last executing test programs: 1m27.862903085s ago: executing program 4 (id=1273): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x3, &(0x7f0000001780)=ANY=[], 0x0, 0x4, 0xb7, &(0x7f00000004c0)=""/183, 0x40eff, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r1 = socket$inet6(0xa, 0x803, 0x8) connect$inet6(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000600)={0x8, 0x200000084}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40010050, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x203) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) lseek(r0, 0xf800000000000000, 0x3) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 1m26.91607997s ago: executing program 4 (id=1278): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) close(r0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}, @IPSET_ATTR_MARK={0x6, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x7}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 1m26.888982692s ago: executing program 4 (id=1280): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x82}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r1, 0x1000) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00001b1000/0xa000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f000007c000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000050000/0x3000)=nil, &(0x7f000005f000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r5, 0x540a, 0x2) pwrite64(r0, &(0x7f0000000300)='}', 0x1, 0x4) 1m24.787760064s ago: executing program 4 (id=1292): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) chdir(&(0x7f00000001c0)='./bus\x00') syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x5, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x59) ptrace(0x10, r5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r7, 0x80000001, 0x4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x2, &(0x7f0000002040)=""/4116) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=r4, @ANYBLOB="0069008fafd75c929257d1680000000000000014001a80100002800c00"/39], 0x34}}, 0x0) 1m23.363107038s ago: executing program 4 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) timerfd_settime(r1, 0x2, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000001c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 32) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async) r2 = syz_init_net_socket$ax25(0x3, 0x4, 0xca) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000180)) 1m22.839446398s ago: executing program 4 (id=1301): epoll_create1(0x80000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="400612000000f887618a88380a120000c3036f6abe48debd"], 0x0, 0x0}) 1m22.341067379s ago: executing program 32 (id=1301): epoll_create1(0x80000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="400612000000f887618a88380a120000c3036f6abe48debd"], 0x0, 0x0}) 48.39450785s ago: executing program 1 (id=1448): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) set_mempolicy(0x6, &(0x7f0000000300)=0x8000000000000001, 0x2e0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) unshare(0x20000) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x19, 0x2, 0xee, &(0x7f0000000b00)}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async) set_mempolicy(0x6, &(0x7f0000000300)=0x8000000000000001, 0x2e0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) (async) unshare(0x20000) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) socket(0x80000000000000a, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x19, 0x2, 0xee, &(0x7f0000000b00)}) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) 47.054321298s ago: executing program 1 (id=1456): r0 = socket$inet6(0xa, 0x5, 0xfffffffe) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa68"], 0x28}, 0x40c0) 47.009812941s ago: executing program 1 (id=1457): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400), 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf030000000001007063690011000200302505e8120fd842c86e064730303a30303a31302e300000000008008c00020000000e0001006e656464657673696d0000000f0002006e657464657673696c30000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000340)={0x0, &(0x7f00000000c0)}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000440)='FROZEN\x00', 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f0000000480)=""/179, 0xb3}], 0x3, &(0x7f0000000540)=""/123, 0x7b}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000008c0)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) syz_open_dev$mouse(&(0x7f0000000240), 0x2, 0x2500) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 44.521885253s ago: executing program 1 (id=1465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffe8000000000000000085000000bc00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x58000, 0x2f, &(0x7f0000000180)=""/47}, {0x70000, 0xf, &(0x7f0000000300)=""/15}, {0x0, 0x22, &(0x7f0000000340)=""/34}, {0x4000, 0xc8, &(0x7f0000000480)=""/200}]}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7800, 0x47, 0x6, 0x8, {{0xe, 0x4, 0x0, 0x8, 0x38, 0x68, 0x0, 0x3a, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xf2, 0x3, 0x1, [{@empty, 0x9}, {@loopback, 0x6}]}, @generic={0x0, 0x3, "85"}, @timestamp_addr={0x44, 0xc, 0x28, 0x1, 0x5, [{@private=0xa010102, 0xb0}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r2, r1, 0x3, 0x5, 0x5}, 0x50) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00', 0x204) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="465a92528e30dd2f843139d2fff6", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) 44.404637213s ago: executing program 1 (id=1468): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$TCFLSH(r0, 0x5608, 0xffffbffffffffffe) 44.16637722s ago: executing program 1 (id=1471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0x2, 0x10000, {{0x13, 0x4, 0x3, 0x5, 0x4c, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xbf, 0x1, 0x4, [{@rand_addr=0x64010101, 0xffffff1b}, {@empty, 0x5}, {@local, 0x100}, {@multicast1, 0x6462}, {@remote, 0x8}, {@broadcast, 0x1}]}]}}}}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000200)={r4, 0x1, 0x6}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaac3f, 0x14, 0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010000406c256d0000000000000109022400010000000009045d00010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x8040, 0x140, 0x8}, 0x18) mknodat$loop(r6, &(0x7f0000000300)='./file0\x00', 0x4, 0x1) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.909398643s ago: executing program 33 (id=1471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0x2, 0x10000, {{0x13, 0x4, 0x3, 0x5, 0x4c, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xbf, 0x1, 0x4, [{@rand_addr=0x64010101, 0xffffff1b}, {@empty, 0x5}, {@local, 0x100}, {@multicast1, 0x6462}, {@remote, 0x8}, {@broadcast, 0x1}]}]}}}}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000200)={r4, 0x1, 0x6}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaac3f, 0x14, 0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010000406c256d0000000000000109022400010000000009045d00010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x8040, 0x140, 0x8}, 0x18) mknodat$loop(r6, &(0x7f0000000300)='./file0\x00', 0x4, 0x1) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.232824587s ago: executing program 5 (id=1558): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x14000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x47, r4, 0x7}, 0xc) 25.038896576s ago: executing program 5 (id=1562): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x2000009) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f0000000640)='/', 0x1, 0xe) copy_file_range(r4, 0x0, r4, &(0x7f0000000080)=0x1e0, 0xff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1f, 0x9, 0x6, 0x0, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc4c03d12, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0x200, 0x260, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x1d, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x0, 0x0, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) 24.121679208s ago: executing program 5 (id=1566): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 23.308194107s ago: executing program 5 (id=1568): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xd0, &(0x7f0000000040)=0x5, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="02", 0x1, 0x40001, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='|', 0x1, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 23.160354586s ago: executing program 5 (id=1572): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, 0xffffffffffffffff, 0x4165a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) mmap(&(0x7f0000b45000/0x11000)=nil, 0x11000, 0x0, 0x13, r4, 0x18412000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000003a40)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000003b00)=""/145, 0x91}], 0x5, &(0x7f0000001580)=""/4083, 0xff3}, 0x4}, {{&(0x7f0000002580)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000002600)=""/155, 0x9b}, {&(0x7f00000026c0)=""/244, 0xf4}], 0x2, &(0x7f00000027c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000037c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/171, 0xab}, {&(0x7f0000003980)=""/26, 0x1a}, {&(0x7f0000003840)=""/45, 0x2d}, {&(0x7f0000003880)=""/34, 0x22}], 0x4, &(0x7f0000003a00)=""/58, 0x3a}, 0x4}], 0x3, 0x12160, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x10003}, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000380), 0x4) r7 = socket(0x11, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0xa, 0x2, 0x0, 0x0, 0x0) 22.211853987s ago: executing program 5 (id=1575): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000200)={0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000c4ebb7c379afd600000024000000240000000200000000000000010000040800000000000002020000001e0000000000000000000004000000000000"], 0x0, 0x3e, 0x0, 0x2}, 0x28) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000380)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000100)={'veth0_macvtap\x00', @multicast}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000000)={0x8}) 22.148954533s ago: executing program 34 (id=1575): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000200)={0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000c4ebb7c379afd600000024000000240000000200000000000000010000040800000000000002020000001e0000000000000000000004000000000000"], 0x0, 0x3e, 0x0, 0x2}, 0x28) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000380)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000100)={'veth0_macvtap\x00', @multicast}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000000)={0x8}) 15.411062436s ago: executing program 7 (id=1576): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1}}}}}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4004090) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 15.130184153s ago: executing program 7 (id=1598): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x181401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x6, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000040)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x10) r5 = syz_io_uring_setup(0x88b, &(0x7f0000000540)={0x0, 0x88d3, 0x80, 0x1, 0xbfdffffc}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0xa6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x5, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r5, 0x4e14, 0x912a, 0x41, 0x0, 0x0) (async) io_uring_enter(r5, 0x4e14, 0x912a, 0x41, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000240)={0x9}) (async) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000240)={0x9}) r8 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r9, 0x400, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x4010, r8, 0x0) 14.379556785s ago: executing program 7 (id=1600): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') (async, rerun: 64) recvmmsg(r0, &(0x7f0000002240)=[{{&(0x7f0000000340)=@caif=@util, 0x80, &(0x7f0000000680)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000500)=""/122, 0x7a}], 0x3, &(0x7f00000006c0)=""/118, 0x76}, 0x6}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/223, 0xdf}, {&(0x7f0000001900)=""/228, 0xe4}], 0x2, &(0x7f0000001a00)=""/240, 0xf0}, 0xf2}, {{&(0x7f0000001b00)=@isdn, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001b80)=""/77, 0x4d}, {&(0x7f0000001c00)=""/115, 0x73}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f0000001c80)=""/251, 0xfb}, {&(0x7f0000001d80)=""/215, 0xd7}, {&(0x7f0000001e80)=""/60, 0x3c}, {&(0x7f0000002340)=""/183, 0xb7}, {&(0x7f0000001f80)=""/5, 0x5}], 0x8}, 0x2}, {{&(0x7f0000002040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002200)=[{&(0x7f00000020c0)=""/176, 0xb0}, {&(0x7f0000002180)=""/91, 0x5b}], 0x2}, 0x80}], 0x4, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x80, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x16}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6d5}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44011}, 0x0) add_key(&(0x7f0000000040)='cifs.idmap\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe0}, 0x94) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20400) (rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) (async) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x7ffc, 0x2, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r6}) (async, rerun: 32) openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) 14.160870468s ago: executing program 7 (id=1601): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf) r0 = socket$inet6(0xa, 0x80002, 0xffffffff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000380)=0xdc0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0xffffffff80000001) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x7f, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5a}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_COMMENT={0x0, 0x1a, '\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r4, 0x1e, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)}, 0x40) semctl$SETALL(0x0, 0x0, 0x11, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r6 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000580)={0x5d0, 0x9, 0x4, {0x3, @sliced={0x3, [0x3, 0x8, 0x0, 0x8, 0x5, 0x0, 0x0, 0xf000, 0x7fff, 0x5, 0x8001, 0xffff, 0x9, 0x9, 0x4, 0xf, 0xd59, 0x7, 0x3, 0x80, 0x3, 0x8, 0x7fff, 0x5, 0xac, 0xe, 0x1, 0x3, 0x6, 0xf9, 0x9, 0x3, 0x8, 0x7, 0x81, 0x2, 0x59, 0x5, 0x8, 0xd08b, 0x1ff, 0x2, 0x4, 0x8, 0x6, 0xe43, 0x7f, 0x38], 0x7}}, 0x9}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 13.420107554s ago: executing program 6 (id=1603): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={&(0x7f00000001c0)="a0e9ed366452576d8aa877e8f9c1a1beacc4354ab4fbb59047155f1629015f7cbbcf36e9cb74fb84dd4a956771031da47e2e56629d523da078dd1458636d313fb1d63ba73787464f00ce4e60ac6ec93b16afe7687be8fdff9a591288d8de5b1247ee074f4a30152b13b9a16b74cb74b5e6c84120fc624a4f94a4dd71742b66d6580361d1ac14a77cad123859c40d", &(0x7f0000000280)=""/207, &(0x7f0000000380)="2707a7975bc0e4a33e1c441d772abf1e2762b30e44c9fe2a3dfca907a73c6ecb168a67afaf938418b55146cf4da90c3a5ef83ccaf270d06477d5ea3335da791d2a8f801d4ce5bb809c269d0bf44709a614f2d289122f1a1c26c82151c79fff68616e43b5470cf71a4d78070c7936f7e9c5a68c574ab7f726cf65a0df7d14870de6ae83b9a2f25ccd9456dbcfd75a0bc99879509d9258981a69953fb7ee8f0a172004aa0a5c8286e7f931f22fbea6a6ae24a0b9a6676db503f9c2e1ef500cd5f3892831da813c3f6bf70901660406c294c9193056bb916ab4265564e4e45dd9266d9de62e15", &(0x7f0000000480)="14f18ada7b2263c85d1804783270a7df37e1cb07ca097b69614017a3ce100d0ac9dc7fe065534cf697bd2df01605c42010d829536a2dbf90b5f342c04babcd775e8d960db55565115a2c51c60e53fa5c5cd05f0c8c5d61988ccccd70403460417c8fce58", 0x0, r0, 0x4}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x103002, 0x10, 0x28}, 0x18) openat$incfs(r5, &(0x7f0000000180)='.log\x00', 0x2008c0, 0x104) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@local}, {@empty}, {@dev}, {@broadcast}, {@dev}]}, @end]}}}}}}}, 0x0) 13.328095393s ago: executing program 7 (id=1604): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) (fail_nth: 2) 12.659556954s ago: executing program 6 (id=1610): epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='3\xe4\x1c\x8b\x14\x03\xe3\n\n`\x06#,\x96\xcb\xfae', &(0x7f0000000380)='c::\xd9\x02\xd3\xca\x1a\xd6\x8a\xad\x1d\x04\x86\b\xf1\b\x1e\x87\x8a\x963\xa2\xd70\x10\xa1\x8f\x18B\xd1\xfc\xb3J\x9d\x06\xe8\xc9]v?}W\xbb\xd2\x18\xa1ya\xb5\x17R\x97\xa5[=\xa6\xa6\xc1\xeclN\x83\xc6d_\n\x90\x03\xbc\x8a)M\x13\xd9\xc1t(\xa5j\xb1\x91\x05w\x00\xc5M\x0f=\xc0\\\xbev\x94*\xec\xe4H\x94\xd4,\xc1A=~\xe2M\xa1\xeb\x9dt-\xfb\xc8\x92\xd1;\xb1\xf8A\xd1\x97\xdf\xdan\xdd\x89\x83\xda@\x0e\xd6\xb2(\xe0\x87\x1f\x1c\x8f\xaai\\<\xd1H\x9b~\xd6\xa8l\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed-0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r4, 0x0, 0x0, 0x1000400000de, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r7, 0x2afd, 0x308b, 0xc, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYBLOB="a5e28d934b6051b7723aa55ed37561abe5a5507142070fa6208ce0cf5e8bf1e30b980244a80e7d1bb0de3da483124b00685fc9038c10daa911fa41f3d89d8cab", @ANYRES32=r9], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) 11.374766139s ago: executing program 7 (id=1618): socket$inet6(0x10, 0x3, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="000000000f815fd6235d670cf473", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = dup3(r9, r6, 0x80000) ioctl$NBD_DO_IT(r10, 0xab03) (async) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="7440864f8645a37e0000020000000800010000000000e914f2e78582f1e0f9e33dcae931df29fa4d2b8e4a4301a7455219f8760233758667af7f99ca3e1af5d4d8d7da8006002b2f54d4c3ac3c3ac8a2ff9b29db5ff0e7dc0b5d8df2719dd5ac9b268a8b495d0bc27f8afd1599da1825e9d4b7b1604b03884997a84bff5033a42fa83e1d5a185fa320586270e29a"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}, {&(0x7f00000002c0)="be7a743534450e52940954b3bcbb1d378dc2a885b11423da7ee1287c458078855d704d8cdefcf8da847dac37b904dc7de71f2478ff76dc79335e192c14d99ca4e185cce9d77ae5181e8c1dc13d3bdc86387c7e77e302daf71ea746d64b60b0e96f237b99d0b9a25843817fdffb7cede1b80a62445c56309ed31355419482af"}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000000000000000000001701000000000000000081003e6b02139383bf169f84d437cdab9993aecffb51023b46a29de85431726c6793e74b24e700764da187a770aef079ec77fba152573be0ffd3ae26d7f75747141f992f1db888721153914dd6d2b58357e2c93471a6c3453b441db141259baf879d9d81f72027383b202e6557feda51ecc647db6f950b0907004ce5b4193cbccbc2f6103072f45d9814acf9a93c9e78c964df967cd15f5ff64715ab378d02a8badb50e95bdc5d7aa38389a6eb241dddcc683ba061b49c1ab2bff29d7d3098b3bdacfa30d7c7792b2bb2b0454f6759aa0d53115e77a8f4c8e2f813c6fe1a4227f4b50fd7a0c94600000000000000"], 0x18}], 0x33, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10.72282695s ago: executing program 35 (id=1618): socket$inet6(0x10, 0x3, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="000000000f815fd6235d670cf473", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = dup3(r9, r6, 0x80000) ioctl$NBD_DO_IT(r10, 0xab03) (async) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="7440864f8645a37e0000020000000800010000000000e914f2e78582f1e0f9e33dcae931df29fa4d2b8e4a4301a7455219f8760233758667af7f99ca3e1af5d4d8d7da8006002b2f54d4c3ac3c3ac8a2ff9b29db5ff0e7dc0b5d8df2719dd5ac9b268a8b495d0bc27f8afd1599da1825e9d4b7b1604b03884997a84bff5033a42fa83e1d5a185fa320586270e29a"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}, {&(0x7f00000002c0)="be7a743534450e52940954b3bcbb1d378dc2a885b11423da7ee1287c458078855d704d8cdefcf8da847dac37b904dc7de71f2478ff76dc79335e192c14d99ca4e185cce9d77ae5181e8c1dc13d3bdc86387c7e77e302daf71ea746d64b60b0e96f237b99d0b9a25843817fdffb7cede1b80a62445c56309ed31355419482af"}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}], 0x33, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10.478515921s ago: executing program 3 (id=1622): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002c00)=ANY=[@ANYBLOB="020303060300000026bd7000fddbdf2501000300590ae9b8"], 0x18}}, 0x5000) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x2000000, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbd8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x80000) sendfile(r0, r4, 0x0, 0x3) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000040)={"e567940d9ee689fbafb77fd2089e856686eb70ef45eeedb0e24f3ef53076", 0x2, 0x5, 0x5, [0x8, 0x4, 0xd9e, 0x7, 0x6d, 0x8443, 0xe, 0x9, 0x3, 0x7fffffff, 0x800, 0x80000001, 0xc7, 0xfffffff9, 0xffffff7b, 0xa, 0xfffffffa, 0x7]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905010340"], 0x0) 10.116898524s ago: executing program 6 (id=1624): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) dup2(r0, r0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040)="100c060026220300000000000000", 0xe, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="db4654", 0x3}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x38}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x10080, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) socket$unix(0x1, 0x2, 0x0) 8.156422926s ago: executing program 0 (id=1629): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x400280, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095", @ANYRES16, @ANYBLOB="3796a5b86b3bc0d0414b3e6bbcc431afb3f290da9cb861db0d3fcd7da85a2755dd1b85ffce860bac17ab96c49d2a4320f59352a88c418a5bfc871c238dfc37a7f5415effffb599d41eefbdc0cfebbf0ee164e295064e79cc725baf8eb763109270ac6e3313d306a8fc7c46e173fca27f7ffb0882c1fe2b873b8ffce6b404092d04fdeb5e715831d96607eb1c482ec16433fd50f5137caff3eed3b679a110f1eb47d6ec41ae4f5df2d4d02fd4e97f86509f23bd2964b5557bbb50ba666a", @ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@xdp, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) setresgid(0x0, 0x0, 0xee01) r9 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) prlimit64(r9, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'veth0_vlan\x00', &(0x7f0000000340)=@ethtool_coalesce={0xf, 0x868, 0x730, 0x59, 0x2, 0xffff, 0x9f34, 0x2, 0xd6, 0x80000000, 0xb, 0x459, 0x2, 0x8, 0x4f6797b1, 0x8001, 0xa9, 0x9, 0x5, 0xf, 0x7, 0x2f6, 0x10}}) 6.717268157s ago: executing program 0 (id=1630): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1}}}}}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.074551336s ago: executing program 0 (id=1632): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x25, 0xa, 0x7ffc0001}]}) nanosleep(&(0x7f0000000200), 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(blowfish-generic)\x00'}, 0x58) (async) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x1, {0x2, 0x6, 0x0, '\x00', {0x7ff, 0x6, 0xadd, 0x806, r3, 0x0, 0xc000, '\x00', 0x3, 0x8, 0x4, 0x5, {0x8, 0x4}, {0x4000000000006, 0x8}, {0x1, 0xd}, {0x100001000000003, 0x2}, 0x2, 0xa, 0x3ff, 0x6}}}}) (async, rerun: 64) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) (rerun: 64) 5.851418889s ago: executing program 6 (id=1634): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe5}, {0xe, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x10000000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) read$alg(r3, &(0x7f0000000240)=""/4096, 0xfffffdef) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0xc, 0x80000001}, &(0x7f0000000200)=0x10) r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xa) open$dir(0x0, 0x100, 0x10a) open(0x0, 0x1031c2, 0xb4) ftruncate(r1, 0x2007ff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.736823023s ago: executing program 3 (id=1635): rt_sigqueueinfo(0x0, 0x3a, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket(0x2b, 0x80801, 0x1) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000088}, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x20000800, 0x400, 0x1}, 0x10) r4 = syz_clone(0x190000, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2000000007) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0x1000000000, 0x0, 0x200000000000043, 0x2000003, 0x0, 0x2004cb, 0xa, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x8000, 0x9], 0xeeece000, 0x100202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$lock(r7, 0x24, 0x0) mmap(&(0x7f00000ed000/0x2000)=nil, 0x2000, 0x2000002, 0x4010, r3, 0xec776000) 5.621860944s ago: executing program 0 (id=1636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64=0x0], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020ef0e01000000000000010902240001000080000904000001f2ff010009210000000122050009058108"], 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020ef0e01000000000000010902240001000080000904000001f2ff010009210000000122050009058108"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x1, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000003c0)=""/4096, 0x1000) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001440)="bd5bc9b367d5d76dcd56856ad67187042685e32a19f70949c829aef58f1e09c699ebec393178f2a3000000000000ac3f89584ce3ce9d1e88a38b86bf51eb218b8113854f0c1cfd550a4407e45660407409d9d0390b2b407e59005c8906", 0x5d}, {&(0x7f0000000700)="ec76b3b81f8baf00b118df1ac0454d8196ee3376807e72c0bd623c", 0x1b}], 0x2}}], 0x1, 0x404c041) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xfffffff6) accept4(r5, 0x0, 0x0, 0x800) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000091}], 0x1, 0x40800) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000091}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000014c0)=""/37, 0x25}, {&(0x7f0000001500)=""/180, 0xb4}, {&(0x7f00000015c0)=""/32, 0x20}, {&(0x7f0000001600)=""/186, 0xba}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000001840)=""/68, 0x44}], 0x6}, 0x10021) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000016c0)=ANY=[@ANYRES8=r8, @ANYRESDEC=r2, @ANYBLOB="01000000000000e14f003b000000080003004b2174a911fc3efabc57723ed4e159c2439f25606efb4a10b1b9f0b4388d128f04d0038fb268519286c853baa86957e6bba8fe7ae52dd6bf01202bf7a8000080000000", @ANYRES32=r5, @ANYBLOB="d5063300800900000000000000ff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.363961964s ago: executing program 3 (id=1643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x7) (async) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndpcmp(0x0, 0x0, 0x501080) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 4.264147061s ago: executing program 3 (id=1644): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x109080, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000200)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 4.185332345s ago: executing program 3 (id=1645): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0x6, "d282feba24d4"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) 3.81976167s ago: executing program 2 (id=1647): socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x90080) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x3e, 0x2, @thr={0x0, 0x0}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = fsmount(0xffffffffffffffff, 0x0, 0x70) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b726c696d6974202d68756765fe0662202d726c7e6d6974202b726c696d6974202b68756765746c62202d637075616363742061388583dbef11e15c77af0cf14d30031f991a2f137042dee276ba4dfd0b8406bccc86dd8723c89a56695ad2980aae893db212b6ff0626d4b9c59c783e2c225bdf6c013c844895df8f96f45e0e1a7f7e3c465c08ed56538bb3014ded9f318120fbb4968a3965ec0490ece44a309bd58de4a6a967b9dfc8ba51335917cbe82c47dfda1b81849b8a8c7c9d4b0452da240d2257e5437143bad2e53c4c11f671afb3c06052"], 0x33) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x700}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0x700}}) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) syz_emit_ethernet(0x63, &(0x7f0000000180)={@random="70b50d010ec2", @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "fae774", 0x2d, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, {[], @payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x1, 0x1, 0xb, 0x1, 0x2, 0x6, 0x0, 0x0, 0x1, 0x4, 0x1, 0x1, 0x1d32, 0x1, 0x4e23, 0x4e20}, 0x1, 0x1}, 0x3, 0x2}, 0x1}}, [0x0]}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xe35, 0x763, 0x10e, 0x969]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x185240, 0x0) read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x2020) recvfrom$inet6(r5, &(0x7f0000000080)=""/206, 0xce, 0x40000000, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.491480246s ago: executing program 2 (id=1648): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_io_uring_setup(0x231, &(0x7f00000002c0)={0x0, 0xd471, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x501180, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, r4, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x44, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x7f}}}}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r9}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) userfaultfd(0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f00000001c0)={r8}, 0x1) 3.452820134s ago: executing program 8 (id=1620): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) fanotify_init(0x20, 0x40000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x8, 0x5937, 0x25, @rand_addr=' \x01\x00', @loopback, 0x9f, 0x80, 0x91, 0x3}}) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x8d, 0xc, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x10, 0x9, 0x101}}) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r18 = socket$inet_icmp(0x2, 0x2, 0x1) r19 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r19, 0x107, 0x1, &(0x7f00000004c0)={r20, 0x3, 0x6}, 0x10) sendmmsg$inet(r18, &(0x7f0000002640)=[{{&(0x7f0000001840)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001980)="645ea11270ec6f09b9b836b94c8219eba7ba080cfe8d9bf2670eb609f1e23c3cdad3967ed5d7f0d3e0b2edffe24fb922f75e775bfa87b1c6a56e763a", 0x3c}], 0x1}}, {{&(0x7f0000001a80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000380)="f8f86edec6a69aece6e43627a994f31aa919dfda36ad7eb2f6e1f2317d1f1df9faf52bb59c972bf5326d36ee5621ac8d4063e12d35c086cdcbef89e7d490f3f5f441daebc6ee93fe3d94", 0x4a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="fd2da495", 0x4}], 0x3}}, {{&(0x7f0000001f00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000c80)="0e93cf311d76a52370d98447175069c741d5cd1f5552a90b9afda5a486d3a6df5a1ed85c5c371998c299ec803006a3d30ac7b191f5bab174f50cb588767572d74d929e863283b24afc7e980848773a5a4a177c219a05938b79bf3fdf179dfed11b77d8b687cbd7d0d59392876ace849b78d280097abfe527affedb0ef9269b0fce6fd0fe18af6230f8503f55f629581b6749ce9a7f555f2e3a74b46fc22093eefcae48329ee60670aba09dbacb5720d5dc844fb8a8cf573fc6a36b02fb6845b4203065d33624a9bc578fb583620e568c3b7e60f359260b2a2a12d1815662f012", 0xe0}, {&(0x7f0000000180)="5b6939c0d3fddfc3cf55bd", 0xb}], 0x4, &(0x7f0000002080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}}, {{&(0x7f00000020c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002100)}, {&(0x7f0000002140)}, {0x0}, {&(0x7f0000002280)}], 0x4, &(0x7f0000002340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r20, @private=0xa010100, @loopback}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@generic={0xd1c1b9c52f986beb, 0xc, "22468b906cadec47e879"}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x6, 0x11, "a1256f505c566ac6185591dde04a77"}, {0x3, 0x7, "052e59721a"}, {0x6, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x36, 0x1, 0x0, [{@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x5e, 0x3, 0x5, [{@private=0xa010102, 0x1}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xbc, [@multicast2, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x5a, 0x3, 0x7, [{@loopback, 0x981}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xe}, {@loopback, 0xc}]}, @generic={0x83, 0x2}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x7, [{@loopback, 0x10000}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x17, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@loopback, 0x5}, {@broadcast, 0xa47}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x9}]}, @ssrr={0x89, 0x7, 0x2f, [@loopback]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x96}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r20, @local, @private=0xa010100}}}], 0x148}}], 0x5, 0x8804) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000540)={0x6ac, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x70, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3ff, 0x80, 0x0, 0x9}, {0xfff4, 0x9, 0x3}, {0x5, 0x4, 0x4, 0x3}, {0x5, 0x9, 0x2, 0x40000000}, {0xbc5, 0x1, 0x1, 0x2}, {0x9, 0x8, 0x13, 0x500000}, {0x401, 0x7, 0x10, 0xfff}]}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x7, 0x1, 0x6}, {0x4, 0x9, 0x8, 0xb1}, {0x93, 0x14, 0xc8, 0x2}, {0x5, 0x5, 0x1, 0xbdba}, {0x1, 0x8, 0x7, 0x4}, {0xbb2, 0x7f, 0x8}, {0x4, 0x4, 0x3, 0x1}, {0x4, 0x5, 0x2, 0xf}]}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x160, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7c63, 0x5, 0x3, 0x10001}, {0x2c9, 0x7f, 0x2, 0xb}, {0xf8, 0x4, 0xf, 0x2}, {0x400, 0x10, 0x9}, {0xe, 0x3, 0x6, 0x7}, {0x401, 0x7, 0x1, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x54}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfafa}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3eff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x24048004}, 0x40000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 3.32371082s ago: executing program 2 (id=1649): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x23}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x23}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0xfffffc43, &(0x7f00000000c0)=0x40000800045) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfa9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f045, 0x6c}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f045, 0x6c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0xee01, &(0x7f0000000140)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.695883358s ago: executing program 6 (id=1650): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1892f84d7dc03", 0x1c, 0x0, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd8c, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7dd019e3", {0x3, 0x100, 0x0, 0x2, 0x2, 0x10, 0x8}}) 2.602990487s ago: executing program 0 (id=1651): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002b000000140012800a000100767863616e0000000400028008000a", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getrule={0x14, 0x22, 0x1, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) socket$caif_stream(0x25, 0x1, 0x3) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket(0x15, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0800018008000100", @ANYRES32=r11, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x400c000) 2.511720065s ago: executing program 2 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0xffc5, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x1}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xffffff6e, 0xa}}}]}]}, 0x8c}}, 0x0) 2.294053508s ago: executing program 0 (id=1653): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) poll(&(0x7f0000000480)=[{r0, 0x4042}, {r0, 0x1009}], 0x2, 0x100) 2.152465822s ago: executing program 2 (id=1654): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x7, "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"}) r1 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3454, &(0x7f0000000340)={0x0, 0x75a5, 0x400, 0x40003, 0xa7}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xfc, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000000)=0x2, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x8000000000003, &(0x7f0000000040)=0x7f, &(0x7f00000003c0)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @sock_ops=0x3}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) 1.643632534s ago: executing program 8 (id=1655): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') fchdir(r4) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r5, 0x7277, 0x0, 0x28, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) lseek(0xffffffffffffffff, 0x9, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 249.351836ms ago: executing program 8 (id=1656): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x4, 0x0, 0x6, 0x30, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x2000000, 0xb51b, 0xe}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001200010a"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000009}, 0x44040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 230.144624ms ago: executing program 3 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000004a40)=[{{&(0x7f00000003c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x6, &(0x7f0000002940)=""/217, 0xd9}, 0xf}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000002b00)=""/170, 0xaa}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000002bc0)=""/249, 0xf9}, 0x2}, {{&(0x7f0000002cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d40)=""/178, 0xb2}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000002e00)=""/129, 0x81}], 0x3, &(0x7f0000002f00)=""/14, 0xe}, 0x3}, {{&(0x7f0000002f40)=@phonet, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002fc0)=""/138, 0x8a}, {&(0x7f0000003080)=""/69, 0x45}, {&(0x7f0000003100)=""/188, 0xbc}, {&(0x7f00000031c0)=""/205, 0xcd}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x5, &(0x7f0000004340)=""/224, 0xe0}, 0x27fc}, {{&(0x7f0000004440)=@x25={0x9, @remote}, 0x80, &(0x7f0000004680)=[{&(0x7f00000044c0)=""/141, 0x8d}, {&(0x7f0000004580)=""/221, 0xdd}], 0x2, &(0x7f00000046c0)=""/217, 0xd9}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000047c0)=""/120, 0x78}], 0x1, &(0x7f0000004880)=""/12, 0xc}}, {{&(0x7f00000048c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004940)=""/116, 0x74}], 0x1, &(0x7f0000004a00)}, 0x28}], 0x7, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4040894}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) wait4(0x0, 0x0, 0x40000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) quotactl_fd$Q_SYNC(r6, 0xffffffff80000100, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 202.774075ms ago: executing program 2 (id=1658): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120120023139cf08c50411e205070140050904a90000bea2e55c"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=1659): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000003edc4d86088d44d2f72100971d3f4bae9ddf3763", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): uct=0, SerialNumber=3 [ 486.932479][ T5928] usb 2-1: SerialNumber: syz [ 487.080443][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 487.242048][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 487.254304][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 487.263396][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.273938][ T9] usb 5-1: config 0 descriptor?? [ 487.450511][ T5883] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 487.487468][ T9] lenovo 0003:17EF:60A3.0015: unknown main item tag 0x0 [ 487.499436][ T9] lenovo 0003:17EF:60A3.0015: unknown main item tag 0x0 [ 487.506652][ T9] lenovo 0003:17EF:60A3.0015: unknown main item tag 0x0 [ 487.516836][ T9] lenovo 0003:17EF:60A3.0015: unknown main item tag 0x0 [ 487.524804][ T9] lenovo 0003:17EF:60A3.0015: unknown main item tag 0x0 [ 487.532197][ T9] lenovo 0003:17EF:60A3.0015: unknown main item tag 0x0 [ 487.544526][ T9] lenovo 0003:17EF:60A3.0015: unknown main item tag 0x0 [ 487.553360][ T9] lenovo 0003:17EF:60A3.0015: hidraw0: USB HID v0.03 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 487.642207][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 487.650931][ T5883] usb 4-1: config 174 has an invalid interface number: 220 but max is 0 [ 487.659514][ T5883] usb 4-1: config 174 has an invalid interface number: 143 but max is 0 [ 487.667955][ T5883] usb 4-1: config 174 has 2 interfaces, different from the descriptor's value: 1 [ 487.677097][ T5883] usb 4-1: config 174 has no interface number 0 [ 487.683519][ T5883] usb 4-1: config 174 has no interface number 1 [ 487.689799][ T5883] usb 4-1: config 174 interface 220 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 487.700914][ T5883] usb 4-1: config 174 interface 220 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 487.712028][ T5883] usb 4-1: config 174 interface 220 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 8 [ 487.722080][ T5883] usb 4-1: config 174 interface 220 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 487.733455][ T5883] usb 4-1: config 174 interface 220 altsetting 8 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 487.746688][ T5883] usb 4-1: too many endpoints for config 174 interface 143 altsetting 132: 164, using maximum allowed: 30 [ 487.758340][ T5883] usb 4-1: config 174 interface 143 altsetting 132 has 2 endpoint descriptors, different from the interface descriptor's value: 164 [ 487.771959][ T5883] usb 4-1: config 174 interface 220 has no altsetting 0 [ 487.778939][ T5883] usb 4-1: config 174 interface 143 has no altsetting 0 [ 487.787771][ T5883] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff4d, bcdDevice=26.12 [ 487.796874][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.804964][ T5883] usb 4-1: Product: syz [ 487.809117][ T5883] usb 4-1: Manufacturer: syz [ 487.813711][ T5883] usb 4-1: SerialNumber: syz [ 487.821333][ T9925] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 487.922571][ T9733] usb 5-1: USB disconnect, device number 37 [ 488.039895][ T9925] fuse: Unknown parameter 'use00000000000000000000' [ 488.051051][ T9937] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 488.118518][ T9940] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 489.070493][ T9733] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 489.200480][ T9733] usb 5-1: device descriptor read/64, error -71 [ 489.450527][ T9733] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 489.459870][ T5928] usb 2-1: 0:2 : does not exist [ 489.485506][ T5928] usb 2-1: USB disconnect, device number 53 [ 489.600494][ T9733] usb 5-1: device descriptor read/64, error -71 [ 489.752500][ T9733] usb usb5-port1: attempt power cycle [ 490.194677][ T9968] xt_TCPMSS: Only works on TCP SYN packets [ 490.271517][ T5883] option 4-1:174.220: GSM modem (1-port) converter detected [ 490.313241][ T5883] usb 4-1: USB disconnect, device number 48 [ 490.326964][ T5883] option 4-1:174.220: device disconnected [ 490.357529][ T9975] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1020'. [ 490.452668][ T9733] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 490.483467][ T9733] usb 5-1: device descriptor read/8, error -71 [ 490.586914][ T9981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1023'. [ 490.636316][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 490.720513][ T9733] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 490.741052][ T9733] usb 5-1: device descriptor read/8, error -71 [ 490.800526][ T5883] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 490.850670][ T9733] usb usb5-port1: unable to enumerate USB device [ 490.870452][ T5928] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 490.951768][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.962841][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.972581][ T5883] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.00 [ 490.981714][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.991003][ T5883] usb 4-1: config 0 descriptor?? [ 491.021145][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 491.029270][ T5928] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 491.038410][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.046647][ T5928] usb 2-1: Product: syz [ 491.050821][ T5928] usb 2-1: Manufacturer: syz [ 491.055398][ T5928] usb 2-1: SerialNumber: syz [ 491.062249][ T5928] usb 2-1: config 0 descriptor?? [ 491.400170][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.408819][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.471832][ T9985] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 491.482922][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 491.587639][ T9996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.626880][ T5883] usbhid 4-1:0.0: can't add hid device: -71 [ 491.635170][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 491.655463][ T5883] usb 4-1: USB disconnect, device number 49 [ 491.707088][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 491.707104][ T30] audit: type=1400 audit(2000000341.330:617): avc: denied { write } for pid=9998 comm="syz.0.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 491.981361][ T9999] openvswitch: netlink: Multiple metadata blocks provided [ 492.140256][T10012] wireguard0: entered allmulticast mode [ 492.419746][ T5928] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 492.781081][ T5928] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 492.790776][ T5928] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 492.922174][T10017] input: syz1 as /devices/virtual/input/input22 [ 493.648275][ T30] audit: type=1326 audit(2000000343.270:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 494.321770][ T30] audit: type=1326 audit(2000000343.270:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 494.402550][ T30] audit: type=1326 audit(2000000343.270:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 494.426554][ T30] audit: type=1326 audit(2000000343.270:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 494.850428][ T30] audit: type=1326 audit(2000000343.270:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 495.357576][ T30] audit: type=1326 audit(2000000343.270:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 495.386180][ T30] audit: type=1326 audit(2000000343.270:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 495.451481][T10062] xt_hashlimit: max too large, truncated to 1048576 [ 495.493586][ T30] audit: type=1326 audit(2000000343.270:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 495.534291][ T30] audit: type=1326 audit(2000000343.270:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.4.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1eaf98f749 code=0x7ffc0000 [ 495.819661][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1041'. [ 496.279355][T10035] mac80211_hwsim hwsim7 4: renamed from wlan1 (while UP) [ 496.710471][ T5883] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 496.845457][T10083] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1046'. [ 496.872618][ T5883] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 496.892118][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 496.921681][ T5883] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 496.946838][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.972147][ T5883] usb 4-1: config 0 descriptor?? [ 497.401637][ T5883] wacom 0003:056A:00D0.0016: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 497.433548][ T5883] wacom 0003:056A:00D0.0016: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 497.449231][ T5883] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0016/input/input23 [ 497.470554][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 497.631886][T10035] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 497.644453][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.662482][T10035] bond5 (unregistering): Released all slaves [ 497.677098][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.702224][ T9] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 497.724173][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.764595][ T9] usb 5-1: config 0 descriptor?? [ 497.860087][ T9736] usb 4-1: USB disconnect, device number 50 [ 498.869463][T10115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.110508][ T5883] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 499.260578][ T5883] usb 4-1: device descriptor read/64, error -71 [ 499.580486][ T5883] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 499.720459][ T5883] usb 4-1: device descriptor read/64, error -71 [ 499.842464][ T5883] usb usb4-port1: attempt power cycle [ 500.190476][ T5883] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 500.210907][ T5883] usb 4-1: device descriptor read/8, error -71 [ 500.229081][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 500.235290][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 500.284545][ T9] usb 5-1: USB disconnect, device number 42 [ 500.492789][ T5883] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 500.580511][ T5883] usb 4-1: device descriptor read/8, error -71 [ 500.704325][ T5883] usb usb4-port1: unable to enumerate USB device [ 500.776938][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 500.776954][ T30] audit: type=1400 audit(2000000350.400:648): avc: denied { create } for pid=10153 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 500.814083][ T30] audit: type=1400 audit(2000000350.430:649): avc: denied { accept } for pid=10153 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 500.836283][ T30] audit: type=1400 audit(2000000350.430:650): avc: denied { write } for pid=10153 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 500.905917][ T30] audit: type=1400 audit(2000000350.530:651): avc: denied { ioctl } for pid=10162 comm="syz.2.1072" path="socket:[27552]" dev="sockfs" ino=27552 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 500.955485][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.193269][ T30] audit: type=1400 audit(2000000350.810:652): avc: denied { bind } for pid=10168 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.611011][ T5883] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 501.659322][T10180] nvme_fabrics: missing parameter 'transport=%s' [ 501.665916][T10180] nvme_fabrics: missing parameter 'nqn=%s' [ 501.772106][ T5883] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 232, setting to 64 [ 501.784036][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 501.792879][ T5883] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 501.802023][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 501.810227][ T5883] usb 5-1: Product: syz [ 501.814541][ T5883] usb 5-1: Manufacturer: syz [ 501.819908][ T5883] usb 5-1: SerialNumber: syz [ 501.826995][ T5883] usb 5-1: config 0 descriptor?? [ 501.834284][T10159] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 501.845024][ T5883] usb 5-1: selecting invalid altsetting 0 [ 503.153658][T10209] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 503.224260][T10209] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 503.238382][T10209] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 503.286018][T10211] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 503.317893][T10211] bond1: (slave gretap1): making interface the new active one [ 503.333654][T10211] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 503.365497][T10209] macvlan2: entered promiscuous mode [ 503.370954][T10209] macvlan2: entered allmulticast mode [ 503.377028][T10209] bond1: entered promiscuous mode [ 503.382099][T10209] gretap1: entered promiscuous mode [ 503.388124][T10209] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.399012][T10209] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 503.412722][T10209] bond1: left promiscuous mode [ 503.417521][T10209] gretap1: left promiscuous mode [ 503.630446][ T9735] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 503.816055][ T9736] usb 5-1: USB disconnect, device number 43 [ 503.822314][ T9735] usb 4-1: device descriptor read/64, error -71 [ 503.956816][ T30] audit: type=1400 audit(2000000353.580:653): avc: denied { watch watch_reads } for pid=10224 comm="syz.4.1090" path="/proc/805/task/806/fdinfo" dev="proc" ino=28677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 504.021682][T10223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=10223 comm=syz.2.1088 [ 504.051831][T10227] SELinux: failed to load policy [ 504.061124][ T9735] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 504.109981][T10228] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 504.190519][ T9735] usb 4-1: device descriptor read/64, error -71 [ 504.300680][ T9735] usb usb4-port1: attempt power cycle [ 504.661287][ T9735] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 504.680869][ T9735] usb 4-1: device descriptor read/8, error -71 [ 504.931840][ T9735] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 505.101960][ T9735] usb 4-1: device descriptor read/8, error -71 [ 505.220817][ T9735] usb usb4-port1: unable to enumerate USB device [ 505.370510][ T9735] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 505.530445][ T9735] usb 5-1: Using ep0 maxpacket: 8 [ 505.548213][ T9735] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 505.560476][ T9735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.578643][ T9735] usb 5-1: Product: syz [ 505.582904][ T9735] usb 5-1: Manufacturer: syz [ 505.587474][ T9735] usb 5-1: SerialNumber: syz [ 505.603518][ T9735] usb 5-1: config 0 descriptor?? [ 505.685867][T10244] lo speed is unknown, defaulting to 1000 [ 505.829601][ T9735] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 505.994791][T10249] autofs: Unknown parameter 'Ù6'|oT"' [ 506.354447][T10272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1103'. [ 506.368160][T10272] 9p: Bad value for 'wfdno' [ 506.448017][ T30] audit: type=1400 audit(2000000355.940:654): avc: denied { setopt } for pid=10266 comm="syz.1.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 506.484156][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 507.056471][T10294] overlayfs: failed to clone upperpath [ 507.772819][ T9735] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 507.783336][ T9735] dvbdev: DVB: registering new adapter (Terratec H7) [ 507.790008][ T9735] usb 5-1: media controller created [ 507.972310][ T9735] usb read operation failed. (-71) [ 507.979305][ T9735] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 507.991187][ T9735] usb 5-1: USB disconnect, device number 44 [ 509.550244][T10298] IPv6: NLM_F_CREATE should be specified when creating new route [ 509.567028][ T30] audit: type=1400 audit(2000000359.190:655): avc: granted { setsecparam } for pid=10297 comm="syz.1.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 509.803593][T10313] lo speed is unknown, defaulting to 1000 [ 510.290812][ T9735] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 510.408116][T10322] netlink: 'syz.0.1110': attribute type 2 has an invalid length. [ 510.416138][T10322] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 510.423898][T10322] netlink: 'syz.0.1110': attribute type 2 has an invalid length. [ 510.433726][ T30] audit: type=1400 audit(2000000359.980:656): avc: denied { ioctl } for pid=10296 comm="syz.0.1110" path="socket:[30018]" dev="sockfs" ino=30018 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 511.043488][ T9735] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 511.070639][ T9735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.082878][ T9735] usb 4-1: Product: syz [ 511.087156][ T9735] usb 4-1: Manufacturer: syz [ 511.091920][ T9735] usb 4-1: SerialNumber: syz [ 511.194524][ T30] audit: type=1804 audit(2000000360.820:657): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1118" name="/newroot/216/file0" dev="tmpfs" ino=1149 res=1 errno=0 [ 511.303883][ T9735] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 511.393828][ T9735] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 511.441164][ T9735] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 511.442336][T10344] overlayfs: upper fs does not support file handles, falling back to index=off. [ 511.466253][ T9735] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 511.489606][ T9735] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 511.502931][ T30] audit: type=1400 audit(2000000361.110:658): avc: denied { setattr } for pid=10343 comm="syz.0.1120" name="file1" dev="overlay" ino=1196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 511.529836][ T9735] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 511.555842][ T9735] usb 4-1: USB disconnect, device number 59 [ 511.600847][ T30] audit: type=1400 audit(2000000361.230:659): avc: denied { accept } for pid=10347 comm="syz.3.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 511.675616][ T30] audit: type=1400 audit(2000000361.250:660): avc: denied { shutdown } for pid=10347 comm="syz.3.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 513.361628][T10371] hfs: can't find a HFS filesystem on dev nullb0 [ 515.428517][ T5883] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 515.594271][ T5812] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 516.150425][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 516.157065][ T5883] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 516.166319][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.176583][ T5883] usb 5-1: config 0 descriptor?? [ 516.355647][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.381458][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.602946][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.622041][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.630883][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.632935][ T5883] wacom 0003:056A:0094.0017: unknown main item tag 0x4 [ 516.638967][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.660866][ T5883] wacom 0003:056A:0094.0017: Using device in hidraw-only mode [ 516.672584][ T9733] IPVS: starting estimator thread 0... [ 516.672737][ T5883] wacom 0003:056A:0094.0017: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 516.724096][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 516.804632][T10419] IPVS: using max 44 ests per chain, 105600 per kthread [ 516.846904][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.859842][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.862230][ T9733] usb 5-1: USB disconnect, device number 45 [ 516.868469][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.900490][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.913257][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.923554][ T5812] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 517.016133][ T5812] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 517.028871][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.037764][ T5812] usb 4-1: SerialNumber: syz [ 517.050399][ T5812] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 517.059363][ T5812] usbtest 4-1:1.0: Linux gadget zero [ 517.064708][ T5812] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 517.246234][ T9733] usb 4-1: USB disconnect, device number 60 [ 517.605625][ T30] audit: type=1400 audit(2000000367.230:661): avc: denied { mount } for pid=10429 comm="syz.4.1144" name="/" dev="hugetlbfs" ino=29192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 517.630626][T10432] erofs (device loop4): cannot find valid erofs superblock [ 517.638737][ T30] audit: type=1400 audit(2000000367.250:662): avc: denied { mounton } for pid=10429 comm="syz.4.1144" path="/219/file0" dev="hugetlbfs" ino=29192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 518.900501][ T9733] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 519.099997][ T30] audit: type=1400 audit(2000000368.720:663): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 519.121228][T10447] 9p: Bad value for 'rfdno' [ 519.180465][ T6541] IPVS: ip_vs_send_async error -101 [ 519.265896][ T9733] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 519.274717][ T9733] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 519.285232][ T9733] usb 4-1: config 8 has no interface number 0 [ 519.291342][ T9733] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 519.303094][ T9733] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.315713][T10457] fuse: Unknown parameter '0xffffffffffffffff' [ 519.324667][ T9733] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 519.337106][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1149'. [ 519.346745][ T9733] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 519.359864][ T9733] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 519.370735][ T9733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.382280][ T9733] usb 4-1: NFC: intf ffff888078d92000 id ffffffff8f325140 [ 519.414294][ T9733] nfcmrvl 4-1:8.80: NFC: registered with nci successfully [ 519.440509][ T5812] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 519.570423][ T5812] usb 5-1: device descriptor read/64, error -71 [ 519.623846][ T5883] usb 4-1: USB disconnect, device number 61 [ 519.632822][ T5883] usb 4-1: NFC: intf ffff888078d92000 [ 519.709560][T10466] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1153'. [ 519.719041][T10466] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 519.727748][T10466] 0ªX¹¦D: entered allmulticast mode [ 519.733683][T10466] veth0_macvtap: entered allmulticast mode [ 519.739870][T10466] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 519.795590][T10466] SELinux: failed to load policy [ 519.810464][ T5812] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 519.916749][T10467] bond6 (unregistering): Released all slaves [ 519.960666][ T5812] usb 5-1: device descriptor read/64, error -71 [ 520.070847][ T5812] usb usb5-port1: attempt power cycle [ 520.425623][ T5812] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 520.450842][ T5812] usb 5-1: device descriptor read/8, error -71 [ 520.760671][ T5812] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 520.775931][T10496] 9p: Bad value for 'rfdno' [ 520.790816][ T5812] usb 5-1: device descriptor read/8, error -71 [ 520.900687][ T5812] usb usb5-port1: unable to enumerate USB device [ 522.383099][ T9733] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 522.560141][ T9733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.585405][ T9733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.660421][ T9733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.690728][ T9733] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 522.710000][ T9733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.731930][ T9733] usb 4-1: config 0 descriptor?? [ 522.948472][ T9733] usbhid 4-1:0.0: can't add hid device: -71 [ 522.955661][ T9733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 522.965749][T10513] 9p: Bad value for 'wfdno' [ 522.981317][ T9733] usb 4-1: USB disconnect, device number 62 [ 523.574751][T10545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.930443][ T9733] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 524.104514][ T9733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.115882][ T9733] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 524.126752][ T9733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.137617][ T9733] usb 4-1: config 0 descriptor?? [ 525.592183][ T9733] kye 0003:0458:4018.0018: hidraw0: USB HID v0.05 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 525.660140][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 525.721206][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 525.800185][ T9733] usb 4-1: USB disconnect, device number 63 [ 526.353454][ T30] audit: type=1400 audit(2000000375.980:664): avc: denied { read } for pid=10595 comm="syz.4.1192" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 526.419272][ T30] audit: type=1400 audit(2000000376.040:665): avc: denied { read } for pid=10600 comm="syz.3.1193" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 526.631989][ T30] audit: type=1400 audit(2000000376.260:666): avc: denied { read } for pid=10606 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.760938][T10612] comedi comedi3: comedi_config --init_data is deprecated [ 527.348835][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1197'. [ 527.400233][T10623] 9p: Bad value for 'wfdno' [ 527.511337][T10613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1194'. [ 528.313432][ T6541] IPVS: ip_vs_send_async error -101 [ 528.644550][T10651] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1206'. [ 530.242976][ T9733] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 530.449275][T10680] input: syz1 as /devices/virtual/input/input27 [ 530.570586][ T5139] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 530.920905][ T9733] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 530.929997][ T9733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.944634][ T9733] usb 4-1: config 0 descriptor?? [ 530.951645][ T9733] cp210x 4-1:0.0: cp210x converter detected [ 531.435312][ T9733] usb 4-1: cp210x converter now attached to ttyUSB0 [ 531.510669][ T9736] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 532.026850][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.035507][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.081734][T10660] infiniband !yz!: set active [ 532.086534][T10660] infiniband !yz!: added team_slave_0 [ 532.119626][T10660] RDS/IB: !yz!: added [ 532.123999][T10660] smc: adding ib device !yz! with port count 1 [ 532.130277][T10660] smc: ib device !yz! port 1 has no pnetid [ 532.241038][ T9736] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 532.250440][ T9736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 532.258141][ T9736] usb 5-1: can't read configurations, error -61 [ 532.490476][ T9736] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 532.653339][ T9736] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 532.663201][ T9736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 532.676752][ T9736] usb 5-1: can't read configurations, error -61 [ 532.693622][ T9736] usb usb5-port1: attempt power cycle [ 533.071243][ T9736] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 533.102937][ T9736] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 533.124049][ T9736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 533.157880][ T9736] usb 5-1: can't read configurations, error -61 [ 533.300517][ T9736] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 533.321877][ T9736] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 533.332637][ T9736] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 533.342714][ T9736] usb 5-1: can't read configurations, error -61 [ 533.350679][ T9736] usb usb5-port1: unable to enumerate USB device [ 533.827426][ T9736] usb 4-1: USB disconnect, device number 64 [ 533.837264][ T9736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 533.847433][ T9736] cp210x 4-1:0.0: device disconnected [ 533.917446][T10707] tmpfs: Too few inodes for current use [ 534.083834][T10714] netlink: 'syz.2.1221': attribute type 2 has an invalid length. [ 534.094012][T10714] openvswitch: netlink: IP tunnel dst address not specified [ 534.130065][T10716] futex_wake_op: syz.2.1222 tries to shift op by -1; fix this program [ 534.260690][ T9736] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 534.479704][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 534.488588][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 534.670447][ T9736] usb 4-1: device descriptor read/64, error -71 [ 535.436223][ T9736] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 535.518732][ T5139] Bluetooth: hci2: ACL packet too small [ 535.570501][ T9736] usb 4-1: device descriptor read/64, error -71 [ 535.570738][T10750] binder_alloc: 10743: binder_alloc_buf, no vma [ 535.584072][ T30] audit: type=1400 audit(2000000385.200:667): avc: denied { call } for pid=10743 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 535.681215][ T9736] usb usb4-port1: attempt power cycle [ 536.030461][ T9736] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 536.050859][ T9736] usb 4-1: device descriptor read/8, error -71 [ 536.153449][T10754] wireguard0: entered promiscuous mode [ 536.158979][T10754] wireguard0: entered allmulticast mode [ 536.290531][ T9736] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 536.312163][ T9736] usb 4-1: device descriptor read/8, error -71 [ 536.372359][T10762] xt_hashlimit: size too large, truncated to 1048576 [ 536.388176][ T30] audit: type=1400 audit(2000000386.010:668): avc: denied { name_connect } for pid=10759 comm="syz.2.1233" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 536.431097][ T9736] usb usb4-port1: unable to enumerate USB device [ 537.216139][T10778] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1238'. [ 537.271938][ T5812] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 537.441925][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.448085][T10786] geneve2: entered promiscuous mode [ 537.479175][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.856551][ T5812] usb 4-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 537.876488][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.903648][ T5812] usb 4-1: config 0 descriptor?? [ 538.239624][ T5812] usbhid 4-1:0.0: can't add hid device: -71 [ 538.250645][ T5812] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 538.338621][ T5812] usb 4-1: USB disconnect, device number 69 [ 538.614231][T10799] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 538.643176][ T30] audit: type=1400 audit(2000000389.261:669): avc: denied { mount } for pid=10794 comm="syz.3.1243" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 538.681897][ T9] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 539.441866][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 539.462920][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.472784][ T5812] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 539.480888][ T9] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 539.490587][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.509363][ T9] usb 5-1: config 0 descriptor?? [ 539.710471][ T5812] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 539.726615][ T5812] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 539.748652][ T5812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 539.774237][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 539.802600][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 539.839183][ T5812] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 539.879363][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 539.888443][ T5812] usb 4-1: Product: syz [ 539.893032][ T5812] usb 4-1: Manufacturer: syz [ 539.918247][ T5812] cdc_wdm 4-1:1.0: skipping garbage [ 539.923926][ T5812] cdc_wdm 4-1:1.0: skipping garbage [ 539.937992][ T5812] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 539.950427][ T5812] cdc_wdm 4-1:1.0: Unknown control protocol [ 540.137357][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.146221][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.164507][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 540.174626][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 540.202781][ T9] usb 5-1: USB disconnect, device number 54 [ 541.538171][ T9] usb 4-1: USB disconnect, device number 70 [ 541.618786][T10836] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1256'. [ 542.380462][ T9735] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 542.647852][ T9735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.665611][ T9735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.675876][ T9735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.689656][ T9735] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.698916][ T9735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.729939][ T9735] usb 4-1: config 0 descriptor?? [ 542.805644][T10853] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 542.924395][T10853] bond1: entered promiscuous mode [ 542.929659][T10853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.970229][T10858] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:0 [ 542.974032][T10853] bond1: (slave bridge2): making interface the new active one [ 542.985036][T10853] bridge2: entered promiscuous mode [ 542.992385][T10853] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 543.202114][ T9] IPVS: starting estimator thread 0... [ 543.509626][T10869] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 543.528283][ T9735] usbhid 4-1:0.0: can't add hid device: -71 [ 543.534311][ T9735] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 543.550443][T10867] IPVS: using max 48 ests per chain, 115200 per kthread [ 543.566468][ T9735] usb 4-1: USB disconnect, device number 71 [ 543.840440][ T30] audit: type=1400 audit(2000000394.461:670): avc: denied { getopt } for pid=10871 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 544.323687][ T30] audit: type=1400 audit(2000000394.951:671): avc: denied { setopt } for pid=10882 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 544.890790][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 545.104590][T10907] fuse: Bad value for 'fd' [ 545.400449][ T9736] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 545.555036][ T9736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 545.568487][ T9736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.590537][ T9736] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 545.610166][ T9736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.626614][ T9736] usb 4-1: config 0 descriptor?? [ 546.210206][ T9736] usbhid 4-1:0.0: can't add hid device: -71 [ 546.237478][ T9736] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 546.268432][ T9736] usb 4-1: USB disconnect, device number 72 [ 546.405021][T10944] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 546.440445][ T9735] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 546.633351][ T9735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 546.641554][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 546.652808][ T9735] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 546.665474][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 546.800554][ T30] audit: type=1400 audit(2000000397.381:672): avc: denied { module_load } for pid=10945 comm="syz.3.1284" path="/sys/power/wakeup_count" dev="sysfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 547.159796][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 547.172036][ T30] audit: type=1400 audit(2000000397.771:673): avc: denied { open } for pid=10945 comm="syz.3.1284" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 547.197656][ T9735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 547.206757][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 547.218316][ T30] audit: type=1400 audit(2000000397.771:674): avc: denied { ioctl } for pid=10945 comm="syz.3.1284" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 547.243661][ T9735] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.259033][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 547.281302][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 547.307921][ T9735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 547.316588][ T30] audit: type=1400 audit(2000000397.941:675): avc: denied { ioctl } for pid=10952 comm="syz.2.1285" path="socket:[31410]" dev="sockfs" ino=31410 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 547.344394][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 547.355272][ T9735] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.367518][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 547.406931][ T9735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 547.423926][ T9735] usb 5-1: string descriptor 0 read error: -22 [ 547.430375][ T9735] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 547.439442][ T9735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.452980][ T9735] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 547.482583][T10957] overlay: Unknown parameter 'fsmagic' [ 547.564784][T10962] netlink: 'syz.3.1288': attribute type 10 has an invalid length. [ 547.572745][T10962] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1288'. [ 547.666982][ T9] usb 5-1: USB disconnect, device number 55 [ 547.877077][ T30] audit: type=1400 audit(2000000398.501:676): avc: denied { bind } for pid=10972 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 548.411919][T10962] ceph: No mds server is up or the cluster is laggy [ 548.893772][ T30] audit: type=1400 audit(2000000399.521:677): avc: denied { create } for pid=10984 comm="syz.1.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 548.976620][ T30] audit: type=1400 audit(2000000399.551:678): avc: denied { read } for pid=10984 comm="syz.1.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 549.854910][T10991] bond0: (slave syz_tun): Releasing backup interface [ 549.970976][ T9505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.064121][ T9505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.251562][ T9505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.712991][ T9505] team0: Port device netdevsim0 removed [ 550.730732][ T9505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.756854][ T30] audit: type=1400 audit(2000000401.381:679): avc: denied { mount } for pid=11017 comm="syz.1.1303" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 550.844536][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.852251][ T9736] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 550.871636][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.880298][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.891397][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.901041][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.193965][ T9505] bridge_slave_1: left allmulticast mode [ 551.200683][ T9505] bridge_slave_1: left promiscuous mode [ 551.207880][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.229995][ T9505] bridge_slave_0: left allmulticast mode [ 551.246033][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 551.249465][T11037] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 551.255200][ T9505] bridge_slave_0: left promiscuous mode [ 551.266360][T11037] SELinux: failed to load policy [ 551.275208][ T9736] usb 4-1: device descriptor read/64, error -71 [ 551.287175][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.337468][ T30] audit: type=1400 audit(2000000401.961:680): avc: denied { listen } for pid=11035 comm="syz.1.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 551.541801][ T9736] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 551.617270][T11043] netlink: 'syz.0.1309': attribute type 1 has an invalid length. [ 551.646963][ T9505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.656417][ T9505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.666568][ T9505] bond0 (unregistering): Released all slaves [ 551.672733][ T9736] usb 4-1: device descriptor read/64, error -71 [ 551.707706][T11043] bond2: entered promiscuous mode [ 551.713307][T11043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.759974][T11045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.767648][T11045] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 551.778341][T11045] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 551.790401][T11045] bond2: (slave wireguard0): making interface the new active one [ 551.798255][T11045] wireguard0: entered promiscuous mode [ 551.804039][ T9736] usb usb4-port1: attempt power cycle [ 551.810645][T11045] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 551.822481][ T9505] tipc: Left network mode [ 551.824304][T11023] lo speed is unknown, defaulting to 1000 [ 551.843766][T11041] lo speed is unknown, defaulting to 1000 [ 552.151131][ T9736] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 552.198983][ T9736] usb 4-1: device descriptor read/8, error -71 [ 552.267840][T11023] chnl_net:caif_netlink_parms(): no params data found [ 552.306734][ T9505] hsr_slave_0: left promiscuous mode [ 552.322830][ T9505] hsr_slave_1: left promiscuous mode [ 552.328537][ T9505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.344872][ T9505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.462642][ T9736] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 552.501046][ T9736] usb 4-1: device descriptor read/8, error -71 [ 552.621838][ T9736] usb usb4-port1: unable to enumerate USB device [ 552.644787][ T9505] team0 (unregistering): Port device team_slave_1 removed [ 552.672744][ T9505] team0 (unregistering): Port device team_slave_0 removed [ 552.940538][ T5139] Bluetooth: hci1: command tx timeout [ 552.953880][T11023] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.961264][T11023] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.968361][T11023] bridge_slave_0: entered allmulticast mode [ 552.975503][T11023] bridge_slave_0: entered promiscuous mode [ 552.983797][T11023] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.991024][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.998193][T11023] bridge_slave_1: entered allmulticast mode [ 553.009745][T11023] bridge_slave_1: entered promiscuous mode [ 553.035492][T11023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.046413][T11023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.083660][T11023] team0: Port device team_slave_0 added [ 553.094683][T11023] team0: Port device team_slave_1 added [ 553.116303][T11023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.123279][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.149391][T11023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.162640][T11023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.169632][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.195933][T11023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.237677][T11023] hsr_slave_0: entered promiscuous mode [ 553.249782][T11023] hsr_slave_1: entered promiscuous mode [ 553.338451][ T9505] IPVS: stop unused estimator thread 0... [ 553.386468][T11023] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 553.414091][T11023] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 553.423421][T11023] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 553.434992][T11023] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 553.459422][T11023] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.467011][T11023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.474371][T11023] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.481423][T11023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.545831][T11023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.564693][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.575405][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.597556][T11023] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.627183][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.634304][ T9499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.651164][ T9508] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.658272][ T9508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.730509][ T9736] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 553.797921][T11023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.915079][ T9736] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 553.931361][ T9736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.939368][ T9736] usb 4-1: Product: syz [ 553.963088][ T9736] usb 4-1: Manufacturer: syz [ 553.968122][ T9736] usb 4-1: SerialNumber: syz [ 554.013901][T11023] veth0_vlan: entered promiscuous mode [ 554.029460][T11023] veth1_vlan: entered promiscuous mode [ 554.066231][T11023] veth0_macvtap: entered promiscuous mode [ 554.076686][T11023] veth1_macvtap: entered promiscuous mode [ 554.097915][T11023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.113395][T11023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.128986][ T9508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.147214][ T9508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.215135][ T9508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.227185][ T9508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.304670][ T9736] usb 4-1: config 0 descriptor?? [ 554.377524][ T9508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.400518][ T9508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.459189][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.477773][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.506672][ T30] audit: type=1400 audit(2000000405.131:681): avc: denied { mounton } for pid=11023 comm="syz-executor" path="/root/syzkaller.g9MOD9/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 554.531342][ T30] audit: type=1400 audit(2000000405.141:682): avc: denied { mounton } for pid=11023 comm="syz-executor" path="/root/syzkaller.g9MOD9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 554.558545][ T30] audit: type=1400 audit(2000000405.141:683): avc: denied { mounton } for pid=11023 comm="syz-executor" path="/root/syzkaller.g9MOD9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 554.604233][ T9736] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 554.617687][ T30] audit: type=1400 audit(2000000405.241:684): avc: denied { mounton } for pid=11023 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 554.645167][ T9736] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 554.654431][ T9736] usb 4-1: USB disconnect, device number 77 [ 554.685090][T11091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1316'. [ 554.722658][T11093] kAFS: No cell specified [ 555.030917][ T5139] Bluetooth: hci1: command tx timeout [ 555.160531][ T9736] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 555.311949][ T9736] usb 4-1: Using ep0 maxpacket: 32 [ 555.318509][ T9736] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.330587][ T9736] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.342691][ T9736] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 555.352566][ T9736] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 555.362728][ T9736] usb 4-1: Product: syz [ 555.366963][ T9736] usb 4-1: Manufacturer: syz [ 555.376243][ T9736] hub 4-1:4.0: USB hub found [ 555.429865][ T30] audit: type=1400 audit(2000000406.051:685): avc: denied { ioctl } for pid=11111 comm="syz.2.1322" path="socket:[32559]" dev="sockfs" ino=32559 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 555.455148][T11112] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 555.514484][ T30] audit: type=1326 audit(2000000406.141:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 555.519668][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1323'. [ 555.564891][ T30] audit: type=1326 audit(2000000406.141:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 555.596428][ T30] audit: type=1326 audit(2000000406.141:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 555.639096][ T30] audit: type=1326 audit(2000000406.141:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 555.683964][ T30] audit: type=1326 audit(2000000406.141:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 555.684079][ T9736] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 555.746545][T11123] netlink: 'syz.5.1326': attribute type 4 has an invalid length. [ 555.757312][T11123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 556.001390][ T9736] usb 4-1: USB disconnect, device number 78 [ 557.100793][ T5139] Bluetooth: hci1: command tx timeout [ 557.264576][ T5928] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 557.326328][ C1] sd 0:0:1:0: [sda] tag#5962 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 557.336707][ C1] sd 0:0:1:0: [sda] tag#5962 CDB: Read(6) 08 00 00 00 03 44 [ 558.255206][ T5928] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 558.310245][ T5928] usb 2-1: USB disconnect, device number 54 [ 558.708207][T11172] overlayfs: failed to clone upperpath [ 559.105038][T11173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1340'. [ 559.210576][ T5139] Bluetooth: hci1: command tx timeout [ 559.383409][T11192] random: crng reseeded on system resumption [ 559.455735][T11191] Restarting kernel threads ... [ 559.470108][T11191] Done restarting kernel threads. [ 559.788601][T11204] lo speed is unknown, defaulting to 1000 [ 560.670660][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 560.712968][T11229] Device name cannot be null; rc = [-22] [ 560.778844][T11230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48780 sclass=netlink_route_socket pid=11230 comm=syz.3.1353 [ 560.936598][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 560.936656][ T30] audit: type=1400 audit(2000000411.421:707): avc: denied { checkpoint_restore } for pid=11226 comm="syz.3.1353" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 561.140519][ T9] usb 2-1: device descriptor read/64, error -71 [ 562.390697][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.807373][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 564.106904][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.127527][ T5928] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 564.175893][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.188570][T11260] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1360'. [ 564.240045][ T5928] usb 6-1: config 0 descriptor?? [ 565.143000][ T30] audit: type=1400 audit(2000000415.771:708): avc: denied { execute } for pid=11273 comm="syz.2.1363" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 565.581988][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 565.740581][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 565.748155][ T9] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 565.756464][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.768896][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 565.800170][ T5928] usb 6-1: USB disconnect, device number 2 [ 565.810472][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.827417][ T9] usb 2-1: config 0 descriptor?? [ 565.835389][T11280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.868740][T11280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.894474][T11280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.928792][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.954455][T11286] block nbd3: shutting down sockets [ 565.981554][T11280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.005154][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.043185][ T9] usb 2-1: can't set config #0, error -71 [ 566.057415][ T9] usb 2-1: USB disconnect, device number 57 [ 566.210109][T11297] overlayfs: failed to clone upperpath [ 566.241585][T11305] fuse: Unknown parameter 'Ìøó0x0000000000000003' [ 566.951213][ T5883] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 566.976149][ T30] audit: type=1400 audit(2000000417.601:709): avc: denied { listen } for pid=11326 comm="syz.1.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 567.043490][ T30] audit: type=1400 audit(2000000417.601:710): avc: denied { accept } for pid=11326 comm="syz.1.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 567.243132][ T5883] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 567.316757][T11329] binder: 11326:11329 ioctl c0306201 0 returned -14 [ 567.767111][ T5883] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 567.777459][ T5883] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 567.786550][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.805293][T11317] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 567.819348][ T5883] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 567.949537][ T5139] Bluetooth: hci2: unexpected event for opcode 0x200b [ 568.500505][ T5883] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 568.923044][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.930546][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 568.940515][T11338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.960442][ T5883] usb 4-1: config 40 has an invalid interface number: 103 but max is 0 [ 568.968725][ T5883] usb 4-1: config 40 has no interface number 0 [ 568.974932][ T5883] usb 4-1: config 40 interface 103 has no altsetting 0 [ 569.031417][ T5883] usb 4-1: New USB device found, idVendor=0586, idProduct=3427, bcdDevice=2f.20 [ 569.427763][T11338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.437525][T11338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.596564][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.860774][ T5883] usb 4-1: Product: syz [ 569.865176][ T5883] usb 4-1: Manufacturer: syz [ 569.872294][ T5883] usb 4-1: SerialNumber: syz [ 570.143157][ T5883] dm9601 4-1:40.103: probe with driver dm9601 failed with error -22 [ 570.192406][ T5883] usb 4-1: USB disconnect, device number 79 [ 570.301385][ T5928] usb 6-1: USB disconnect, device number 3 [ 570.729207][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'. [ 571.538454][T11361] netlink: 'syz.2.1387': attribute type 12 has an invalid length. [ 571.702858][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 571.960254][T11363] netlink: 'syz.2.1387': attribute type 12 has an invalid length. [ 571.980927][ T5139] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 571.990531][ T5139] Bluetooth: hci2: Injecting HCI hardware error event [ 571.998909][ T5824] Bluetooth: hci2: hardware error 0x00 [ 572.600424][ T5928] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 572.650446][ T9734] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 572.659936][T11377] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 572.901518][ T30] audit: type=1400 audit(2000000423.301:711): avc: denied { relabelto } for pid=11374 comm="syz.2.1391" name="340" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 572.931086][ T30] audit: type=1400 audit(2000000423.301:712): avc: denied { associate } for pid=11374 comm="syz.2.1391" name="340" dev="tmpfs" ino=1839 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 573.090437][ T9736] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 573.120484][ T9734] usb 4-1: Using ep0 maxpacket: 16 [ 573.126899][ T9734] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 573.135277][ T9734] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.140388][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 573.143495][ T9734] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.164922][ T9734] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.175251][ T9734] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 573.181793][ T5928] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 573.184243][ T9734] usb 4-1: config 0 has no interface number 0 [ 573.199416][ T9734] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 573.210495][ T5928] usb 6-1: config 0 has no interface number 0 [ 573.210538][ T5928] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 573.212647][ T5928] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 573.216749][ T9734] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.240389][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.246118][ T9734] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.256440][ T5928] usb 6-1: Product: syz [ 573.271071][ T5928] usb 6-1: Manufacturer: syz [ 573.275671][ T5928] usb 6-1: SerialNumber: syz [ 573.280845][ T9734] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.285194][ T5928] usb 6-1: config 0 descriptor?? [ 573.294812][ T9734] usb 4-1: too many endpoints for config 0 interface 125 altsetting 0: 32, using maximum allowed: 30 [ 573.301608][T11369] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 573.315467][ T9734] usb 4-1: config 0 interface 125 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 573.402961][ T30] audit: type=1400 audit(2000000424.031:713): avc: denied { remove_name } for pid=5816 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 573.431707][ T9736] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 573.440325][ T9736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.452630][ T9734] usb 4-1: config 0 interface 125 has no altsetting 2 [ 573.459551][ T30] audit: type=1400 audit(2000000424.031:714): avc: denied { rmdir } for pid=5816 comm="syz-executor" name="340" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 573.487665][ T9736] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 573.497827][ T9736] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 573.506761][ T9736] usb 2-1: Manufacturer: syz [ 573.512483][ T9734] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 573.522748][ T9734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.531538][ T9736] usb 2-1: config 0 descriptor?? [ 573.543196][T11369] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 573.556125][ T9734] usb 4-1: Product: syz [ 573.569124][ T9734] usb 4-1: Manufacturer: syz [ 573.580467][ T9734] usb 4-1: SerialNumber: syz [ 573.591114][ T9734] usb 4-1: config 0 descriptor?? [ 573.607465][T11393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11393 comm=syz.2.1394 [ 573.674100][ T9736] rc_core: IR keymap rc-hauppauge not found [ 573.691231][ T9736] Registered IR keymap rc-empty [ 573.696699][ T9736] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 573.722097][ T9736] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 573.974123][ C1] igorplugusb 2-1:0.0: receive overflow, at least 27 lost [ 574.073111][ T9734] usb 4-1: selecting invalid altsetting 2 [ 574.084041][ T5824] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 574.176728][ T9734] usb 4-1: USB disconnect, device number 80 [ 574.218243][ T9736] usb 2-1: USB disconnect, device number 58 [ 574.242589][ T30] audit: type=1400 audit(2000000424.871:715): avc: denied { append } for pid=11400 comm="syz.3.1395" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 574.335505][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 574.362240][T11403] only policy match revision 0 supported [ 574.362256][T11403] unable to load match [ 574.546637][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 574.632998][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 575.164052][T11427] lo speed is unknown, defaulting to 1000 [ 576.269255][T11435] sp0: Synchronizing with TNC [ 576.292697][T11435] sp0: Found TNC [ 576.447818][ T5928] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 576.459453][ T5928] asix 6-1:0.188: probe with driver asix failed with error -71 [ 576.474431][ T5928] usb 6-1: USB disconnect, device number 4 [ 576.480628][ T9736] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 576.682849][ T9736] usb 4-1: Using ep0 maxpacket: 8 [ 576.736671][ T9736] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 576.746893][ T9736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.754935][ T30] audit: type=1400 audit(2000000427.381:716): avc: denied { setopt } for pid=11436 comm="syz.5.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 576.793657][ T9736] usb 4-1: Product: syz [ 576.797913][ T9736] usb 4-1: Manufacturer: syz [ 576.802730][ T9736] usb 4-1: SerialNumber: syz [ 576.821109][ T9736] usb 4-1: config 0 descriptor?? [ 576.925282][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 576.935266][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1400'. [ 576.944286][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1400'. [ 576.957616][T11428] geneve3: entered promiscuous mode [ 577.894096][ T9736] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 578.098416][ T9736] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 578.135611][ T30] audit: type=1400 audit(2000000428.761:717): avc: denied { firmware_load } for pid=9736 comm="kworker/1:8" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 578.143267][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 578.156723][ T9736] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 578.463374][T11486] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1416'. [ 578.475454][T11486] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1416'. [ 578.485907][T11486] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1416'. [ 578.511345][T11486] Cannot find set identified by id 0 to match [ 578.520672][ T5928] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 578.552395][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 578.566398][T11496] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 578.681957][ T5928] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 578.691815][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 578.706963][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 578.717993][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 578.729779][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.742937][ T5928] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.752086][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.763442][ T5928] usb 2-1: config 0 descriptor?? [ 578.763886][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1421'. [ 578.769015][T11470] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 578.805488][T11500] lo speed is unknown, defaulting to 1000 [ 579.080479][T11153] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 579.190626][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.198108][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.205868][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.213408][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.221172][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.228724][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.236132][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.243946][T11153] usb 6-1: Using ep0 maxpacket: 8 [ 579.249226][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.256706][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.264251][ T5928] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 579.276533][T11153] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 579.286114][ T5928] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 579.298371][T11153] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 579.306557][T11153] usb 6-1: Product: syz [ 579.313578][T11153] usb 6-1: Manufacturer: syz [ 579.318185][T11153] usb 6-1: SerialNumber: syz [ 579.323997][T11153] usb 6-1: config 0 descriptor?? [ 579.465619][ T5928] usb 2-1: USB disconnect, device number 59 [ 579.565534][T11153] usb 6-1: USB disconnect, device number 5 [ 580.040891][T11518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11518 comm=syz.1.1427 [ 580.307290][T11153] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 580.480637][T11153] usb 2-1: Using ep0 maxpacket: 16 [ 580.497379][T11153] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 580.505847][T11153] usb 2-1: config 254 has no interface number 0 [ 580.516508][T11153] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 580.537055][T11153] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 580.571696][T11153] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 580.590452][T11153] usb 2-1: config 254 interface 235 has no altsetting 0 [ 580.608832][T11153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 580.618543][T11153] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 580.626984][T11153] usb 2-1: Product: syz [ 580.631402][T11153] usb 2-1: Manufacturer: syz [ 580.636021][T11153] usb 2-1: SerialNumber: syz [ 580.648203][T11518] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 580.668740][ T30] audit: type=1804 audit(2000000431.291:718): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1429" name="file0" dev="tmpfs" ino=1922 res=1 errno=0 [ 580.860855][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.869723][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.878527][T11518] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 580.887823][T11153] usbtest 2-1:254.235: Linux gadget zero [ 580.894627][T11153] usbtest 2-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 581.512088][T11153] usb 2-1: USB disconnect, device number 60 [ 581.567928][ T30] audit: type=1400 audit(2000000432.191:719): avc: denied { ioctl } for pid=11546 comm="syz.5.1436" path="socket:[35610]" dev="sockfs" ino=35610 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 582.156560][ T30] audit: type=1400 audit(2000000432.221:720): avc: denied { accept } for pid=11546 comm="syz.5.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 582.667980][ T30] audit: type=1400 audit(2000000433.281:721): avc: denied { bind } for pid=11554 comm="syz.5.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 583.575672][ T30] audit: type=1400 audit(2000000434.201:722): avc: denied { read } for pid=11567 comm="syz.1.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 583.699132][T11571] binder: 11567:11571 unknown command 4294967295 [ 583.711475][T11571] binder: 11567:11571 ioctl c0306201 2000000001c0 returned -14 [ 584.307365][T11587] netlink: 'syz.3.1445': attribute type 10 has an invalid length. [ 584.329111][T11587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.355103][T11587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.377708][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 584.951228][T11590] lo speed is unknown, defaulting to 1000 [ 585.670215][ T9734] libceph: connect (1)[c::]:6789 error -101 [ 585.688175][ T30] audit: type=1400 audit(2000000436.311:723): avc: denied { open } for pid=11604 comm="syz.3.1451" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 585.735746][ T9734] libceph: mon0 (1)[c::]:6789 connect error [ 585.765695][T11601] ceph: No mds server is up or the cluster is laggy [ 585.890257][T11613] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1452'. [ 586.249786][T11625] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 586.634446][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1461'. [ 587.386057][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 588.674069][T11656] netlink: 'syz.2.1466': attribute type 13 has an invalid length. [ 588.768468][T11656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.303362][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.312954][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.323242][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.331087][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.338619][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.486908][ T3858] bond1 (unregistering): (slave gretap1): Releasing active interface [ 589.576584][ T30] audit: type=1400 audit(2000000440.201:724): avc: denied { cmd } for pid=11685 comm="syz.0.1476" path="socket:[36173]" dev="sockfs" ino=36173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 589.622194][ T3858] bond1 (unregistering): (slave bridge1): Releasing active interface [ 589.804068][ T3858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.832867][ T3858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.848642][ T3858] bond0 (unregistering): Released all slaves [ 589.869813][ T3858] bond1 (unregistering): Released all slaves [ 589.906450][T11673] ªªªªªª: renamed from lo (while UP) [ 590.004257][T11678] lo speed is unknown, defaulting to 1000 [ 590.221234][ T6541] IPVS: ip_vs_send_async error -101 [ 590.267608][T11678] chnl_net:caif_netlink_parms(): no params data found [ 590.322823][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.330033][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.337247][T11678] bridge_slave_0: entered allmulticast mode [ 590.345565][T11678] bridge_slave_0: entered promiscuous mode [ 590.353791][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.361811][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.369018][T11678] bridge_slave_1: entered allmulticast mode [ 590.389799][T11678] bridge_slave_1: entered promiscuous mode [ 590.428873][ T3858] hsr_slave_0: left promiscuous mode [ 590.440403][ T3858] hsr_slave_1: left promiscuous mode [ 590.446054][ T3858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.458310][ T3858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.672269][ T3858] team0 (unregistering): Port device team_slave_1 removed [ 590.683123][ T30] audit: type=1400 audit(2000000441.311:725): avc: denied { read } for pid=11705 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 590.743231][ T3858] team0 (unregistering): Port device team_slave_0 removed [ 590.987358][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.998066][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.034373][T11678] team0: Port device team_slave_0 added [ 591.047469][T11678] team0: Port device team_slave_1 added [ 591.066972][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.074192][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.100228][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.112955][T11678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.120235][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.146614][T11678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.187655][T11678] hsr_slave_0: entered promiscuous mode [ 591.194245][T11678] hsr_slave_1: entered promiscuous mode [ 591.200359][T11678] debugfs: 'hsr0' already exists in 'hsr' [ 591.206071][T11678] Cannot create hsr debugfs directory [ 591.250948][ T3858] IPVS: stop unused estimator thread 0... [ 591.261684][ T5824] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 591.267935][ T5826] Bluetooth: hci0: command 0x1003 tx timeout [ 591.384473][ T30] audit: type=1400 audit(2000000442.011:726): avc: denied { getopt } for pid=11711 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 591.541303][ T5824] Bluetooth: hci5: command tx timeout [ 591.884845][T11678] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 591.937184][T11678] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 591.965763][T11678] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 591.976212][T11678] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 592.063352][T11728] lo: entered allmulticast mode [ 592.145497][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.184853][T11678] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.204775][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.212421][ T6997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.262076][ T3858] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.269280][ T3858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.748929][T11678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.868290][T11725] lo: left allmulticast mode [ 593.127432][T11678] veth0_vlan: entered promiscuous mode [ 593.143017][T11678] veth1_vlan: entered promiscuous mode [ 593.172755][T11678] veth0_macvtap: entered promiscuous mode [ 593.183520][T11678] veth1_macvtap: entered promiscuous mode [ 593.202206][T11678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.226700][T11678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.238015][ T6997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.247513][ T6997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.257839][ T6997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.267853][ T6997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.328290][ T6997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.336407][ T6997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.361811][ T9497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.369892][ T9497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.650457][ T9733] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 593.660790][ T5824] Bluetooth: hci5: command tx timeout [ 593.800431][ T9733] usb 7-1: Using ep0 maxpacket: 16 [ 593.806926][ T9733] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.817286][ T9733] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.828770][ T9733] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 593.838036][ T9733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.846086][ T9733] usb 7-1: Product: syz [ 593.850370][ T9733] usb 7-1: Manufacturer: syz [ 593.855036][ T9733] usb 7-1: SerialNumber: syz [ 593.940917][ T30] audit: type=1400 audit(2000000444.571:727): avc: denied { append } for pid=11757 comm="syz.5.1490" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 594.285051][ T9733] usb 7-1: cannot find UAC_HEADER [ 594.303193][ T9733] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 594.639967][T11764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.117679][T11764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.164481][T11770] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1493'. [ 595.183916][T11770] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1493'. [ 595.204965][T11153] usb 7-1: USB disconnect, device number 2 [ 595.234960][T11770] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1493'. [ 595.490542][ T9733] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 595.750427][ T5824] Bluetooth: hci5: command tx timeout [ 595.800427][ T9733] usb 6-1: Using ep0 maxpacket: 8 [ 595.814773][ T9733] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 595.833065][ T9733] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 595.850435][ T9733] usb 6-1: can't read configurations, error -61 [ 596.087932][ T9733] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 596.103865][ T30] audit: type=1400 audit(2000000446.731:728): avc: denied { setopt } for pid=11785 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 596.253084][ T9733] usb 6-1: Using ep0 maxpacket: 8 [ 596.259466][ T9733] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 596.268823][ T9733] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 596.276659][ T9733] usb 6-1: can't read configurations, error -61 [ 596.283243][ T30] audit: type=1400 audit(2000000446.881:729): avc: denied { read } for pid=11787 comm="syz.0.1499" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 596.310830][ T9733] usb usb6-port1: attempt power cycle [ 596.317556][ T30] audit: type=1400 audit(2000000446.881:730): avc: denied { open } for pid=11787 comm="syz.0.1499" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 596.405815][ T9734] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 596.560837][ T9734] usb 7-1: device descriptor read/64, error -71 [ 596.731266][ T9733] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 596.780373][ T9733] usb 6-1: Using ep0 maxpacket: 8 [ 596.802969][ T9733] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 596.838913][ T9734] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 596.892564][ T9733] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 596.954728][ T9733] usb 6-1: can't read configurations, error -61 [ 597.040677][ T9734] usb 7-1: device descriptor read/64, error -71 [ 597.090516][ T9733] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 597.111302][ T9733] usb 6-1: Using ep0 maxpacket: 8 [ 597.117920][ T9733] usb 6-1: too many configurations: 103, using maximum allowed: 8 [ 597.292575][ T9734] usb usb7-port1: attempt power cycle [ 597.299991][ T9733] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 597.311019][ T9733] usb 6-1: can't read configurations, error -61 [ 597.318159][ T9733] usb usb6-port1: unable to enumerate USB device [ 597.365828][T11804] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1502'. [ 597.711618][ T9734] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 597.730839][ T9734] usb 7-1: device descriptor read/8, error -71 [ 597.821461][ T5824] Bluetooth: hci5: command tx timeout [ 597.970529][ T9734] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 597.990888][ T9734] usb 7-1: device descriptor read/8, error -71 [ 598.100692][ T9734] usb usb7-port1: unable to enumerate USB device [ 598.421740][T11824] ISOFS: Unable to identify CD-ROM format. [ 599.393587][T11842] kvm: pic: non byte write [ 599.399132][T11842] netlink: zone id is out of range [ 599.404400][T11842] netlink: zone id is out of range [ 599.409502][T11842] netlink: zone id is out of range [ 599.414770][T11842] netlink: zone id is out of range [ 599.419874][T11842] netlink: zone id is out of range [ 599.425063][T11842] netlink: zone id is out of range [ 599.430166][T11842] netlink: zone id is out of range [ 599.435369][T11842] netlink: zone id is out of range [ 599.440480][T11842] netlink: zone id is out of range [ 599.445570][T11842] netlink: zone id is out of range [ 599.501073][T11153] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 599.581652][ T6541] IPVS: ip_vs_send_async error -101 [ 599.601806][T11846] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1515'. [ 599.646997][T11847] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 599.662471][T11153] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 599.671288][T11153] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.681457][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 599.691079][T11153] usb 6-1: config 1 has no interface number 0 [ 599.697360][T11153] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 599.708178][T11153] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 599.725168][T11153] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.734431][T11153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.744011][T11153] usb 6-1: Product: syz [ 599.753644][T11153] usb 6-1: Manufacturer: syz [ 599.760437][T11153] usb 6-1: SerialNumber: syz [ 599.770909][T11153] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 599.777746][T11153] cdc_ncm 6-1:1.1: bind() failure [ 600.735528][T11864] overlayfs: missing 'lowerdir' [ 601.532059][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 601.538108][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 601.544873][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 601.550940][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 601.581043][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 601.633059][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 601.652931][T11898] veth0: entered promiscuous mode [ 601.658327][T11898] batadv_slave_1: entered promiscuous mode [ 601.727644][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 601.816856][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 601.825985][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 601.849112][T11898] veth0 (unregistering): left promiscuous mode [ 601.891626][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 601.897662][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 601.919789][T11897] batadv_slave_1: left promiscuous mode [ 602.198377][ T5822] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 602.295940][ T9734] usb 6-1: USB disconnect, device number 10 [ 602.383594][T11153] libceph: connect (1)[c::]:6789 error -101 [ 602.456070][T11891] ceph: No mds server is up or the cluster is laggy [ 602.458004][T11894] ceph: No mds server is up or the cluster is laggy [ 602.481560][T11153] libceph: mon0 (1)[c::]:6789 connect error [ 602.533620][ T5822] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 602.595620][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.661082][T11153] libceph: connect (1)[c::]:6789 error -101 [ 602.676721][ T5822] usb 7-1: config 0 has no interfaces? [ 602.689416][T11153] libceph: mon0 (1)[c::]:6789 connect error [ 602.701231][ T5822] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 602.736685][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.939418][ T5822] usb 7-1: config 0 descriptor?? [ 603.290500][ T5822] usb 7-1: USB disconnect, device number 7 [ 603.859044][T11933] netlink: 'syz.5.1539': attribute type 1 has an invalid length. [ 603.917530][T11937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.919268][T11933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 603.957211][T11939] bond1: (slave geneve2): making interface the new active one [ 603.977448][T11939] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 604.025637][T11943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3354 sclass=netlink_route_socket pid=11943 comm=syz.5.1541 [ 604.097694][ T30] audit: type=1400 audit(2000000454.721:731): avc: denied { mounton } for pid=11949 comm="syz.5.1543" path="/39/bus" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 604.097718][T11950] 9p: Bad value for 'port' [ 604.236710][ T9734] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 604.892689][ T9734] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 604.901503][ T9734] usb 7-1: config 0 has no interface number 0 [ 604.908271][ T9734] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 604.920183][ T9734] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 604.933818][ T9734] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 604.943674][ T9734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.954524][ T9734] usb 7-1: config 0 descriptor?? [ 604.960061][T11940] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 604.978709][ T9734] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 605.228758][ T9734] usb 7-1: USB disconnect, device number 8 [ 605.975364][T11969] input: syz1 as /devices/virtual/input/input33 [ 606.694512][T11981] veth1: entered promiscuous mode [ 606.796790][T11985] pvfs2: Unknown parameter 'fsuuid' [ 607.570143][ T30] audit: type=1400 audit(2000000458.191:732): avc: denied { create } for pid=11994 comm="syz.6.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 607.582579][T11995] netlink: 'syz.6.1555': attribute type 11 has an invalid length. [ 607.600317][ T30] audit: type=1400 audit(2000000458.191:733): avc: denied { bind } for pid=11994 comm="syz.6.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 607.627663][ T30] audit: type=1400 audit(2000000458.191:734): avc: denied { connect } for pid=11994 comm="syz.6.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 607.648085][ T30] audit: type=1400 audit(2000000458.191:735): avc: denied { write } for pid=11994 comm="syz.6.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 607.866261][T12001] vlan2: entered allmulticast mode [ 607.873446][T12001] dummy0: entered allmulticast mode [ 607.939394][T12001] vlan2: entered allmulticast mode [ 608.378553][T12019] usb usb8: usbfs: process 12019 (syz.5.1562) did not claim interface 0 before use [ 608.407365][T12021] xt_connbytes: Forcing CT accounting to be enabled [ 608.415337][T12021] Cannot find del_set index 1 as target [ 610.780464][T11153] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 610.930379][T11153] usb 7-1: Using ep0 maxpacket: 32 [ 610.992346][T11153] usb 7-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 611.004281][T11153] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.030500][T11153] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 611.045043][T11153] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 611.069951][T11153] usb 7-1: config 0 interface 0 has no altsetting 0 [ 611.081332][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.093695][T11153] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 611.103110][T11153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.111223][T11153] usb 7-1: Product: syz [ 611.115383][T11153] usb 7-1: Manufacturer: syz [ 611.119981][T11153] usb 7-1: SerialNumber: syz [ 611.126755][T11153] usb 7-1: config 0 descriptor?? [ 611.133398][T11153] gs_usb 7-1:0.0: Required endpoints not found [ 611.197084][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.205453][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.213407][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.220917][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 611.245577][T12065] lo speed is unknown, defaulting to 1000 [ 611.453148][T12065] chnl_net:caif_netlink_parms(): no params data found [ 611.542464][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.552619][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.559860][T12065] bridge_slave_0: entered allmulticast mode [ 611.569726][T12065] bridge_slave_0: entered promiscuous mode [ 611.579319][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.587604][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.595749][T12065] bridge_slave_1: entered allmulticast mode [ 611.602715][T12065] bridge_slave_1: entered promiscuous mode [ 611.666226][T12065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.684861][T12065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.740259][T12065] team0: Port device team_slave_0 added [ 611.764627][T12065] team0: Port device team_slave_1 added [ 611.799409][T12065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.806956][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.833026][T12065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.426668][T12065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.445971][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.472146][T12065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.476448][T12097] Bluetooth: MGMT ver 1.23 [ 612.530047][T12065] hsr_slave_0: entered promiscuous mode [ 612.538256][T12065] hsr_slave_1: entered promiscuous mode [ 612.544981][T12065] debugfs: 'hsr0' already exists in 'hsr' [ 612.550848][T12065] Cannot create hsr debugfs directory [ 612.722526][T12065] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 612.733321][T12065] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 612.770742][T12065] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 612.809332][T12065] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 613.071970][T11153] usb 7-1: USB disconnect, device number 9 [ 613.290429][T12065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.307294][T12065] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.330496][ T5824] Bluetooth: hci0: command tx timeout [ 613.371828][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.378965][ T9502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.406844][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.414032][ T9502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.461560][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1589'. [ 613.802193][T12065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.976102][ T30] audit: type=1400 audit(2000000464.561:736): avc: denied { map } for pid=12129 comm="syz.6.1590" path="/dev/binderfs/binder0" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 614.888560][T12065] veth0_vlan: entered promiscuous mode [ 614.901442][T12065] veth1_vlan: entered promiscuous mode [ 614.958419][T12065] veth0_macvtap: entered promiscuous mode [ 614.977192][T12065] veth1_macvtap: entered promiscuous mode [ 615.026402][T12065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.057244][T12065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.351885][ T5824] Bluetooth: hci0: command tx timeout [ 616.055180][ T3858] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.381814][ T3858] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.419703][ T3858] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.459423][ T3858] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.570709][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.570721][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.583892][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.583905][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.333039][T12161] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 617.334105][ T30] audit: type=1400 audit(2000000467.961:737): avc: denied { read } for pid=12159 comm="syz.6.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 617.429748][ T5824] Bluetooth: hci0: command tx timeout [ 618.502765][T12180] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 618.583476][T12180] bridge0: port 4(team0) entered disabled state [ 618.590038][T12180] team0: left allmulticast mode [ 618.672480][T12180] team_slave_0: left allmulticast mode [ 618.711015][T12180] team_slave_1: left allmulticast mode [ 618.785915][T12180] team0: left promiscuous mode [ 618.815023][T12180] team_slave_0: left promiscuous mode [ 618.830638][T12180] team_slave_1: left promiscuous mode [ 618.836355][T12180] bridge0: port 4(team0) entered disabled state [ 618.924583][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.942650][T12180] bond0: (slave team0): Enslaving as an active interface with an up link [ 618.942772][ T3605] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 619.139420][T12181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 619.717825][T12170] kexec: Could not allocate control_code_buffer [ 619.849559][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.856861][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.023247][T12200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.049967][T12200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.308974][ T9502] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.360850][ T9502] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.370309][ T9502] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.443124][T12217] comedi comedi0: Minor 3 could not be opened [ 620.469074][ T30] audit: type=1400 audit(2000000471.091:738): avc: denied { read } for pid=12211 comm="syz.3.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 620.810008][ T9502] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.829707][ T30] audit: type=1400 audit(2000000471.431:739): avc: denied { map } for pid=12216 comm="syz.6.1610" path="socket:[39824]" dev="sockfs" ino=39824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 621.674794][ T30] audit: type=1326 audit(2000000472.291:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 621.740221][ T30] audit: type=1326 audit(2000000472.291:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 621.770589][ T30] audit: type=1326 audit(2000000472.351:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 621.808262][T12238] netlink: 4472 bytes leftover after parsing attributes in process `syz.2.1615'. [ 621.963931][ T30] audit: type=1326 audit(2000000472.351:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 621.966219][ T6997] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.033955][ T30] audit: type=1326 audit(2000000472.431:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 622.086427][ T30] audit: type=1326 audit(2000000472.431:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 622.276512][ T30] audit: type=1326 audit(2000000472.431:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 622.334927][ T6997] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.448308][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1621'. [ 622.462066][ T30] audit: type=1326 audit(2000000472.431:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00b5d8f749 code=0x7ffc0000 [ 622.605200][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1622'. [ 622.614397][T12257] netlink: 'syz.3.1622': attribute type 7 has an invalid length. [ 622.622738][T12257] netlink: 'syz.3.1622': attribute type 8 has an invalid length. [ 622.638826][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 622.657025][ T6997] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.833620][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 622.864877][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 622.866629][ T6997] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.903769][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 622.931311][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 622.939454][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 623.003185][T12266] PKCS7: Unknown OID: [4] (bad) [ 623.008369][T12266] PKCS7: Only support pkcs7_signedData type [ 623.085896][T12263] lo speed is unknown, defaulting to 1000 [ 623.441642][T12270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1625'. [ 623.843058][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.125919][ T6997] bridge_slave_1: left allmulticast mode [ 624.141702][ T6997] bridge_slave_1: left promiscuous mode [ 624.147567][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.173995][ T6997] bridge_slave_0: left allmulticast mode [ 624.188294][ T6997] bridge_slave_0: left promiscuous mode [ 624.200737][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.703709][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 624.816864][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 624.826750][ T6997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.840705][ T6997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.852446][ T6997] bond0 (unregistering): Released all slaves [ 625.020497][ T5826] Bluetooth: hci0: command tx timeout [ 625.184247][T12292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 625.345333][T12292] hub 6-0:1.0: USB hub found [ 625.352274][T12292] hub 6-0:1.0: 1 port detected [ 626.969303][T12263] chnl_net:caif_netlink_parms(): no params data found [ 627.028795][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 627.028810][ T30] audit: type=1326 audit(2000000477.651:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.080628][ T30] audit: type=1326 audit(2000000477.651:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.120482][ T5826] Bluetooth: hci0: command tx timeout [ 627.180722][ T30] audit: type=1326 audit(2000000477.651:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.244761][ T30] audit: type=1326 audit(2000000477.651:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.332708][ T30] audit: type=1326 audit(2000000477.651:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.360202][ T30] audit: type=1326 audit(2000000477.651:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.389144][ T30] audit: type=1326 audit(2000000477.651:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.412773][ T30] audit: type=1326 audit(2000000477.651:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.436616][ T6997] hsr_slave_0: left promiscuous mode [ 627.444392][T12318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.453070][T12318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.453274][ T862] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 627.460989][ T30] audit: type=1326 audit(2000000477.991:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.492338][ T6997] hsr_slave_1: left promiscuous mode [ 627.494577][ T30] audit: type=1326 audit(2000000477.991:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6f38f749 code=0x7ffc0000 [ 627.498452][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.528777][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.536844][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.544421][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.563382][ T6997] veth1_macvtap: left promiscuous mode [ 627.569137][ T6997] veth0_macvtap: left promiscuous mode [ 627.575153][ T6997] veth1_vlan: left promiscuous mode [ 627.580690][ T6997] veth0_vlan: left promiscuous mode [ 627.662299][ T862] usb 7-1: device descriptor read/64, error -71 [ 627.869656][ T6997] team0 (unregistering): Port device team_slave_1 removed [ 627.900867][ T862] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 627.912190][ T6997] team0 (unregistering): Port device team_slave_0 removed [ 628.042405][ T862] usb 7-1: device descriptor read/64, error -71 [ 628.153195][ T862] usb usb7-port1: attempt power cycle [ 628.227403][T12263] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.242904][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.250110][T12263] bridge_slave_0: entered allmulticast mode [ 628.257536][T12263] bridge_slave_0: entered promiscuous mode [ 628.266644][T12263] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.275615][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.288175][T12263] bridge_slave_1: entered allmulticast mode [ 628.295519][T12326] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1639'. [ 628.306187][T12263] bridge_slave_1: entered promiscuous mode [ 628.342310][T12263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.353237][T12263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.392395][T12263] team0: Port device team_slave_0 added [ 628.399343][T12263] team0: Port device team_slave_1 added [ 628.429289][T12263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.437078][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.463493][T12263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.486312][T12263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.496577][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.520412][ T862] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 628.522806][T12263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.551108][ T862] usb 7-1: device descriptor read/8, error -71 [ 628.604264][T12263] hsr_slave_0: entered promiscuous mode [ 628.611387][T12263] hsr_slave_1: entered promiscuous mode [ 628.617596][T12263] debugfs: 'hsr0' already exists in 'hsr' [ 628.623707][T12263] Cannot create hsr debugfs directory [ 628.769091][T12263] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 628.778023][T12263] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 628.787090][T12263] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 628.798031][ T862] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 628.798934][T12263] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 628.833374][ T862] usb 7-1: device descriptor read/8, error -71 [ 628.884873][T12263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.906414][T12263] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.918528][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.925600][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.938379][ T9497] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.945455][ T9497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.956394][ T862] usb usb7-port1: unable to enumerate USB device [ 629.074118][T12263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.183916][ T5826] Bluetooth: hci0: command tx timeout [ 629.248903][T12263] veth0_vlan: entered promiscuous mode [ 629.262602][T12263] veth1_vlan: entered promiscuous mode [ 629.291798][T12263] veth0_macvtap: entered promiscuous mode [ 629.301353][T12263] veth1_macvtap: entered promiscuous mode [ 629.332288][T12263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.345260][T12263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.365271][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.374984][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.393622][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.410662][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.485502][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.505763][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.528530][ T9503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.540839][ T9503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.648841][T12371] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 629.659785][T12371] veth0: entered promiscuous mode [ 630.400414][ T9733] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 630.488686][T12382] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 630.529515][T12382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 630.553550][T12382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1651'. [ 630.553716][ T9733] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.573258][ T9733] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.583565][ T9733] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.585586][T12382] gretap1: entered promiscuous mode [ 630.592727][ T9733] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.602121][T12382] bond3: (slave gretap1): making interface the new active one [ 630.606014][ T9733] usb 9-1: SerialNumber: syz [ 630.621707][T12382] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 630.770532][ T5822] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 630.825378][ T9733] usb 9-1: 0:2 : does not exist [ 630.830871][T12370] veth0: left promiscuous mode [ 630.850694][ T9733] usb 9-1: USB disconnect, device number 2 [ 630.884739][T12388] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1652'. [ 630.943349][ T5822] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 630.955254][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.963385][ T5822] usb 7-1: Product: syz [ 630.967555][ T5822] usb 7-1: Manufacturer: syz [ 630.972184][ T5822] usb 7-1: SerialNumber: syz [ 630.980307][ T5822] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 630.999699][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 631.260472][ T5826] Bluetooth: hci0: command tx timeout [ 631.347918][ T9497] wlan0: Trigger new scan to find an IBSS to join [ 631.616398][T12396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 632.720817][ T9] usb 7-1: Service connection timeout for: 257 [ 632.823200][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 632.877165][ T9] ath9k_htc: Failed to initialize the device [ 632.890065][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 741.590385][ C1] ------------[ cut here ]------------ [ 741.597070][ C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: syz.3.1657/12411 [ 741.608909][ C1] Modules linked in: [ 741.613468][ C1] CPU: 1 UID: 0 PID: 12411 Comm: syz.3.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.624384][ C1] Tainted: [L]=SOFTLOCKUP [ 741.628678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 741.638701][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 741.645614][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 741.665197][ C1] RSP: 0000:ffffc9000419fd28 EFLAGS: 00010046 [ 741.671233][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38d90 [ 741.679189][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 741.687132][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 741.695072][ C1] R10: 0000000000000003 R11: ffff88801db12ff0 R12: 1ffffffff1c02250 [ 741.703028][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 741.710968][ C1] FS: 00007fb5358656c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 741.719869][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.726425][ C1] CR2: 00007fb535864f98 CR3: 000000003aa96000 CR4: 00000000003526f0 [ 741.734364][ C1] Call Trace: [ 741.737617][ C1] [ 741.740524][ C1] rcu_core+0x4cf/0x15f0 [ 741.744759][ C1] ? sched_clock+0x38/0x60 [ 741.749162][ C1] ? sched_clock_cpu+0x6c/0x530 [ 741.753992][ C1] ? clockevents_program_event+0x151/0x370 [ 741.759787][ C1] ? __pfx_rcu_core+0x10/0x10 [ 741.764443][ C1] ? read_tsc+0x9/0x20 [ 741.768486][ C1] ? ktime_get+0x1a7/0x310 [ 741.772873][ C1] ? find_held_lock+0x2b/0x80 [ 741.777530][ C1] handle_softirqs+0x219/0x950 [ 741.782272][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 741.787534][ C1] __irq_exit_rcu+0x109/0x170 [ 741.792187][ C1] irq_exit_rcu+0x9/0x30 [ 741.796404][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 741.802011][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 741.807971][ C1] RIP: 0033:0x7fb53485145f [ 741.812384][ C1] Code: c6 31 c0 e8 f3 e2 13 00 48 85 c0 75 26 69 3d 5c 42 ec 00 b8 0b 00 00 e8 4f e2 13 00 31 f6 bf 3c 00 00 00 31 c0 e8 d1 e2 13 00 fe 0f 1f 80 00 00 00 00 64 c7 04 25 94 ff ff ff 00 00 00 00 48 [ 741.831972][ C1] RSP: 002b:00007fb535864f10 EFLAGS: 00000217 [ 741.838013][ C1] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fb53498f749 [ 741.845955][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 741.853897][ C1] RBP: 00007fb534a13f91 R08: 0000000000000058 R09: 0000000000000058 [ 741.861838][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.869778][ C1] R13: 00007fb534be6218 R14: 00007fb534be6180 R15: 00007ffd56b592d8 [ 741.877725][ C1] [ 741.880722][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 741.887977][ C1] CPU: 1 UID: 0 PID: 12411 Comm: syz.3.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.898888][ C1] Tainted: [L]=SOFTLOCKUP [ 741.903181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 741.913216][ C1] Call Trace: [ 741.916467][ C1] [ 741.919368][ C1] dump_stack_lvl+0x3d/0x1f0 [ 741.923933][ C1] vpanic+0x640/0x6f0 [ 741.927888][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 741.934185][ C1] panic+0xca/0xd0 [ 741.937875][ C1] ? __pfx_panic+0x10/0x10 [ 741.942267][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 741.947349][ C1] check_panic_on_warn+0xab/0xb0 [ 741.952267][ C1] __warn+0x108/0x3c0 [ 741.956222][ C1] __report_bug+0x2a0/0x520 [ 741.960697][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 741.966995][ C1] ? __pfx___report_bug+0x10/0x10 [ 741.971989][ C1] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 741.977681][ C1] ? __lock_acquire+0x436/0x2890 [ 741.982592][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 741.988889][ C1] report_bug+0xb2/0x220 [ 741.993102][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 741.999409][ C1] handle_bug+0x127/0x260 [ 742.003737][ C1] exc_invalid_op+0x17/0x50 [ 742.008223][ C1] asm_exc_invalid_op+0x1a/0x20 [ 742.013073][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 742.019990][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e5 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 742.039583][ C1] RSP: 0000:ffffc9000419fd28 EFLAGS: 00010046 [ 742.045688][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38d90 [ 742.053668][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 742.061618][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 742.069561][ C1] R10: 0000000000000003 R11: ffff88801db12ff0 R12: 1ffffffff1c02250 [ 742.077501][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 742.085448][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 742.091757][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 742.098059][ C1] rcu_core+0x4cf/0x15f0 [ 742.102277][ C1] ? sched_clock+0x38/0x60 [ 742.106661][ C1] ? sched_clock_cpu+0x6c/0x530 [ 742.111479][ C1] ? clockevents_program_event+0x151/0x370 [ 742.117262][ C1] ? __pfx_rcu_core+0x10/0x10 [ 742.121911][ C1] ? read_tsc+0x9/0x20 [ 742.125964][ C1] ? ktime_get+0x1a7/0x310 [ 742.130350][ C1] ? find_held_lock+0x2b/0x80 [ 742.135006][ C1] handle_softirqs+0x219/0x950 [ 742.139748][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 742.145009][ C1] __irq_exit_rcu+0x109/0x170 [ 742.149659][ C1] irq_exit_rcu+0x9/0x30 [ 742.153874][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 742.159479][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 742.165427][ C1] RIP: 0033:0x7fb53485145f [ 742.169812][ C1] Code: c6 31 c0 e8 f3 e2 13 00 48 85 c0 75 26 69 3d 5c 42 ec 00 b8 0b 00 00 e8 4f e2 13 00 31 f6 bf 3c 00 00 00 31 c0 e8 d1 e2 13 00 fe 0f 1f 80 00 00 00 00 64 c7 04 25 94 ff ff ff 00 00 00 00 48 [ 742.189393][ C1] RSP: 002b:00007fb535864f10 EFLAGS: 00000217 [ 742.195429][ C1] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fb53498f749 [ 742.203369][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 742.211309][ C1] RBP: 00007fb534a13f91 R08: 0000000000000058 R09: 0000000000000058 [ 742.219250][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.227190][ C1] R13: 00007fb534be6218 R14: 00007fb534be6180 R15: 00007ffd56b592d8 [ 742.235138][ C1] [ 743.295800][ C1] Shutting down cpus with NMI [ 743.300891][ C1] Kernel Offset: disabled [ 743.305199][ C1] Rebooting in 86400 seconds..