last executing test programs: 2m31.534770937s ago: executing program 2 (id=703): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 2m29.811527149s ago: executing program 2 (id=705): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xe50d}]}, 0x2c}}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r4, 0x0, 0x482, &(0x7f0000000040)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x487, &(0x7f0000000080)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRESDEC=r8, @ANYBLOB="7c93f31ea2eb65e71e293f0b7cf3044203a78009e451a6f512f9303c1e15390ed7cf76e91ce671ec47e82d24617efef43e6b2bfd0ff541bf7cdfb98d199bb232a9f85fc4e922db17faed2218985acf879fa9117898fa94c31c5e4b4fafc9e191c96bde50dd30223681dd1d38ec063cf49bd376124f924adc0c0af0880870b35373b135a7f59ff280cb3bda26dcee55eee1885fcee2ff2340333d43d724ea9a646058b57885e91f80ed608768d36cabd608a3d052fff4127568a665c67f4236190b8f50d6c5ecf99b82a54bdef3e5ea20d8b441ada5202c822e23adf3dffbaa0bea9f2bc8a69000"/243, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0), &(0x7f0000000100)={'U-', 0x7fff}, 0x16, 0x3) 2m28.352640573s ago: executing program 1 (id=709): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYBLOB="0000000000000000001eba000023ee875d9ad9bf1578a8087cb174bf58dc95b21318333e27139868fc90338eac8ee6e9bc93eeeb04c26249b0f324", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="010000000100"/28], 0x50) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @mcast1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x3800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m26.564053857s ago: executing program 2 (id=713): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/idProduct\x00', 0x80, 0x118) read(r2, &(0x7f0000000200)=""/100, 0x64) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000440)='-1\x00', 0x3) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mkdir(0x0, 0x1ff) syz_usb_connect(0x2, 0xb3, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e24", @ANYRESOCT], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x30481, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0xc0002, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@file={0x1, './cgroup.net/blkio.throttle.write_iops_device\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="5d7ba8607ec0ff041c2978bc12b17db21625d5bed639e69423f390eae8869e7f45b9991486fe3399c2c4a76836d355a18b302e8226dfef2c1d525688a546bb05078b65f88711d92cc6ebe789849c1f4684453e52eb81bde044f8fe497d533007d68e7a7b7e29b4273647fb907a45dbd3bf241bb59e12741d6027", 0x7a}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000003352eb0ec604f6a801000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x4000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r9, &(0x7f0000000100)='0x1234\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000180)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r10 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 2m26.143934054s ago: executing program 1 (id=715): socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x123581) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) 2m24.443908883s ago: executing program 2 (id=718): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80600, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), 0x0, 0xfffffffffffffcb1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x1e3081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f4da8758b8f226d184dff8b1544d4e7ba807ad5ef2754bc0c7e2e864965f60c981e52284e9be62e0e967ad68e732254637f82eeb8ca469a6b2678fa8dd73c4829472a6c514c86fdc7fcf0104d065f5f10413797a794439a4effb5f5eea130048c34f45f8730ad", 0xbc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0xffffffe9) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, &(0x7f0000000240)=""/16, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r0, r0, r2], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) setpriority(0x0, 0x0, 0x5) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006e00)=0x0) lstat(&(0x7f0000006e40)='./cifs\x00', &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc, &(0x7f0000006d80)=[{&(0x7f0000004380)=ANY=[@ANYBLOB="e01400002a0000042abd7000fedbdf2594023280040034800a001e000900000004000b80800282800800ae00", @ANYRES32=r2, @ANYBLOB="0800bd800400af806c0299803019410100ac7533e68da48607833e30d0e9cbc37529ab6db93c07723cf2b2967bda9131af426334b48bbfdf1cfa7cec3cec5ddaa8a58d793d81b9fb834bc7041e61d7899ab30d8375347eb61faa2a5ee6435951f41e090b3f1db953c8b0cac6403d8788e6da78e7d6bf65a9fc836815d2963585a5058e5218edd48a1281b82c8174aeb60320a41d295485761e0af6c4376cb8ea185dddabd195b8cf3f10437828979ef5ab2cc7e3d1d8e2500638f9d90e8ea9775295216311ee4e41350b84c1d83243da1c56fea48f4176a1b3cf7c3f205dd935e5edffa097eb1b99db4f194d8f5582e90800ca00", @ANYRES32, @ANYBLOB="2c4e72963f25378c3fa4ab9be37a442051b032a416f4b31700f5fb31f79112d563c4f4b50096e09190d6c51d78cc86ef9de3063a6bf4aa507fbd8f30fbb7ab7080786404db705b3241e4102dceac2777addcca60c30d26626dbf165c20076b1a11265b60d279b9ee9872abf5656c61fe29877db308003b0003000000ec006a800800760004000000a9e12096311788ca6262d20e6b6b85144d3d2714aec432dd123c9375dbd3c27d691cf3faeec6cd006f8a3b95179b49569c780c437c25817bd80a6b12c4d16e93d819865f0c71a3dee2139785d2cdfdee5f8fa9e27c0e8a61f68c0a0287973add966800d8bf30fe907d34bf607686a54e24877dfae08f0efc5066f2b0c8c22e050fd0f7d98cb33d13d9d2cc07927a932ffaae6dd829e0d70073f89c7bed7a47a9c551a5018fe2630be51c854c15b0e49d7f9cfec30b32353c375c30691607832aa105288eeaf6e1e22f83bb6f31c7a6bc136edd8673532bdf829c12fe2e2a35c108006400", @ANYRES32=r6, @ANYBLOB="08001100", @ANYRES32, @ANYBLOB="0400380031d2816f9f6b18a85a7c2983a46eaa2aa25c53cacf92e1a689b6d8544688e41758e4c5b13a7c8116381400bb00fc02000000000000000000000000000121001b00766572733d312e302c757365723d726f6f742c706173733d726f6f74000000002f11ac800c00860009000000000000008f6df6c27fd3258e740ced9f9b092dda69bfc7c88c2bcdc8962c2002379403d1096ef08c73bc716932176132c0c4ac40173c896cd044c2b4e79ec0fe8b089e142e1cb73b5d7d249c48a8cd717a76ff1d6db328058fd757ae581da6d0fa22892ac42a25366800df1018ec6beb1775dae9530f8f0ae623b736ae929194fac9b43bba240baf4d4c70b5c6f0086f729bfa20d2b9b01e34e342d6ddd302d055fa5478b009f246bea39b7bf3621587aa53f34fe1f1a09ed7a2fe57f6144a6f03d1a590ec59a739ae3cae8cd930ff89c605889d5e70a710367708e0ed87f61c11449c2dac9ca1d2c7f18cf07586ba6e5ead011f431cca7cb78dd1eab7b77a5897a41d04211aec53e594b5be8fe722849e9a8d715430c5ac57eaa93f3cefce5c56a5a38e1df6291b8e01349e956331e0e23e460901ee505dce4f168d837ee7951cee7d1285c72e886b9f0baae833dc6a850481c8a8591385267358e435985551d2fa49833d79d0762b75c319acd900d8154f0915dafb7da4eb6fd8cca022bc37966548d2d2aa7e9168bde6121f8899783040e5945712b224a5b1a223f33bc70ad5e422aeefa07c380d26ec346f7c0ee50db57a11c47f4ea1bf8be90efe46c0d6382bc97b4a4dd86007dfc14f0d2655b888814e46384b37d99ce23f352822c3bd10bff66e7f6ce89538cbb3d2341a1e0d0fed9412ecd6cd74533790f7091de03698e25270ca6ebe26d0815c63cc5e413031eceaa5e93872d11996ce3140a51f8d95d3b52acf304c2769a7ec97b2e92e9602d44c75c68fb0164048626dfcadcc4e50f6cd552172d11204f9b6819a9cdd539aaa76db18a49a33de443e5dd2c3e109f9f3fa43487b7fa2f93260f87f3fc52fba91c112106947980d5895c55040ddd2e2833f9689966de7d603d00a8d4b677afc42a6600e5c164ed52b71ceb0df862580cf5414b00e4d10a2ca4eeacbc1ad4281d402906218a50c1064d44551154d090796e03e3ce9b6b6a19e9b01fa6a32d74b13151c8ad958bf83bf1570e19fba4f823dbc096b44fa84250c980625319135580be0c9272f8b1c787aa290a637ea73086366441bde1d8b17efb2845a1ea58a8a8b3133616a0d96c9ced9537816cd4402d67cd6fe9071200dc722a7623f2ee5921e71139a7741829e7288da1ea9063fda9e02f91168617807cd39d8f3b61b2bfb52151171ebee899fd5e46e3814f475f7b7af97f505f87fc79303cd45f54880a387654f740d27d68ca3729de84e9b1bd45e20df083a85d69a42f72b298120bf11288d4185d9f33b36ed91548974e1846879542b273ce481eee0d55a028d4a0b290298fc6dc4937483fbae838320127f3dca58400a328ed081d37d811e52ee625811acba3aba8ea125796b3c24b6a2c93d94e5e8c7096ac07c69d135f87a17eb8f67d1141b1d699f36c72f8b42ed3c661a7bb9cf69a468984365ae110db41df72983752ac36980dd1601fdb1cb1af4deb653067b813aca14768a1de679cdce55c5501db521366a0e034dfd4bca25fc3fa5898df080820d794e5244bdf43cb7152d6fb0eecfdedcb5af98c542f6d3ecb40e4ec2e07f3012be0afb39b0cc7a442661e15d99cf68d6111596c543736482de5358b1357fc134907e793a258716e49ef021d3e76eb950c51efdb0f3d8f6d071b6df7eaeb357ebf734ed6e2bf066c77b2ede556dcfc170c2c62c3ea81ee39643ff2446e078ec668da7e4f42dc3484fcd11fedc68a952cb9c291799cec1fc25d1e698a73651a7a265a5f684f8888c319e0be3f4f344dd5840ebee3782157e9f98bae47b8222692d0b6a84b2fb4df02fbd3a1c0c1be70eb078fd18aa00275abe248e0ac1b2147920227bb203f71cfef140f1cb709155d9fa4dd48bfbff86341d5093825a88f91bba8f1b9b54227d5b5b554a8552b4200c9f86f3f0e2eaf5dfb0c07993b3ccccec6af4a4621c1f619c5e763f3f81244a8cc7db8de44fb1c69abe46fdddb75c294189e4d8373e2883a14a14fcc56c4bacc044d302075358ce8d56bf3cf21ae550d032589257d5a4aaf421cbc3ccf0ef9aa2e08bcc185ca73fe5dcbf33de764a72c8413856c9fa839e66633acb6473bbee9fc3f2301982dc7c5f64242b32dee5a22f2865df2042c24fe2bc36fa74d92d0f44e2d852364a0e6d69109a18600f1c30295f4621c148390f5f8ac99b53e1e946b6ddb1061807351b5f706d87925c164e76df324c7b99c95216bd16363bc5fc6ca31b459ce7ef27aebfc72ed5d7b3379abf9a76b7a6c0f4799e20adb8649675a662bbf0574b279610b9c275d00355bc5989a5e2eca202f09f12d7d943eebe77364dc980f5a114e839567a14ca46bb035f15a13d66aacbc87f95ef84971a92d99293508c31d683084d80e1ef9e89b5ecceb93a932547c4489585a3832eede1e9c42c85e1f05799cc7897a82f1a86ac7020ac60eb8706c92821840b3da0907746b348d956ce1c0d6de82045b7937c99f37c2330426b6b3f09f360fd5446ff194c9ef3f447628f141bb92053721578228d84fb3c17c6c1623b7535e53f796dcddfdea1ec2672606a661da6a38aede13459d6ac448495fa46cb7e6b2c816b64fb06691913094ae64a5bc677e7a3aede7116a30f08c13b20df77b3df5dd211cacbf815f2008665ee28d5731936da9234e6b9ded36e2574094674864076fd92dc1f3ccb0a02a2fa97a3294a5d3765e405a1d3f1566f4533f99931e62a966cdf3ad710dd596376c961aa51fd9de68307f2a38cf44c236c2786f80064a9d52b74f13ed6f86e3f2d830832b92745451c17e1baaed62e212a440d76fa68d60ee86f9babf7fde787edcfd6b88fc2e0cb081a58eca1873c2cb28e0d44900e3235417cffc846b4c1f73349bfc40e974a1f3a4760e56a1dd04b879e3833bf0fdaeb173e0668bd2f658609302268a12051f4181defb83fa71fd942f06ce308cd80e06eee619c22f99a9f759e17d7c22ae29058b44a4a9e35917ff22a8da99a3d82aee117880b805b86e75bf8862f4de0c479763321e7fb2175392148ae283834fde3d22d731e2d70bc84743e7c3f62d4f6adfe90eef36eb3ab3d4e1e9360f53f07736da1a9010e760c9c0b2c222048f0ad586c43937172d077d01a1c8a5523ef1d4b9fe79d6749eeb03d7ab74f1c08b9271fa52fc9ad985f9d502cd086f8d1ccff1f890bd659f0fba0af17cc58f5b050e3ead82e2a9e0b0c9e25ed989b9f3825b2646323ad317f35d8c85e8811159210ef22d3cb32ec96ffee541d7a0e0759933ace4e28284aa997a2b23bdf3704ab56b80a069eeb76886990510d0ff94b8a262b8e95a995356b888076a85efdd9cc29123873ea885519462adc0be0de21cb232837d657ce97e9912ad8e1823fa862ba91f4c45a3a16907c979eae1c5ac1a482c603f3e40000c59d0d9bab82b21445ded888d1b362cdf4d9b4401a6f8448bdce017819628cf55c87c7b5873568ee266d27ab224b12bfa51d7fced72c0c99d4274e806a360e8b8765d0fe3609455fc93d26f8ddd3ce57461d5cd6b284fec3a3482f24b1814f0679a261404bc373af432e0364038eaca94a466ae5e210658adbdae74fc912053b7c656f15ee4f43ec9dd50c356c55c63a26cc5844f0e480127a3be51b96c40a08e4053f1cd825acc82f9fd957e52fe2d720d8b8cdf64856326d8164a079a149e27370f17e21e4c7890e6af134a9ed9637bda8b53204b5a28ee8fe5e54b573b2ce09da3e5d26cba5ecb91542637e363c38b4b9ddb2771ab6feb83ca6a933cac2f746f502a0cfd084fce2f677de21e29c3fa8e577508b1866bae2c6bf4676325084c78f792adf324746739f5e592c63ad2a2aee06badf14de022ca91b09c2ab56931a2b05dac65e5b597a99a1c5b38c1d0aadfc9ef246e4317d94c720f82650f1fbc702a2d1142fc4609899f52db5a074bdba24dfb05edf2369ef4ba27006ac90ba2057e275120531ad7a893353925d84770bf3358a3178a567dbba20ab1d09bd1029d709d3fc3f0189cba15a8b4a6072a26882556bec5e1e7e942ebe6362bb89d3d2c088d0994f3e0683506c3dcea44054ef1296de17bc84ffafc1cf5457571f156c957014ba16cb359ed820321fe75f49cef82f5bd834d3fe80f4e3908ba781e6cf576c1991af1f62557047ac471f404b61d64710b0c91c0f220e850c88b71708c8285b1fae89f232e3f5ff3330ff886acbf16b850abd5312699bd734b1fbfa96bc55c7e83c1fbd40bcbe9de063fdc2e70fb2cab3f6212000db409c94a9b38ce3a7ba974975f8f9775c6d4ff1ac881ee6d57c42bc419878812e99120e904195d14581da67e5c7ce4ad616f6c5bb186c35d89f25baa21e9e06d5c9099e8aa0e90bdcdcf26c9376d86ea402b3fd7fec61032d86adbc58fa03a4d2fbc60c0d9a67eb45c9c3a12e600e62ac9893c2f10f65d3193ca66be0fed919e16ba0364fd4e0bcb95f27842e5aa821d5bbf63ba91e9146e1c5da61f83b28467084f3b7f72af0444e0e14078085fd029d5a4bc9c06e7ea2bf88246362e8e28ce3ba11c04e9101b3bb525568f577522a7914422efa1feed4b07d5b60d55117da314249b4a6e3cd9245094f9250b0a90c28acff556bee33ae4f99073e03f21d767d6267d1aa25f408dc125299847b1e03f7521fbe7745f335c81e0a2362dbb3dc3d1bb3c524fd0de5754fa622ee88dfeb218df33f723d6bc0bf4c3cb97cc3cafaf3f220b97012ac8761dd79ec19fe78199f778ebc2aa7aa96077acf3850c5f36d35c5fad94e71e72905cf57c1ec1c5b9b3ec8297bac825722102579228052c9fdad4f08996f82ca852afcb2b97012ac54a214bf3293d44cebb0efe958fdd3c184dbf5671445662eba1deb98d6a0fac5f4e7cb103e1869cd58c7a47a01669f0391315cbdae84494151624758bdb2a0ee65dd50f7e0658fe5f1c552316d24797702eb49689a851a345a6921911676a186b6b35174699c062c9c8a756428c723ae29000b3d8bfdedd40205bcb398ed225472e6c40eaef0eb7156df23230362a08a41117c5fa8758e4ebb5e243eb9ac540d97d13c4ee3c5ac67d8d7e1d4b1df429b4887f8c2a43a6cd42715863478d8390486b891d383b633f9bc392c90700e3afe54593c0c3770b78b51519fc444314a3c4fda84b7a7626d57bda6488c9959649d8a3451d7babc42539ca3eb8c5fe94e9da014a414c4b2dbb7a22550b755d70f18821eacb249d37cdf29c8a35c7cced64266868ff3e600a76a5c40cba7f0d1a39f97efadd71dd87f5512228a45a8627401b029c41eafbdea1d5b8e09b339bc8cbacfd17d8647b4454b9f50ecd65fc7cd9a4cbee28412b91661161f44828a529fe7f73ba7096c938c4b7aaa9f7ce5adc4264c834cd4fef97c8f938b2a1f1580cfaf382cf8855c3ff29e2da8348c197ab5cb045554aa59c76462ff39b985140bc32f3ed91af1f4c6923eade227732561894ec3f5864e2d926e1a23c11cc5376bf6af81e920637da9ab3bd6cf8cc515eb2c3df6a779fb837d63ec53705cc2271fe5267a6b8d4adba46f52cd0c4c6a7a22384fbf18289049f8270212e8e0a50922b3499193345e85d75f6319809e3cd0535028b8faac68dcf07e13e7a498dbac42c243782b81694258e8d06f2c988c940c2d3fdd601829849f30a166389bacc5fb2c72afff325e8e31886f475841c2234b69e15de390b0191b0131fc8f3944d4338951764226f7ca79e8d17e02b81a23841793cfc24be521d660e5121f24a0e385b05657a941fb59483bcdf2dbe3e7d2b66f358c8924d8ebeb25e3647fdaa2b092f2b8b64dbeef3074fcbecc20cad0fcb59279e2904e838dfbf32fc922464f3a4810b34fcf33114c1a670400cb801a021afaf28f28b5766d4e7206217112cb1f4a78ae156e7b2d7cf7b7b9710f880c482aafe1fe4abcbd81d6b8dacccbb5cc4f17991d587d42273a022366b815b8d11b9d45110f4b0a51a481f406e4d8937bd0648668dc0df77e121efce328cbafafa676b8b831e6f82f37d3e5c7f2cd4551c4fb961499cc865414f71169e92b95980f969a3264ebff0996d98496fa2afa9febb613aa76efd805350cf771e344114aaaa9ecc724af827d9a68bea12b73079d64cd025786617f1cc8f0b84365965bfb8e1ca45f703e060a0f6b8d3037c434515539697d2d3e7699d2d0a8de10a355229b9d89b4899aba171a466ed96800379ca4310bc8a9fbfc4aff8a358309f9968fcb540e460747aa4f870b0ade817ac3a31d60e8d574cb5803fdc22132ab6c5512a8ae38a2c7ba2a5222065fd30b81775d06085f39d0f011345e55c474f2a8232286e461c1f4a8ea2a0b26fa4bfbef8a613c7fcf40c04890fcf21df87dac47becd3b027db3c32333531f476acf9cbf81cb0dc905b625f6cd1e495d2a60bbb39ace70cd02ab34d5e0e9ea5a1ce5ac7172ca02a90400bb80000000"], 0x14e0}, {&(0x7f0000008780)=ANY=[@ANYBLOB="94170000290000022bbd7000fbdbdf259c012f80beb2680d40cd2296bb28868e6234536e962a6df2cfa3809c909d4a90185414972bc6da3a2e6c4c006fbc9078ff598dfd0882b1ae55c7067897fd7946969bd6df32d240a5b89682ba68b640332a6cc784f1379efc9638c881924dd4e59441eb23d4f978b3ac8efda49636a92bd191dc71a15d4f70865b51aa6f5323c6aaf0d086e912af85dd89ee1bf0da4c7cc30fa3ddba33dc70e596ba521c619c2d14001900fc0000000000000000000000000000010400c58008009e00", @ANYRES32=0x0, @ANYBLOB="52ff75f378daa99476faf81ddac25d6c5f38a24c4b6d4c108ae5bd22f58fd09bd17873b76c095a176878d5132bdfc9ac913d129c7ff651407ac7500fc574abb77e5de89fd0a7ee55b8efe6ddacb80c110451bb6b1bc76dea63cc887b818bbe990798061e9f9cb72195e998a13ffbf5329682dc5780ef241098b3090dee8cc93b868a049fa146d5942e1906ca4ceacbe73b87342a1c0917bcf8eb733baa7b2236bdd2505f36b11746f9f86f0bd61e99dd00aa7d0ea349d172237778078fe01390a92b45f7a5a42736319f55cc94051e060800bb00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400b680fb57566463db344f626c8674705931b0631886a3babd0544ef4ea2081a786e57aaebf91281718eb25868bbf995a23ef4e906c99d3784807433653d4083c4f6f115d0409c5a1219e92d31c373546b63206186bf861859c12d5213443d5b820683383d9addfb34d8243c8d08f3aaea8f3c4b4db32f6042a70aaef188a74ec9a4cb01a74f1d570c6ed6e49498d9165ce2afa79df3acef2a6aea120e000000000000"], 0x1794}, {&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="5e499b21a644c6593e978f81efe88794d6d36d88c9b7d9a0dc8ce1fe1cad8aba9acb9b0acda8d5b732d2daf8330f145f3b0b797fb4aaf704b04f64f6346d0f14978c46dbb6f6b7e09f0147f1fbef396084f96be8ab2a06f424e413f4a12eeb649636db5e2c238a16eb00158f46187dba0f000000c29fe98415eb2aeea9ff41ca65c36bfb02f9306e65238d2186958128603c2380c50ba62883639d4cc216cea0df97645d7df9f336c08a6f916caf5d7c34b61a89b947a89a"], 0x13c0}, {&(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400648077fbc56f14eb29641caca34afa97cf24749d3134381e65cd6afc6d53e0d9bcd3ececbba3fbeb9da244824037749d897c4a3650e2d369b322bb77112739422852ce0447396f68b854f844b44ab44312cd6d7ba3217787f76b8653b6a561d15bacec76f12042bf0dfeb1c4a54ac69c432fe5a943bef6b496d774ae84da71aa6eccdb359c86a22120b4f2eba934202f0e72bd10db43685a7b41174d764d839c6667cb1586d478672c655ac0f9f610018d478c3e93b04904bde1b1c54190ad6850ff3a6a036d2d79b825bed0c19612fb08ed718e08130019002f6465762f73657175656e63657200000000"], 0x1268}, {&(0x7f0000006d40)={0x10, 0x2e, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x10}], 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c0000001c97d1ab0931c733694f5eb830000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0], 0x78, 0x20000000}, 0x24000014) close_range(r3, r3, 0x2) 2m24.03938309s ago: executing program 1 (id=721): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000140)=""/58, 0x3a}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) syz_open_dev$video(&(0x7f00000000c0), 0x9f, 0x2000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080), &(0x7f00000020c0)=@ng={0x4, 0x3}, 0x2, 0x1) close(r4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m22.659910047s ago: executing program 1 (id=722): shutdown(0xffffffffffffffff, 0x0) 2m22.491523671s ago: executing program 2 (id=723): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xe50d}]}, 0x2c}}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r4, 0x0, 0x482, &(0x7f0000000040)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x487, &(0x7f0000000080)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) read$FUSE(r2, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRESDEC=r8, @ANYBLOB="7c93f31ea2eb65e71e293f0b7cf3044203a78009e451a6f512f9303c1e15390ed7cf76e91ce671ec47e82d24617efef43e6b2bfd0ff541bf7cdfb98d199bb232a9f85fc4e922db17faed2218985acf879fa9117898fa94c31c5e4b4fafc9e191c96bde50dd30223681dd1d38ec063cf49bd376124f924adc0c0af0880870b35373b135a7f59ff280cb3bda26dcee55eee1885fcee2ff2340333d43d724ea9a646058b57885e91f80ed608768d36cabd608a3d052fff4127568a665c67f4236190b8f50d6c5ecf99b82a54bdef3e5ea20d8b441ada5202c822e23adf3dffbaa0bea9f2bc8a69000"/243, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0), &(0x7f0000000100)={'U-', 0x7fff}, 0x16, 0x3) 2m20.899066117s ago: executing program 1 (id=727): syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x50, 0x1d, 0x1d, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0xd0, 0x3, "", [{{0x9, 0x4, 0x57, 0xd8, 0x0, 0x98, 0xd0, 0xac, 0x8}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 2m19.268136084s ago: executing program 1 (id=730): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c304050000000000180012800800", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 2m18.297300553s ago: executing program 2 (id=731): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c304050000000000180012800800", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 2m8.996572524s ago: executing program 32 (id=719): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c000280080001", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 2m4.222118945s ago: executing program 33 (id=730): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c304050000000000180012800800", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 2m3.623911512s ago: executing program 5 (id=750): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000000014"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1', 0x1) 2m2.416143548s ago: executing program 34 (id=731): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c304050000000000180012800800", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 2m2.394746377s ago: executing program 5 (id=752): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x801, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f042}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6", 0xc2}], 0x1, 0x0, 0x0, 0x7400}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0xfe, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045518, 0x0) 1m59.669367244s ago: executing program 5 (id=758): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) (async, rerun: 64) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000083c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="c8", 0x1}, {&(0x7f0000000180)="1f9f0a789680fbb190ac1fe8e48e", 0xe}, {&(0x7f0000000540)="06ece6352b93e10fbb961d492261d674debf89761ce909ac48cd224cd03746fcdcc31b301c3cfd29518e960406dd0d027d878769fb1cbc2debea49bea289803333b17fc12f9303914d54bfc2efad536dc7f3062ba7af49670f954f324d0075aa2db726bed29c578e377be325f549e8ebb78c40e141729cc24244b501e46ad3c5bd969e8692f147da32a99a7b946b58146a95b44eec44e9975e13c06b749ae5b0d294df78c57dd138c6dd40320a529de26ac85dfd3b", 0xb5}, {&(0x7f0000000600)="f411d89560ccd3d4f6e446e11216e85ed09ca3", 0x13}, {&(0x7f0000000640)="21b6d9b00b88142cd5eb803cafa7d69c17eb88b999947e687476f1ba3acd4f3220b69b83014d7aa01552569025bd9a514c36832791b38ded7ec0c40d97fba6f0bde2ee6aa4f64dba32e723a4030e863d232168caebe41824d48832", 0x5b}], 0x5, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x60, 0x40001}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)="c6ff21bff221ba9cfdd3dbee1334f522eb4eb17093068ca5e18f8762f928", 0x1e}, {&(0x7f0000000a00)="39c59c7d3daa244138b592cb00a30ad6c53a166121385091237322c9884a9ec5e924253611722e3947c85605863cf4dd0bfafbed3922f2fa3d5ef88b8d82005fb1708dd0fd789852e4e56fb024975ed5748743e1e9e78528c682f42b52a24c0d519198439d1c1d1dfce1793eea0daf5e6c4a396c141acbcfeed09386c10b8f7d8802232bdedea47bf872d9a7bbfb08c577b83d9b3e41ca66187b0bc78242eed1136529dc3f8307b346c97c00", 0xac}, {&(0x7f0000000ac0)="84c9e670b433cd67667a37ae5e023adae91f13f18e015cf6ae731830", 0x1c}], 0x3, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x11}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c00)="fed313b3cd4c0f9d6237d79b45d2dfabcf8d71072690e0afc142e5f1da485192d9455511c7cd0c34e654832982a3033f47d51f9c2ab2eebf0dff7f46cda035d3ca2104ee354dfa971f553241ef3facdce7ff38694b8623697a863e17b04f94bcc70574bd5327a3ad343d6ce1a967ae00aa5624d638cb750e3c6b241b23d2d382b173ab2677eba61ecc6a76a0de354b994da7cf854e62a85bd18ec68cce016e58d6b4c73a105153dbc590760fbe3f40d0c949eba5b4a241f664a2f742168c393161356c341120778132544d12e3ce42679609883794106194a5a4aea4", 0xdc}, {&(0x7f0000000d00)="6984b5aa06c736b059a7e86b9475f397a6ccfdb65217a57c180dc7bf229cc9e76754b8ddc09eb278ccd7cc8ed93b05c109c45f4dc4a0702657b7736d65fb606de2a4c997d7646a753821f912b4a6fd67d92ca998a4dab82225dbe908e16b39d11100343ff2d042d1b4be2fbe7267873c33a7a61017222b6fe5e5d1c5c5487ce58d6b6e61329124c9cfa34023bb545b74d6f57c983fbdf7", 0x97}, {&(0x7f0000000dc0)="6e54cd02e2b740241e78ee5e826a3af861915b2d96010cca79cab0acb4e08429c66564da012745d7aca05b12d063080d421b978a479ac13dbc24785fa7b029504cd457f8a5c569964c3d16f857ee4f47f53b3bdf33aa572d43afab1f1ed0d6ee7c8dba27fe9a1156669c0ff9a0a0de1da7c8d9", 0x73}], 0x3, &(0x7f0000000e80)=[@rights={{0x24, 0x1, 0x1, [r3, r4, r4, r3, r4]}}], 0x28, 0x8801}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000f40)="5f70354923b83827908d9811d2b770821ad357fd889c166b65f5e805bc643b06ba59dd6432c9d21dbd6c0a982727b41bdd7688c271d38b128831fd04a5ee4e1c4a8e600dca2b19cef798d6710621ff1544baa2a14d42783978a75efb626acc2dce68fffea74c00d95c0855a386dd0f441015ebe13639dd8f4b59cce61f0461c7b179789f0255e467bc2d7ebfa7a670bfbb2276e26d662aba6c115f0eb2b55ccad9692697c63c9d40651d6cef7298e7b826ebeb71a1fb716ce33496daf1b1cac729319fa4169e0306486fe34613868747aaedbd201650f8ef23b508299c5132d01a5245fed71a0051e3cf20114e7003310c33a2bc286ef0b4246edf", 0xfb}, {&(0x7f0000001040)="dbd000c3c13727e6aaca4d1f62e296c7411db2b188dbc53cc5ffe7b32961f9390b295fdb7109755473e3fa3e31eec7c6289a547ff94e8b8980458a23676a0509cc7db3b4daf237a9f485253dd8fa6c7f1af7b4ef681830f00702d6d803104217213455368ae5730101a7f8eb0ee6389612723ee68b2b6e8d32d19f2150d28814497ea642a60fab06dc1db207ae285af6f9de5ff1376fd27dc853bb8a306077e8cb8e37a981f84ca75f8c4bc73ef50fbf7fd5948916db774a6664a6c9f76d17b7", 0xc0}, {&(0x7f0000001100)="81febbd5aa08b4877abfde74b2ef86eca191475440ef50dba068890b7c1dd485c0e5150e6598ee2a5e953bd3f37e757fc57264cfad097ddf9ef61fab60c76ace1b2c425c068c987cfef1383d1122d25f528684769db80aef", 0x58}, {&(0x7f0000001180)="a0948589263087e26f126838f184164a3393e72a5e3d3c0ad7", 0x19}, {&(0x7f00000011c0)="1f3c4a3a5bef4a24a80046d3989bff4baa858abfc220608a78b42c67f51a8c7f72143cf9708b7a7968e9388cd168189890", 0x31}, {&(0x7f0000001200)="c7b39a3c07ac331382896d669de1f1cb4b749dcccc1b4abdf440abef3ea9ba78fa3c3026f52e0418e23618654faf0b5416a812446cbffe029beb4bbfeb92fc368177fd0f49d94ace3ac5e1d833aac3a160dbec4e3e9487bd277724c26cfc6d7e4a27fc80a8446334f5b339540d5461dfe2d679a0006441949c39a7ab7e5a5f102f7b3bd8f7fba3527b392004ff896d48f130be57dea55c38a16cee6e9a4b8e68b79319ed55b98dce3ece7370cc13d8e2ea07d94c04fff79c2379a40079d39a069f28dc2f76e3519d3367028cedf9adb39b6564027d", 0xd5}, {&(0x7f0000001300)="25d8c5ce00404e99aa5f2157574bbd6f428850", 0x13}], 0x7, &(0x7f0000001400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x48}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)="30e91c65f7e47bbb6bd0ee186d1c801e64dde8e7d5d8b7993cc5e1f76e31725ac017367bf002a3938df862a366cf06ff400964e5429d19fc17291201777e02cf81b09fcdc9b2722fa5ee8b816a28912228b88f13c5bd88cf48635a0451016b40512d77f3e686ba2ab3f5147a227ce9a54f50302b785eb74f6914613583f0b4a0c2f1fca3acd68342994541424cfaf089b2f6f36b340b82fcd7a75ab10de110157abe04f5659d358f7993994fe8222c8db0e47334e4dddfdee84793847c1014e7", 0xc0}, {&(0x7f0000001580)="c32c804e2cf430683fc755d1cae887f9a3f6eea4db712ca961d626c17a2faff881fb39998e636eeef546fa2619680f776e37bc59020f186dcfd1f306bc6768b36682ccd2a92db23417ac2fb427f682af542aff3cc1370ca33c4a71680bc62da94e9ace50ee96a9d556bbee72c48e1b7425a96ce1c9174307f749bff72e6eb4bf371d61992214c03944f2c407af528c3b0575c74d89ec3a3af17076ff3f43419a4f90bc1b2d19ed9d2a8f1c4ab114daa28d80ae0a7982da9e02b11c59cd774dcc8a7bf3d41ea7d6273fb1a2", 0xcb}, {&(0x7f0000001680)="f0", 0x1}], 0x3}}, {{&(0x7f0000001700)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)="a5b7ec0c05c128a66acf6da944e87ab69169fff31a3b90dbd59e3d6007ca9ce740860c8a1170256cf2370288148481ec534d23519fada4247a87d1fb7cdae2202748c4e0773131b71b5ee9bf85", 0x4d}], 0x1, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x120, 0x4c000}}, {{&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001b00)="c831d9a8c37bf662f8e1b3a6124bbf43e8bc", 0x12}], 0x1, &(0x7f0000003d80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x140, 0x20004001}}], 0x7, 0x8000) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="4f170200000022652637809827e8b6471ef93219546c4b6829cce6f0204b0d6055128afef4ffe14bc9091c1f3f53e93d8df636eb520996c310885ee04a25f85a96a711c9113957074e71ace8fda01be017e9a12ceaee3f934bd8853a1859f404db318aeafa0460fafd92b05663822471c1ceb7916e940d2f1f9470166ca8efbd630cf98912fc1507f68b452284a5b81ba059c3fde5bbe7e62eee210c0532f99307d6eec278c77b2da790af1bfb59c59dbb3c6a6167df8550185f02f54477086b3bda37bb499bbf2103e512e0114fa9"], 0x0, 0x0}) (rerun: 64) 1m54.653916692s ago: executing program 5 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r4, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1m53.8086985s ago: executing program 5 (id=766): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x801, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f042}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6", 0xc2}], 0x1, 0x0, 0x0, 0x7400}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0xfe, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045518, 0x0) 1m51.688614472s ago: executing program 5 (id=768): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 1m46.972280783s ago: executing program 7 (id=751): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfff, 0x3, 0x7435}, {0x1, 0x1000, 0x5, 0x7}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffa, 0x8, 0x201}, {0x1, 0x2}}}]}]}]}}]}, 0x70}}, 0x0) r3 = syz_ublk_setup_io_uring(0xbb5, &(0x7f00000001c0)={0x0, 0xa8c0, 0x400, 0x3, 0x260}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)) pread64(r3, &(0x7f00000003c0)=""/46, 0x2e, 0x1) 1m46.746360767s ago: executing program 7 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r4, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1m45.518370576s ago: executing program 7 (id=776): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 1m35.329549184s ago: executing program 35 (id=768): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 1m35.325761326s ago: executing program 6 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) ioctl(r3, 0x8b1a, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000007000000ffff08000000000000000200", @ANYRES32=r5, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000040000000000000000000000000000000000020000008db827438deee68507b363b89a4a9515f3427e569678c16d4f59220cbe055111a25a9e485366fd3b9d2bfe06d5266720dd9e8b32f24c677f061e7790d2a8d06dbd29bd2072c0148cb3058a2f11519d956c9926382e5e6571784d2db6f48b648ba3b69be9e0076b253e79146e918063cefff819912e3f4b478f009b6e36f400a049fc4618ed9518780853617d770644900a", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xe4ee, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m32.36259851s ago: executing program 6 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x3b, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = open$dir(&(0x7f0000000580)='./file0\x00', 0x200840, 0x80) execveat(r6, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000800)={[&(0x7f0000000600)='./cgroup.cpu/syz0\x00', &(0x7f0000000640)='\xe5:\x00', &(0x7f0000000680)='/][+\x00', &(0x7f00000006c0)='+\x8e*$\\}\x1f{-\x00', &(0x7f0000000700)='%#\x00', &(0x7f0000000740)=')-,-&*[}/\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\xf2\\\x00']}, &(0x7f00000009c0)={[&(0x7f0000000880)='syz0\x00', &(0x7f00000008c0)='-}]\x00', &(0x7f0000000900)='&!\xed\x00', &(0x7f0000000940)='bitmap:ip\x00', &(0x7f0000000980)='GPL\x00']}, 0x100) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1m31.766996101s ago: executing program 6 (id=802): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x1, 0x70000, 0x2000, &(0x7f0000344000/0x2000)=nil}) write(0xffffffffffffffff, &(0x7f00000002c0)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000600000000000000100106001500070000001800160008000100010000000c000b000800010006", 0x4d) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x100, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r2) 1m29.295529268s ago: executing program 36 (id=776): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 1m28.325974434s ago: executing program 6 (id=807): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000000014"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1', 0x1) 1m27.463393128s ago: executing program 6 (id=809): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl(r0, 0xffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x6}}, './file1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000380)={0x2, [], 0x80, "c155a60080afcd"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002300)={0x0, r3, "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", "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"}) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000300)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x2404c010) r8 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) msgget(0x1, 0x40) r9 = ioctl$USERFAULTFD_IOC_NEW(r8, 0xaa00) r10 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000200)=r11, 0x4) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0xffffffff, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) write$tcp_congestion(r11, &(0x7f00000002c0)='htcp\x00', 0x5) ioctl$KVM_RUN(r12, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m24.898987226s ago: executing program 6 (id=816): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 1m9.351624318s ago: executing program 37 (id=816): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 47.145824677s ago: executing program 8 (id=966): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="030002000000000000000000000029c5c3000000cae9f655cc994ef380b721a8e626ed789eaaf142eb8e475d925a478cf5fd2b20e2bf0503660c7aa70357aacf989cf74562451f01a11d64cde787a8cf13337ecb0b0075ea3c258cd0c1b3e437fdd7e7ccc0b6f23d0de0f76faa7e2c48da6bb387aaeaee86c729d15011b32322b00d7d96fa36d77c0c8a1b63e4bb00ffe846ff6be035131dfafd076654c8ee892db79d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x50) syz_open_dev$vcsa(&(0x7f0000000000), 0x80000001, 0x101040) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904510503b956da020905080000040112fc09050b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80, 0x0, 0x7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x2, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfeffff, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) r10 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r10, 0x2) openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000b040000000403", @ANYRES16, @ANYRES16, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES16], 0x0, 0x0}, 0x0) setuid(0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') 42.918494095s ago: executing program 8 (id=976): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYBLOB="0000000000000000001eba000023ee875d9ad9bf1578a8087cb174bf58dc95b21318333e27139868fc90338eac8ee6e9bc93eeeb04c26249b0f324", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="010000000100"/28], 0x50) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @mcast1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x3800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 39.931125757s ago: executing program 8 (id=982): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0xd, 0xc8, 0x98}}}, 0x7) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r3, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000120069b17a4ceecc537e000007", @ANYBLOB="e6"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf00bf05, 0x2}) 37.986854082s ago: executing program 8 (id=983): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18800000000000000000130000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xe8, {}, {}, @note={0x7, 0x0, 0x9, 0x1, 0x4}}], 0x1c) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd000000380000004503000008000000050020000106"], 0x58) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000280)={{0x1, 0x3}, 'port0\x00', 0x2, 0x121030, 0x1, 0x0, 0x1, 0xfffff800, 0x200, 0x0, 0x6, 0x7}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0x1e, 0x0, @void}, 0x10) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 35.136496543s ago: executing program 8 (id=989): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 34.117756911s ago: executing program 8 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) shutdown(r4, 0x1) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r8 = socket(0x400000000010, 0x3, 0x6) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffdf, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r10, {0x10, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) 32.884762665s ago: executing program 38 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) shutdown(r4, 0x1) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r8 = socket(0x400000000010, 0x3, 0x6) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffdf, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r10, {0x10, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) 24.524224149s ago: executing program 9 (id=1012): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x801, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f042}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6", 0xc2}], 0x1, 0x0, 0x0, 0x7400}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0xfe, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045518, 0x0) 22.182789566s ago: executing program 0 (id=1015): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYBLOB="0000000000000000001eba000023ee875d9ad9bf1578a8087cb174bf58dc95b21318333e27139868fc90338eac8ee6e9bc93eeeb04c26249b0f324", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="010000000100"/28], 0x50) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @mcast1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x3800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 18.977353342s ago: executing program 4 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r4, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 18.773059302s ago: executing program 9 (id=1021): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88a00, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000480)={0xd, 0x3ff, 0x1, 0x0, 0x0, 0x0, "00000009000000000134dbb39fe6083a", 0xc4, 0x0, 0x0, 0xc4, 0xfd, 0x0, 0xff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_buf(r3, 0x29, 0x12, &(0x7f0000000240)=""/83, &(0x7f0000000400)=0x53) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0xfdfffffe, 0xd6fe2, 0x1b3468}) 17.987168297s ago: executing program 4 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000000014"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) 14.624140707s ago: executing program 9 (id=1023): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="030002000000000000000000000029c5c3000000cae9f655cc994ef380b721a8e626ed789eaaf142eb8e475d925a478cf5fd2b20e2bf0503660c7aa70357aacf989cf74562451f01a11d64cde787a8cf13337ecb0b0075ea3c258cd0c1b3e437fdd7e7ccc0b6f23d0de0f76faa7e2c48da6bb387aaeaee86c729d15011b32322b00d7d96fa36d77c0c8a1b63e4bb00ffe846ff6be035131dfafd076654c8ee892db79d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x50) syz_open_dev$vcsa(&(0x7f0000000000), 0x80000001, 0x101040) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904510503b956da020905080000040112fc09050b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80, 0x0, 0x7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x2, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfeffff, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) r10 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r10, 0x2) openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000b040000000403", @ANYRES16, @ANYRES16, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES16], 0x0, 0x0}, 0x0) setuid(0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') 14.265702603s ago: executing program 3 (id=1024): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000000014"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) 14.246988201s ago: executing program 0 (id=1025): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r7, &(0x7f0000000000)=""/219, 0xdb) tkill(r6, 0x7) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070027bd7000fbdbdb250200000008000100", @ANYRES32=r12], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(r8, 0x0, 0x0) 12.882259766s ago: executing program 0 (id=1026): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x800, 0x1, 0x5, 0x8, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4f}]}, 0x34}}, 0x50) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x1) 10.322540737s ago: executing program 4 (id=1027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3, 0x2, 0x2, 0x400, r6, 0x4, '\x00', 0x0, r5, 0x1, 0x5, 0x4, 0x5}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_80211_join_ibss(0x0, &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 9.563787984s ago: executing program 3 (id=1028): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x400, 0x1, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x9f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x100}, 'syz1\x00', 0x19}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 9.278508994s ago: executing program 0 (id=1029): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c0050904230001"], 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x400, 0x1, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x9f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x100}, 'syz1\x00', 0x19}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) 8.846203735s ago: executing program 3 (id=1030): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYBLOB="0000000000000000001eba000023ee875d9ad9bf1578a8087cb174bf58dc95b21318333e27139868fc90338eac8ee6e9bc93eeeb04c26249b0f324", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="010000000100"/28], 0x50) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @mcast1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x3800, 0x9, 0x3}, 0x20) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 8.784707904s ago: executing program 9 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r3, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r7, 0x0, 0x0, 0x200000000000008}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000079c0)={0x28, 0x6, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x40}) mount(&(0x7f0000000180)=@nullb, 0x0, &(0x7f0000000040)='xfs\x00', 0x800049, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009916fdffffff6b00000051396d414516ec476166129ffe0910455ab0884cd2f95a45e65b48251ab2acbf5d7ec62ed15a011b8858b9f2acf776d5da826faec05a18f176d0965ce3c448150878e8"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/195, 0xc3}, {0x0}], 0x2, 0x9, 0x4) openat(0xffffffffffffff9c, 0x0, 0x8101, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 7.62011477s ago: executing program 9 (id=1032): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88a00, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000480)={0xd, 0x3ff, 0x1, 0x0, 0x0, 0x0, "00000009000000000134dbb39fe6083a", 0xc4, 0x0, 0x0, 0xc4, 0xfd, 0x0, 0xff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_buf(r3, 0x29, 0x12, &(0x7f0000000240)=""/83, &(0x7f0000000400)=0x53) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0xfdfffffe, 0xd6fe2, 0x1b3468}) 5.218149807s ago: executing program 9 (id=1033): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r4, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 5.213943093s ago: executing program 3 (id=1034): socket(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4040800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, 0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x6, 0x5) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0xfd, 0x0, 0x80, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 5.054700127s ago: executing program 0 (id=1035): syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) read(r0, &(0x7f0000000280)=""/25, 0x19) prctl$PR_GET_IO_FLUSHER(0x3a) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mlockall(0x2) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000001c0)='pim6reg0\x00') openat2(r0, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100)={0x2000, 0xc88f7bfa456ed010, 0x1}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bf1600000000000085000000bc000000180200000a0000010000000000000000180200000a0000020000000040000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000cd000000850000004500000095"], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xfddf, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.824626632s ago: executing program 3 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000000014"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) 1.457894003s ago: executing program 3 (id=1037): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000000014"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) 1.374531225s ago: executing program 0 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r4, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1.293964047s ago: executing program 4 (id=1039): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x400, 0x1, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x9f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x100}, 'syz1\x00', 0x19}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 1.007155837s ago: executing program 4 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r6, r7, r8, &(0x7f0000000200)=@ublk_add_dev_sqe={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000800000)=@new_dev={0x3, 0x161, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x27}}}) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x1) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(r3, 0xb) shmget$private(0x0, 0x3000, 0x800, &(0x7f00007bd000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d04, &(0x7f00000002c0)=0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 0s ago: executing program 4 (id=1041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3, 0x2, 0x2, 0x400, r6, 0x4, '\x00', 0x0, r5, 0x1, 0x5, 0x4, 0x5}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_80211_join_ibss(0x0, &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): or of length 0, skipping remainder of the config [ 515.402134][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.448655][ T30] gspca_main: spca501-2.14.0 probing 0000:0000 [ 515.978237][ T30] gspca_spca501: reg write: error -110 [ 515.978255][ T30] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 515.978331][ T30] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 516.025054][ T30] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 516.025135][ T30] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 516.177274][ T30] usb 4-1: USB disconnect, device number 31 [ 516.255578][ T31] audit: type=1400 audit(1791495004.209:712): avc: denied { read } for pid=9317 comm="syz.2.713" name="idVendor" dev="configfs" ino=21739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 516.261671][ T31] audit: type=1400 audit(1791495004.209:713): avc: denied { write } for pid=9317 comm="syz.2.713" name="configs" dev="configfs" ino=11051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 516.316380][ T31] audit: type=1400 audit(1791495004.269:714): avc: denied { write } for pid=9317 comm="syz.2.713" name="c.1" dev="configfs" ino=21740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 516.375244][ T31] audit: type=1400 audit(1791495004.329:715): avc: denied { create } for pid=9317 comm="syz.2.713" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 516.459191][ T30] usb 3-1: USB disconnect, device number 48 [ 516.727611][ T9332] netlink: Failed to add k\ helper -22 [ 516.727693][ T9332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.832401][ T5740] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 516.862631][ T9338] syzkaller0: entered promiscuous mode [ 516.862653][ T9338] syzkaller0: entered allmulticast mode [ 516.870634][ T9338] tipc: Started in network mode [ 516.870662][ T9338] tipc: Node identity 028003d63771, cluster identity 4711 [ 516.871098][ T9338] tipc: Enabled bearer , priority 0 [ 516.909361][ T9337] tipc: Resetting bearer [ 516.976327][ T9337] tipc: Disabling bearer [ 516.991279][ T5740] usb 1-1: not running at top speed; connect to a high speed hub [ 516.991301][ T5740] usb 1-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=c4.11 [ 517.000312][ T5740] usb 1-1: config 5 has an invalid interface number: 60 but max is 2 [ 517.000331][ T5740] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 517.000342][ T5740] usb 1-1: config 5 has an invalid interface number: 169 but max is 2 [ 517.000353][ T5740] usb 1-1: config 5 has an invalid interface number: 104 but max is 2 [ 517.000366][ T5740] usb 1-1: config 5 has no interface number 0 [ 517.000374][ T5740] usb 1-1: config 5 has no interface number 1 [ 517.000383][ T5740] usb 1-1: config 5 has no interface number 2 [ 517.000415][ T5740] usb 1-1: config 5 interface 60 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 517.000428][ T5740] usb 1-1: config 5 interface 60 altsetting 1 endpoint 0x8 has invalid maxpacket 1056, setting to 64 [ 517.000443][ T5740] usb 1-1: config 5 interface 60 altsetting 1 endpoint 0x1 has invalid maxpacket 959, setting to 64 [ 517.000458][ T5740] usb 1-1: config 5 interface 60 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 517.000470][ T5740] usb 1-1: config 5 interface 60 altsetting 1 endpoint 0x9 has invalid maxpacket 1495, setting to 64 [ 517.000484][ T5740] usb 1-1: config 5 interface 60 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 517.000497][ T5740] usb 1-1: config 5 interface 60 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 517.000512][ T5740] usb 1-1: config 5 interface 60 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 517.000525][ T5740] usb 1-1: config 5 interface 60 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 517.000536][ T5740] usb 1-1: config 5 interface 60 altsetting 1 has an endpoint descriptor with address 0x15, changing to 0x5 [ 517.000548][ T5740] usb 1-1: config 5 interface 60 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 517.000565][ T5740] usb 1-1: config 5 interface 169 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 517.000576][ T5740] usb 1-1: config 5 interface 169 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 517.000593][ T5740] usb 1-1: config 5 interface 104 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 517.000604][ T5740] usb 1-1: config 5 interface 104 altsetting 2 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 517.000616][ T5740] usb 1-1: config 5 interface 104 altsetting 2 endpoint 0x8E has an invalid bInterval 209, changing to 4 [ 517.000629][ T5740] usb 1-1: config 5 interface 104 altsetting 2 endpoint 0x8E has invalid maxpacket 34865, setting to 1023 [ 517.000650][ T5740] usb 1-1: config 5 interface 104 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 517.000664][ T5740] usb 1-1: config 5 interface 104 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.000679][ T5740] usb 1-1: config 5 interface 60 has no altsetting 0 [ 517.000689][ T5740] usb 1-1: config 5 interface 104 has no altsetting 0 [ 517.126087][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.126115][ T5740] usb 1-1: Product: ည [ 517.126130][ T5740] usb 1-1: Manufacturer: ␉ [ 517.126145][ T5740] usb 1-1: SerialNumber: ⠉ [ 517.459305][ T9343] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 517.459305][ T9343] [ 517.459502][ T9343] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 517.459690][ T9343] CIFS: Attempting to mount //127.0.0.1/share [ 517.541467][ T31] audit: type=1400 audit(1791495005.489:716): avc: denied { read } for pid=9341 comm="syz.2.718" path="socket:[21167]" dev="sockfs" ino=21167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.854767][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.855046][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.967274][ T9355] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 518.899640][ T9343] CIFS: VFS: cifs_mount failed w/return code = -512 [ 519.086898][ T5740] keyspan 1-1:5.60: Keyspan - (without firmware) converter detected [ 519.122888][ T5740] usb 1-1: Direct firmware load for keyspan/usa49w.fw failed with error -2 [ 519.253677][ T31] audit: type=1400 audit(1791495007.179:717): avc: denied { firmware_load } for pid=5740 comm="kworker/1:5" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 519.349409][ T5740] usb 1-1: Falling back to sysfs fallback for: keyspan/usa49w.fw [ 519.811072][ T9367] random: crng reseeded on system resumption [ 519.952421][ T25] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 520.082903][ T25] usb 3-1: device descriptor read/64, error -71 [ 520.323163][ T25] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 520.452444][ T25] usb 3-1: device descriptor read/64, error -71 [ 520.563341][ T25] usb usb3-port1: attempt power cycle [ 520.925759][ T25] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 520.943667][ T25] usb 3-1: device descriptor read/8, error -71 [ 520.983232][ T5791] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 521.132744][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 521.135738][ T5791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 521.135769][ T5791] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 521.136547][ T5791] usb 2-1: config 8 has an invalid interface number: 87 but max is 0 [ 521.136562][ T5791] usb 2-1: config 8 has no interface number 0 [ 521.136577][ T5791] usb 2-1: config 8 interface 87 has no altsetting 0 [ 521.138209][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.138232][ T5791] usb 2-1: Product: syz [ 521.138247][ T5791] usb 2-1: Manufacturer: syz [ 521.138259][ T5791] usb 2-1: SerialNumber: syz [ 521.202430][ T25] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 521.316742][ T25] usb 3-1: device descriptor read/8, error -71 [ 521.371291][ T5791] usb-storage 2-1:8.87: USB Mass Storage device detected [ 521.379329][ T5791] usb-storage 2-1:8.87: Quirks match for vid 04e6 pid 000b: 4 [ 521.422954][ T25] usb usb3-port1: unable to enumerate USB device [ 522.163688][ T5791] usb 2-1: USB disconnect, device number 35 [ 522.435556][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 523.397861][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 524.733070][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 525.082602][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 525.083314][ T25] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 525.084630][ T25] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 525.084654][ T25] usb 5-1: config 0 has no interface number 0 [ 525.084717][ T25] usb 5-1: config 0 interface 12 has no altsetting 0 [ 525.086523][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.086546][ T25] usb 5-1: Product: syz [ 525.086560][ T25] usb 5-1: Manufacturer: syz [ 525.086574][ T25] usb 5-1: SerialNumber: syz [ 525.089339][ T25] usb 5-1: config 0 descriptor?? [ 525.596101][ T9415] XFS (nullb0): Invalid superblock magic number [ 526.043326][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 526.045163][ T31] audit: type=1400 audit(1791495013.999:718): avc: denied { read } for pid=9425 comm="syz.0.735" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 526.045380][ T31] audit: type=1400 audit(1791495013.999:719): avc: denied { open } for pid=9425 comm="syz.0.735" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 526.045884][ T31] audit: type=1400 audit(1791495013.999:720): avc: denied { ioctl } for pid=9425 comm="syz.0.735" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 526.046811][ T9426] cgroup: fork rejected by pids controller in /syz0 [ 526.049372][ T31] audit: type=1400 audit(1791495013.999:721): avc: denied { listen } for pid=9425 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 526.230993][ T31] audit: type=1400 audit(1791495014.179:722): avc: denied { ioctl } for pid=9410 comm="syz.4.729" path="socket:[21294]" dev="sockfs" ino=21294 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 526.493605][ T7054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.595061][ T7054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.704897][ T7054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.761631][ T7054] bridge0: port 3(netdevsim0) entered disabled state [ 526.786809][ T7054] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 526.786830][ T7054] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 526.789503][ T7054] bridge0: port 3(netdevsim0) entered disabled state [ 526.825230][ T7054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.235134][ T31] audit: type=1400 audit(1791495015.189:723): avc: denied { mounton } for pid=9410 comm="syz.4.729" path="/proc/557/task" dev="proc" ino=21296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 528.339911][ T7054] bridge_slave_1: left allmulticast mode [ 528.339936][ T7054] bridge_slave_1: left promiscuous mode [ 528.342161][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.388847][ T7054] bridge_slave_0: left allmulticast mode [ 528.388870][ T7054] bridge_slave_0: left promiscuous mode [ 528.389080][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.449065][ T31] audit: type=1400 audit(1791495016.399:724): avc: denied { ioctl } for pid=9435 comm="syz-executor" path="socket:[21977]" dev="sockfs" ino=21977 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 528.490551][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.501560][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.510300][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.512858][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.522616][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.558728][ T31] audit: type=1400 audit(1791495016.509:725): avc: denied { mounton } for pid=9435 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 528.667017][ T25] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -32 [ 528.667072][ T25] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 528.667089][ T25] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 528.667168][ T25] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 528.822124][ T7054] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 528.853518][ T7054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.857428][ T7054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.859326][ T7054] bond0 (unregistering): Released all slaves [ 528.877201][ T31] audit: type=1400 audit(1791495016.829:726): avc: denied { write } for pid=9436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.000128][ T5791] usb 5-1: USB disconnect, device number 13 [ 529.028282][ T31] audit: type=1400 audit(1791495016.979:727): avc: denied { write } for pid=9451 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.250556][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 530.023202][ T7054] hsr_slave_0: left promiscuous mode [ 530.024251][ T7054] hsr_slave_1: left promiscuous mode [ 530.025018][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.025046][ T7054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.026137][ T7054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.026153][ T7054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.042063][ T7054] veth1_macvtap: left promiscuous mode [ 530.042120][ T7054] veth0_macvtap: left promiscuous mode [ 530.042213][ T7054] veth1_vlan: left promiscuous mode [ 530.109548][ T7054] veth0_vlan: left promiscuous mode [ 531.132467][ T5608] Bluetooth: hci4: command tx timeout [ 531.282713][ T31] audit: type=1400 audit(1791495019.239:728): avc: denied { write } for pid=9463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.401529][ T31] audit: type=1400 audit(1791495019.349:729): avc: denied { write } for pid=9480 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.559298][ T7054] team0 (unregistering): Port device team_slave_1 removed [ 531.574835][ T7054] team0 (unregistering): Port device team_slave_0 removed [ 531.712073][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 532.113948][ T7054] IPVS: stop unused estimator thread 0... [ 532.266272][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.266423][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.266542][ T9435] bridge_slave_0: entered allmulticast mode [ 532.268133][ T9435] bridge_slave_0: entered promiscuous mode [ 532.270894][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.271029][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.271129][ T9435] bridge_slave_1: entered allmulticast mode [ 532.273025][ T9435] bridge_slave_1: entered promiscuous mode [ 532.302020][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.307334][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.314639][ T5791] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 532.333969][ T9435] team0: Port device team_slave_0 added [ 532.336577][ T9435] team0: Port device team_slave_1 added [ 532.375546][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.375561][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.375583][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.377263][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.377276][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.377298][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.378733][ T31] audit: type=1400 audit(1791495020.329:730): avc: denied { write } for pid=9484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.423181][ T9435] hsr_slave_0: entered promiscuous mode [ 532.423997][ T9435] hsr_slave_1: entered promiscuous mode [ 532.424592][ T9435] debugfs: 'hsr0' already exists in 'hsr' [ 532.424614][ T9435] Cannot create hsr debugfs directory [ 532.521138][ T5791] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 532.522104][ T5791] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 10 [ 532.522134][ T5791] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 532.557279][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 532.557305][ T5791] usb 5-1: Product: syz [ 532.557320][ T5791] usb 5-1: Manufacturer: syz [ 532.803071][ T25] usb 5-1: USB disconnect, device number 14 [ 532.809093][ T31] audit: type=1400 audit(1791495020.759:731): avc: denied { write } for pid=9507 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.891147][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.900630][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.901761][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.929590][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.931586][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.232375][ T52] Bluetooth: hci4: command tx timeout [ 533.539819][ T31] audit: type=1400 audit(1791495021.489:732): avc: denied { write } for pid=9521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.605323][ T9435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.610483][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.615265][ T9435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.638220][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.639005][ T9435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.641648][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.650392][ T9435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.675655][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.703503][ T31] audit: type=1400 audit(1791495021.659:733): avc: denied { write } for pid=9536 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.732461][ T2255] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 533.832014][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.861554][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.886083][ T2255] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 533.887066][ T2255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.887096][ T2255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.887132][ T2255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.891701][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.891792][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.893121][ T2255] usb 5-1: config 0 descriptor?? [ 533.981434][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.981550][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.071902][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.072040][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.072168][ T9509] bridge_slave_0: entered allmulticast mode [ 534.076071][ T9509] bridge_slave_0: entered promiscuous mode [ 534.087788][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.087937][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.088053][ T9509] bridge_slave_1: entered allmulticast mode [ 534.090394][ T9509] bridge_slave_1: entered promiscuous mode [ 534.159245][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.169572][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.249409][ T9509] team0: Port device team_slave_0 added [ 534.256755][ T9509] team0: Port device team_slave_1 added [ 534.294699][ T31] audit: type=1400 audit(1791495022.249:734): avc: denied { write } for pid=9547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.340091][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.340108][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.340124][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.341109][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.341121][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.341142][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.344445][ T2255] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 534.344476][ T2255] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 534.344506][ T2255] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 534.344531][ T2255] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 534.344555][ T2255] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 534.378628][ T2255] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 534.543609][ T9509] hsr_slave_0: entered promiscuous mode [ 534.544488][ T9509] hsr_slave_1: entered promiscuous mode [ 534.545057][ T9509] debugfs: 'hsr0' already exists in 'hsr' [ 534.545075][ T9509] Cannot create hsr debugfs directory [ 534.566768][ T31] audit: type=1400 audit(1791495022.519:735): avc: denied { write } for pid=9564 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.581774][ T5725] usb 5-1: USB disconnect, device number 15 [ 534.674871][ T9563] fido_id[9563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 534.983319][ T52] Bluetooth: hci5: command tx timeout [ 535.051647][ T31] audit: type=1400 audit(1791495022.999:736): avc: denied { write } for pid=9568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.073732][ T9509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.098918][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.101776][ T9509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 535.120147][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.124244][ T9509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 535.144347][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.145155][ T9509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 535.168411][ T9509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.251247][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.264656][ T31] audit: type=1400 audit(1791495023.219:737): avc: denied { write } for pid=9593 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.304496][ T52] Bluetooth: hci4: command tx timeout [ 535.371603][ T9435] veth0_vlan: entered promiscuous mode [ 535.396863][ T9435] veth1_vlan: entered promiscuous mode [ 535.423930][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.450386][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.492265][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.493194][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.503933][ T9435] veth0_macvtap: entered promiscuous mode [ 535.510977][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.511065][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.516289][ T9435] veth1_macvtap: entered promiscuous mode [ 535.568214][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.586581][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.717370][ T5922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.718164][ T5922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.718484][ T5922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.718866][ T5922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.869848][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.869868][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.993634][ T9611] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 536.041896][ T5922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.041915][ T5922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.302452][ T9620] random: crng reseeded on system resumption [ 536.577050][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.612947][ T9417] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 536.763176][ T9417] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 536.764093][ T9417] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.764144][ T9417] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 536.766064][ T9417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.766088][ T9417] usb 5-1: Product: syz [ 536.766102][ T9417] usb 5-1: Manufacturer: syz [ 536.766117][ T9417] usb 5-1: SerialNumber: syz [ 536.947805][ T9509] veth0_vlan: entered promiscuous mode [ 536.964928][ T9509] veth1_vlan: entered promiscuous mode [ 536.984740][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 536.984765][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 536.984789][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.984818][ T52] Workqueue: hci4 hci_rx_work [ 536.984852][ T52] Call Trace: [ 536.984860][ T52] [ 536.984868][ T52] dump_stack_lvl+0x100/0x190 [ 536.984902][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 536.984934][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 536.984964][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 536.984989][ T52] ? find_held_lock+0x2b/0x80 [ 536.985017][ T52] ? kobject_add_internal+0x25f/0x930 [ 536.985044][ T52] ? kobject_add_internal+0x25f/0x930 [ 536.985071][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 536.985098][ T52] kobject_add_internal+0x2c8/0x930 [ 536.985127][ T52] kobject_add+0x16a/0x1e0 [ 536.985155][ T52] ? __pfx_kobject_add+0x10/0x10 [ 536.985179][ T52] ? class_to_subsys+0x10f/0x150 [ 536.985203][ T52] ? kobject_put+0xb9/0x640 [ 536.985226][ T52] ? _raw_spin_unlock+0x28/0x50 [ 536.985251][ T52] device_add+0x294/0x1970 [ 536.985280][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 536.985303][ T52] ? __pfx_device_add+0x10/0x10 [ 536.985331][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 536.985366][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 536.985389][ T52] le_conn_complete_evt+0x122f/0x2130 [ 536.985424][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 536.985451][ T52] ? hci_event_packet+0x186/0xcd0 [ 536.985485][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 536.985515][ T52] ? skb_pull_data+0x15f/0x1e0 [ 536.985540][ T52] hci_le_meta_evt+0x34a/0x5f0 [ 536.985578][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 536.985613][ T52] hci_event_packet+0x51c/0xcd0 [ 536.985643][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 536.985675][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 536.985708][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 536.985738][ T52] hci_rx_work+0x451/0xfc0 [ 536.985772][ T52] process_one_work+0xac7/0x1b10 [ 536.985817][ T52] ? __pfx_process_one_work+0x10/0x10 [ 536.985848][ T52] ? lock_acquire+0x1d1/0x380 [ 536.985879][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 536.985910][ T52] worker_thread+0x5ef/0xe50 [ 536.985941][ T52] ? kthread+0x13a/0x450 [ 536.985966][ T52] ? __pfx_worker_thread+0x10/0x10 [ 536.985983][ T52] kthread+0x373/0x450 [ 536.986009][ T52] ? __pfx_kthread+0x10/0x10 [ 536.986037][ T52] ret_from_fork+0x730/0xd60 [ 536.986059][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 536.986082][ T52] ? __switch_to+0x800/0x10f0 [ 536.986109][ T52] ? __pfx_kthread+0x10/0x10 [ 536.986138][ T52] ret_from_fork_asm+0x1a/0x30 [ 536.986177][ T52] [ 536.986236][ T52] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 536.986271][ T52] Bluetooth: hci4: failed to register connection device [ 537.067618][ T52] Bluetooth: hci5: command tx timeout [ 537.130386][ T9509] veth0_macvtap: entered promiscuous mode [ 537.159885][ T9509] veth1_macvtap: entered promiscuous mode [ 537.176988][ T9640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'. [ 537.215982][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.244748][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.383011][ T52] Bluetooth: hci4: command tx timeout [ 537.388540][ T6342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.390203][ T5840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.390393][ T5840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.433208][ T140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.530923][ T5840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.530942][ T5840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.617699][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.617720][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.807755][ T9652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 537.809274][ T9652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 537.810019][ T9652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 537.811539][ T9652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.812129][ T9652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 537.881032][ C1] usb 5-1: received EP1 urb->status = -71 [ 537.894858][ T9656] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 537.954613][ T9417] input: as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 539.143631][ T5608] Bluetooth: hci5: command tx timeout [ 539.463655][ T5608] Bluetooth: hci4: command 0x2016 tx timeout [ 539.629397][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 539.634821][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 539.641492][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 539.646685][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 539.657902][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 539.731187][ T9417] usb 5-1: USB disconnect, device number 16 [ 539.862921][ T5608] Bluetooth: hci6: command tx timeout [ 540.591304][ T9687] udevd[9687]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.233428][ T5608] Bluetooth: hci5: command tx timeout [ 541.592448][ T5608] Bluetooth: hci4: command 0x2016 tx timeout [ 541.795953][ T5608] Bluetooth: hci7: command tx timeout [ 541.943015][ T5608] Bluetooth: hci6: command tx timeout [ 542.108563][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.108701][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.108989][ T9651] bridge_slave_0: entered allmulticast mode [ 542.110403][ T9651] bridge_slave_0: entered promiscuous mode [ 542.141318][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.141477][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.141810][ T9651] bridge_slave_1: entered allmulticast mode [ 542.284991][ T9730] ceph: separator ':' missing in source [ 542.293842][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 542.347529][ T9651] bridge_slave_1: entered promiscuous mode [ 542.701056][ T2255] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 543.817525][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.864190][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.872826][ T5608] Bluetooth: hci7: command tx timeout [ 543.914245][ T2255] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 543.915165][ T2255] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.915209][ T2255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.920690][ T2255] usb 6-1: config 0 descriptor?? [ 543.934026][ T2255] pwc: Askey VC010 type 2 USB webcam detected. [ 543.964669][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 544.018339][ T9651] team0: Port device team_slave_0 added [ 544.021697][ T9651] team0: Port device team_slave_1 added [ 544.023373][ T5608] Bluetooth: hci6: command tx timeout [ 544.060120][ T9668] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.060241][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.060320][ T9668] bridge_slave_0: entered allmulticast mode [ 544.061483][ T9668] bridge_slave_0: entered promiscuous mode [ 544.097822][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.097838][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.097851][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.099194][ T9668] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.099331][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.099439][ T9668] bridge_slave_1: entered allmulticast mode [ 544.101017][ T9668] bridge_slave_1: entered promiscuous mode [ 544.104433][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.104446][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.104487][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.113106][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 544.114355][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.114378][ T9] usb 5-1: config 0 has no interface number 0 [ 544.116725][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.116747][ T9] usb 5-1: Product: syz [ 544.116762][ T9] usb 5-1: Manufacturer: syz [ 544.116777][ T9] usb 5-1: SerialNumber: syz [ 544.138188][ T9] usb 5-1: config 0 descriptor?? [ 544.159500][ T2255] pwc: send_video_command error -71 [ 544.159516][ T2255] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 544.159599][ T2255] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 544.173136][ T2255] usb 6-1: USB disconnect, device number 2 [ 544.211879][ T9741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.212390][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.347239][ T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 544.373602][ T9651] hsr_slave_0: entered promiscuous mode [ 544.376480][ T9651] hsr_slave_1: entered promiscuous mode [ 544.377237][ T9651] debugfs: 'hsr0' already exists in 'hsr' [ 544.377256][ T9651] Cannot create hsr debugfs directory [ 544.406978][ T9668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.407932][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 544.408362][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 544.408409][ T9] usb 5-1: media controller created [ 544.460042][ T9668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.493267][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.543183][ T9668] team0: Port device team_slave_0 added [ 544.566671][ T9668] team0: Port device team_slave_1 added [ 544.618400][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.618416][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.618439][ T9668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.683514][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.683530][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.683552][ T9668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.726890][ T2255] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 544.806563][ T9743] FAULT_INJECTION: forcing a failure. [ 544.806563][ T9743] name failslab, interval 1, probability 0, space 0, times 0 [ 544.806594][ T9743] CPU: 0 UID: 0 PID: 9743 Comm: syz.0.761 Not tainted syzkaller #0 PREEMPT(full) [ 544.806618][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 544.806630][ T9743] Call Trace: [ 544.806636][ T9743] [ 544.806645][ T9743] dump_stack_lvl+0x100/0x190 [ 544.806677][ T9743] should_fail_ex.cold+0x5/0xa [ 544.806704][ T9743] should_failslab+0xc2/0x120 [ 544.806731][ T9743] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 544.806754][ T9743] ? kasan_save_track+0x14/0x30 [ 544.806777][ T9743] ? media_pipeline_add_pad+0x6b8/0xa00 [ 544.806811][ T9743] krealloc_node_align_noprof+0x321/0x3e0 [ 544.806841][ T9743] media_pipeline_add_pad+0x6b8/0xa00 [ 544.806873][ T9743] __media_pipeline_start+0x2e6/0x22b0 [ 544.806903][ T9743] ? lock_acquire+0x1d1/0x380 [ 544.806932][ T9743] ? __pfx___media_pipeline_start+0x10/0x10 [ 544.806964][ T9743] ? __mutex_lock+0x26c/0x1bd0 [ 544.806993][ T9743] media_pipeline_start+0x49/0x70 [ 544.807020][ T9743] video_device_pipeline_start+0x79/0xa0 [ 544.807042][ T9743] vimc_capture_start_streaming+0x7d/0x130 [ 544.807064][ T9743] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 544.807087][ T9743] vb2_start_streaming+0x162/0x570 [ 544.807110][ T9743] ? __bitmap_weight+0xd7/0x110 [ 544.807142][ T9743] vb2_core_streamon+0x26a/0x3c0 [ 544.807169][ T9743] vb2_ioctl_streamon+0xd9/0x150 [ 544.807192][ T9743] ? v4l_streamon+0x1a/0xa0 [ 544.807220][ T9743] __video_do_ioctl+0xb2a/0xdf0 [ 544.807244][ T9743] ? __might_fault+0xc5/0x140 [ 544.807263][ T9743] ? __pfx___video_do_ioctl+0x10/0x10 [ 544.807294][ T9743] video_usercopy+0x47a/0x1730 [ 544.807316][ T9743] ? __pfx___video_do_ioctl+0x10/0x10 [ 544.807337][ T9743] ? __pfx_video_usercopy+0x10/0x10 [ 544.807376][ T9743] v4l2_ioctl+0x1bd/0x250 [ 544.807396][ T9743] ? __pfx_v4l2_ioctl+0x10/0x10 [ 544.807418][ T9743] __x64_sys_ioctl+0x18e/0x210 [ 544.807444][ T9743] do_syscall_64+0x123/0x790 [ 544.807469][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.807490][ T9743] RIP: 0033:0x7f820f99e199 [ 544.807506][ T9743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.807524][ T9743] RSP: 002b:00007f821079d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.807544][ T9743] RAX: ffffffffffffffda RBX: 00007f820fc25fa0 RCX: 00007f820f99e199 [ 544.807557][ T9743] RDX: 0000200000000200 RSI: 0000000040045612 RDI: 0000000000000003 [ 544.807569][ T9743] RBP: 00007f821079d090 R08: 0000000000000000 R09: 0000000000000000 [ 544.807581][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.807592][ T9743] R13: 00007f820fc26038 R14: 00007f820fc25fa0 R15: 00007ffe85d53a18 [ 544.807621][ T9743] [ 544.843245][ T9668] hsr_slave_0: entered promiscuous mode [ 544.847435][ T9668] hsr_slave_1: entered promiscuous mode [ 544.848081][ T9668] debugfs: 'hsr0' already exists in 'hsr' [ 544.848098][ T9668] Cannot create hsr debugfs directory [ 545.002998][ T2255] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 545.394605][ T9651] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 545.427943][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.436930][ T9651] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 545.453862][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.455892][ T9651] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 545.477725][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.490304][ T9651] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 545.503640][ T9651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.599408][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 545.680772][ T9] usb 5-1: USB disconnect, device number 17 [ 546.713757][ T5608] Bluetooth: hci7: command tx timeout [ 546.713789][ T5608] Bluetooth: hci6: command tx timeout [ 546.864604][ T9668] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 546.869881][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.876851][ T9668] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 546.925400][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.926159][ T9668] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 546.955125][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.975691][ T9668] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 546.998675][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.610354][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.667246][ T9651] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.696412][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.696468][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.711326][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.711416][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.829075][ T9668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.886265][ T9668] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.904648][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.904704][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.917798][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.917890][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.742816][ T9652] Bluetooth: hci7: command tx timeout [ 550.772150][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 550.772169][ T31] audit: type=1400 audit(1791495038.719:749): avc: denied { getopt } for pid=9810 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 551.466455][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.600014][ T9668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.174710][ T31] audit: type=1400 audit(1791495041.129:750): avc: denied { write } for pid=9814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.416080][ T9651] veth0_vlan: entered promiscuous mode [ 553.461175][ T9651] veth1_vlan: entered promiscuous mode [ 553.510898][ T31] audit: type=1400 audit(1791495041.459:751): avc: denied { write } for pid=9850 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.577758][ T9651] veth0_macvtap: entered promiscuous mode [ 553.593335][ T9651] veth1_macvtap: entered promiscuous mode [ 553.630869][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.648354][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.657764][ T9668] veth0_vlan: entered promiscuous mode [ 553.709346][ T9668] veth1_vlan: entered promiscuous mode [ 553.712757][ T5840] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.712810][ T5840] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.712857][ T5840] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.712905][ T5840] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.968541][ T9668] veth0_macvtap: entered promiscuous mode [ 553.980881][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.980895][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.031760][ T9668] veth1_macvtap: entered promiscuous mode [ 554.149675][ T9668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.153337][ T6342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.153351][ T6342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.189447][ T9668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.288529][ T985] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.333645][ T6342] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.334457][ T6342] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.334494][ T6342] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.434943][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.434963][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.497783][ T6342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.497798][ T6342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.666901][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.751'. [ 554.669029][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.7.751'. [ 554.760927][ T9868] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 554.761584][ T9868] ALSA: mixer_oss: invalid index 137438 [ 555.712464][ T5610] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 555.862666][ T5610] usb 7-1: Using ep0 maxpacket: 16 [ 555.863742][ T5610] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 555.864868][ T5610] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.866285][ T5610] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.866339][ T5610] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.925377][ T5610] usb 7-1: config 0 descriptor?? [ 556.138048][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.138427][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.344017][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.344052][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x4 [ 556.344121][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.344146][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x4 [ 556.344170][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.344194][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.344217][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.344241][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.344277][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.344303][ T5610] apple 0003:05AC:024B.0005: unknown main item tag 0x0 [ 556.374672][ T5610] apple 0003:05AC:024B.0005: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.6-1/input0 [ 556.564452][ T93] usb 7-1: USB disconnect, device number 2 [ 559.163534][ T31] audit: type=1400 audit(1791495047.119:752): avc: denied { create } for pid=9900 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 559.197875][ T31] audit: type=1400 audit(1791495047.149:753): avc: denied { bind } for pid=9900 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 560.361057][ T31] audit: type=1400 audit(1791495048.309:754): avc: denied { ioctl } for pid=9909 comm="syz.6.782" path="socket:[25987]" dev="sockfs" ino=25987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.404239][ T9911] erspan1: entered allmulticast mode [ 561.555398][ T31] audit: type=1400 audit(1791495049.509:755): avc: denied { ioctl } for pid=9922 comm="syz.0.784" path="socket:[26024]" dev="sockfs" ino=26024 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 561.558812][ T31] audit: type=1400 audit(1791495049.509:756): avc: denied { read } for pid=9922 comm="syz.0.784" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 561.559015][ T31] audit: type=1400 audit(1791495049.509:757): avc: denied { open } for pid=9922 comm="syz.0.784" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 561.563187][ T9929] FAULT_INJECTION: forcing a failure. [ 561.563187][ T9929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.563207][ T9929] CPU: 1 UID: 0 PID: 9929 Comm: syz.6.785 Not tainted syzkaller #0 PREEMPT(full) [ 561.563221][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 561.563228][ T9929] Call Trace: [ 561.563232][ T9929] [ 561.563237][ T9929] dump_stack_lvl+0x100/0x190 [ 561.563257][ T9929] should_fail_ex.cold+0x5/0xa [ 561.563275][ T9929] _copy_from_user+0x2e/0xd0 [ 561.563291][ T9929] copy_msghdr_from_user+0x9f/0x4c0 [ 561.563306][ T9929] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 561.563321][ T9929] ? _kstrtoull+0x144/0x200 [ 561.563337][ T9929] ? __pfx__kstrtoull+0x10/0x10 [ 561.563357][ T9929] ___sys_sendmsg+0x106/0x1e0 [ 561.563371][ T9929] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.563391][ T9929] ? __fget_files+0x34/0x3d0 [ 561.563418][ T9929] __sys_sendmmsg+0x20c/0x440 [ 561.563437][ T9929] ? __pfx___sys_sendmmsg+0x10/0x10 [ 561.563453][ T9929] ? ksys_write+0x190/0x250 [ 561.563478][ T9929] ? fput+0x7c/0x100 [ 561.563494][ T9929] ? ksys_write+0x1ac/0x250 [ 561.563507][ T9929] ? __pfx_ksys_write+0x10/0x10 [ 561.563523][ T9929] __x64_sys_sendmmsg+0x9c/0x100 [ 561.563539][ T9929] ? lockdep_hardirqs_on+0x7d/0x110 [ 561.563552][ T9929] do_syscall_64+0x123/0x790 [ 561.563566][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.563578][ T9929] RIP: 0033:0x7f5739d9e199 [ 561.563588][ T9929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.563599][ T9929] RSP: 002b:00007f573abd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 561.563610][ T9929] RAX: ffffffffffffffda RBX: 00007f573a025fa0 RCX: 00007f5739d9e199 [ 561.563618][ T9929] RDX: 0000000000000001 RSI: 0000200000007280 RDI: 0000000000000003 [ 561.563624][ T9929] RBP: 00007f573abd9090 R08: 0000000000000000 R09: 0000000000000000 [ 561.563631][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.563637][ T9929] R13: 00007f573a026038 R14: 00007f573a025fa0 R15: 00007ffee96cf808 [ 561.563659][ T9929] [ 562.172432][ T9383] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 562.988235][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.988286][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.263614][ T9383] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 563.264535][ T9383] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.264578][ T9383] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 563.264600][ T9383] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 563.264623][ T9383] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.266468][ T9383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.266492][ T9383] usb 7-1: Product: syz [ 563.266507][ T9383] usb 7-1: Manufacturer: syz [ 563.266521][ T9383] usb 7-1: SerialNumber: syz [ 563.509339][ T9383] usb 7-1: Limiting number of CPorts to U8_MAX [ 563.510786][ T9383] usb 7-1: Not enough endpoints found in device, aborting! [ 563.735265][ T9383] usb 7-1: USB disconnect, device number 3 [ 564.005068][ T31] audit: type=1400 audit(1791495051.959:758): avc: denied { write } for pid=9948 comm="syz.4.791" name="mouse0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 564.010397][ T9949] bridge_slave_0: left allmulticast mode [ 564.010415][ T9949] bridge_slave_0: left promiscuous mode [ 564.012615][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.062220][ T9949] bridge_slave_1: left allmulticast mode [ 564.062247][ T9949] bridge_slave_1: left promiscuous mode [ 564.064601][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.079182][ T9949] bond0: (slave bond_slave_0): Releasing backup interface [ 564.098854][ T9949] bond0: (slave bond_slave_1): Releasing backup interface [ 564.105855][ T9949] team0: Port device team_slave_0 removed [ 564.118102][ T9949] team0: Port device team_slave_1 removed [ 564.118565][ T9949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.118576][ T9949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.119602][ T9949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 564.128363][ T9952] team0: Mode changed to "loadbalance" [ 564.130495][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 564.131987][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 564.200201][ T31] audit: type=1400 audit(1791495052.149:759): avc: denied { setopt } for pid=9948 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 566.576588][ T5608] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 566.582028][ T5608] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 566.589840][ T5608] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 566.599483][ T5608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 566.599985][ T5608] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 566.651655][ T9969] FAULT_INJECTION: forcing a failure. [ 566.651655][ T9969] name fail_futex, interval 1, probability 0, space 0, times 0 [ 566.651688][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.0.796 Not tainted syzkaller #0 PREEMPT(full) [ 566.651713][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 566.651726][ T9969] Call Trace: [ 566.651733][ T9969] [ 566.651741][ T9969] dump_stack_lvl+0x100/0x190 [ 566.651781][ T9969] should_fail_ex.cold+0x5/0xa [ 566.651812][ T9969] get_futex_key+0x1d0/0x14f0 [ 566.651847][ T9969] ? __pfx_get_futex_key+0x10/0x10 [ 566.651877][ T9969] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 566.651908][ T9969] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 566.651941][ T9969] futex_wait_setup+0x91/0x540 [ 566.651973][ T9969] __futex_wait+0x19f/0x300 [ 566.651999][ T9969] ? __pfx___futex_wait+0x10/0x10 [ 566.652019][ T9969] ? __pfx_try_to_wake_up+0x10/0x10 [ 566.652040][ T9969] ? futex_hash+0x311/0x400 [ 566.652068][ T9969] ? __pfx_futex_wake_mark+0x10/0x10 [ 566.652093][ T9969] ? find_held_lock+0x2b/0x80 [ 566.652120][ T9969] ? futex_wake+0x4ea/0x5e0 [ 566.652150][ T9969] futex_wait+0xe6/0x370 [ 566.652172][ T9969] ? __pfx_futex_wait+0x10/0x10 [ 566.652200][ T9969] ? io_uring_setup+0xd7/0x160 [ 566.652229][ T9969] ? lock_acquire+0x1d1/0x380 [ 566.652252][ T9969] ? avc_has_perm_noaudit+0x56/0x470 [ 566.652279][ T9969] do_futex+0x265/0x440 [ 566.652307][ T9969] ? __pfx_do_futex+0x10/0x10 [ 566.652343][ T9969] __x64_sys_futex+0x34f/0x4d0 [ 566.652376][ T9969] ? __pfx___x64_sys_futex+0x10/0x10 [ 566.652418][ T9969] do_syscall_64+0x123/0x790 [ 566.652444][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.652465][ T9969] RIP: 0033:0x7f820f99e199 [ 566.652483][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.652502][ T9969] RSP: 002b:00007f821079d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 566.652524][ T9969] RAX: ffffffffffffffda RBX: 00007f820fc25fa8 RCX: 00007f820f99e199 [ 566.652538][ T9969] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f820fc25fa8 [ 566.652558][ T9969] RBP: 00007f820fc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 566.652571][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.652585][ T9969] R13: 00007f820fc26038 R14: 00007ffe85d53930 R15: 00007ffe85d53a18 [ 566.652616][ T9969] [ 568.552460][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 568.669707][ T5608] Bluetooth: hci8: command tx timeout [ 568.702351][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 568.703006][ T9] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 568.706097][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.706227][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 568.706289][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 568.706361][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 568.706490][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 568.706523][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.729933][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.729967][ T9] usb 5-1: Product: syz [ 568.730038][ T9] usb 5-1: Manufacturer: syz [ 568.730079][ T9] usb 5-1: SerialNumber: syz [ 568.959182][ T9] usb 5-1: config 0 descriptor?? [ 568.990994][ T9999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.352746][T10010] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 569.726888][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.729479][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.169728][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.169844][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.169928][ T9970] bridge_slave_0: entered allmulticast mode [ 570.172150][ T9970] bridge_slave_0: entered promiscuous mode [ 570.213530][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.213654][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.213793][ T9970] bridge_slave_1: entered allmulticast mode [ 570.217253][ T9970] bridge_slave_1: entered promiscuous mode [ 570.281439][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.295232][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.322763][ T5791] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 570.362542][ T9970] team0: Port device team_slave_0 added [ 570.371758][ T9970] team0: Port device team_slave_1 added [ 570.438179][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.438195][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.438217][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.439936][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.439949][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.439970][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.475609][ T9] rc_core: IR keymap rc-snapstream-firefly not found [ 570.475627][ T9] Registered IR keymap rc-empty [ 570.494573][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 570.496604][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 570.503009][ T5791] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 570.503887][ T5791] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.503927][ T5791] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.505700][ T5791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.505721][ T5791] usb 7-1: Product: syz [ 570.505735][ T5791] usb 7-1: Manufacturer: syz [ 570.505750][ T5791] usb 7-1: SerialNumber: syz [ 571.825642][ T5608] Bluetooth: hci8: command tx timeout [ 572.342039][ T9] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 572.368812][ T9] usb 5-1: USB disconnect, device number 18 [ 572.368942][ C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 572.401193][ T4955] ati_remote 5-1:0.0: ati_remote_open: usb_submit_urb failed! [ 572.511471][ T9970] hsr_slave_0: entered promiscuous mode [ 572.523109][ T9970] hsr_slave_1: entered promiscuous mode [ 572.523980][ T9970] debugfs: 'hsr0' already exists in 'hsr' [ 572.523998][ T9970] Cannot create hsr debugfs directory [ 572.675181][ T5725] usb 7-1: USB disconnect, device number 4 [ 572.721747][ T9652] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 572.723431][ T9652] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 572.740883][ T9652] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 572.745444][ T9652] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 572.745896][ T9652] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 572.917214][ T9970] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 572.920469][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.921253][ T9970] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 572.932390][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 572.959853][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.960952][ T9970] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 572.978858][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.979763][ T9970] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 572.999260][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.103134][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 573.105565][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 573.105608][ T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 573.106626][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 573.109505][ T9] usb 5-1: string descriptor 0 read error: -22 [ 573.110040][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 573.129634][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 573.171314][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 573.171574][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 573.171597][ T9] usb 5-1: media controller created [ 573.173569][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.215423][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.217208][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.241767][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.241862][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.277083][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.277140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.360642][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 574.134408][ T5608] Bluetooth: hci8: command tx timeout [ 574.826674][ T5608] Bluetooth: hci9: command tx timeout [ 574.828890][ T9] usb 5-1: USB disconnect, device number 19 [ 575.337623][ T31] audit: type=1400 audit(1791495063.289:760): avc: denied { name_connect } for pid=10076 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 575.455805][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.459407][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.459756][T10040] bridge_slave_0: entered allmulticast mode [ 575.491505][T10040] bridge_slave_0: entered promiscuous mode [ 575.510748][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.510835][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.510977][T10040] bridge_slave_1: entered allmulticast mode [ 575.519445][T10040] bridge_slave_1: entered promiscuous mode [ 575.526351][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.649021][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.667337][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.708743][T10040] team0: Port device team_slave_0 added [ 575.711984][T10040] team0: Port device team_slave_1 added [ 575.753952][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.753967][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.753987][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.757842][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.757858][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.757880][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.200542][ T5608] Bluetooth: hci8: command tx timeout [ 576.286120][T10094] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 576.467359][T10040] hsr_slave_0: entered promiscuous mode [ 576.469103][T10040] hsr_slave_1: entered promiscuous mode [ 576.470702][T10040] debugfs: 'hsr0' already exists in 'hsr' [ 576.470722][T10040] Cannot create hsr debugfs directory [ 576.484695][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 576.485041][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 576.902584][ T5608] Bluetooth: hci9: command tx timeout [ 576.966626][T10040] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 577.161171][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.170809][T10040] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 577.209717][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.220003][T10040] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 577.225933][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.226753][T10040] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 577.259696][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.232098][ T9970] veth0_vlan: entered promiscuous mode [ 578.286823][ T9970] veth1_vlan: entered promiscuous mode [ 578.371673][T10040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.395552][ T9970] veth0_macvtap: entered promiscuous mode [ 578.406919][ T9970] veth1_macvtap: entered promiscuous mode [ 578.433735][T10040] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.464116][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.472155][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.472270][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.486913][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.487002][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.493258][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.525243][ T748] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.526199][ T748] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.526234][ T748] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.526266][ T748] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.785591][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.785623][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.868889][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.868910][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.984205][ T5608] Bluetooth: hci9: command tx timeout [ 579.900242][T10153] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 579.986295][T10157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.818'. [ 580.059801][T10040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.154575][T10166] FAULT_INJECTION: forcing a failure. [ 580.154575][T10166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.154604][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.0.824 Not tainted syzkaller #0 PREEMPT(full) [ 580.154627][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 580.154639][T10166] Call Trace: [ 580.154644][T10166] [ 580.154652][T10166] dump_stack_lvl+0x100/0x190 [ 580.154683][T10166] should_fail_ex.cold+0x5/0xa [ 580.154710][T10166] _copy_from_user+0x2e/0xd0 [ 580.154735][T10166] move_addr_to_kernel+0x65/0x170 [ 580.154759][T10166] __sys_bind+0x11d/0x260 [ 580.154782][T10166] ? __pfx___sys_bind+0x10/0x10 [ 580.154803][T10166] ? __fget_files+0x21f/0x3d0 [ 580.154838][T10166] ? __pfx_ksys_write+0x10/0x10 [ 580.154868][T10166] __x64_sys_bind+0x72/0xb0 [ 580.154889][T10166] ? lockdep_hardirqs_on+0x7d/0x110 [ 580.154911][T10166] do_syscall_64+0x123/0x790 [ 580.154936][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.154956][T10166] RIP: 0033:0x7f820f99e199 [ 580.154972][T10166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.154989][T10166] RSP: 002b:00007f821079d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 580.155008][T10166] RAX: ffffffffffffffda RBX: 00007f820fc25fa0 RCX: 00007f820f99e199 [ 580.155021][T10166] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 580.155033][T10166] RBP: 00007f821079d090 R08: 0000000000000000 R09: 0000000000000000 [ 580.155044][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.155056][T10166] R13: 00007f820fc26038 R14: 00007f820fc25fa0 R15: 00007ffe85d53a18 [ 580.155084][T10166] [ 580.618134][T10175] random: crng reseeded on system resumption [ 580.760111][T10040] veth0_vlan: entered promiscuous mode [ 580.774807][T10040] veth1_vlan: entered promiscuous mode [ 580.829404][T10040] veth0_macvtap: entered promiscuous mode [ 580.849434][T10040] veth1_macvtap: entered promiscuous mode [ 580.905189][T10040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.915862][T10040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.045723][ T6342] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.045762][ T6342] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.045788][ T6342] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.059617][ T6339] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.064159][ T5608] Bluetooth: hci9: command tx timeout [ 581.151182][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.151197][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.225462][ T6342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.225483][ T6342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.673225][ T9383] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 581.695564][ T31] audit: type=1400 audit(1791495069.639:761): avc: denied { kexec_image_load } for pid=10206 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 581.699453][ T31] audit: type=1400 audit(1791495069.649:762): avc: denied { read write } for pid=10205 comm="syz.8.836" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 581.699838][ T31] audit: type=1400 audit(1791495069.649:763): avc: denied { open } for pid=10205 comm="syz.8.836" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 581.780870][ T31] audit: type=1400 audit(1791495069.739:764): avc: denied { ioctl } for pid=10205 comm="syz.8.836" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 581.833758][ T9383] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 581.834618][ T9383] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 581.834641][ T9383] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.834660][ T9383] usb 10-1: config 0 has no interface number 0 [ 581.834694][ T9383] usb 10-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.836455][ T9383] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.836478][ T9383] usb 10-1: Product: syz [ 581.836493][ T9383] usb 10-1: Manufacturer: syz [ 581.836504][ T9383] usb 10-1: SerialNumber: syz [ 581.847749][ T9383] usb 10-1: config 0 descriptor?? [ 582.121554][ T5610] usb 10-1: USB disconnect, device number 2 [ 582.178021][ T31] audit: type=1400 audit(1791495070.129:765): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 582.289032][ T31] audit: type=1400 audit(1791495070.239:766): avc: denied { lock } for pid=10226 comm="syz.0.844" path="socket:[28861]" dev="sockfs" ino=28861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 582.338155][ T31] audit: type=1400 audit(1791495070.289:767): avc: denied { append } for pid=10228 comm="syz.4.845" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 582.546558][ T31] audit: type=1400 audit(1791495070.499:768): avc: denied { setopt } for pid=10240 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 582.696730][ T31] audit: type=1400 audit(1791495070.649:769): avc: denied { create } for pid=10248 comm="syz.9.854" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 582.724988][ T31] audit: type=1400 audit(1791495070.659:770): avc: denied { mounton } for pid=10248 comm="syz.9.854" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 582.934094][T10257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 583.186351][ T5740] usb 1-1: ezusb_ihex_firmware_download - request "keyspan/usa49w.fw" failed [ 583.186382][ T5740] usb 1-1: failed to load firmware "keyspan/usa49w.fw" [ 583.186597][ T5740] keyspan 1-1:5.60: probe with driver keyspan failed with error -2 [ 583.197205][ T5740] keyspan 1-1:5.169: Keyspan - (without firmware) converter detected [ 583.198220][ T5740] usb 1-1: Direct firmware load for keyspan/usa49w.fw failed with error -2 [ 583.198244][ T5740] usb 1-1: Falling back to sysfs fallback for: keyspan/usa49w.fw [ 583.318930][T10274] ip_tables: iptables: counters copy to user failed while replacing table [ 583.362053][T10277] loop2: detected capacity change from 0 to 7 [ 583.395306][T10277] Dev loop2: unable to read RDB block 7 [ 583.395346][T10277] loop2: AHDI p1 p2 p3 [ 583.395369][T10277] loop2: partition table partially beyond EOD, truncated [ 583.395619][T10277] loop2: p1 start 1601398130 is beyond EOD, truncated [ 583.395638][T10277] loop2: p2 start 1702059890 is beyond EOD, truncated [ 584.797193][T10327] overlayfs: failed to clone upperpath [ 584.953637][T10333] fuse: Bad value for 'fd' [ 585.123952][T10342] fuse: Bad value for 'fd' [ 585.400366][T10350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 587.021195][T10371] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 589.969779][T10395] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 590.003034][T10395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.035265][T10395] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 590.111771][T10398] netlink: 31 bytes leftover after parsing attributes in process `syz.0.908'. [ 590.164731][T10393] FAULT_INJECTION: forcing a failure. [ 590.164731][T10393] name failslab, interval 1, probability 0, space 0, times 0 [ 590.164766][T10393] CPU: 1 UID: 0 PID: 10393 Comm: syz.8.906 Not tainted syzkaller #0 PREEMPT(full) [ 590.164785][T10393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 590.164793][T10393] Call Trace: [ 590.164798][T10393] [ 590.164803][T10393] dump_stack_lvl+0x100/0x190 [ 590.164826][T10393] should_fail_ex.cold+0x5/0xa [ 590.164846][T10393] should_failslab+0xc2/0x120 [ 590.164864][T10393] __kvmalloc_node_noprof+0x113/0x9b0 [ 590.164880][T10393] ? bpf_jit_binary_pack_alloc+0xd2/0x2b0 [ 590.164898][T10393] bpf_jit_binary_pack_alloc+0xd2/0x2b0 [ 590.164910][T10393] ? __pfx_jit_fill_hole+0x10/0x10 [ 590.164926][T10393] bpf_int_jit_compile+0x526/0x1820 [ 590.164958][T10393] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 590.164983][T10393] __bpf_prog_select_runtime+0x8c3/0xc60 [ 590.164995][T10393] ? __asan_memcpy+0x3c/0x60 [ 590.165011][T10393] bpf_prepare_filter+0xd32/0x11e0 [ 590.165023][T10393] ? __pfx_seccomp_check_filter+0x10/0x10 [ 590.165043][T10393] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 590.165056][T10393] ? __asan_memcpy+0x3c/0x60 [ 590.165069][T10393] ? kmemdup_noprof+0x49/0x60 [ 590.165087][T10393] bpf_prog_create_from_user+0x1df/0x2e0 [ 590.165099][T10393] ? __pfx_seccomp_check_filter+0x10/0x10 [ 590.165123][T10393] do_seccomp+0x870/0x27c0 [ 590.165143][T10393] ? __sys_connect+0xe4/0x170 [ 590.165162][T10393] ? __pfx_do_seccomp+0x10/0x10 [ 590.165183][T10393] ? __pfx___x64_sys_futex+0x10/0x10 [ 590.165203][T10393] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 590.165219][T10393] ? syscall_user_dispatch+0x76/0x130 [ 590.165238][T10393] do_syscall_64+0x123/0x790 [ 590.165252][T10393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.165265][T10393] RIP: 0033:0x7f1214f9e199 [ 590.165276][T10393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.165287][T10393] RSP: 002b:00007f1215db9028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 590.165299][T10393] RAX: ffffffffffffffda RBX: 00007f1215225fa0 RCX: 00007f1214f9e199 [ 590.165306][T10393] RDX: 0000200000000240 RSI: 000000000000000c RDI: 0000000000000001 [ 590.165313][T10393] RBP: 00007f1215035888 R08: 0000000000000000 R09: 0000000000000000 [ 590.165320][T10393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.165327][T10393] R13: 00007f1215226038 R14: 00007f1215225fa0 R15: 00007ffd927ac9e8 [ 590.165343][T10393] [ 590.214552][ T9383] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 590.445962][ T9383] usb 10-1: Using ep0 maxpacket: 16 [ 590.459253][ T9383] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 590.475419][ T9383] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.475451][ T9383] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.475476][ T9383] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 590.475513][ T9383] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.478999][ T9383] usb 10-1: config 0 descriptor?? [ 590.561750][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 590.561767][ T31] audit: type=1400 audit(1791495078.509:776): avc: denied { ioctl } for pid=10402 comm="syz.4.910" path="socket:[29429]" dev="sockfs" ino=29429 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 591.790808][ T31] audit: type=1400 audit(1791495079.729:777): avc: denied { read write } for pid=10409 comm="syz.0.912" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 591.791011][ T31] audit: type=1400 audit(1791495079.729:778): avc: denied { open } for pid=10409 comm="syz.0.912" path="/57/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 591.791143][ T31] audit: type=1400 audit(1791495079.739:779): avc: denied { ioctl } for pid=10409 comm="syz.0.912" path="/57/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 592.620320][ T9383] usbhid 10-1:0.0: can't add hid device: -71 [ 592.620411][ T9383] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 592.625459][ T9383] usb 10-1: USB disconnect, device number 3 [ 592.756841][ T9652] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 592.778671][ T9652] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 592.794512][ T9652] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 592.800297][ T9652] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 592.815433][ T9652] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 593.756848][ T31] audit: type=1400 audit(1791495081.709:780): avc: denied { setattr } for pid=10437 comm="syz.9.919" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 595.013259][ T5608] Bluetooth: hci10: command tx timeout [ 595.420934][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 595.434130][T10448] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=10448 comm=syz.4.921 [ 596.028813][ T31] audit: type=1400 audit(1791495083.979:781): avc: denied { ioctl } for pid=10458 comm="syz.0.923" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 596.298849][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.302211][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.319001][T10421] bridge_slave_0: entered allmulticast mode [ 596.333819][T10421] bridge_slave_0: entered promiscuous mode [ 596.350445][T10421] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.350516][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.350728][T10421] bridge_slave_1: entered allmulticast mode [ 596.375767][T10421] bridge_slave_1: entered promiscuous mode [ 596.419217][T10468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 596.474914][T10421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.484940][T10421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.571004][T10421] team0: Port device team_slave_0 added [ 596.597947][T10421] team0: Port device team_slave_1 added [ 596.728792][T10421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.728816][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.728839][T10421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.828126][T10421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.828138][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.828153][T10421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.062629][ T5608] Bluetooth: hci10: command tx timeout [ 597.081723][T10481] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 597.130525][T10421] hsr_slave_0: entered promiscuous mode [ 597.134174][T10421] hsr_slave_1: entered promiscuous mode [ 597.134596][T10421] debugfs: 'hsr0' already exists in 'hsr' [ 597.134609][T10421] Cannot create hsr debugfs directory [ 598.403801][T10492] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 599.142673][ T5608] Bluetooth: hci10: command tx timeout [ 599.640826][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.934'. [ 599.640851][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.9.934'. [ 599.640876][T10502] netlink: 'syz.9.934': attribute type 13 has an invalid length. [ 599.640890][T10502] netlink: 'syz.9.934': attribute type 12 has an invalid length. [ 599.745829][T10421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.956277][ T5791] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 599.981755][T10421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.112435][ T5791] usb 10-1: Using ep0 maxpacket: 32 [ 600.116619][ T5791] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 600.117550][ T5791] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 600.117579][ T5791] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 600.120108][ T5791] usb 10-1: string descriptor 0 read error: -22 [ 600.120216][ T5791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.125865][T10503] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 600.156878][ T5791] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.156924][ T5791] usb 10-1: MIDIStreaming interface descriptor not found [ 600.269236][T10421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.354446][T10507] tipc: Started in network mode [ 600.354464][T10507] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 600.354572][T10507] tipc: Enabled bearer , priority 0 [ 600.508312][T10512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10512 comm=syz.4.935 [ 600.508341][T10512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10512 comm=syz.4.935 [ 600.514713][ T31] audit: type=1400 audit(1791495088.459:782): avc: denied { audit_write } for pid=10508 comm="syz.4.935" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 600.636311][ T5791] usb 10-1: USB disconnect, device number 4 [ 600.969538][T10421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.225017][ T9652] Bluetooth: hci10: command tx timeout [ 601.523533][ T5791] tipc: Node number set to 43690 [ 601.679918][T10526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.689542][T10421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 601.697393][T10421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.705029][T10421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 601.714011][T10421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 601.719301][T10421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 601.728912][T10421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 601.731265][T10421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 601.744637][T10421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.821122][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.888224][T10421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.912201][T10421] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.926721][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.926796][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.929419][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.929471][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.154581][T10539] ceph: separator ':' missing in source [ 602.160247][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 603.392860][T10564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.875661][T10551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 603.907974][T10564] XFS (nullb0): Invalid superblock magic number [ 604.794365][T10577] ceph: separator ':' missing in source [ 604.812119][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 606.368991][T10421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.476170][T10421] veth0_vlan: entered promiscuous mode [ 606.511089][T10421] veth1_vlan: entered promiscuous mode [ 606.555631][T10421] veth0_macvtap: entered promiscuous mode [ 606.559766][T10421] veth1_macvtap: entered promiscuous mode [ 606.588877][T10421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.605252][T10421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.688812][ T140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.689126][ T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.689366][ T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.689398][ T140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.768220][ T6339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.768240][ T6339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.829109][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.829128][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.023481][ T5610] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 607.153261][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 607.173221][ T5610] usb 9-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 607.175788][ T5610] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 10 [ 607.175819][ T5610] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 607.178710][ T5610] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 607.178734][ T5610] usb 9-1: Product: syz [ 607.178749][ T5610] usb 9-1: Manufacturer: syz [ 607.332815][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 607.335184][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 607.335227][ T25] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 607.336242][ T25] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 607.336266][ T25] usb 4-1: config 14 has an invalid interface number: 81 but max is 1 [ 607.336287][ T25] usb 4-1: config 14 has no interface number 0 [ 607.336301][ T25] usb 4-1: config 14 has no interface number 1 [ 607.336382][ T25] usb 4-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 607.336407][ T25] usb 4-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 607.336433][ T25] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 607.336457][ T25] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 607.336504][ T25] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 607.336529][ T25] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 607.336549][ T25] usb 4-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.336571][ T25] usb 4-1: config 14 interface 57 has no altsetting 0 [ 607.336588][ T25] usb 4-1: config 14 interface 81 has no altsetting 0 [ 607.340528][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.340550][ T25] usb 4-1: Product: syz [ 607.340564][ T25] usb 4-1: Manufacturer: syz [ 607.340578][ T25] usb 4-1: SerialNumber: syz [ 607.563117][ T2255] usb 9-1: USB disconnect, device number 2 [ 607.927632][ T25] legousbtower 4-1:14.57: interrupt endpoints not found [ 607.963052][ T25] legousbtower 4-1:14.81: get version request failed: -71 [ 607.963203][ T25] legousbtower 4-1:14.81: probe with driver legousbtower failed with error -71 [ 608.003214][ T25] usb 4-1: USB disconnect, device number 32 [ 608.235429][T10627] vim2m vim2m.0: vidioc_s_fmt queue busy [ 608.326386][T10631] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 608.857804][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 609.038988][ T9] usb 10-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 609.040167][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 10 [ 609.040204][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 609.041593][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 609.041613][ T9] usb 10-1: Product: syz [ 609.041621][ T9] usb 10-1: Manufacturer: syz [ 609.136133][ T31] audit: type=1400 audit(1791495097.079:783): avc: denied { write } for pid=10609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.305595][ T5725] usb 10-1: USB disconnect, device number 5 [ 610.056237][ T31] audit: type=1400 audit(1791495098.009:784): avc: denied { write } for pid=10642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.694854][T10653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 610.835058][ T31] audit: type=1400 audit(1791495098.789:785): avc: denied { map } for pid=10662 comm="syz.9.962" path="socket:[31365]" dev="sockfs" ino=31365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 610.867732][ T31] audit: type=1400 audit(1791495098.819:786): avc: denied { read write } for pid=10662 comm="syz.9.962" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 610.868812][ T31] audit: type=1400 audit(1791495098.819:787): avc: denied { open } for pid=10662 comm="syz.9.962" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 611.053918][ T31] audit: type=1400 audit(1791495099.009:788): avc: denied { write } for pid=10649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.103068][ T5725] hid_parser_main: 40 callbacks suppressed [ 611.103091][ T5725] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 611.218738][ T31] audit: type=1400 audit(1791495099.169:789): avc: denied { write } for pid=10678 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.268750][ T5725] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 614.915086][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 615.392343][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 615.426589][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 615.426645][ T9] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 615.427936][ T31] audit: type=1400 audit(1791495103.379:790): avc: denied { read append } for pid=10702 comm="syz.9.968" name="sg0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 615.574396][ T31] audit: type=1400 audit(1791495103.519:791): avc: denied { map } for pid=10702 comm="syz.9.968" path="/dev/sg0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 615.574615][ T31] audit: type=1400 audit(1791495103.519:792): avc: denied { execute } for pid=10702 comm="syz.9.968" path="/dev/sg0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 615.642493][ T9] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 615.642521][ T9] usb 9-1: config 14 has an invalid interface number: 81 but max is 1 [ 615.642541][ T9] usb 9-1: config 14 has no interface number 0 [ 615.642556][ T9] usb 9-1: config 14 has no interface number 1 [ 615.643279][ T9] usb 9-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 615.643304][ T9] usb 9-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 615.643328][ T9] usb 9-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 615.643353][ T9] usb 9-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 615.744858][ T9] usb 9-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 615.746005][ T9] usb 9-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 615.746031][ T9] usb 9-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.746059][ T9] usb 9-1: config 14 interface 57 has no altsetting 0 [ 615.746077][ T9] usb 9-1: config 14 interface 81 has no altsetting 0 [ 616.200014][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.200042][ T9] usb 9-1: Product: syz [ 616.200058][ T9] usb 9-1: Manufacturer: syz [ 616.200073][ T9] usb 9-1: SerialNumber: syz [ 617.332728][T10711] fuse: Unknown parameter 'group_id-3 $C\k9K4-˥6\oC7}zoDx$IS !/MnJzVýR' [ 617.351031][ T9] legousbtower 9-1:14.57: interrupt endpoints not found [ 617.364499][ T9] legousbtower 9-1:14.81: get version request failed: -71 [ 617.364672][ T9] legousbtower 9-1:14.81: probe with driver legousbtower failed with error -71 [ 617.379892][ T9] usb 9-1: USB disconnect, device number 3 [ 618.272511][ T10] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 618.524045][ T10] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 618.545968][ T10] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 618.545994][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.546011][ T10] usb 10-1: config 0 has no interface number 0 [ 618.546046][ T10] usb 10-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.549899][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.549916][ T10] usb 10-1: Product: syz [ 618.549925][ T10] usb 10-1: Manufacturer: syz [ 618.549933][ T10] usb 10-1: SerialNumber: syz [ 618.624002][ T10] usb 10-1: config 0 descriptor?? [ 620.510605][ T93] usb 10-1: USB disconnect, device number 6 [ 620.852522][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 621.280642][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 621.282018][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.282038][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.282059][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.326799][ T9] usb 4-1: config 0 descriptor?? [ 621.772374][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.8.982'. [ 621.779084][T10746] netlink: 56 bytes leftover after parsing attributes in process `syz.8.982'. [ 622.756951][ T9] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 622.756976][ T9] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 622.756992][ T9] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 622.757007][ T9] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 622.757021][ T9] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 623.631761][ T9] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 623.697186][ T9] usb 4-1: USB disconnect, device number 33 [ 623.964110][T10752] fido_id[10752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 624.708864][T10760] capability: warning: `syz.9.985' uses deprecated v2 capabilities in a way that may be insecure [ 625.071047][ T31] audit: type=1400 audit(1791495112.529:793): avc: denied { mount } for pid=10758 comm="syz.9.985" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 625.071646][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.071695][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.323745][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 625.477302][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 625.477928][ T9] usb 10-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 625.478979][ T9] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 625.479004][ T9] usb 10-1: config 0 has no interface number 0 [ 625.479037][ T9] usb 10-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 625.479061][ T9] usb 10-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 625.479080][ T9] usb 10-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 625.481116][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.481141][ T9] usb 10-1: Product: syz [ 625.481156][ T9] usb 10-1: Manufacturer: syz [ 625.481170][ T9] usb 10-1: SerialNumber: syz [ 625.583226][ T9] usb 10-1: config 0 descriptor?? [ 625.583698][T10760] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 625.622919][ T5725] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 625.773850][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 625.778041][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 625.778085][ T5725] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 625.781427][ T5725] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 625.781453][ T5725] usb 4-1: config 14 has an invalid interface number: 81 but max is 1 [ 625.781473][ T5725] usb 4-1: config 14 has no interface number 0 [ 625.781488][ T5725] usb 4-1: config 14 has no interface number 1 [ 625.781562][ T5725] usb 4-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 625.781586][ T5725] usb 4-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 625.781611][ T5725] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 625.781667][ T5725] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 625.781695][ T5725] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 625.781721][ T5725] usb 4-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 625.781743][ T5725] usb 4-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.781769][ T5725] usb 4-1: config 14 interface 57 has no altsetting 0 [ 625.781809][ T5725] usb 4-1: config 14 interface 81 has no altsetting 0 [ 625.809317][ T9] usb-storage 10-1:0.20: USB Mass Storage device detected [ 625.894455][ T9] usb-storage 10-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 625.933455][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.933482][ T5725] usb 4-1: Product: syz [ 625.933496][ T5725] usb 4-1: Manufacturer: syz [ 625.933511][ T5725] usb 4-1: SerialNumber: syz [ 626.017437][ T9] scsi host1: usb-storage 10-1:0.20 [ 626.374371][ T5725] legousbtower 4-1:14.57: interrupt endpoints not found [ 626.407913][ T5725] legousbtower 4-1:14.81: get version request failed: -71 [ 626.408076][ T5725] legousbtower 4-1:14.81: probe with driver legousbtower failed with error -71 [ 626.434346][ T5725] usb 4-1: USB disconnect, device number 34 [ 626.789531][ T9970] tipc: Resetting bearer [ 627.358194][ T9970] tipc: Disabling bearer [ 627.752417][T10788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10788 comm=syz.0.991 [ 627.759258][ T31] audit: type=1400 audit(1791495115.699:794): avc: denied { nlmsg_read } for pid=10781 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 628.518583][ T10] usb 10-1: USB disconnect, device number 7 [ 628.570724][ T989] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.131143][T10801] netlink: 'syz.4.998': attribute type 3 has an invalid length. [ 630.159542][ T5608] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 630.262615][T10809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.616271][ T5608] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 630.654787][ T5608] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 630.655577][ T5608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 630.657978][ T5608] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 631.656393][ T989] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.752108][T10809] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 631.752151][T10809] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 631.752172][T10809] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 631.969939][ T9652] Bluetooth: hci4: unexpected event for opcode 0x203d [ 632.134173][ T989] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.244758][ T31] audit: type=1400 audit(1791495120.199:795): avc: denied { unmount } for pid=10040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 632.316112][ T989] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.822473][ T9652] Bluetooth: hci8: command tx timeout [ 632.908752][ T989] bridge_slave_1: left allmulticast mode [ 632.908771][ T989] bridge_slave_1: left promiscuous mode [ 632.910764][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.125794][ T989] bridge_slave_0: left allmulticast mode [ 633.125866][ T989] bridge_slave_0: left promiscuous mode [ 633.126975][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.902634][ T9652] Bluetooth: hci8: command tx timeout [ 635.040085][T10861] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 635.608317][ T31] audit: type=1400 audit(1791495123.559:796): avc: denied { write } for pid=10841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.135229][T10868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 636.234060][ T31] audit: type=1400 audit(1791495124.189:797): avc: denied { write } for pid=10869 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.060068][ T9652] Bluetooth: hci8: command tx timeout [ 637.234680][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.264344][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.285155][ T989] bond0 (unregistering): Released all slaves [ 637.333697][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 637.466081][ T989] tipc: Left network mode [ 638.061039][ T31] audit: type=1400 audit(1791495126.009:798): avc: denied { read } for pid=10880 comm="syz.3.1014" lport=42167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.367343][ T9652] Bluetooth: hci8: command tx timeout [ 639.453477][ T989] hsr_slave_0: left promiscuous mode [ 639.457379][ T989] hsr_slave_1: left promiscuous mode [ 639.458143][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.458162][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.475526][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.475553][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.504800][ T989] veth1_macvtap: left promiscuous mode [ 639.504835][ T989] veth0_macvtap: left promiscuous mode [ 639.504923][ T989] veth1_vlan: left promiscuous mode [ 639.504980][ T989] veth0_vlan: left promiscuous mode [ 639.763211][ T31] audit: type=1400 audit(1791495127.709:799): avc: denied { write } for pid=10881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.143682][ T31] audit: type=1400 audit(1791495128.089:800): avc: denied { write } for pid=10904 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.483071][ T989] team0 (unregistering): Port device team_slave_1 removed [ 641.662678][ T989] team0 (unregistering): Port device team_slave_0 removed [ 642.504739][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 642.508126][T10924] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 642.508164][T10924] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 642.508186][T10924] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 647.008514][ T5740] usb 1-1: ezusb_ihex_firmware_download - request "keyspan/usa49w.fw" failed [ 647.008541][ T5740] usb 1-1: failed to load firmware "keyspan/usa49w.fw" [ 647.008644][ T5740] keyspan 1-1:5.169: probe with driver keyspan failed with error -2 [ 647.021012][ T5740] keyspan 1-1:5.104: Keyspan - (without firmware) converter detected [ 647.021983][ T5740] usb 1-1: Direct firmware load for keyspan/usa49w.fw failed with error -2 [ 647.022007][ T5740] usb 1-1: Falling back to sysfs fallback for: keyspan/usa49w.fw [ 647.148087][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.148222][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.148370][T10799] bridge_slave_0: entered allmulticast mode [ 647.174552][T10799] bridge_slave_0: entered promiscuous mode [ 647.187656][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.187746][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.187880][T10799] bridge_slave_1: entered allmulticast mode [ 647.205004][T10799] bridge_slave_1: entered promiscuous mode [ 647.454538][T10799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.457664][T10799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.127332][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 648.183645][T10961] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 648.570643][T10799] team0: Port device team_slave_0 added [ 648.575069][T10799] team0: Port device team_slave_1 added [ 648.846921][T10799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.846938][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.846961][T10799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.857883][T10799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.857899][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.857922][T10799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.018120][ T31] audit: type=1400 audit(1791495136.969:801): avc: denied { write } for pid=10948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.187697][T10799] hsr_slave_0: entered promiscuous mode [ 649.193915][T10799] hsr_slave_1: entered promiscuous mode [ 649.194474][T10799] debugfs: 'hsr0' already exists in 'hsr' [ 649.194491][T10799] Cannot create hsr debugfs directory [ 649.244310][ T31] audit: type=1400 audit(1791495137.199:802): avc: denied { write } for pid=10966 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.415363][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 650.299954][T10799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.384199][ T5610] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 651.456704][T10799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.518802][ T31] audit: type=1400 audit(1791495139.469:803): avc: denied { write } for pid=10971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.547845][ T5610] usb 10-1: Using ep0 maxpacket: 32 [ 651.550538][ T5610] usb 10-1: unable to get BOS descriptor or descriptor too short [ 651.550581][ T5610] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 651.551466][ T5610] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 651.551490][ T5610] usb 10-1: config 14 has an invalid interface number: 81 but max is 1 [ 651.551510][ T5610] usb 10-1: config 14 has no interface number 0 [ 651.551527][ T5610] usb 10-1: config 14 has no interface number 1 [ 651.551581][ T5610] usb 10-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 651.551605][ T5610] usb 10-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 651.551629][ T5610] usb 10-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 651.551656][ T5610] usb 10-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 651.551684][ T5610] usb 10-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 651.551710][ T5610] usb 10-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 651.551730][ T5610] usb 10-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.551756][ T5610] usb 10-1: config 14 interface 57 has no altsetting 0 [ 651.551774][ T5610] usb 10-1: config 14 interface 81 has no altsetting 0 [ 651.657154][ T5610] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.657180][ T5610] usb 10-1: Product: syz [ 651.657195][ T5610] usb 10-1: Manufacturer: syz [ 651.657211][ T5610] usb 10-1: SerialNumber: syz [ 651.745546][ T31] audit: type=1400 audit(1791495139.699:804): avc: denied { ioctl } for pid=10988 comm="syz.0.1026" path="/83/file0" dev="tmpfs" ino=462 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 651.783049][ T5608] Bluetooth: hci4: command 0x2016 tx timeout [ 651.874406][T10799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.898540][T10990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.969633][ T31] audit: type=1400 audit(1791495139.919:805): avc: denied { setattr } for pid=10988 comm="syz.0.1026" name="file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 652.047272][ T31] audit: type=1400 audit(1791495140.009:806): avc: denied { write } for pid=10992 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.119405][T10799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.191053][ T5610] legousbtower 10-1:14.57: interrupt endpoints not found [ 652.207443][ T5610] legousbtower 10-1:14.81: get version request failed: -71 [ 652.207593][ T5610] legousbtower 10-1:14.81: probe with driver legousbtower failed with error -71 [ 652.212170][ T5610] usb 10-1: USB disconnect, device number 8 [ 652.226848][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 653.337507][T11011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.185626][T10799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 655.023081][T10799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.038511][T10799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 655.097147][T10799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.133645][T10799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.384628][T10799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.398826][T10799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.445895][T10799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.808020][T11029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 656.902338][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 657.282206][T10799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.018419][T10799] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.236199][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.236297][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.441362][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.441459][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.972475][T11058] overlayfs: missing 'lowerdir' [ 662.303763][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 662.303807][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 662.503280][ T32] INFO: task syz.3.719:9342 blocked for more than 143 seconds. [ 662.503306][ T32] Not tainted syzkaller #0 [ 662.503316][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.503322][ T32] task:syz.3.719 state:D stack:26344 pid:9342 tgid:9340 ppid:5605 task_flags:0x400140 flags:0x00080002 [ 662.503359][ T32] Call Trace: [ 662.503363][ T32] [ 662.503370][ T32] __schedule+0x1259/0x6920 [ 662.503387][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 662.503412][ T32] ? __pfx___schedule+0x10/0x10 [ 662.503422][ T32] ? find_held_lock+0x2b/0x80 [ 662.503439][ T32] ? schedule+0x225/0x2c0 [ 662.503453][ T32] schedule+0xdd/0x2c0 [ 662.503464][ T32] schedule_preempt_disabled+0x13/0x30 [ 662.503475][ T32] __mutex_lock+0xccb/0x1bd0 [ 662.503489][ T32] ? usbdev_open+0x1b6/0x870 [ 662.503504][ T32] ? klist_put+0xcb/0x1d0 [ 662.503520][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 662.503533][ T32] ? _raw_spin_unlock+0x28/0x50 [ 662.503544][ T32] ? kobject_put+0xb9/0x640 [ 662.503563][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 662.503576][ T32] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 662.503605][ T32] ? usbdev_open+0x9d/0x870 [ 662.503620][ T32] ? usbdev_open+0x1b6/0x870 [ 662.503633][ T32] usbdev_open+0x1b6/0x870 [ 662.503647][ T32] ? kobject_get_unless_zero+0x156/0x200 [ 662.503663][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 662.503675][ T32] ? chrdev_open+0x10b/0x6a0 [ 662.503690][ T32] ? chrdev_open+0x10b/0x6a0 [ 662.503708][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 662.503721][ T32] chrdev_open+0x234/0x6a0 [ 662.503738][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 662.503754][ T32] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 662.503770][ T32] do_dentry_open+0x6ab/0x14d0 [ 662.503784][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 662.503803][ T32] vfs_open+0x82/0x3f0 [ 662.503823][ T32] path_openat+0x19fa/0x2440 [ 662.503842][ T32] ? __pfx_path_openat+0x10/0x10 [ 662.503863][ T32] do_file_open+0x20e/0x430 [ 662.503881][ T32] ? __pfx_do_file_open+0x10/0x10 [ 662.503909][ T32] ? _raw_spin_unlock+0x28/0x50 [ 662.503919][ T32] ? alloc_fd+0x471/0x7a0 [ 662.503940][ T32] do_sys_openat2+0x10f/0x1e0 [ 662.503958][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 662.503982][ T32] __x64_sys_openat+0x12d/0x210 [ 662.504000][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 662.504024][ T32] do_syscall_64+0x123/0x790 [ 662.504039][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.504051][ T32] RIP: 0033:0x7fced9d5e9ce [ 662.504061][ T32] RSP: 002b:00007fcedac2db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 662.504073][ T32] RAX: ffffffffffffffda RBX: 00007fcedac2e6c0 RCX: 00007fced9d5e9ce [ 662.504081][ T32] RDX: 0000000000000002 RSI: 00007fcedac2dc00 RDI: ffffffffffffff9c [ 662.504090][ T32] RBP: 00007fcedac2dc00 R08: 0000000000000000 R09: 0000000000000000 [ 662.504097][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 662.504104][ T32] R13: 00007fceda026038 R14: 00007fceda025fa0 R15: 00007fffa15cd318 [ 662.504120][ T32] [ 662.504179][ T32] [ 662.504179][ T32] Showing all locks held in the system: [ 662.504188][ T32] locks held by kworker/u8:1/13: 2, on CPU#1: [ 662.504196][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 662.504232][ T32] #1: ffffc90000127d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 662.504275][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 662.504289][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 662.504366][ T32] locks held by getty/5360: 2, on CPU#0: [ 662.504375][ T32] #0: ffff888037f930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 662.504404][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 662.504435][ T32] locks held by kworker/1:5/5740: 6, on CPU#1: [ 662.504443][ T32] #0: ffff888023eed940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 662.504475][ T32] #1: ffffc9000454fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 662.504507][ T32] #2: ffff88802b4f21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 662.504532][ T32] #3: ffff88802e25a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 662.504562][ T32] #4: ffff8880562f11a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 662.504602][ T32] #5: ffffffff8ec8fde8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 662.504633][ T32] locks held by udevd/9079: 4, on CPU#1: [ 662.504655][ T32] #0: ffff888073f2de18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 662.504686][ T32] #1: ffff88807950c880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 662.504717][ T32] #2: ffff88807354e4b8 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 662.504748][ T32] #3: ffff88802e25a1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 662.504778][ T32] locks held by syz.3.719/9342: 1, on CPU#0: [ 662.504786][ T32] #0: ffff88802b4f21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 662.504813][ T32] locks held by syz.1.730/9391: 1, on CPU#1: [ 662.504821][ T32] #0: ffff88802b4f21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 662.504849][ T32] locks held by syz.2.731/9399: 1, on CPU#1: [ 662.504856][ T32] #0: ffff88802b4f21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 662.504888][ T32] locks held by syz.5.768/9799: 1, on CPU#1: [ 662.504896][ T32] #0: ffff88802b4f21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 662.504923][ T32] locks held by syz.7.776/9884: 1, on CPU#1: [ 662.504931][ T32] #0: ffff88802b4f21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 662.504959][ T32] locks held by syz.6.816/10114: 1, on CPU#0: [ 662.504967][ T32] #0: ffff88802b4f21d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 662.504995][ T32] locks held by syz-executor/10421: 2, last CPU#0: [ 662.505003][ T32] #0: ffff888047176460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 662.505037][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 662.505073][ T32] locks held by syz.9.1033/11063: 1, on CPU#0: [ 662.505081][ T32] #0: ffff88802e592800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 662.505113][ T32] locks held by syz.9.1033/11064: 1, last CPU#1: [ 662.505121][ T32] #0: ffff88802e592800 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 662.505151][ T32] locks held by syz.0.1038/11065: 3, last CPU#0: [ 662.505159][ T32] #0: ffff888028a82460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 662.505189][ T32] #1: ffff88802a540340 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x151/0xad0 [ 662.505217][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: mt_find+0x136/0x9b0 [ 662.505246][ T32] locks held by modprobe/11073: 1, last CPU#1: [ 662.505253][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 662.505285][ T32] [ 662.505288][ T32] ============================================= [ 662.505288][ T32] [ 662.505302][ T32] NMI backtrace for cpu 1 [ 662.505314][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 662.505335][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 662.505346][ T32] Call Trace: [ 662.505353][ T32] [ 662.505360][ T32] dump_stack_lvl+0x100/0x190 [ 662.505387][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 662.505406][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 662.505420][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 662.505438][ T32] sys_info+0x141/0x190 [ 662.505453][ T32] watchdog+0xcb1/0x1030 [ 662.505471][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 662.505483][ T32] ? __pfx_watchdog+0x10/0x10 [ 662.505497][ T32] ? __kthread_parkme+0x18f/0x230 [ 662.505512][ T32] ? kthread+0x13a/0x450 [ 662.505527][ T32] ? __pfx_watchdog+0x10/0x10 [ 662.505539][ T32] kthread+0x373/0x450 [ 662.505554][ T32] ? __pfx_kthread+0x10/0x10 [ 662.505571][ T32] ret_from_fork+0x730/0xd60 [ 662.505591][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 662.505605][ T32] ? __switch_to+0x800/0x10f0 [ 662.505622][ T32] ? __pfx_kthread+0x10/0x10 [ 662.505638][ T32] ret_from_fork_asm+0x1a/0x30 [ 662.505657][ T32] [ 662.505663][ T32] Sending NMI from CPU 1 to CPUs 0: [ 662.505692][ C0] NMI backtrace for cpu 0 [ 662.505703][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 662.505722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 662.505731][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 662.505751][ C0] Code: e7 92 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c8 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 662.505766][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000242 [ 662.505780][ C0] RAX: 0000000002682401 RBX: ffffffff8ea91580 RCX: ffffffff8bd2f235 [ 662.505791][ C0] RDX: 0000000000000001 RSI: ffffffff8e38f6ca RDI: ffffffff8c623a80 [ 662.505802][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed10170867bd [ 662.505813][ C0] R10: ffff8880b8433deb R11: 0000000000000001 R12: 0000000000000000 [ 662.505823][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 662.505834][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 662.505849][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.505860][ C0] CR2: 0000001b332d5ff8 CR3: 000000002ddce000 CR4: 00000000003526f0 [ 662.505871][ C0] Call Trace: [ 662.505876][ C0] [ 662.505881][ C0] default_idle+0x9/0x10 [ 662.505901][ C0] default_idle_call+0x6c/0xb0 [ 662.505920][ C0] do_idle+0x3ae/0x5b0 [ 662.505942][ C0] ? __pfx_do_idle+0x10/0x10 [ 662.505962][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 662.505986][ C0] cpu_startup_entry+0x4f/0x60 [ 662.506008][ C0] rest_init+0x2d3/0x2e0 [ 662.506028][ C0] ? __pfx_rest_init+0x10/0x10 [ 662.506048][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 662.506065][ C0] ? lock_acquire+0x1d1/0x380 [ 662.506093][ C0] ? __pfx_kernel_init+0x10/0x10 [ 662.506115][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 662.506133][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 662.506152][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 662.506172][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 662.506196][ C0] start_kernel+0x48e/0x490 [ 662.506216][ C0] x86_64_start_reservations+0x24/0x30 [ 662.506237][ C0] x86_64_start_kernel+0x12b/0x130 [ 662.506258][ C0] common_startup_64+0x13e/0x158 [ 662.506287][ C0] [ 662.511165][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 663.553352][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 663.562434][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 663.572474][ T32] Call Trace: [ 663.575734][ T32] [ 663.578642][ T32] dump_stack_lvl+0x100/0x190 [ 663.583304][ T32] vpanic+0x553/0x970 [ 663.587259][ T32] ? __pfx_vpanic+0x10/0x10 [ 663.591735][ T32] panic+0xd1/0xe0 [ 663.595446][ T32] ? __pfx_panic+0x10/0x10 [ 663.599854][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 663.605988][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 663.612135][ T32] ? watchdog.cold+0x1ec/0x234 [ 663.616880][ T32] watchdog.cold+0x1fd/0x234 [ 663.621454][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 663.627236][ T32] ? __pfx_watchdog+0x10/0x10 [ 663.631891][ T32] ? __kthread_parkme+0x18f/0x230 [ 663.636896][ T32] ? kthread+0x13a/0x450 [ 663.641118][ T32] ? __pfx_watchdog+0x10/0x10 [ 663.645768][ T32] kthread+0x373/0x450 [ 663.649813][ T32] ? __pfx_kthread+0x10/0x10 [ 663.654382][ T32] ret_from_fork+0x730/0xd60 [ 663.658951][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 663.664052][ T32] ? __switch_to+0x800/0x10f0 [ 663.668714][ T32] ? __pfx_kthread+0x10/0x10 [ 663.673305][ T32] ret_from_fork_asm+0x1a/0x30 [ 663.678056][ T32] [ 663.681319][ T32] Kernel Offset: disabled [ 663.685625][ T32] Rebooting in 86400 seconds..