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x28a, 0xf, 0x80000006, 0x6}, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000ff0000000000000000"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x5, 0x3, 0x4, 0x4000, 0xf0, {0x0, 0x2710}, {0xa, 0x2, 0x80, 0x8, 0x2, 0xae, "8a5602a0"}, 0x4, 0x4, {&(0x7f0000000040)=[{0x0, 0x1, {}, 0xbfab}, {0x81, 0x9, {}, 0x9}]}, 0xe1c}) 1m36.226726958s ago: executing program 9 (id=3204): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c, 0x0}}], 0x1, 0x22008081) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:syz '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) vmsplice(r2, &(0x7f0000000080), 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r3, 0x4000, r2}, 0x18) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r5, 0x8004af80, &(0x7f0000000140)) 1m35.938178347s ago: executing program 3 (id=3205): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getrlimit(0x3, &(0x7f00000000c0)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x61263000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSMAXCID(r4, 0x80047458, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0xa}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000008, 0x7, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 1m35.487037985s ago: executing program 9 (id=3206): r0 = socket$nl_route(0x10, 0x3, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236", 0x31, 0x5, 0xffffffff}], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="5000000000000000170100000a0000003c000000bd19a432ebf2"], 0x50}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000300)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c48a495fe7b4ad514001062f581e6274d711db9add53f7917e1dc555ac517ae0000000000000030656808", 0x41}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018", @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1e}, 0x94) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x801, 0xfffffbfd, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x24040, 0x49880}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xa915}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}}, 0x8000) 1m34.816351006s ago: executing program 9 (id=3207): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204355050000000000000109022400010000002709040000fe0300330009210500fc0122280009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x22, 0x28, {0x28, 0x21, "38829a52834aa677c5f91f8a8b0be476b25ba1feabd7a36508071eba3c9c871dd59c2dc44f06"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000000), 0x40, 0x400) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008000200ac1414bb080003"], 0x2c}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) 1m33.778743986s ago: executing program 9 (id=3208): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xffff, 0xd}, {0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xcec}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000010002000008000f40fe000000", 0x24) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="06004000", @ANYRES16=0x0, @ANYBLOB="00022bb97000fedbdf256200feff070003003273077fd710f5da4d76e68557929e1a66c116a216e476fe1936ba5a759e013fc8ef96740d5636f91766b21fa4d2c5d72d1c709dcae0e4ad252419e7b2df457e9d574d108729fd9558b4786afc676ebcc94fbf86423e691c603109c33cc22f3faab4a54d15e7cc32ccf4761023a26c755742dcd30bb798283c4decfc294c8d80e0c3969dcdec0e9b5a1209d8f21a2b284aacc80c349d453da79fee0aeabeb30e815ddf88cb177427ece0372f36b78f1e22e6b6474c8880300cd3ccff5d2a6892a021924baab40255317ce89cb6f389e5072f491db070ecf0c61d06e14e663b495485759fa0b99688ba0965a23ce5f32c961a3dcba8a3fe7a0bb60d190baff788c65889fe6b84aedfb127a676c087272c219514f604a6c02dcc29e79daa802b57d067255ddbaa78e25d2af2668027f26b6d549c67c62075af6e30e8562553bc5e9931d74789a1788dc385f8ff494c134f313ba1293321b8fb392149341dc8fc4a1f66f0fb0d9b7d897c622c0bda76f9511dabc49639650b99810450064eb21b00d9fc76b6c00b02282d00", @ANYRES32=0x0, @ANYBLOB="0600b400240300000600b400050700000600b400a10200000600b300030000000600b400500c00000600b4007a1300000600b40014080000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) close(0xffffffffffffffff) io_uring_setup(0x533a, &(0x7f0000000040)={0x0, 0x3cb2, 0x800, 0xb, 0x20002f7}) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xce, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e2409570c0eeb87eddb94c3a900"/29], 0x27) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 1m31.786156282s ago: executing program 9 (id=3209): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400) r5 = dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_bond\x00', {}, 0x3}) inotify_rm_watch(r5, r4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa72bb08004504001ce20000000002867800000000e001030011009078000000"], 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m30.494788818s ago: executing program 60 (id=3186): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xe14fe1afe8ab4915, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r7 = fsopen(&(0x7f0000000140)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f68, 0xb}, 0x30, 0x0) landlock_restrict_self(r8, 0xe) r9 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x5, &(0x7f0000000480)={0x0, 0x6, 0x1, @thr={&(0x7f0000000040)="d583d485bae8c7aa15696169673f2f71b8df772273e856f15c2f", &(0x7f00000003c0)="e2081777846a1f6e3233b1ec0d2be929a27b9e3a00bdf30a845619a876836291d004c2476c46867b89e1a1751c70ef39f841b31f029db0bd4727b37c2792552b697531bb774c2ed97682947c7a082f23ffa81e2ba3a9cafc1bed391752c32dcf1fece83ae99ece56a28dc145791623071118de96d1baceaaa02b697b023db3b1fa0ce04416204302e595911fd3132a43da3cf41317a13317823d2fb17d75aa6ee8359c7e4114c3e974"}}, &(0x7f0000000500)) sendmsg$sock(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0}, 0x0) r10 = fsmount(r7, 0x0, 0x1) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) lseek(r11, 0xfe, 0x0) getdents(r11, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xf}, 0x3e}) 1m30.177890804s ago: executing program 9 (id=3211): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = socket(0x2b, 0x1, 0xa0c7) r1 = socket(0x11, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x0, @mcast2, 0x9}, {0xa, 0x4e23, 0x61, @loopback, 0x7}, 0x0, {[0x100, 0x100, 0xd19, 0xea, 0x100, 0x3, 0x8, 0x6]}}, 0x5c) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) readv(r2, &(0x7f0000001900)=[{&(0x7f00000004c0)=""/73, 0x49}], 0x1) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb4}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) fsopen(0x0, 0x1) write(r3, &(0x7f0000000080)="520003000100b8", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/raw_syscalls/sys_enter/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8, 0x700, 0x9, 0x7fff, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @broadcast, @private=0xa010101}}}}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r9, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x8, 0x20000006, 0x4000, r7, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x200}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 1m22.346056619s ago: executing program 61 (id=3203): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000600)) socket$inet(0x2, 0x3, 0x2) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = socket(0x2b, 0x1, 0xa0c7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00'}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0xffffffffffffffff, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x10000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x28a, 0xf, 0x80000006, 0x6}, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000ff0000000000000000"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x5, 0x3, 0x4, 0x4000, 0xf0, {0x0, 0x2710}, {0xa, 0x2, 0x80, 0x8, 0x2, 0xae, "8a5602a0"}, 0x4, 0x4, {&(0x7f0000000040)=[{0x0, 0x1, {}, 0xbfab}, {0x81, 0x9, {}, 0x9}]}, 0xe1c}) 1m20.842719092s ago: executing program 62 (id=3205): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getrlimit(0x3, &(0x7f00000000c0)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x61263000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSMAXCID(r4, 0x80047458, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0xa}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000008, 0x7, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 1m14.822115193s ago: executing program 63 (id=3211): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = socket(0x2b, 0x1, 0xa0c7) r1 = socket(0x11, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x0, @mcast2, 0x9}, {0xa, 0x4e23, 0x61, @loopback, 0x7}, 0x0, {[0x100, 0x100, 0xd19, 0xea, 0x100, 0x3, 0x8, 0x6]}}, 0x5c) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) readv(r2, &(0x7f0000001900)=[{&(0x7f00000004c0)=""/73, 0x49}], 0x1) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb4}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) fsopen(0x0, 0x1) write(r3, &(0x7f0000000080)="520003000100b8", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/raw_syscalls/sys_enter/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8, 0x700, 0x9, 0x7fff, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @broadcast, @private=0xa010101}}}}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r9, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x8, 0x20000006, 0x4000, r7, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x200}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 1m12.647544958s ago: executing program 8 (id=3210): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @private=0xa010100}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r3, 0x801, 0x70bd29, 0x0, {0x7, 0x0, 0xf0ff}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x1, 0x10709f2c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000020) 1m12.415560487s ago: executing program 8 (id=3228): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="3bf9af4e9397ab8817b182dbf09e93152e0e88ec93014b8841a10412ca9ed883d84dce023ddbdc49c135c5a52620b6bebfc94577284c20da35497ab08ad79af99975b29e34e7a5b5c34d4e2803c4f240bfd3df35a96df38c30dbfc971128e80b24e39b9b95327c029cfde98bf7255d33ec6fc29b05b2d574a52a2ee03d0848f7bcb6fe6a65c557236270e09ecbd509649fc6a16f3044c08ab6342f4ee30cb2602fd7fd6211b8e6b0bfaa86cc88098441ce6b7bf7ddf61638990d7a523b44cd95b374fab3fe59eb07f3ac51bfe7546f2d57049136dc96fbf317a1eac99af7bc58d9c4289de2c981d31f", 0xe9}, {&(0x7f0000000540)="9ca1f4698a01d4fb93b6ec43fc25470e864d7036ef9166e10c73066d471fd45c1f78edca7bb9ce1d7f5a8b1c91aaa1fd32d6e71ddc609a14e5540a858a2cd1e6b3131eea20d24a7ed896217a26a23d04ed99af915c6b30d38717b83375d571c69906b0a78d5ab64605a94dcde40b40565becbace1b62e4fd7b80ec6ab328c18d93a41b916670e26576f55ab20d7690fb2b8a7e89045a8f49", 0x98}], 0x2}, 0x20000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{0x8c, 0x791}]}}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000200)={0x31, &(0x7f0000000080)=[{0x10, '\x00', @st={0x4, [{0x3, @svalue=0xc0}, {0x1, @svalue=0x3}, {0x0, @svalue=0x7ff}, {0x3, @uvalue=0x1}]}, 0x6}, {0x2f, '\x00', @buffer={"c451ea6b65438b7f0f0312f9337312d969d50ce97c8757b68a73a94c64bc9424", 0x20}, 0x8000}, {0xd, '\x00', @buffer={"e218dcbc3630e64473f88acc1530a1f06747969346671c1e0491a8381cf77100", 0x20}}, {0x16, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x1, @svalue}, {0x3, @uvalue=0x4}, {0x1, @svalue=0xfc}]}, 0xfffffffa}, {0x41, '\x00', @st={0x4, [{0x0, @uvalue=0x3}, {0x0, @uvalue=0x7f}, {0x1, @svalue=0x10000}, {0x1, @uvalue=0xd}]}, 0x8}]}) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf25000000003ab16254cfac3172646f129bcbd89901bb6f9971aa2441813ec12871f33a574cc965bcff1b1ab143d9ab2cfe3aa5dc", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000e0064885d0d916076f35a69c9"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x66, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000140)={{0x8, 0x4, 0x0, 0x7fff}, 'syz0\x00', 0x13}) 1m8.957465053s ago: executing program 8 (id=3236): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000180100002020732500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x36, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0x80) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000200)={0x0, 0xfffffffc, 0x2}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r9, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000280)='L', 0x1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(r10, 0xffffffffffffffff, 0x200000000000000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c0000b503007000fedbdf2507000000", @ANYRES32=r12, @ANYBLOB="80007f060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r13 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r13, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 1m5.153553129s ago: executing program 8 (id=3241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x7, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0xbc129e7eab79ddfa) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) close(0x3) write(r2, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 53.722209357s ago: executing program 0 (id=3218): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x104003, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x1, r1, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 53.373009087s ago: executing program 0 (id=3250): r0 = inotify_init1(0x800) r1 = inotify_add_watch(r0, 0x0, 0x44000160) r2 = dup(r0) inotify_rm_watch(r2, r1) 53.104383704s ago: executing program 0 (id=3251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc657}, 0x50) 52.811537427s ago: executing program 0 (id=3253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffb, 0x20b, 0x1, @scatter={0x2, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/76, 0x4c}]}, &(0x7f00000004c0)="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", 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0}) set_mempolicy(0x8000, &(0x7f00000000c0)=0x8, 0xfffffffffffffffb) 51.293082202s ago: executing program 0 (id=3255): r0 = memfd_create(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1000000?', 0x8) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace(0x10, r5) ptrace(0x8, r5) (async) ptrace(0x8, r5) wait4(0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000840), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0xffff, r8, 0x42, 0xc6, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x840) sendmsg$inet(r0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000240)="d4f61ca74fd04faa0a83b70fb909d96e1c5f288eb500ec2096ab77dbb3dfec7d246ca1e7f40c58e417ff8342448a993b569773c6469cd4d22f0f753785d33fe4ad7d2d373b54fca8cb0bc3e187275c12ab60f1b6e87467fefe316c9298ebed8b005fe65dc9b1ef811a97cd9f99186a002ec7a630096d71cc6fba4ee564d30cbe6b6c31e7a6ad296e0bd4bc95ec34a4bc45367b8c6611c2cce2389e80ef4c89262f8e", 0xa2}, {&(0x7f0000000300)="803e97ea288d26678375750ef86cb97525cc01ec256125a415831cd2a952041db8250b3ae3e2733afaac0fd4e584adffa93fc2bbadcfa89cba57397150c007ca9a2dc147d6532a169721a237d0447863265f8cd699763586950ea5002ea4380d36c8d1a64d26ab16a07afc69bcf56483b499d05ba7423239ad0ed739b2beb121024ea2b3d9f2d853e0baea11fade55da8d507533f2c0bbd30e9fb698d3b79ad31c1340f075b8226bfde1b7a56ae7e831e1685328b56ef7f9b428", 0xba}, {&(0x7f00000003c0)="e459300cec5edc19738e7c422e61f12cd99b3e286ef9d4f76777f6552e7435d79080aac5a069968bb5f13af38a09d1bc6a447696c8d9163db87ea985938cadd1da4b40492da9d880e634129d739bf1bb1af0cefc918ce5c3f510f4b3ac346655488448037d746a92fd6ca9d892a60f557204461433e382f48d14aee93e44f3f31241d869f48a974fa58b7979d53f971ee387b8ea8a8b7be48e9227f80a2fa133f8453927622647d0cf6f83aa551bacbb2fe9cbe5a2096d0b8c70532f52420413ece3e28ec4d534aaa3bbbb9bf8abb2ba8d1de9e1f0514ed66b83f2de41a430f92b488bfe569d8bf6287c539b36c0", 0xee}, {&(0x7f00000004c0)="17c3f5cdc65c2f922ceaf0a0b5adc111", 0x10}, {&(0x7f0000000500)="8b73d6dfc52701d22245200a7c99591c2d830a54f4276e69bf52ce9213cea7970c86f85839ab018f90850ba89dd61d7e98cf790bc23ac479d73887fff3a698733f94e5d91f3fa606983fed9f87c3c0a8482cdb44127f1fff2873fad818e4a1be7dac24b3628e295eb3dbfb0c8552f2b9d0ec2eb978613fb596fd12403d19b16f83", 0x81}, {&(0x7f00000005c0)="89794852a6847b6e8079539b35d6c235d094d7029f05ce1f1a9e07f68275b3080af6169c6d18270ded6e6b05294e4ca8f6738507c728c4ffbf4da2f0f1ddec", 0x3f}], 0x6, &(0x7f0000000a00)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x44, 0x9, "507f8304533f76"}, @timestamp_prespec={0x44, 0x2c, 0x3b, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x5db2}, {@loopback, 0x7}, {@local, 0xe3}, {@broadcast, 0x3}]}, @rr={0x7, 0xb, 0x15, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast2]}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf5, [@empty, @remote, @local]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xef}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xc4, [@multicast2, @broadcast, @empty, @empty]}, @generic={0x88, 0x4, "cfe1"}, @cipso={0x86, 0x4e, 0x2, [{0x5, 0xd, "bced4c9ca43b0de2bdee39"}, {0x2, 0x7, "81cae28d70"}, {0x6, 0x12, "919e3e1bae7823727c3e2fbd89385f4b"}, {0x2, 0x11, "9a3f94a75d6c1fbae4ef4a62f9db42"}, {0x5, 0x4, "8404"}, {0x5, 0xd, "a99e4476d35785086a6029"}]}, @rr={0x7, 0x17, 0xa4, [@local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @loopback]}]}}}], 0x188}, 0x90) 50.885303588s ago: executing program 0 (id=3256): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000020002000000f6ff010000000000000002"], 0x24, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 48.868600511s ago: executing program 64 (id=3241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x7, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0xbc129e7eab79ddfa) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) close(0x3) write(r2, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 32.17799387s ago: executing program 65 (id=3256): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000020002000000f6ff010000000000000002"], 0x24, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 16.967032629s ago: executing program 6 (id=3299): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000001c0)={0x10, 0x0, r3}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000400)={0x10, 0x1, r3}) 12.337150829s ago: executing program 5 (id=3302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @local}, 0x80) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010028000000140008004500003c000000004084ca2502020202ac14000104d23210"], 0x4a) 10.40045528s ago: executing program 6 (id=3303): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x181002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x100000000000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 10.154990846s ago: executing program 6 (id=3304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4001, 0x1100000000000000, 0x7, 0x8001, 0x0, 0x400000, 0xd, 0x0, 0x8e00, 0x7fffffffffffffff, 0x6, 0x401, 0x9, 0x5, 0x20000001, 0xc], 0x2, 0x1354}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x80c00, 0xad556b03cf30b4b3) fanotify_mark(0xffffffffffffffff, 0x441, 0x800003b, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89ff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000a7f0000000000000500000002540101020000001801000020786c2500000000002020207b1af8ff0000000001a100000000000007010000f8ffffffb7020000ebffffffb6030000090000008500000006000000950000000000000098aee4e5ab9d524d53a71e31f59251700371a4fc92d52763d1b5b8ccce1d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24ad, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, 0x1c) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) userfaultfd(0x1) 9.080310959s ago: executing program 5 (id=3306): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0xa00, {r2}}, 0x58) 8.970528279s ago: executing program 6 (id=3307): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffc, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x84000000000000, 0x2003) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r4, 0x0, 0x0, 0x4008044, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)='}', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 8.92186919s ago: executing program 1 (id=3308): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000000340)=""/19, 0x13, 0x0) 7.611809289s ago: executing program 5 (id=3309): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getrlimit(0x6, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe"], 0xd8}}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x6d) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r6, &(0x7f0000000200), 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 7.50177473s ago: executing program 1 (id=3310): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = io_uring_setup(0x5c41, &(0x7f0000000300)={0x0, 0x6053, 0x803, 0x1, 0x99}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000000c0), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000080), 0x4) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x0) 3.511222308s ago: executing program 5 (id=3311): socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000018) 3.413137732s ago: executing program 1 (id=3312): r0 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x10001) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000540)='cifs.idmap\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000680)='syzkaller\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000440), &(0x7f0000000700)="49e3e89bbaa7e1973359d2436b77052b4589ae29596033e4f0b9508b12fa61a53461d0289b1da2115e0d5cca62713fc3dcbd28c799573cb0e44694663d05a91fb6b5d3a07da808278253dda666e215fbd2496be147a47db990fd0569819740bf619712f2ad5bc9764e02f19bb069ea65a2f9cbd19a5e27d2422e1fc55bb9ea5d7783b6dca47999835f4a6ac0f291a984f8b7a7414b4cfab402962652cc44acffc45df3c94a0123ed20bfae176f98cf2afc269f6a443e0de80d0ae00ce9c8a62f497089de5f1f606dde6f2eefa963fd2d0c6ec9199c9398ef8aed33772fa5d97bd97916", 0xe3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r3, r1}, &(0x7f0000000240)=""/69, 0xfffffffffffffe00, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0xa6080, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x124) 3.271883327s ago: executing program 6 (id=3313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000010a01010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000485}, 0x4000000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.184040089s ago: executing program 5 (id=3314): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x82) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x20, 0x8a, 0xfffffffd, 0x4, 0x2000000, 0x0, 0x6, 0x3}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="6d0800000080"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000ce000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="0f0014f30fc2fd000f0014f30f3566b9260000000f01d9670f080fb2685bf2edb807018ec8ba420066b8ac0000000f23d00f21f866350000000e0f23f8ee", 0x3e}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x5, 0x7, 0x100000002], 0x4, 0x290fc4}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.763585466s ago: executing program 1 (id=3315): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/10, 0x5b) read$hidraw(0xffffffffffffffff, &(0x7f0000000180)=""/124, 0x7c) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4ea3, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) 1.679390405s ago: executing program 1 (id=3316): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_io_uring_setup(0x1251, &(0x7f0000000100)={0x0, 0x100577, 0x1, 0x2, 0x42}, &(0x7f0000000340), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3ff, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x8}}, [@TCA_RATE={0x6, 0x5, {0xfd, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x840) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, 0x0, 0x590) write$dsp(r0, &(0x7f0000000280)='5GV', 0x3) close(r0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r11, &(0x7f00000002c0)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="3437c4c5ca4fefb398fe4e913e544b42b74d2129fc31888522a97ef9a760"], 0xfdef) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000005c0)={"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"}) r12 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_GETINFO(r12, 0xffffffff80000500, r13, &(0x7f0000000240)) ioctl$NBD_SET_BLKSIZE(r12, 0xab01, 0x101) 576.196724ms ago: executing program 5 (id=3317): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x24000, 0x23) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xcc, 0xb, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8f}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x20008080) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x1, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x6, 0x8f3b8, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x93, 0xf, 0x3, 0x9, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x40704}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff"], 0x48) r6 = syz_open_dev$mtd(&(0x7f0000000000), 0x79, 0x4a73478455c69c4a) ioctl$MEMGETREGIONCOUNT(r6, 0x80044d07, &(0x7f0000000100)) 320.557127ms ago: executing program 6 (id=3318): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2242, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000000340)=""/19, 0x13, 0x0) 0s ago: executing program 1 (id=3319): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getrlimit(0x6, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe"], 0xd8}}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x6d) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r6, &(0x7f0000000200), 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): 342101][T21755] should_fail_ex.cold+0x5/0xa [ 1596.342116][T21755] _copy_from_user+0x2e/0xd0 [ 1596.342135][T21755] video_usercopy+0xe71/0x1730 [ 1596.342155][T21755] ? __pfx___video_do_ioctl+0x10/0x10 [ 1596.342171][T21755] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1596.342191][T21755] ? __pfx_video_usercopy+0x10/0x10 [ 1596.342215][T21755] v4l2_ioctl+0x1bd/0x250 [ 1596.342231][T21755] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1596.342248][T21755] __x64_sys_ioctl+0x18e/0x210 [ 1596.342269][T21755] do_syscall_64+0x115/0x870 [ 1596.342283][T21755] ? clear_bhb_loop+0x70/0xc0 [ 1596.342297][T21755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.342309][T21755] RIP: 0033:0x7faba8f9e0d9 [ 1596.342320][T21755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.342331][T21755] RSP: 002b:00007faba9eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.342342][T21755] RAX: ffffffffffffffda RBX: 00007faba9225fa0 RCX: 00007faba8f9e0d9 [ 1596.342349][T21755] RDX: 0000200000000580 RSI: 00000000c0405665 RDI: 0000000000000003 [ 1596.342356][T21755] RBP: 00007faba9eed090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.342363][T21755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.342369][T21755] R13: 00007faba9226038 R14: 00007faba9225fa0 R15: 00007ffcfbf91768 [ 1596.342383][T21755] [ 1596.655039][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1596.768121][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.807497][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1596.809355][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1596.809382][ T10] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1596.809394][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1596.809426][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1596.809452][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1596.812309][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1596.812334][ T10] usb 10-1: Product: syz [ 1596.812344][ T10] usb 10-1: Manufacturer: syz [ 1596.819653][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 1596.819676][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 1596.830205][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1596.830230][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 1597.026064][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1597.118424][ T30] audit: type=1400 audit(1786907625.335:2104): avc: denied { write } for pid=21737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1597.121113][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.121203][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.121382][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.121395][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.121572][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.121582][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.121743][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.121755][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.121917][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.121928][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.122090][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.122100][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.122271][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.122283][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.122440][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.122452][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.122625][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.122641][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.122713][ T5328] usb 10-1: USB disconnect, device number 4 [ 1597.122803][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.122813][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.122821][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1597.173851][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1597.175308][ T9] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1597.181212][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1597.192859][ T9] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1597.192887][ T9] usb 8-1: Product: syz [ 1597.192906][ T9] usb 8-1: Manufacturer: syz [ 1597.192915][ T9] usb 8-1: SerialNumber: syz [ 1597.329552][T21754] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3075'. [ 1597.401040][ T9] usb 8-1: Invalid connection information received from device [ 1597.508771][ T30] audit: type=1400 audit(1786907625.735:2105): avc: denied { write } for pid=21775 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1597.733591][ T30] audit: type=1400 audit(1786907625.955:2106): avc: denied { read append } for pid=21779 comm="syz.3.3081" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1597.781217][ T5328] usb 8-1: USB disconnect, device number 14 [ 1597.834063][T20177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.836158][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.836527][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.476696][T21780] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1598.478239][T21780] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1598.478305][T21780] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1599.090705][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.711339][T21780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1599.711396][T21780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1599.747560][T21780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1599.747621][T21780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1599.784802][T21780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1599.941448][T18739] Bluetooth: hci4: command 0x0c1a tx timeout [ 1600.935425][T18739] Bluetooth: hci5: command 0x0406 tx timeout [ 1600.969905][T21687] net_ratelimit: 3 callbacks suppressed [ 1600.969928][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.935790][T18739] Bluetooth: hci2: command 0x0406 tx timeout [ 1601.935892][T18739] Bluetooth: hci3: command 0x0c1a tx timeout [ 1601.937367][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1602.974510][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.004325][ T5602] Bluetooth: hci5: command 0x0406 tx timeout [ 1604.118381][T18739] Bluetooth: hci2: command 0x0406 tx timeout [ 1604.118514][ T5602] Bluetooth: hci3: command 0x0c1a tx timeout [ 1604.187806][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.782264][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.832395][T21831] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 1606.814283][ T5602] Bluetooth: hci3: command 0x0c1a tx timeout [ 1606.994537][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.152883][T21851] overlayfs: workdir and upperdir must be separate subtrees [ 1607.495454][T18739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1607.497616][T18739] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1607.498476][T18739] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1607.499089][T18739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1607.499471][T18739] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1608.651860][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.651906][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.665425][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.814263][ T5730] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1608.925285][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.944106][ T5730] usb 8-1: device descriptor read/64, error -71 [ 1609.125947][ T30] audit: type=1400 audit(1786907637.345:2107): avc: denied { write } for pid=21827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1609.189181][ T5730] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1609.333869][ T5730] usb 8-1: device descriptor read/64, error -71 [ 1609.445275][ T5730] usb usb8-port1: attempt power cycle [ 1609.890492][ T5602] Bluetooth: hci6: command tx timeout [ 1609.914316][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.928390][ T30] audit: type=1400 audit(1786907638.155:2108): avc: denied { write } for pid=21872 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1609.943926][ T5730] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1609.976664][ T5730] usb 8-1: device descriptor read/8, error -71 [ 1610.210614][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.213580][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.214859][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.215057][ T5730] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1610.215245][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.237474][ T5730] usb 8-1: device descriptor read/8, error -71 [ 1610.344903][ T5730] usb usb8-port1: unable to enumerate USB device [ 1610.526555][T21856] syzkaller0 speed is unknown, defaulting to 1000 [ 1611.938338][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.964052][ T5602] Bluetooth: hci6: command tx timeout [ 1613.444335][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.444438][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.438480][ T5602] Bluetooth: hci6: command tx timeout [ 1615.462635][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.956439][T21909] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3105'. [ 1615.966390][T16025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.969847][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.974761][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.022833][ T30] audit: type=1400 audit(1786907644.245:2109): avc: denied { name_bind 0x1000000 } for pid=21908 comm="syz.7.3105" path="socket:[103997]" dev="sockfs" ino=103997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1616.081420][ T30] audit: type=1400 audit(1786907644.305:2110): avc: denied { ioctl } for pid=21908 comm="syz.7.3105" path="socket:[103996]" dev="sockfs" ino=103996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1616.166285][T21913] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3107'. [ 1616.242569][T21923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3105'. [ 1616.242670][T21923] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3105'. [ 1616.280168][ T30] audit: type=1400 audit(1786907644.505:2111): avc: denied { read } for pid=21908 comm="syz.7.3105" path="socket:[103996]" dev="sockfs" ino=103996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1616.436591][T21924] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 1616.452405][ T5602] Bluetooth: hci6: command tx timeout [ 1616.561295][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.641175][ T30] audit: type=1400 audit(1786907644.865:2112): avc: denied { write } for pid=21883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.160227][T21940] syz.9.3108 (21940): drop_caches: 2 [ 1617.410131][ T30] audit: type=1400 audit(1786907645.635:2113): avc: denied { write } for pid=21947 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.414955][T21856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.415029][T21856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.415286][T21856] bridge_slave_0: entered allmulticast mode [ 1617.458892][T21856] bridge_slave_0: entered promiscuous mode [ 1617.476321][T21856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.488627][T21856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.488884][T21856] bridge_slave_1: entered allmulticast mode [ 1617.490037][T21856] bridge_slave_1: entered promiscuous mode [ 1617.565486][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.714523][T21856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.752239][T21856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.893658][T18501] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1618.916595][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.921482][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.948514][T21856] team0: Port device team_slave_0 added [ 1619.024142][T18501] usb 8-1: device descriptor read/64, error -71 [ 1619.036131][T21856] team0: Port device team_slave_1 added [ 1619.053922][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.273831][T18501] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1619.448999][T18501] usb 8-1: device descriptor read/64, error -71 [ 1619.553991][T18501] usb usb8-port1: attempt power cycle [ 1619.695907][T21856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.695929][T21856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.695945][T21856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.015300][T18501] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1620.547787][T21856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.547802][T21856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.547826][T21856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.716894][T21963] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 1620.744991][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.801867][T18501] usb 8-1: device descriptor read/8, error -71 [ 1621.085109][T20177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.089840][T21856] hsr_slave_0: entered promiscuous mode [ 1621.108778][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.115548][T21856] hsr_slave_1: entered promiscuous mode [ 1621.116014][T21856] debugfs: 'hsr0' already exists in 'hsr' [ 1621.116036][T21856] Cannot create hsr debugfs directory [ 1621.175678][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.529274][T21982] netlink: 'syz.7.3119': attribute type 2 has an invalid length. [ 1621.709889][ T30] audit: type=1400 audit(1786907649.935:2114): avc: denied { read } for pid=21984 comm="syz.9.3120" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1621.729954][ T30] audit: type=1400 audit(1786907649.955:2115): avc: denied { ioctl } for pid=21984 comm="syz.9.3120" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1621.874997][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.930066][ T30] audit: type=1400 audit(1786907650.155:2116): avc: denied { write } for pid=21958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1623.060093][ T5602] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1623.077999][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.488919][ T30] audit: type=1400 audit(1786907651.715:2117): avc: denied { write } for pid=21999 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1624.826386][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.826485][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.584494][T22012] xt_hashlimit: size too large, truncated to 1048576 [ 1625.889470][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.901894][T18501] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1626.928436][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.065319][T18501] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1627.067389][T18501] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.067426][T18501] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1627.067452][T18501] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.067484][T18501] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.069592][T18501] usb 8-1: config 0 descriptor?? [ 1627.369769][T22025] xt_hashlimit: size too large, truncated to 1048576 [ 1627.423849][T18501] usb 8-1: USB disconnect, device number 23 [ 1627.891430][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.026677][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.278895][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.750228][ T30] audit: type=1400 audit(1786907656.975:2118): avc: denied { write } for pid=22020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.004583][T21806] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1629.057579][ T30] audit: type=1400 audit(1786907657.275:2119): avc: denied { write } for pid=22060 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.094704][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.246982][T21806] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1629.248779][T21806] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 1629.248795][T21806] usb 10-1: config 1 has no interface number 0 [ 1629.248825][T21806] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 32 [ 1629.248851][T21806] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x8E has invalid maxpacket 65497, setting to 1024 [ 1629.248876][T21806] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 1629.251842][T21806] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.251867][T21806] usb 10-1: Product: syz [ 1629.251877][T21806] usb 10-1: Manufacturer: syz [ 1629.251896][T21806] usb 10-1: SerialNumber: syz [ 1629.258068][T22055] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1629.258156][T22055] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1630.268042][T22055] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1630.268128][T22055] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1630.270137][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.280881][T21806] usb 10-1: No status endpoint found [ 1630.809115][T21806] usb 10-1: USB disconnect, device number 5 [ 1631.610483][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.610618][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.967570][T21856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1631.974936][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1631.975655][T21856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1631.981462][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1632.024519][T21856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1632.049248][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1632.051104][T21856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1632.081133][T21856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1632.289000][T22086] Bluetooth: MGMT ver 1.23 [ 1632.565162][T21856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.641468][T21856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.662026][ T30] audit: type=1400 audit(1786907660.885:2120): avc: denied { write } for pid=22067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1632.669334][T20171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.669399][T20171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.694012][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.713211][T20175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.713277][T20175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.171050][ T30] audit: type=1400 audit(1786907661.395:2121): avc: denied { write } for pid=22098 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.730391][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.443116][T22121] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1634.448078][ T30] audit: type=1400 audit(1786907662.675:2122): avc: denied { relabelto } for pid=22120 comm="syz.3.3137" name="135" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1634.448131][ T30] audit: type=1400 audit(1786907662.675:2123): avc: denied { associate } for pid=22120 comm="syz.3.3137" name="135" dev="tmpfs" ino=743 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1634.448986][ T30] audit: type=1400 audit(1786907662.675:2124): avc: denied { write } for pid=22120 comm="syz.3.3137" name="135" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1634.451120][ T30] audit: type=1400 audit(1786907662.675:2125): avc: denied { add_name } for pid=22120 comm="syz.3.3137" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1634.456769][ T30] audit: type=1400 audit(1786907662.685:2126): avc: denied { create } for pid=22120 comm="syz.3.3137" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1634.456827][ T30] audit: type=1400 audit(1786907662.685:2127): avc: denied { associate } for pid=22120 comm="syz.3.3137" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1634.709268][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.988174][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.125435][ T30] audit: type=1400 audit(1786907663.355:2128): avc: denied { write } for pid=18981 comm="syz-executor" name="135" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1635.126530][ T30] audit: type=1400 audit(1786907663.355:2129): avc: denied { remove_name } for pid=18981 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1635.126587][ T30] audit: type=1400 audit(1786907663.355:2130): avc: denied { unlink } for pid=18981 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1635.126628][ T30] audit: type=1400 audit(1786907663.355:2131): avc: denied { write } for pid=18981 comm="syz-executor" name="135" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1635.451299][T22137] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3145'. [ 1635.471060][T21856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.879980][T22146] binder: 22144:22146 unknown command 0 [ 1635.880006][T22146] binder: 22144:22146 ioctl c0306201 2000000001c0 returned -22 [ 1635.921823][T22141] xt_hashlimit: size too large, truncated to 1048576 [ 1636.303198][T21687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.559605][T21687] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1636.732303][T21687] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1636.744033][T21687] usb 10-1: not running at top speed; connect to a high speed hub [ 1636.744066][T21687] usb 10-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1636.747123][T21687] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.747150][T21687] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1636.750030][T21687] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.750057][T21687] usb 10-1: Product: syz [ 1636.750066][T21687] usb 10-1: Manufacturer: syz [ 1636.750076][T21687] usb 10-1: SerialNumber: syz [ 1637.325071][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.630045][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.630186][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.651037][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.677598][T21856] veth0_vlan: entered promiscuous mode [ 1639.039350][T21856] veth1_vlan: entered promiscuous mode [ 1639.346210][T21856] veth0_macvtap: entered promiscuous mode [ 1639.381026][T21856] veth1_macvtap: entered promiscuous mode [ 1639.501012][T21856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1639.519501][T21856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.534878][T20181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.535038][T20181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.535142][T20181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.535237][T20181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.587620][T21687] usb 10-1: USB disconnect, device number 6 [ 1639.595111][T22188] dlm: non-version read from control device 8224 [ 1639.771395][T20002] udevd[20002]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1639.835232][ T10] page_pool_release_retry() stalled pool shutdown: id 272, 1 inflight 60 sec [ 1639.852278][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.131799][T20171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.131821][T20171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.321605][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1640.321625][ T30] audit: type=1400 audit(1786907668.545:2139): avc: denied { write } for pid=22167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1640.387000][T12169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.387027][T12169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.734737][T21806] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1640.878868][ T30] audit: type=1400 audit(1786907669.105:2140): avc: denied { write } for pid=22207 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1640.932672][T21806] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1641.023117][T21806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.117611][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.181593][T21806] usb 10-1: config 0 descriptor?? [ 1641.806124][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.065270][ T30] audit: type=1400 audit(1786907670.295:2141): avc: denied { cmd } for pid=22208 comm="syz.4.3092" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1642.244961][ T5730] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1642.269767][T21806] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1642.290652][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.296118][T22202] loop7: detected capacity change from 0 to 16384 [ 1642.436425][ T5730] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 1642.465367][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.465410][ T5730] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1642.477955][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.477989][ T5730] usb 3-1: Product: syz [ 1642.478008][ T5730] usb 3-1: Manufacturer: syz [ 1642.478018][ T5730] usb 3-1: SerialNumber: syz [ 1642.529597][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1642.558863][T22221] loop7: detected capacity change from 16384 to 0 [ 1642.585367][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1642.585444][ C0] buffer_io_error: 11 callbacks suppressed [ 1642.585460][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1642.620900][T21806] [drm:udl_init] *ERROR* Selecting channel failed [ 1642.682391][T21806] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1642.682434][T21806] [drm] Initialized udl on minor 2 [ 1642.716390][T21806] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1642.716716][T21806] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1642.749073][T21806] usb 10-1: USB disconnect, device number 7 [ 1642.797092][T18501] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1642.870816][T18501] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1643.108931][ T30] audit: type=1400 audit(1786907671.335:2142): avc: denied { append } for pid=22230 comm="syz.4.3164" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1643.738546][ T5730] ath6kl: Failed to submit usb control message: -110 [ 1643.738587][ T5730] ath6kl: unable to send the bmi data to the device: -110 [ 1643.738608][ T5730] ath6kl: Unable to send get target info: -110 [ 1643.786309][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.266198][ T5730] ath6kl: Failed to init ath6kl core: -110 [ 1644.267641][ T5730] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 1644.848502][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.848632][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.865634][T18513] usb 3-1: USB disconnect, device number 117 [ 1645.451924][T22230] Process accounting resumed [ 1645.776141][ T5730] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1645.936164][ T5730] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1645.936992][ T5730] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1645.937018][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.937040][ T5730] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1645.937073][ T5730] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.958850][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1645.958879][ T5730] usb 3-1: Product: syz [ 1645.958899][ T5730] usb 3-1: Manufacturer: syz [ 1646.054323][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.074031][T22252] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1646.108399][ T5730] cdc_wdm 3-1:1.0: skipping garbage [ 1646.108424][ T5730] cdc_wdm 3-1:1.0: skipping garbage [ 1646.115647][ T5730] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1646.115671][ T5730] cdc_wdm 3-1:1.0: Unknown control protocol [ 1646.133761][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1646.153942][T18966] syz_tun (unregistering): left allmulticast mode [ 1646.156262][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1646.158174][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1646.158771][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1646.159154][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1646.317233][ T5730] usb 3-1: USB disconnect, device number 118 [ 1646.464983][ T30] audit: type=1400 audit(1786907674.695:2143): avc: denied { ioctl } for pid=22264 comm="syz.3.3173" path="socket:[105881]" dev="sockfs" ino=105881 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1646.781508][ T5730] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1646.867136][ T30] audit: type=1400 audit(1786907675.095:2144): avc: denied { write } for pid=22229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1646.924936][T18513] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1646.957182][ T5730] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1646.960545][ T5730] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1646.960566][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.960588][ T5730] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1646.960620][ T5730] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.965086][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1646.965113][ T5730] usb 3-1: Product: syz [ 1646.965132][ T5730] usb 3-1: Manufacturer: syz [ 1646.970803][ T5730] cdc_wdm 3-1:1.0: skipping garbage [ 1646.970818][ T5730] cdc_wdm 3-1:1.0: skipping garbage [ 1646.982444][T22276] binder: BINDER_SET_CONTEXT_MGR already set [ 1646.982498][T22276] binder: 22274:22276 ioctl 4018620d 200000000040 returned -16 [ 1647.004227][ T5730] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1647.004242][ T5730] cdc_wdm 3-1:1.0: Unknown control protocol [ 1647.085427][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.088745][T18513] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1647.088784][T18513] usb 10-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 1647.093847][T18513] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 1647.101668][T18513] usb 10-1: string descriptor 0 read error: -22 [ 1647.101784][T18513] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.105841][T22269] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1647.128444][T18513] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1647.128491][T18513] usb 10-1: MIDIStreaming interface descriptor not found [ 1647.158807][ T30] audit: type=1400 audit(1786907675.385:2145): avc: denied { watch } for pid=22273 comm="syz.4.3175" path="/4/file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1648.203782][ T5602] Bluetooth: hci4: command tx timeout [ 1648.622472][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.622491][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.622667][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.622680][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.622842][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.622852][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.623015][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.623025][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.623731][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.623742][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.623905][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.623915][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.624083][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.624094][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.624255][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.624265][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.624432][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.624442][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.624602][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1648.624614][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1648.872690][ T30] audit: type=1400 audit(1786907677.065:2146): avc: denied { write } for pid=22280 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.018452][T21806] usb 3-1: USB disconnect, device number 119 [ 1649.021981][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.022077][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.051729][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.301794][T18513] usb 10-1: USB disconnect, device number 8 [ 1649.352730][ T30] audit: type=1400 audit(1786907677.575:2147): avc: denied { write } for pid=22292 comm="syz.2.3179" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1649.352781][ T30] audit: type=1400 audit(1786907677.575:2148): avc: denied { open } for pid=22292 comm="syz.2.3179" path="/390/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1649.367336][ T30] audit: type=1400 audit(1786907677.595:2149): avc: denied { mounton } for pid=22292 comm="syz.2.3179" path="/390/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1649.502175][T22302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3181'. [ 1649.502204][T22302] openvswitch: netlink: Flow key attr not present in new flow. [ 1649.535025][T20002] udevd[20002]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1649.730277][T21806] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1649.889321][T21806] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1649.890662][T22311] netlink: 'syz.4.3183': attribute type 10 has an invalid length. [ 1649.891279][T21806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.891313][T21806] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1649.891347][T21806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.917991][T21806] usb 4-1: config 0 descriptor?? [ 1649.986104][T22253] syzkaller0 speed is unknown, defaulting to 1000 [ 1650.071303][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.285952][ T5602] Bluetooth: hci4: command tx timeout [ 1650.322679][ T187] usb 4-1: USB disconnect, device number 58 [ 1650.439104][T21806] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1650.599915][T21806] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1650.604934][T21806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1650.604964][T21806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1650.604989][T21806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1650.605013][T21806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1650.611149][T21806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.611176][T21806] usb 5-1: Product: syz [ 1650.611187][T21806] usb 5-1: Manufacturer: syz [ 1650.611205][T21806] usb 5-1: SerialNumber: syz [ 1650.614100][T21806] usb 5-1: config 0 descriptor?? [ 1651.536081][T21806] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1652.054503][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.213875][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.305070][T22338] netlink: 'syz.9.3187': attribute type 2 has an invalid length. [ 1652.351743][T22331] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 1652.364119][ T5602] Bluetooth: hci4: command tx timeout [ 1652.431169][T22341] ip_tables: iptables: counters copy to user failed while replacing table [ 1652.590803][ T30] audit: type=1400 audit(1786907680.815:2150): avc: denied { write } for pid=22308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.895970][ T30] audit: type=1400 audit(1786907681.125:2151): avc: denied { write } for pid=22352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.910776][T22253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.910845][T22253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.925786][T22253] bridge_slave_0: entered allmulticast mode [ 1652.930924][T22253] bridge_slave_0: entered promiscuous mode [ 1652.951997][T22253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.952063][T22253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.952299][T22253] bridge_slave_1: entered allmulticast mode [ 1652.959711][T22253] bridge_slave_1: entered promiscuous mode [ 1653.082926][T22253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1653.087073][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.121048][T22253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1653.266131][T22253] team0: Port device team_slave_0 added [ 1653.288760][T22253] team0: Port device team_slave_1 added [ 1653.466582][T22253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.466607][T22253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.466631][T22253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.475657][ T10] usb 5-1: USB disconnect, device number 51 [ 1653.543951][T22253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.543974][T22253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.543998][T22253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.689698][T22365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3192'. [ 1653.752217][ T30] audit: type=1400 audit(1786907681.975:2152): avc: denied { append } for pid=22362 comm="syz.4.3192" name="usbmon5" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1653.752718][T22367] 9p: Bad value for 'rfdno' [ 1653.970161][T22253] hsr_slave_0: entered promiscuous mode [ 1653.971065][T22253] hsr_slave_1: entered promiscuous mode [ 1653.979772][T22253] debugfs: 'hsr0' already exists in 'hsr' [ 1653.979799][T22253] Cannot create hsr debugfs directory [ 1654.126480][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.444376][ T5602] Bluetooth: hci4: command tx timeout [ 1654.941565][ T30] audit: type=1400 audit(1786907683.165:2153): avc: denied { write } for pid=22357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.000892][ T5602] Bluetooth: hci5: unexpected event for opcode 0x0c57 [ 1655.167443][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.164204][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.210948][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.629085][ T30] audit: type=1400 audit(1786907684.855:2154): avc: denied { write } for pid=22392 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.245125][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.216309][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.288039][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.321703][ T30] audit: type=1400 audit(1786907686.545:2155): avc: denied { write } for pid=22419 comm="syz.4.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1658.700108][T22427] kvm: pic: non byte write [ 1658.929071][T22433] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1659.451303][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.554935][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.482162][T22414] kexec: Could not allocate control_code_buffer [ 1660.741429][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.848577][T22443] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 1660.905329][ T30] audit: type=1400 audit(1786907689.105:2156): avc: denied { mount } for pid=22439 comm="syz.9.3204" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1660.907976][ T30] audit: type=1400 audit(1786907689.135:2157): avc: denied { write } for pid=22411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.172690][ T30] audit: type=1400 audit(1786907689.395:2158): avc: denied { getopt } for pid=22444 comm="syz.3.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1661.344870][ T30] audit: type=1400 audit(1786907689.575:2159): avc: denied { write } for pid=22450 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.805096][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.302575][ T187] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1662.490294][ T187] usb 10-1: Using ep0 maxpacket: 32 [ 1662.504826][ T187] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1662.509343][ T187] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.509374][ T187] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.509405][ T187] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.513937][ T187] usb 10-1: config 0 descriptor?? [ 1662.517501][ T187] hub 10-1:0.0: USB hub found [ 1662.524837][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.733077][ T187] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1662.785106][T22253] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1662.792535][T22467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.792875][T22467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.812155][T22253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1662.813015][T22253] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1662.933841][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.050093][ T187] usbhid 10-1:0.0: can't add hid device: -71 [ 1663.050174][ T187] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1663.084728][ T187] usb 10-1: USB disconnect, device number 9 [ 1663.162928][T22253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1663.170785][T22253] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1663.195714][T22253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1663.196438][T22253] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1663.201287][T22253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1663.470200][ T30] audit: type=1400 audit(1786907691.695:2160): avc: denied { write } for pid=22462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.548639][T22253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.635357][T22253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1663.656964][T20175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.657032][T20175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.668314][T20171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.668378][T20171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.779003][ T30] audit: type=1400 audit(1786907692.005:2161): avc: denied { write } for pid=22485 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.809528][ T5602] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 1663.965076][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.916359][ T30] audit: type=1400 audit(1786907693.145:2162): avc: denied { write } for pid=22490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1665.004164][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.026134][T22253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.186094][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.186195][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.585946][ T30] audit: type=1400 audit(1786907694.795:2163): avc: denied { write } for pid=22512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1666.742658][T22521] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1666.886372][T18739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1666.891466][T18739] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1666.896098][T18739] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1666.896777][T18739] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1666.898422][T18739] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1667.262441][T22253] veth0_vlan: entered promiscuous mode [ 1667.269325][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.286377][T22253] veth1_vlan: entered promiscuous mode [ 1667.409226][T22253] veth0_macvtap: entered promiscuous mode [ 1667.423178][T22253] veth1_macvtap: entered promiscuous mode [ 1667.492630][T22253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1667.538423][T22253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.627584][T12169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.627625][T12169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.627654][T12169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.627683][T12169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.809204][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.883254][T20177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.883270][T20177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.037131][ T30] audit: type=1400 audit(1786907696.265:2164): avc: denied { write } for pid=22523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.072693][T20177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.072708][T20177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.290076][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.003995][ T5602] Bluetooth: hci7: command tx timeout [ 1669.630271][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.630861][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.675058][T22524] syzkaller0 speed is unknown, defaulting to 1000 [ 1669.688273][ T30] audit: type=1400 audit(1786907697.915:2165): avc: denied { write } for pid=22546 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1669.727236][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.727279][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.954561][T18513] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1670.112603][T18513] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1670.127993][T18513] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.128022][T18513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1670.128060][T18513] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.159524][T18513] usb 7-1: config 0 descriptor?? [ 1670.167117][T18513] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1670.167152][T18513] dvb-usb: bulk message failed: -22 (3/0) [ 1670.181510][T18513] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1670.195371][T18513] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1670.195415][T18513] usb 7-1: media controller created [ 1670.196352][T18513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1670.230315][T18513] dvb-usb: bulk message failed: -22 (6/0) [ 1670.230376][T18513] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1670.278594][T18513] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input43 [ 1670.281491][T18513] dvb-usb: schedule remote query interval to 150 msecs. [ 1670.281517][T18513] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1670.397624][T18513] usb 7-1: USB disconnect, device number 41 [ 1670.467711][T18513] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1670.632648][T22524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.632714][T22524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.632847][T22524] bridge_slave_0: entered allmulticast mode [ 1670.634833][T22524] bridge_slave_0: entered promiscuous mode [ 1670.636453][T22524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.636513][T22524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.636760][T22524] bridge_slave_1: entered allmulticast mode [ 1670.637765][T22524] bridge_slave_1: entered promiscuous mode [ 1670.703904][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.719145][T22524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.740024][T22524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1670.807204][T22524] team0: Port device team_slave_0 added [ 1670.814959][T22524] team0: Port device team_slave_1 added [ 1670.878736][T22524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.878749][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.878774][T22524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.891757][T22524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1670.891779][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.891803][T22524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.022500][T22524] hsr_slave_0: entered promiscuous mode [ 1671.038510][T22524] hsr_slave_1: entered promiscuous mode [ 1671.039070][T22524] debugfs: 'hsr0' already exists in 'hsr' [ 1671.039085][T22524] Cannot create hsr debugfs directory [ 1671.087840][ T5602] Bluetooth: hci7: command tx timeout [ 1671.121271][T22574] netlink: 'syz.6.3212': attribute type 2 has an invalid length. [ 1671.456873][T22581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1671.574458][ T30] audit: type=1400 audit(1786907699.795:2166): avc: denied { write } for pid=22568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1671.738601][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.915548][ T30] audit: type=1400 audit(1786907700.145:2167): avc: denied { write } for pid=22586 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.002717][T22588] xt_hashlimit: size too large, truncated to 1048576 [ 1672.632708][T22591] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1672.686806][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.772696][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.959969][ T30] audit: type=1400 audit(1786907701.185:2168): avc: denied { write } for pid=22593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.164124][ T5602] Bluetooth: hci7: command tx timeout [ 1673.294741][T22606] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1673.311156][ T30] audit: type=1400 audit(1786907701.535:2169): avc: denied { write } for pid=22608 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.832630][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.121993][T22524] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1674.137376][T22524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1674.141252][T22524] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1674.147207][T22524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1674.148137][T22524] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1674.155070][T22524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1674.155967][T22524] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1674.172899][T22524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1674.487369][ T30] audit: type=1400 audit(1786907702.715:2170): avc: denied { write } for pid=22611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1674.560338][T22524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.621656][T22524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.650482][T20176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.650550][T20176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.669316][T20171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.669383][T20171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.801576][T22524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1674.801603][T22524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1674.850333][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.867895][ T30] audit: type=1400 audit(1786907703.095:2171): avc: denied { write } for pid=22629 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1674.938487][T18739] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1674.947398][T18739] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1674.948386][T18739] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1674.949017][T18739] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1674.949464][T18739] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1675.247765][T18739] Bluetooth: hci7: command tx timeout [ 1675.727831][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.891994][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.560465][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1676.598264][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1676.601689][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1676.602365][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1676.602788][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1676.676787][T18981] syz_tun (unregistering): left allmulticast mode [ 1676.709807][ T30] audit: type=1400 audit(1786907704.935:2172): avc: denied { write } for pid=22639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.819078][T22631] syzkaller0 speed is unknown, defaulting to 1000 [ 1676.931763][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.008200][T18739] Bluetooth: hci8: command tx timeout [ 1677.076817][ T30] audit: type=1400 audit(1786907705.305:2173): avc: denied { write } for pid=22667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.121461][T22524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1677.406939][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.969490][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.238727][T22631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.238854][T22631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.239105][T22631] bridge_slave_0: entered allmulticast mode [ 1678.250230][T22631] bridge_slave_0: entered promiscuous mode [ 1678.272531][T22631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.272597][T22631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.272858][T22631] bridge_slave_1: entered allmulticast mode [ 1678.279833][T22631] bridge_slave_1: entered promiscuous mode [ 1678.338016][T22660] syzkaller0 speed is unknown, defaulting to 1000 [ 1678.465021][T22631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.476662][T22631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.661046][ T30] audit: type=1400 audit(1786907706.885:2174): avc: denied { write } for pid=22679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.665567][T22631] team0: Port device team_slave_0 added [ 1678.685217][T18739] Bluetooth: hci5: command tx timeout [ 1678.695511][T22524] veth0_vlan: entered promiscuous mode [ 1678.718794][T22631] team0: Port device team_slave_1 added [ 1678.790058][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.940473][ T30] audit: type=1400 audit(1786907707.165:2175): avc: denied { write } for pid=22707 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.017680][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.090783][T18739] Bluetooth: hci8: command tx timeout [ 1679.099827][T22631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.099850][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.099866][T22631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.108643][T22631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.108666][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.108692][T22631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.117256][T22524] veth1_vlan: entered promiscuous mode [ 1680.589221][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.601003][ T5731] IPVS: starting estimator thread 0... [ 1680.766387][T18739] Bluetooth: hci5: command tx timeout [ 1680.795183][T22715] IPVS: using max 73 ests per chain, 175200 per kthread [ 1680.905777][T22631] hsr_slave_0: entered promiscuous mode [ 1680.909042][T22631] hsr_slave_1: entered promiscuous mode [ 1680.909609][T22631] debugfs: 'hsr0' already exists in 'hsr' [ 1680.909641][T22631] Cannot create hsr debugfs directory [ 1681.015628][ T30] audit: type=1400 audit(1786907709.287:2176): avc: denied { map } for pid=22717 comm="syz.6.3221" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1681.041539][T22524] veth0_macvtap: entered promiscuous mode [ 1681.119439][T18739] Bluetooth: hci8: command tx timeout [ 1681.203911][T22524] veth1_macvtap: entered promiscuous mode [ 1681.346531][T22524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.431464][T22524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.609111][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.668750][T20171] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.682105][T20176] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.682279][T20176] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.682386][T20176] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.751904][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.932053][T22726] netlink: 'syz.6.3222': attribute type 2 has an invalid length. [ 1681.964686][T22660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.964844][T22660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.965097][T22660] bridge_slave_0: entered allmulticast mode [ 1682.000988][T22660] bridge_slave_0: entered promiscuous mode [ 1682.459025][T22731] FAULT_INJECTION: forcing a failure. [ 1682.459025][T22731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.459061][T22731] CPU: 0 UID: 0 PID: 22731 Comm: syz.6.3225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.459081][T22731] Tainted: [L]=SOFTLOCKUP [ 1682.459085][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1682.459092][T22731] Call Trace: [ 1682.459097][T22731] [ 1682.459102][T22731] dump_stack_lvl+0x100/0x190 [ 1682.459132][T22731] should_fail_ex.cold+0x5/0xa [ 1682.459151][T22731] _copy_from_user+0x2e/0xd0 [ 1682.459172][T22731] copy_msghdr_from_user+0x9f/0x4c0 [ 1682.459189][T22731] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1682.459205][T22731] ? __pfx_trace_clock_local+0x10/0x10 [ 1682.459225][T22731] ___sys_sendmsg+0x106/0x1e0 [ 1682.459238][T22731] ? __pfx____sys_sendmsg+0x10/0x10 [ 1682.459248][T22731] ? __lock_acquire+0x49f/0x1a40 [ 1682.459281][T22731] __sys_sendmsg+0x160/0x210 [ 1682.459298][T22731] ? __pfx___sys_sendmsg+0x10/0x10 [ 1682.459321][T22731] do_syscall_64+0x115/0x870 [ 1682.459338][T22731] ? clear_bhb_loop+0x70/0xc0 [ 1682.459353][T22731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.459365][T22731] RIP: 0033:0x7feeaa19e0d9 [ 1682.459375][T22731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.459386][T22731] RSP: 002b:00007feeaaf9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.459398][T22731] RAX: ffffffffffffffda RBX: 00007feeaa425fa0 RCX: 00007feeaa19e0d9 [ 1682.459405][T22731] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 1682.459412][T22731] RBP: 00007feeaaf9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.459418][T22731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.459425][T22731] R13: 00007feeaa426038 R14: 00007feeaa425fa0 R15: 00007fff9cec3858 [ 1682.459439][T22731] [ 1682.475755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.488158][T20330] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1682.508292][T20330] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1682.510651][T20330] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1682.511537][T20330] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1682.538715][T20330] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1682.646211][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.798650][T18739] Bluetooth: hci5: command tx timeout [ 1682.811729][T22660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.811798][T22660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.812070][T22660] bridge_slave_1: entered allmulticast mode [ 1682.813348][T22660] bridge_slave_1: entered promiscuous mode [ 1682.969050][T22660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.984287][T20181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.984314][T20181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.118553][T22738] xt_hashlimit: size too large, truncated to 1048576 [ 1683.207230][T18739] Bluetooth: hci8: command tx timeout [ 1683.533152][T22660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.636287][T22660] team0: Port device team_slave_0 added [ 1683.701786][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.004133][T20171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.004161][T20171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.057130][T22660] team0: Port device team_slave_1 added [ 1684.256442][T22660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.256455][T22660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.256480][T22660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.258000][T22660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.258015][T22660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.258039][T22660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.501557][T22732] syzkaller0 speed is unknown, defaulting to 1000 [ 1684.515735][T22660] hsr_slave_0: entered promiscuous mode [ 1684.516612][T22660] hsr_slave_1: entered promiscuous mode [ 1684.522738][T22660] debugfs: 'hsr0' already exists in 'hsr' [ 1684.522756][T22660] Cannot create hsr debugfs directory [ 1684.684692][T18501] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1684.697694][T18739] Bluetooth: hci9: command tx timeout [ 1684.779490][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.975980][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.977424][T18739] Bluetooth: hci5: command tx timeout [ 1684.986048][T18501] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1684.990145][T18501] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1684.990172][T18501] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1684.994327][T18501] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.994346][T18501] usb 9-1: Product: syz [ 1684.994365][T18501] usb 9-1: Manufacturer: syz [ 1684.994374][T18501] usb 9-1: SerialNumber: syz [ 1684.996266][T18501] usb 9-1: config 0 descriptor?? [ 1684.999914][T18501] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1685.534355][T18501] gspca_sunplus: reg_r err -110 [ 1685.534410][T18501] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 1685.544336][T22766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.551971][T22766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.744866][T22768] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3228'. [ 1685.872861][T21806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.893293][T22774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1685.903863][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3230'. [ 1686.089384][ T30] audit: type=1400 audit(1786907714.237:2177): avc: denied { write } for pid=22754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1686.449791][T22783] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:19999 [ 1686.450750][ T30] audit: type=1400 audit(1786907714.577:2178): avc: denied { write } for pid=22780 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1686.560874][ T30] audit: type=1400 audit(1786907714.681:2179): avc: denied { append } for pid=22755 comm="syz.8.3228" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1686.711223][T22631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1686.733758][T22631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1686.734587][T22631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1686.792739][T22631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1686.793469][T22631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1686.795781][T22631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1686.815067][T22631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1686.827583][T22631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1686.890173][T18739] Bluetooth: hci9: command tx timeout [ 1686.961669][T22782] syz.6.3232 (22782): drop_caches: 2 [ 1686.972025][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.141415][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.707957][T21806] usb 9-1: USB disconnect, device number 19 [ 1688.018602][ T30] audit: type=1400 audit(1786907716.055:2180): avc: denied { write } for pid=22789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.079093][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.181376][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.195146][ T5731] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1688.323591][ T30] audit: type=1400 audit(1786907716.336:2181): avc: denied { write } for pid=22813 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.356645][ T5731] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1688.362389][ T5731] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1688.362409][ T5731] usb 9-1: config 0 has no interface number 0 [ 1688.362440][ T5731] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1688.362466][ T5731] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1688.368595][ T5731] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.368625][ T5731] usb 9-1: Product: syz [ 1688.368635][ T5731] usb 9-1: Manufacturer: syz [ 1688.368644][ T5731] usb 9-1: SerialNumber: syz [ 1688.370599][ T5731] usb 9-1: config 0 descriptor?? [ 1688.371139][T22809] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1688.396229][ T5731] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 1688.679860][ T30] audit: type=1400 audit(1786907716.673:2182): avc: denied { accept } for pid=22808 comm="syz.8.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1689.104273][T18739] Bluetooth: hci9: command tx timeout [ 1689.141197][T22732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.141254][T22732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.141502][T22732] bridge_slave_0: entered allmulticast mode [ 1689.142783][T22732] bridge_slave_0: entered promiscuous mode [ 1689.186217][T22732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.186282][T22732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.186561][T22732] bridge_slave_1: entered allmulticast mode [ 1689.192928][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.200667][T22732] bridge_slave_1: entered promiscuous mode [ 1689.295494][ T30] audit: type=1400 audit(1786907717.243:2183): avc: denied { lock } for pid=22833 comm="syz.6.3239" path="socket:[109320]" dev="sockfs" ino=109320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1689.374012][T22631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.411144][T22732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.421617][T22732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1689.535767][T22631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.622068][T20176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.622136][T20176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.632257][T20176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.632327][T20176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.647216][T22732] team0: Port device team_slave_0 added [ 1689.689006][T22732] team0: Port device team_slave_1 added [ 1690.077430][T22732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.077454][T22732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.077479][T22732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.162918][ T30] audit: type=1400 audit(1786907718.054:2184): avc: denied { write } for pid=22823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.254231][T22732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.254254][T22732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.254280][T22732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.307399][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.564897][T22732] hsr_slave_0: entered promiscuous mode [ 1690.565807][T22732] hsr_slave_1: entered promiscuous mode [ 1690.566364][T22732] debugfs: 'hsr0' already exists in 'hsr' [ 1690.566377][T22732] Cannot create hsr debugfs directory [ 1690.590364][ T30] audit: type=1400 audit(1786907718.454:2185): avc: denied { write } for pid=22846 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.775502][T22660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1690.790952][T22660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1690.841432][T22660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1690.859888][T22660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1690.860733][T22660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1690.877361][T22660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1690.908121][ C0] usb 9-1: yurex_control_callback - control failed: -2 [ 1690.909614][T22660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1690.920653][ T10] usb 9-1: USB disconnect, device number 20 [ 1690.922624][ T10] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 1690.944120][T22660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1691.369932][T18739] Bluetooth: hci9: command tx timeout [ 1691.427398][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.427500][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.102618][ T5730] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1692.200252][ T30] audit: type=1400 audit(1786907719.950:2186): avc: denied { write } for pid=22850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.277683][ T5730] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1692.288596][ T5730] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.288649][ T5730] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1692.288674][ T5730] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1692.294683][ T5730] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1692.294714][ T5730] usb 9-1: Product: syz [ 1692.294724][ T5730] usb 9-1: Manufacturer: syz [ 1692.302957][T22867] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1692.309040][ T5730] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 1692.327152][ T5730] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1692.544848][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.878522][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.256089][ T30] audit: type=1400 audit(1786907721.850:2187): avc: denied { write } for pid=22874 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.488785][T22732] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.709218][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.841318][T22732] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.967045][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.968949][T22660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.091577][T22732] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.274630][T22631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.328676][T22660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.460826][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.612991][T22732] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.643479][ T30] audit: type=1400 audit(1786907724.061:2188): avc: denied { write } for pid=22885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1696.774997][T20182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.775065][T20182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.835439][T20171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.835505][T20171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.906485][T22631] veth0_vlan: entered promiscuous mode [ 1696.957996][T22631] veth1_vlan: entered promiscuous mode [ 1697.035710][ T30] audit: type=1400 audit(1786907724.422:2189): avc: denied { write } for pid=22904 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1697.127785][T22631] veth0_macvtap: entered promiscuous mode [ 1697.176138][T22631] veth1_macvtap: entered promiscuous mode [ 1697.267519][T22631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.305463][T22631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.419914][T20176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.419976][T20176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.420034][T20176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.420063][T20176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.479416][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.570054][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.025617][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.343747][T22732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1698.375303][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1698.389490][T12169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.389506][T12169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.393255][T22732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1698.398107][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1698.431547][T22732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1698.441546][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1698.442413][T22732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1698.463061][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1698.701225][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.759984][T20176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.760012][T20176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.284957][T22732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.290434][T22732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.410898][ T30] audit: type=1400 audit(1786907726.621:2190): avc: denied { write } for pid=22908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.459652][T22732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1699.459669][T22732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1699.475548][T20171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.475599][T20171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.476804][T20171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.476854][T20171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.586190][ T30] audit: type=1400 audit(1786907726.760:2191): avc: denied { write } for pid=22937 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.852956][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.982737][T22660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.996582][T22660] veth0_vlan: entered promiscuous mode [ 1700.000159][T22660] veth1_vlan: entered promiscuous mode [ 1700.009118][T22660] veth0_macvtap: entered promiscuous mode [ 1700.010970][T22660] veth1_macvtap: entered promiscuous mode [ 1700.016982][T22660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.018719][T22660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.181167][T20176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.181363][T20176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.181463][T20176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.181567][T20176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.209527][T22945] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1700.209653][T22945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1700.209757][T22945] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1700.209798][T22945] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1700.303561][T22945] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1700.376452][T22945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1700.376491][T22945] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1700.377189][T22945] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1700.459379][T22945] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1700.459472][T22945] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1700.474735][T22945] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1700.483883][T22945] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1700.483995][T22945] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1700.485043][T22945] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1700.487242][T22945] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1700.487313][T22945] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1700.493959][T22945] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1700.495126][T22945] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1700.495195][T22945] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1700.505194][T22951] xt_hashlimit: size too large, truncated to 1048576 [ 1700.578165][T22945] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1700.883684][T20171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.883709][T20171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.934199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.037933][T20177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.045088][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.049930][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.406409][T20330] Bluetooth: hci6: command 0x0c1a tx timeout [ 1702.406486][T20330] Bluetooth: hci3: command 0x0c1a tx timeout [ 1702.406525][T20330] Bluetooth: hci2: command 0x0406 tx timeout [ 1702.493167][T18739] Bluetooth: hci4: command 0x0c1a tx timeout [ 1702.527509][ T187] net_ratelimit: 3 callbacks suppressed [ 1702.527524][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.638356][T20171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.638373][T20171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.667224][T18739] Bluetooth: hci9: command 0x0c1a tx timeout [ 1702.667318][T18739] Bluetooth: hci5: command 0x0c1a tx timeout [ 1702.667351][T18739] Bluetooth: hci8: command 0x0c1a tx timeout [ 1702.667381][T18739] Bluetooth: hci7: command 0x0c1a tx timeout [ 1702.791955][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3248'. [ 1703.332205][ T187] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1703.403875][ T30] audit: type=1400 audit(1786907730.307:2192): avc: denied { write } for pid=22950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1703.450617][T22732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.506675][ T187] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1703.511983][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.549201][ T187] usb 7-1: config 0 descriptor?? [ 1703.552643][ T187] cp210x 7-1:0.0: cp210x converter detected [ 1703.632248][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.902879][T20330] Bluetooth: hci6: command 0x0c1a tx timeout [ 1704.902931][T20330] Bluetooth: hci4: command 0x0c1a tx timeout [ 1704.911542][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.911671][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.919731][T18739] Bluetooth: hci7: command 0x0c1a tx timeout [ 1704.919798][T18739] Bluetooth: hci8: command 0x0c1a tx timeout [ 1704.919826][T18739] Bluetooth: hci5: command 0x0c1a tx timeout [ 1704.919866][T18739] Bluetooth: hci9: command 0x0c1a tx timeout [ 1704.924589][ T30] audit: type=1400 audit(1786907731.710:2193): avc: denied { write } for pid=22995 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.087260][ T187] usb 7-1: cp210x converter now attached to ttyUSB1 [ 1705.422823][T18513] usb 7-1: USB disconnect, device number 42 [ 1705.455190][T18513] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1705.455581][T18513] cp210x 7-1:0.0: device disconnected [ 1705.757603][ T30] audit: type=1400 audit(1786907732.486:2194): avc: denied { mounton } for pid=23006 comm="syz.0.3255" path="/4/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1706.058028][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.130111][T22732] veth0_vlan: entered promiscuous mode [ 1706.238070][T22732] veth1_vlan: entered promiscuous mode [ 1706.401457][T22732] veth0_macvtap: entered promiscuous mode [ 1706.435597][T22732] veth1_macvtap: entered promiscuous mode [ 1706.592627][T22732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.631803][T22732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.663829][T20177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.664275][T20177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.664307][T20177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.664327][T20177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.682841][ T187] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1706.852391][ T187] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1706.863354][ T187] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1706.863387][ T187] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1706.863412][ T187] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1706.901468][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.901499][ T187] usb 7-1: Product: syz [ 1706.901529][ T187] usb 7-1: Manufacturer: syz [ 1706.901539][ T187] usb 7-1: SerialNumber: syz [ 1706.903808][ T187] usb 7-1: config 0 descriptor?? [ 1706.906015][T23020] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1706.906132][T23020] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1706.912674][ T187] usb 7-1: ucan: probing device on interface #0 [ 1706.915170][T22732] ieee80211 phy100: Selected rate control algorithm 'minstrel_ht' [ 1707.086510][T20330] Bluetooth: hci4: command 0x0c1a tx timeout [ 1707.086551][T20330] Bluetooth: hci6: command 0x0c1a tx timeout [ 1707.180117][T18739] Bluetooth: hci9: command 0x0c1a tx timeout [ 1707.180156][T18739] Bluetooth: hci5: command 0x0c1a tx timeout [ 1707.180195][T18739] Bluetooth: hci8: command 0x0c1a tx timeout [ 1707.180221][T18739] Bluetooth: hci7: command 0x0c1a tx timeout [ 1707.186295][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.210771][ T30] audit: type=1400 audit(1786907733.825:2195): avc: denied { write } for pid=23004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.220962][T20177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.220990][T20177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.267893][T22732] ieee80211 phy101: Selected rate control algorithm 'minstrel_ht' [ 1707.627168][T20176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.627197][T20176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.703896][ T187] usb 7-1: ucan: device reported invalid device info [ 1707.703923][ T187] usb 7-1: ucan: probe failed; try to update the device firmware [ 1707.850754][ T30] audit: type=1400 audit(1786907734.415:2196): avc: denied { write } for pid=23026 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.979013][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.983992][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.984766][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.123868][T23033] pim6reg: entered allmulticast mode [ 1708.212298][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.305879][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.497248][ T10] usb 7-1: USB disconnect, device number 43 [ 1708.705365][T18739] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1708.729418][T18739] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1708.780808][T18739] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1708.817038][T18739] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1708.834125][T18739] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1710.113589][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.067145][T23071] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3262'. [ 1711.073679][T20330] Bluetooth: hci10: command tx timeout [ 1711.246708][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.288446][ T30] audit: type=1400 audit(1786907737.582:2197): avc: denied { write } for pid=23036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.501413][ T30] audit: type=1400 audit(1786907737.785:2198): avc: denied { write } for pid=23076 comm="syz.1.3264" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1711.505277][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.838709][ T30] audit: type=1400 audit(1786907738.090:2199): avc: denied { write } for pid=23084 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.349014][T18501] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1712.375960][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.408622][T23045] syzkaller0 speed is unknown, defaulting to 1000 [ 1712.596944][T18501] usb 2-1: device descriptor read/64, error -71 [ 1713.670568][T20330] Bluetooth: hci10: command tx timeout [ 1713.681675][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.830431][T18501] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 1715.877304][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.877407][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.330217][T20330] Bluetooth: hci10: command tx timeout [ 1716.335046][T18501] usb 2-1: device descriptor read/64, error -71 [ 1716.457819][T18501] usb usb2-port1: attempt power cycle [ 1716.808898][T23106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3268'. [ 1716.826652][T18501] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1716.846811][T18501] usb 2-1: device descriptor read/8, error -71 [ 1716.978890][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.116709][T18501] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1717.144902][T18501] usb 2-1: device descriptor read/8, error -71 [ 1717.338757][T18501] usb usb2-port1: unable to enumerate USB device [ 1717.649876][ T30] audit: type=1400 audit(1786907743.454:2200): avc: denied { write } for pid=23093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.128072][T23124] trusted_key: encrypted_key: keylen parameter is missing [ 1718.131017][ T30] audit: type=1400 audit(1786907743.906:2201): avc: denied { write } for pid=23129 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.146275][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.269541][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.292805][T23045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.299068][T23045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.299304][T23045] bridge_slave_0: entered allmulticast mode [ 1718.318037][T23045] bridge_slave_0: entered promiscuous mode [ 1718.467410][T23045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.467500][T23045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.467799][T23045] bridge_slave_1: entered allmulticast mode [ 1718.474617][T23045] bridge_slave_1: entered promiscuous mode [ 1718.529597][T18739] Bluetooth: hci10: command tx timeout [ 1719.455998][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.456110][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.493712][T23045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1719.519049][T23045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1719.653106][T23045] team0: Port device team_slave_0 added [ 1719.725997][T23045] team0: Port device team_slave_1 added [ 1719.768924][T23142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3274'. [ 1720.081019][T23045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.081032][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.081047][T23045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.081937][T23045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.081945][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.081960][T23045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.100953][T23045] hsr_slave_0: entered promiscuous mode [ 1720.101477][T23045] hsr_slave_1: entered promiscuous mode [ 1720.101824][T23045] debugfs: 'hsr0' already exists in 'hsr' [ 1720.101837][T23045] Cannot create hsr debugfs directory [ 1720.620660][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.740096][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.770297][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.900990][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.928705][ T30] audit: type=1400 audit(1786907750.184:2202): avc: denied { write } for pid=23137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1725.027401][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.716777][T23162] syzkaller0 speed is unknown, defaulting to 1000 [ 1725.821873][T23165] syzkaller0 speed is unknown, defaulting to 1000 [ 1725.990050][T20330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1726.004320][T20330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1726.013203][T20330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1726.013951][T20330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1726.014411][T20330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1726.062850][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.087723][ T30] audit: type=1400 audit(1786907751.255:2203): avc: denied { write } for pid=23168 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.174871][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.241401][T23178] xt_hashlimit: size too large, truncated to 1048576 [ 1727.340626][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.475134][T23045] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.541185][T23183] FAULT_INJECTION: forcing a failure. [ 1727.541185][T23183] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.541220][T23183] CPU: 0 UID: 0 PID: 23183 Comm: syz.5.3281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1727.541238][T23183] Tainted: [L]=SOFTLOCKUP [ 1727.541243][T23183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1727.541250][T23183] Call Trace: [ 1727.541255][T23183] [ 1727.541260][T23183] dump_stack_lvl+0x100/0x190 [ 1727.541279][T23183] should_fail_ex.cold+0x5/0xa [ 1727.541295][T23183] should_failslab+0xc2/0x120 [ 1727.541320][T23183] __kmalloc_noprof+0xfc/0x820 [ 1727.541334][T23183] ? rcu_is_watching+0x12/0xc0 [ 1727.541354][T23183] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1727.541370][T23183] tomoyo_realpath_from_path+0xb6/0x690 [ 1727.541385][T23183] tomoyo_path_number_perm+0x23c/0x580 [ 1727.541401][T23183] ? tomoyo_path_number_perm+0x22e/0x580 [ 1727.541419][T23183] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1727.541436][T23183] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 1727.541461][T23183] ? find_held_lock+0x2b/0x80 [ 1727.541471][T23183] ? __fget_files+0x215/0x3d0 [ 1727.541484][T23183] ? hook_file_ioctl_common+0x140/0x440 [ 1727.541497][T23183] ? __fget_files+0x215/0x3d0 [ 1727.541511][T23183] ? __fget_files+0x21f/0x3d0 [ 1727.541525][T23183] security_file_ioctl+0xd3/0x230 [ 1727.541546][T23183] __x64_sys_ioctl+0xb7/0x210 [ 1727.541566][T23183] do_syscall_64+0x115/0x870 [ 1727.541581][T23183] ? clear_bhb_loop+0x70/0xc0 [ 1727.541595][T23183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.541607][T23183] RIP: 0033:0x7fc85b59e0d9 [ 1727.541617][T23183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.541629][T23183] RSP: 002b:00007fc8597f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.541641][T23183] RAX: ffffffffffffffda RBX: 00007fc85b825fa0 RCX: 00007fc85b59e0d9 [ 1727.541648][T23183] RDX: 0000200000000200 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 1727.541655][T23183] RBP: 00007fc8597f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.541662][T23183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.541669][T23183] R13: 00007fc85b826038 R14: 00007fc85b825fa0 R15: 00007ffc52c21c78 [ 1727.541684][T23183] [ 1727.541716][T23183] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1727.690764][T23180] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1727.813081][ T30] audit: type=1400 audit(1786907752.843:2204): avc: denied { write } for pid=23185 comm="syz.5.3282" name="instances" dev="tracefs" ino=3214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1727.840151][ T30] audit: type=1400 audit(1786907752.870:2205): avc: denied { add_name } for pid=23185 comm="syz.5.3282" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1727.840500][ T30] audit: type=1400 audit(1786907752.870:2206): avc: denied { create } for pid=23185 comm="syz.5.3282" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 1728.315043][T20330] Bluetooth: hci5: command tx timeout [ 1728.674321][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.674850][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.439589][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.665493][T23196] CIFS: Attempting to mount //127.0.0.1/share [ 1729.799364][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.808707][T23196] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1729.808747][T23196] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1730.198008][T20181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.452128][ T30] audit: type=1400 audit(1786907755.280:2207): avc: denied { write } for pid=23189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.494110][T23045] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.569376][T20330] Bluetooth: hci5: command tx timeout [ 1730.766763][ T30] audit: type=1400 audit(1786907755.575:2208): avc: denied { write } for pid=23208 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.793377][T20181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.928964][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.989296][T23045] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.303304][T23216] FAULT_INJECTION: forcing a failure. [ 1731.303304][T23216] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.303351][T23216] CPU: 0 UID: 0 PID: 23216 Comm: syz.1.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.303368][T23216] Tainted: [L]=SOFTLOCKUP [ 1731.303372][T23216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1731.303380][T23216] Call Trace: [ 1731.303384][T23216] [ 1731.303389][T23216] dump_stack_lvl+0x100/0x190 [ 1731.303409][T23216] should_fail_ex.cold+0x5/0xa [ 1731.303422][T23216] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1731.303443][T23216] should_failslab+0xc2/0x120 [ 1731.303460][T23216] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1731.303475][T23216] ? skb_clone+0x190/0x400 [ 1731.303493][T23216] skb_clone+0x190/0x400 [ 1731.303509][T23216] netlink_deliver_tap+0xaed/0xcc0 [ 1731.303528][T23216] netlink_unicast+0x62b/0x850 [ 1731.303542][T23216] ? __pfx_netlink_unicast+0x10/0x10 [ 1731.303559][T23216] netlink_sendmsg+0x8b0/0xda0 [ 1731.303574][T23216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1731.303588][T23216] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1731.303609][T23216] ____sys_sendmsg+0xa4d/0xbe0 [ 1731.303619][T23216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1731.303633][T23216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1731.303648][T23216] ? __pfx_trace_clock_local+0x10/0x10 [ 1731.303667][T23216] ___sys_sendmsg+0x190/0x1e0 [ 1731.303679][T23216] ? __pfx____sys_sendmsg+0x10/0x10 [ 1731.303690][T23216] ? __lock_acquire+0x49f/0x1a40 [ 1731.303721][T23216] __sys_sendmsg+0x160/0x210 [ 1731.303737][T23216] ? __pfx___sys_sendmsg+0x10/0x10 [ 1731.303760][T23216] do_syscall_64+0x115/0x870 [ 1731.303775][T23216] ? clear_bhb_loop+0x70/0xc0 [ 1731.303789][T23216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.303801][T23216] RIP: 0033:0x7fbed5b9e0d9 [ 1731.303811][T23216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.303822][T23216] RSP: 002b:00007fbed69bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1731.303834][T23216] RAX: ffffffffffffffda RBX: 00007fbed5e25fa0 RCX: 00007fbed5b9e0d9 [ 1731.303841][T23216] RDX: 0000000000040098 RSI: 0000200000000240 RDI: 0000000000000003 [ 1731.303848][T23216] RBP: 00007fbed69bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.303855][T23216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.303861][T23216] R13: 00007fbed5e26038 R14: 00007fbed5e25fa0 R15: 00007ffdf39613e8 [ 1731.303876][T23216] [ 1731.303929][T23216] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3284'. [ 1731.389582][T20181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.937053][T23226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'. [ 1731.984085][T23045] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.828939][T20330] Bluetooth: hci5: command tx timeout [ 1732.873938][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.874046][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.904629][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.904687][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.910572][T23230] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3288'. [ 1734.931661][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.351539][T20330] Bluetooth: hci5: command tx timeout [ 1736.455445][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.552834][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.010577][T20181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.086615][ T30] audit: type=1400 audit(1786907761.327:2209): avc: denied { write } for pid=23212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.145206][T23169] syzkaller0 speed is unknown, defaulting to 1000 [ 1737.547377][ T30] audit: type=1400 audit(1786907761.807:2210): avc: denied { write } for pid=23255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.551677][T23243] xt_hashlimit: size too large, truncated to 1048576 [ 1737.636398][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.673874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.805581][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.064060][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.362756][T23267] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3297'. [ 1739.748256][T23267] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23267 comm=syz.5.3297 [ 1740.774140][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.774286][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.986265][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.356381][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.356450][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.885001][T23045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1744.899769][T23045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1744.906933][T23045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1744.932853][T23045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1744.933388][T23045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1745.040643][T23045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1745.182295][T23045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1745.392621][ T30] audit: type=1400 audit(1786907769.008:2211): avc: denied { write } for pid=23263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1745.464867][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.491812][T20330] Bluetooth: hci8: unexpected event for opcode 0x0c57 [ 1745.510024][T23045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1745.621336][T20181] bridge_slave_1: left allmulticast mode [ 1745.621407][T20181] bridge_slave_1: left promiscuous mode [ 1745.621589][T20181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.623729][T20181] bridge_slave_0: left allmulticast mode [ 1745.629792][T20181] bridge_slave_0: left promiscuous mode [ 1745.629969][T20181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.846571][ T30] audit: type=1400 audit(1786907769.497:2212): avc: denied { write } for pid=23301 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1746.156821][T23311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1746.639738][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.103389][T20181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.107442][T20181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.117214][T20181] bond0 (unregistering): Released all slaves [ 1747.237122][T23318] xt_hashlimit: size too large, truncated to 1048576 [ 1747.555075][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.770558][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.985559][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.495527][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.619597][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.693969][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.725903][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.239958][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.417219][T20181] hsr_slave_0: left promiscuous mode [ 1753.419565][T20181] hsr_slave_1: left promiscuous mode [ 1753.434516][T20181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.434543][T20181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.443473][T20181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.471371][T20181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.739171][T20181] veth1_macvtap: left promiscuous mode [ 1753.739277][T20181] veth0_macvtap: left promiscuous mode [ 1753.739368][T20181] veth1_vlan: left promiscuous mode [ 1753.739433][T20181] veth0_vlan: left promiscuous mode [ 1754.468084][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.599522][ T30] audit: type=1400 audit(1786907777.575:2213): avc: denied { write } for pid=23325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.032354][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.060138][ T30] audit: type=1400 audit(1786907778.000:2214): avc: denied { write } for pid=23363 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.131284][T20181] team0 (unregistering): Port device team_slave_1 removed [ 1755.174358][T20181] team0 (unregistering): Port device team_slave_0 removed [ 1755.617630][T18501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.167718][T23388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3313'. [ 1756.561376][T23169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.561446][T23169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.561753][T23169] bridge_slave_0: entered allmulticast mode [ 1756.592989][T23169] bridge_slave_0: entered promiscuous mode [ 1756.615129][T23045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.616670][T23169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.616735][T23169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.617009][T23169] bridge_slave_1: entered allmulticast mode [ 1756.627426][T23169] bridge_slave_1: entered promiscuous mode [ 1756.756651][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.122408][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.132690][T23045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.182092][ T31] INFO: task syz.5.3058:21690 blocked for more than 144 seconds. [ 1759.182114][ T31] Tainted: G L syzkaller #0 [ 1759.182131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1759.182147][ T31] task:syz.5.3058 state:D stack:28776 pid:21690 tgid:21688 ppid:20571 task_flags:0x400040 flags:0x00080002 [ 1759.182202][ T31] Call Trace: [ 1759.182208][ T31] [ 1759.182216][ T31] __schedule+0x125c/0x6730 [ 1759.182275][ T31] ? __pfx___schedule+0x10/0x10 [ 1759.182306][ T31] ? find_held_lock+0x2b/0x80 [ 1759.182321][ T31] ? schedule+0x225/0x2c0 [ 1759.182344][ T31] schedule+0xdd/0x2c0 [ 1759.182357][ T31] schedule_timeout+0x1b2/0x280 [ 1759.182386][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1759.182417][ T31] ? __down_common+0x369/0x8b0 [ 1759.182453][ T31] ? rcu_is_watching+0x12/0xc0 [ 1759.182484][ T31] __down_common+0x371/0x8b0 [ 1759.182503][ T31] ? __pfx___down_common+0x10/0x10 [ 1759.182529][ T31] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1759.182553][ T31] ? __pfx_vcs_open+0x10/0x10 [ 1759.182570][ T31] down+0x74/0xa0 [ 1759.182597][ T31] console_lock+0x5b/0xa0 [ 1759.182624][ T31] vcs_open+0x64/0xc0 [ 1759.182637][ T31] chrdev_open+0x234/0x6a0 [ 1759.182662][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1759.182677][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1759.182707][ T31] do_dentry_open+0x6ab/0x14d0 [ 1759.182740][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1759.182766][ T31] vfs_open+0x82/0x3f0 [ 1759.182784][ T31] path_openat+0x2873/0x4280 [ 1759.182814][ T31] ? __pfx_path_openat+0x10/0x10 [ 1759.182846][ T31] do_file_open+0x20e/0x430 [ 1759.182861][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1759.182898][ T31] ? alloc_fd+0x471/0x7a0 [ 1759.182923][ T31] ? do_getname+0x191/0x390 [ 1759.182950][ T31] do_sys_openat2+0x10f/0x1e0 [ 1759.182967][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1759.182994][ T31] ? fput+0x79/0x100 [ 1759.183030][ T31] __x64_sys_openat+0x12d/0x210 [ 1759.183057][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1759.183088][ T31] do_syscall_64+0x115/0x870 [ 1759.183104][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1759.183128][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.183143][ T31] RIP: 0033:0x7f596959e0d9 [ 1759.183172][ T31] RSP: 002b:00007f596a3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1759.183194][ T31] RAX: ffffffffffffffda RBX: 00007f5969825fa0 RCX: 00007f596959e0d9 [ 1759.183203][ T31] RDX: 0000000000821801 RSI: 0000200000000980 RDI: ffffffffffffff9c [ 1759.183211][ T31] RBP: 00007f5969635024 R08: 0000000000000000 R09: 0000000000000000 [ 1759.183228][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1759.183236][ T31] R13: 00007f5969826038 R14: 00007f5969825fa0 R15: 00007ffe00b437b8 [ 1759.183251][ T31] [ 1759.183318][ T31] [ 1759.183318][ T31] Showing all locks held in the system: [ 1759.183341][ T31] 1 lock held by khungtaskd/31: [ 1759.183349][ T31] #0: ffffffff8ede8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1759.183428][ T31] 2 locks held by getty/5351: [ 1759.183445][ T31] #0: ffff8880373bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1759.183497][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1759.183553][ T31] 9 locks held by kworker/0:5/5599: [ 1759.183563][ T31] 3 locks held by kworker/0:7/5730: [ 1759.183583][ T31] 3 locks held by kworker/0:9/18501: [ 1759.183600][ T31] #0: ffff88801c04b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1759.183652][ T31] #1: ffffc90003dafd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1759.183693][ T31] #2: ffffffff8edf3b78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1759.183746][ T31] 2 locks held by kworker/u8:11/20171: [ 1759.183764][ T31] 4 locks held by kworker/u8:17/20175: [ 1759.183772][ T31] 3 locks held by kworker/u8:25/20180: [ 1759.183779][ T31] 3 locks held by kworker/u8:27/20181: [ 1759.183795][ T31] #0: ffff88801d2d0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1759.183840][ T31] #1: ffffc90003b4fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1759.184485][ T31] #2: ffffffff8edf3b78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1759.184542][ T31] 2 locks held by syz.7.3133/22053: [ 1759.184550][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1759.184612][ T31] #1: ffff8880341921b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 1759.184657][ T31] 1 lock held by syz.2.3186/22328: [ 1759.184665][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 1759.184705][ T31] 1 lock held by syz.4.3203/22430: [ 1759.184721][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 1759.184770][ T31] 1 lock held by syz.3.3205/22446: [ 1759.184777][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1759.184833][ T31] 1 lock held by syz.9.3211/22520: [ 1759.184840][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 1759.184901][ T31] 1 lock held by syz.8.3241/22867: [ 1759.184909][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1759.184951][ T31] 1 lock held by syz-executor/23045: [ 1759.184967][ T31] #0: ffffffff90c99780 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x49c/0x1bb0 [ 1759.185013][ T31] 1 lock held by syz-executor/23169: [ 1759.185039][ T31] 2 locks held by syz.5.3317/23392: [ 1759.185047][ T31] 1 lock held by syz.6.3318/23398: [ 1759.185054][ T31] #0: ffffffff8fb869a0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 1759.185093][ T31] 1 lock held by syz.1.3319/23404: [ 1759.185110][ T31] 1 lock held by dhcpcd-run-hook/23403: [ 1759.185118][ T31] [ 1759.185122][ T31] ============================================= [ 1759.185122][ T31] [ 1759.185147][ T31] NMI backtrace for cpu 0 [ 1759.185158][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1759.185176][ T31] Tainted: [L]=SOFTLOCKUP [ 1759.185180][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1759.185187][ T31] Call Trace: [ 1759.185191][ T31] [ 1759.185196][ T31] dump_stack_lvl+0x100/0x190 [ 1759.185212][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1759.185229][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1759.185249][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1759.185271][ T31] sys_info+0x141/0x190 [ 1759.185288][ T31] watchdog+0xcb1/0x1030 [ 1759.185308][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1759.185320][ T31] ? __pfx_watchdog+0x10/0x10 [ 1759.185334][ T31] ? __kthread_parkme+0x18c/0x230 [ 1759.185353][ T31] ? kthread+0x13a/0x450 [ 1759.185363][ T31] ? __pfx_watchdog+0x10/0x10 [ 1759.185376][ T31] kthread+0x370/0x450 [ 1759.185387][ T31] ? __pfx_kthread+0x10/0x10 [ 1759.185399][ T31] ret_from_fork+0x72b/0xd50 [ 1759.185417][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1759.185435][ T31] ? __switch_to+0x800/0x10f0 [ 1759.185448][ T31] ? __pfx_kthread+0x10/0x10 [ 1759.185460][ T31] ret_from_fork_asm+0x1a/0x30 [ 1759.185483][ T31] [ 1759.186116][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1759.186127][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1759.186144][ T31] Tainted: [L]=SOFTLOCKUP [ 1759.186148][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1759.186155][ T31] Call Trace: [ 1759.186160][ T31] [ 1759.186164][ T31] dump_stack_lvl+0x100/0x190 [ 1759.186179][ T31] vpanic+0x552/0x970 [ 1759.186192][ T31] ? __pfx_vpanic+0x10/0x10 [ 1759.186203][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1759.186222][ T31] ? rcu_is_watching+0x12/0xc0 [ 1759.186242][ T31] panic+0xd1/0xe0 [ 1759.186253][ T31] ? __pfx_panic+0x10/0x10 [ 1759.186265][ T31] ? nmi_cpu_backtrace+0x79/0x200 [ 1759.186284][ T31] ? nmi_trigger_cpumask_backtrace+0x203/0x2a0 [ 1759.186302][ T31] ? watchdog.cold+0x1ec/0x234 [ 1759.186316][ T31] ? watchdog+0xcc1/0x1030 [ 1759.186331][ T31] watchdog.cold+0x1fd/0x234 [ 1759.186346][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1759.186358][ T31] ? __pfx_watchdog+0x10/0x10 [ 1759.186373][ T31] ? __kthread_parkme+0x18c/0x230 [ 1759.186391][ T31] ? kthread+0x13a/0x450 [ 1759.186402][ T31] ? __pfx_watchdog+0x10/0x10 [ 1759.186416][ T31] kthread+0x370/0x450 [ 1759.186427][ T31] ? __pfx_kthread+0x10/0x10 [ 1759.186439][ T31] ret_from_fork+0x72b/0xd50 [ 1759.186457][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1759.186474][ T31] ? __switch_to+0x800/0x10f0 [ 1759.186487][ T31] ? __pfx_kthread+0x10/0x10 [ 1759.186499][ T31] ret_from_fork_asm+0x1a/0x30 [ 1759.186522][ T31] [ 1759.186574][ T31] Kernel Offset: disabled