last executing test programs: 28m3.381560239s ago: executing program 2 (id=3319): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x8098f904, 0x7, @value=0x800}) gettid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x82040, 0x0) mq_timedsend(r1, &(0x7f0000000140)="d6d98976a5dfc1cc879f23a953af7f7625ab23a3b310bd90e3f450add3f18e48ceb364913b13a4b1", 0x28, 0x8, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x59, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090542"], 0x0) 28m1.446218047s ago: executing program 2 (id=3327): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x2000000000000372, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) mmap$xdp(&(0x7f00003a1000/0x14000)=nil, 0x14000, 0x9, 0x13, r4, 0x80000000) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000640)={0x0, @reserved}) socket$inet6_sctp(0xa, 0x28f0a7b3c59aa75f, 0x84) r6 = dup(r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB="b08d00000100000081718374b58e8cb7e8d8a3956e424a7b2badbc941abffcab8fc534600de02f805c99a7f0fd6aae285b0e0e0af2151677dd0028592d8a67ab8426c5a5b8e51be34137cfecbd9d5f82fdb18f249152afcfe38d19b952a291555234d218ec8571aa32f1e4b66972f1ba3638c51042cab125d23ddb63fcba662fd4a3"]) 28m1.115809012s ago: executing program 2 (id=3330): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz1\x00', {0x8, 0x8, 0xf, 0x9d82}, 0x2, [0x1, 0x5f, 0x6, 0xffffffff, 0x8, 0x7, 0xfffffffd, 0x8e, 0x7, 0x9, 0x3, 0x2, 0x8, 0x120000, 0x401, 0x8, 0x80, 0x101, 0x6, 0x5, 0x9, 0x7, 0x5, 0x7, 0x8f, 0xf7, 0x775, 0x3ff, 0x80000000, 0x8, 0x1, 0x101, 0x1, 0x517, 0x0, 0x0, 0x1, 0x9, 0x4d60c939, 0x480000, 0x1ff, 0x4, 0x5b, 0x4, 0x401, 0xdaa8, 0x1ff, 0x0, 0x1, 0x8000, 0x4, 0x3, 0x7, 0x8, 0xffffffff, 0x80, 0x0, 0x2, 0xea, 0x80000000, 0x1, 0x5b6b, 0x2, 0x7ff], [0x80000001, 0x3, 0x6, 0x8, 0xf19b, 0x7, 0x4, 0x0, 0x6, 0x9, 0xf, 0x7, 0x5, 0x9, 0x5, 0x5, 0x7ff, 0x5, 0x3, 0x1, 0x7, 0x9, 0x100, 0x502, 0x6, 0x7, 0x5, 0xa, 0xe68, 0xab, 0x4, 0xc, 0x7f, 0xd, 0x6, 0xfffffff7, 0x1400, 0x4, 0x3, 0xd06, 0x4, 0xfff, 0x4e80, 0x0, 0x4, 0x6, 0x4, 0x2, 0x3, 0x10000, 0x9f, 0x4, 0x2, 0xae, 0x2d, 0x200, 0x8, 0x27, 0xa, 0xee, 0x4e4, 0x0, 0x7, 0x1], [0x6, 0x380, 0x7, 0xe, 0x0, 0x1000, 0xa, 0xffffffff, 0x3ff, 0x8001, 0x81, 0x1ff, 0x7, 0x400, 0x2, 0x6, 0x8, 0x7, 0x4, 0x10, 0x3, 0xb6f7, 0x3, 0x81, 0x1f6, 0x1, 0x9, 0x3, 0x5, 0x5, 0x3, 0xcdb, 0x3, 0x7fffffff, 0xfffffffc, 0x40, 0x4, 0x4, 0x7, 0x7, 0x7c, 0xffff, 0x40, 0x1, 0x0, 0x2, 0xec2, 0x400, 0x2, 0x0, 0x0, 0x5, 0x2fad4259, 0x10001, 0xde12, 0xe448, 0x5, 0x3, 0x5, 0x6, 0xfffffff7, 0x777a, 0x2, 0x33], [0x9, 0xf38, 0x8, 0x1ffe0, 0x100, 0x9, 0xff, 0x6, 0x9, 0x200, 0x2, 0x5, 0x3, 0x9, 0x8, 0x3ff, 0x200, 0x10000, 0x5, 0x7, 0x5f04, 0x401, 0xa, 0x2, 0x8, 0xecc, 0x1, 0x8, 0x0, 0x90e, 0x0, 0x2, 0x40, 0x3, 0x4, 0xfffffffa, 0x7f, 0x7, 0x3, 0xd, 0x2, 0xfffffff0, 0x6, 0x6e5, 0x8, 0x7, 0xd, 0x6, 0x3, 0x83, 0x7, 0x7, 0x10, 0x11, 0x7fff, 0x6, 0xa02c, 0x9, 0x1, 0x1, 0x7, 0x0, 0x0, 0x1]}, 0x45c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000980)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x31, 0x7fff, 0x6}, 0x2c) 27m59.811632907s ago: executing program 2 (id=3333): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockname$unix(r1, &(0x7f0000000200), &(0x7f0000000280)=0x6e) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}]}) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) r4 = signalfd(r2, &(0x7f0000000000)={[0x7fffffffffffffff]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x20, 0xffffffff}}, './file0/../file0\x00'}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 27m59.596169365s ago: executing program 2 (id=3337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = open(0x0, 0x280140, 0x11e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f00000191c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0), 0x0, 0x1) close(r8) socket$inet6(0xa, 0x80002, 0x0) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @multicast1}, 0x8) 27m58.673273396s ago: executing program 2 (id=3339): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x80800}) unshare(0x62040200) getpid() socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 27m43.362686608s ago: executing program 32 (id=3339): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x80800}) unshare(0x62040200) getpid() socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 26m20.672549632s ago: executing program 0 (id=3613): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa08c2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000440)={0x3, 0x100}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000961000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x110, r1, 0xf7ffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2040, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_emit_ethernet(0xe5, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e0011a9aa2ef4ddb300166c469260b0c816320e1a9a369db2133d1d54181b78410ae1c85f6183b3a81c38cac236f23de69e075ccfd7f8b7c2a1accf971fd2858b1e6441440b23e0be23d0c96265d9d782b6812b79cd15bf6db1244cca9ed3b2f2b17ca4755a3d71fb1717227cbdad05a575f8354e492ee1bffc8cdf3aa6dfec5d3aa9ad87fab175f45a1f93bfff76f4b63583e0aa4b200a8e3104e707009b71201de7f870d9338aca0ba12e88b3d0b7af3466b9720bee12c7f18581c474e6e455955809ed35ceaf156f1271c7c62b8e37830679eedb3cc18f2b02665713"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES64=r3], &(0x7f0000000480)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x208}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x10, r1, 0xffffa000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a6300000", @ANYRES16=0x0, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x20000091) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000001940), 0x4000000000002fc, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xdc7) 26m20.607163652s ago: executing program 0 (id=3614): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x40}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x0, 0x1, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000240)=""/254, 0xfe, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r11, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2004c7fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mknodat$loop(0xffffffffffffffff, 0x0, 0x200, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x9d4852006c60e8a9}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) 26m19.645201164s ago: executing program 0 (id=3617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect$uac1(0x4, 0xd4, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x5, 0x140, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x7}, [@selector_unit={0x8, 0x24, 0x5, 0x3, 0x1e, "0c8f78"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x2, 0x4, 0xb9}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0xf, 0xd, "bf8b01a49e"}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0x8, 0x9, "e1e09ea2b8b8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0xbc, '\a'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x4, 0x7, {0x7, 0x25, 0x1, 0x1, 0x9a, 0x69}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x48, 0xe, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7f, 0x3, 'X'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0x2, "e0"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0xf7d3, 0x5, "533b38a9b2c3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0xfd, 0x95, {0x7, 0x25, 0x1, 0x80, 0x1, 0xa}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9, 0x0, 0x80, 0xff, 0xe}, 0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="050f2c50d7da060b58210a00000080000300ad0d8198000014100a03e2ff0f0000f00300c00000000f3fff00"], 0x3, [{0x11, &(0x7f0000000200)=@string={0x11, 0x3, "fca803539d30aff887621eaf8a0823"}}, {0x33, &(0x7f0000000240)=@string={0x33, 0x3, "f2c3a199873fdc63ed8325f1cd97851e82132c60c60fed5372272878d9bf40cc467f41f890a51a74760da240db66f75477"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) pwrite64(r4, 0x0, 0x0, 0x26c) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010000880"], 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='btrfs\x00', 0x210818, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) 26m15.519646126s ago: executing program 0 (id=3628): r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x5914, &(0x7f0000000180)={0x0, 0xb084, 0x2, 0x2, 0x155}, &(0x7f0000000340), &(0x7f00000003c0)) io_uring_enter(r1, 0x47f78, 0xf216, 0x7a, &(0x7f0000000000)={[0x7]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xa, 0x0, 0x3}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0xa, 0x5, 0x7f, {0xc609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) r5 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) lseek(r0, 0x4, 0x4) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 26m14.072275303s ago: executing program 0 (id=3630): socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) (async) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) syz_open_dev$dri(0x0, 0x1ff, 0x181100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x56, 0xfc, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x5, 0xffdffffffffffffe, 0xd, 0x9, 0x5, 0x6, 0x80100000000000, 0xcc3, 0x4, 0x88, 0x17, 0x3, 0x100000000, 0x8, 0x200100005, 0xffffffeffffffffb, 0x1, 0xa}) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x56, 0xfc, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x5, 0xffdffffffffffffe, 0xd, 0x9, 0x5, 0x6, 0x80100000000000, 0xcc3, 0x4, 0x88, 0x17, 0x3, 0x100000000, 0x8, 0x200100005, 0xffffffeffffffffb, 0x1, 0xa}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x2) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00003e2000/0x3000)=nil, 0x3000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 26m11.89304847s ago: executing program 0 (id=3633): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)}], 0x2}}], 0x2, 0x4048884) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000940)=ANY=[@ANYBLOB="3d805ff63f4f980d6e6ccd854b0056dbd0522c1400306de097a2c5592d2723edf5be0283c11dc4ccf61b0f39ffc0e0e783d575626497f0b4e4d785cdfa5d0236376ddc3c5b778e40b53dac97216adcc3df346f8168a8095be66303ef4f3b2406d5d3a674380307f737e279bbf8ccf355de476d19a5de8ccdc4ae4f61c44e43567558f87b3604c7d0e81f4abf58235ae73ac52c090e4ffd3eb9e7ab886f8d0ab38b31c21185999ad361b3753f027b", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRESDEC=r5, @ANYBLOB=',\x00']) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) 25m56.442025283s ago: executing program 33 (id=3633): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06106b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f0000000300)}], 0x2}}], 0x2, 0x4048884) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000940)=ANY=[@ANYBLOB="3d805ff63f4f980d6e6ccd854b0056dbd0522c1400306de097a2c5592d2723edf5be0283c11dc4ccf61b0f39ffc0e0e783d575626497f0b4e4d785cdfa5d0236376ddc3c5b778e40b53dac97216adcc3df346f8168a8095be66303ef4f3b2406d5d3a674380307f737e279bbf8ccf355de476d19a5de8ccdc4ae4f61c44e43567558f87b3604c7d0e81f4abf58235ae73ac52c090e4ffd3eb9e7ab886f8d0ab38b31c21185999ad361b3753f027b", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRESDEC=r5, @ANYBLOB=',\x00']) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) 18m55.574246303s ago: executing program 5 (id=4920): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x501000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x4000, 0x20, 0x1}, 0x18) r5 = openat(r4, &(0x7f00000001c0)='./file0\x00', 0x40042, 0xa0) close(r5) read$FUSE(r5, 0x0, 0x0) getsockopt$nfc_llcp(r5, 0x118, 0x1, &(0x7f0000000140)=""/115, 0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 18m54.618409113s ago: executing program 5 (id=4922): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x10000, 0x1, 0x100020b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2b2080, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x10000, 0x41c8b279817faac6, 0xc}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x43, 0x0, r6, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x3383d569352d5b58, {0x0, r5}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 18m53.665077993s ago: executing program 5 (id=4924): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd471}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x20, "cb1f60213637a1e0c4e297a27d8752d263881d403bc1dbca8a5a64389fe2dfc9"}, &(0x7f00000000c0)=0x28) write$cgroup_int(r3, &(0x7f0000000100)=0x5, 0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @private=0xa010102}}, 0xd785, 0x7ff, 0x1, 0xf4, 0x4, 0x8, 0x7f}, 0x9c) syz_usb_connect(0x3, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="12015002d016d910ac050185bec7010243017ed400062488050000dda91eb5f92b60747829593b30e096384112e49b000000000000000000000000000000000000000093000000000000000dfe51218e12909cbddcb7ebfb2bf3c4a6649e4b52b32c6e62e0754d0b69b8c9051653767e4ad7310250e06ffbefed32bd2591a22435e151510a7ffeff6cfd53b5aaf79c8ba5c85f012ffbdeb6b2184bc97d6012492dffdfcd1b671e3b77d3256c12ae3c79547bb74e2462b4787c5b4f4d42b7af254c3b4f04383896185562fbb90f3812e3d8ac5552a4fcb66507bf52d78bce0691087288205df503bd44839a381006988adfeb358a06efc19f8659fab86269340de2c2ae55d4e9bae689fda97a291c9c2244620b27bccd798d2eb115926e3e42c7e7cdf9902ea2e9c033d5a6c7572a26314820b1234e49c6c93a3d396e5fe9a76efc1f9dcbeb64464f46d4265863e76562c934e255fad01aef31263521243a6e0c2a46866e911764ec654911534f0f832a0db9d0243cac037a74bfdbfd8fd9f23422286d7fe6a49f92"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 18m50.544363416s ago: executing program 5 (id=4933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) lseek(r3, 0x101, 0x2) getdents64(r3, &(0x7f00000000c0)=""/79, 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 18m49.253532332s ago: executing program 5 (id=4935): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008b000000000000000000ef9400"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r2, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042712ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0xf55}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000340)=0x8) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000240)={0x3ff, 0x8, [0x9, 0x2, 0x7, 0x8], &(0x7f0000000180)=[0x0]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f015, 0x3}) 18m47.998265264s ago: executing program 5 (id=4938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x8, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x80, 0x2, 0x6, 0xb, 0x2, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0xff, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) 18m47.598891049s ago: executing program 34 (id=4938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x8, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x80, 0x2, 0x6, 0xb, 0x2, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0xff, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) 9m40.119115311s ago: executing program 6 (id=6901): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r0 = socket(0x28, 0x3, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ipv6_route\x00') writev(r2, &(0x7f0000001140)=[{&(0x7f0000000100)="91", 0x1}], 0x1) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) recvmmsg$unix(r0, &(0x7f0000002240)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000380)=""/100, 0x9b}, {&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000400)=""/97, 0xf}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/185, 0xb9}], 0x6, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/154, 0x9a}, {&(0x7f00000005c0)=""/49, 0x31}, {&(0x7f00000010c0)=""/88, 0x58}], 0x3}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)=""/246, 0xf6}], 0x2, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/1, 0x1}, {&(0x7f0000000dc0)=""/169, 0xa9}], 0x2}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/88, 0x58}], 0x2, &(0x7f0000002180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30}}], 0x88}}], 0x5, 0x12020, &(0x7f0000001040)) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000080), 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff020500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 9m39.049992174s ago: executing program 6 (id=6906): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2}]) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x3fffff) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x7fffffff, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xe}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x42, &(0x7f0000000500)=""/66, 0x41000, 0x8, '\x00', r3, @fallback=0x30, r4, 0x8, &(0x7f0000000600)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xa, 0x0, 0x8}, 0x10, 0xffffffffffffffff, r5, 0x3, &(0x7f0000000880)=[r6, r7, r8, r10, r11, r0, r12], &(0x7f0000000900)=[{0x2, 0x3}, {0x4, 0x5, 0xd, 0x6}, {0x2, 0x2, 0x9, 0xa}], 0x10, 0x6}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r14, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r15, 0x0, 0xffffffffffffffff}) r17 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/133], 0xfc}}, 0x0) sendto$inet6(r17, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r16}) 9m38.822338203s ago: executing program 6 (id=6908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc7002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="c1d14da7090dda307445e293ed1a7155ee81c350fd017e879fb05fbea61f43f0b9e2898ac20295968b0ce9935a2ee491ffe72dfacccb5b049b40a3d32631d4670cf0189ab4570c4e3fff5e65b8f7fd005e017639915f689bcb55abb674ba4c1359d515bfb38d777e32df6cfc0f884fb66e9fcb4b74d45813285ed0bef5a1ff90bc87f561cfed3316b4ad0e10ebf617", 0x8f}, {&(0x7f0000000240)="5521455cca74dce0e053e6653083a074f7e3b6ba72f464bcfb3e4af7e5d0f176debd278b23df290ececa34e5098680e01c02e5bd5d0c8d0928686b879890bad4587255a8a02fbee711d00a8082c6c877d7f5d7", 0x53}, {&(0x7f0000000380)="a9951da1bf5e62fe6ee16317a3d2a71fdd8ac928ba1ce4914b6b96fb4c5fcde5328c50657a5c53740ba1e57c8a6ebe474a059ee0f076ede77037bb1104efd6862d4444eb9302406a66bb5877ef86cc6ee8", 0x51}], 0x3, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x78, 0x8000}}, {{&(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000ac0)="062ce84e0f7ec3cc4a810e566709a910ac85aa2dfab9c799de51ae01ef560b04d664c11bfc29c520d4a91dbf6b238de5f61c04cf1cf589908cb3bbfc26b81db921b70f6b65ace92092ef959b5aad21feb3e468501de870a3eeaeb09e8d551216e8e4f32ddcc5a1f7bf96db86e42562403e636ed86177a1a27b9a96dd1569b6", 0x7f}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000b40)="079afe59cc85a299c23c6495298edf6889044328903ea757cc4fcb86581da5608f01d5c07ec2ea1091ba1c0ce0b2cbf6403f3d4fa8a90f401b01a0f27778052df027cdc2338dbfa6f0464b7718c818a6f66489859b9d1ecbe02e31616ac9b4470371a2182916559bf8def8a6821a5b87e5a5245fcee03233c18eea085f425ec7ff2558cbefffaae1aef53f6124b5138a2dd55c80ddc8ee360eb3d74ee684d8bb19496a97c6911fe3bfcf9a4692af4de800046043d3d1ed7e504e26b4e9d34aba95066f4ed4f93876b2771bd60ff566404aa117151b3e5abf0c8da809b921b1fb0e807e0eb703ad18bb64ca69", 0xec}, {&(0x7f0000000c40)="95df9935cf1afedf6d2d40180a5d62f84394809b65f2a68510f246ef4e573cc148b34f9c08624018dbdfca287843bf2e1d4c1b622bdb37cf05cfff25441d8b90b28be5460b0887103cc72cc09097f3f177b9eacd57afef3b6af90a3f6dcbfa7b5a8dc3823a708e6218522b38dc953d854de973a5be698063ca6e84d2279a1ad5de78a8396958056655d1735228d390e034b3796eac1805d163d8a1c5e20b4a503b40174981f4664192adbde4afcf07a007dd46cc965ad85d3fa5f91cc689fab0c339a0074ff63b05386328cc83d090918a62dc4f97c2e3d078284e8ece580609d54a26c0ea29fef0fb1c992a64fdc9eef671bc59", 0xf4}, {&(0x7f0000000d40)="f0e40c8a311b1b29baaa7a0f98e6566ea3944c254d4189c91c0fca43ba60ebfac08ca4c6828ac202ba41dccd76c42c4ff3b5077cea166eec0bf9e3f93851f3431e6c5b2b9a01784e4034e3697ac848476b02d819acb608d34a0474703b44d1d86d8549b97f7302ea943ce91f1b1cde60958fa0df986c4ceee682f48b1d4fbf12272455b6c1616a75a60e512d9b", 0x8d}], 0x5, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, r4]}}, @rights={{0x2c, 0x1, 0x1, [r5, r1, r0, r1, r0, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}], 0x108, 0x4}}, {{&(0x7f00000010c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001140)="16410a4148780691913ff7a4e65f36d66b0405e6484a0b71cd5e5d11d5ca3bfd35970a112435e8964412c140fef5a2651cbb5c6d451036cda1a7716984a2e07e60cbf09d3454244958ee33cbf5623762f20f204523e7162b668d5cd50bca56ba1831629964970ffd9868f8b5a9621351b71f74fb349c997dafb58c306a3b6f826114f963c249710251a05f6999d27366e2067608354648af5fe23f578850c4f9cb9e12f4d27ae17f320eb52a1f507edcd4c45d4d48cfa1708aac4cb4e40cc6250c346d580a2b4f033ee96049", 0xcc}, {&(0x7f0000001240)="8f3c09f63249b05db6197804c1a69cdcb5071a930be187c2ad4448338a7ea75361cd765da47ca1bed8ceefc0dbf586fb00da6777856b2a49acc2c897a4447f02bb080060265d27d89b21321f8f11324d1c5960902235085c339522151f73403fe10c86c4a6472147bfc65e4ccb6b43351dcafc09c52571534cc5b195f19d5e40689ed3bcb8b4897c6a37bd67c7085074afa3551dfac2329c235d3f8690d284b2045184982e019710b33a063f533c399f5505ecfc2d2c9ae7707bc5115b80086887f9919c36823b3e879457b2b657aa89416fdea969b91f19284e503e3aa7", 0xde}, {&(0x7f0000001340)="16986c4f2a72d3a47ecaf18e42bf4464b0c8a804acc046f3", 0x18}, {&(0x7f0000001380)="b793d5e47942205ff3e73c04c81419b4dbb549939bdf8455137d0815225c469c56bcb2710a0ba114a25f71d5c5d83d4c69dea1d19daf82d8d5d648971eff369342d7fe83652a7710b7dbaedc8e47882a5b811a7a30e4c584e434208c4a23f7c24d7fba4084b72bf124a2c4e04a3a85a0432493d9d2d5363a1d1db4ed5e66f59dcaf3211828231423623664aed32aeb83120a", 0x92}, {&(0x7f0000001440)="a9a9140431bb1b0ea92e624e263e27e0b3a83b6644cda36982bb515c5a0d81e79b5c95bd64e92e54c6fb463d48de9ebb106259413e62678918ec2f95fd6186c853ea2ed08ba7859776c823a7198e0c7b509023cd50cf4b", 0x57}], 0x5, &(0x7f0000002600)=[@rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x4000000}}, {{&(0x7f0000002680)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000001580)="9a6353a958a989908b105df5c1912883f787819dcedd2d893e5f6e", 0x1b}, {&(0x7f0000002700)="35df58492aeb429b00a1954fe179823fa349a45fe3e6257675580fc0b742e3f0465eb5bd600d9e0fa2abf341a6919d1d072ccb82b8d7b18a85df18d214ffb839e1772d5bf539b2e71029ed4ecdbfb1babe63cb690e50ac7328409a30456e85082b7e25de977b8ecf03a7e62641766e7129fc1daedfc06f121a129542ffd4606004fb63f53996d38175856c8dc79f3b41f4d46d550b8e67546211741078834d2dd66a3746d7707e9dd93d5eeb79c143d038685b84063cd4d7389d2af46f41c7f73ae699d83db8bbf611f9e82b1c254cc696021af302a121f2cb3759bbbb245a", 0xdf}, {&(0x7f0000002800)="e96545bedff27f6b1bb3ce24d684297fe88baf2b9483dbdf69e35f00e1c9f0faf540836cbeda7cb91a07f7874a6b8700b18b6055440e77b2b050299251cc05002f37a3bb9614c2fed4015976170d077f41cd89a89d2beb1b17114892cbe439ae3a187604d570628532499391dbd468779c15eaaf06b4ff7a27f2cca4d1eecdf9", 0x80}], 0x3, &(0x7f00000028c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xa8, 0x20000000}}, {{&(0x7f0000004c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000000880)="c891e35098bff813692bed60095152fb3f383f988592077289272ef37899537f1e8d5b38040bd5e9b350881429a2e29576e25126bc772c74070924f3673035bcb644e103f9a0e5a0046b7011b4c0c1c7002c4a0755", 0x55}, {&(0x7f0000004d40)="6c4fe374377259eb52", 0x9}, {&(0x7f0000004d80)="a18456fbbf109113f4ea06aafda60a9d32d500e162d267c6d7097aefbc2d64c59a63a5fae296bc54f78cd0c313f23861f4076c6093cd56c5ffa6189adb4859ee4672324291582dd95cd8778b7deff6c8052c01cc10efc0f86ab60803d52fb446c792c2c38ad95603c4b39317ffd0da8e5b1bbc6965d0770195afe3d5dc1a87667a30b86033ba3645d86d34a141297aa92d072da33279424635ae93aaa6ae69de7190f6aa49c2735b0e99c8ad0e8487f44981ea1438b6f284632345549c612b0bd0de4ec297e3b0007361fe993efd80dba31fbea40d89d4b294112d92c00a662c06265a8c75e9d314ee5d70", 0xeb}, {&(0x7f0000004e80)="1e5dbd14a8dc274fd7f812654c211c453bc1b906e5f49bbd1be97566aafca7e92aa1e97586af72d61e989235b790529bd2f6b849e748742db6a0741222f0f4929dc64bcdad398cbe6a24cb94a1ba721aa638dc1bfa380564bb24bf071209025190ce848bef5fe45eed6222a6c87f877877d88640", 0x74}, {&(0x7f0000004f00)="d09bfef0a29c84dd15e9ff19ae759f46fc59b478918d", 0x16}, {&(0x7f0000004f40)="9bf4acefefd8056d6c52b0213a7fbba3205f6876538b84e099e9decd7095c70586c084b7a2aef101e7dba059c4534cd262665d35456ea0498bc3f9ec01c607275b3523eb487f49457734112d71f887", 0x4f}], 0x6, &(0x7f00000050c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r2, 0xffffffffffffffff, r5, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8, 0x4004050}}, {{&(0x7f0000005180)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000005380)=[{&(0x7f0000005200)="2929e5222d321b8be314edee78fc0d4cbc9d6eb541bc3686d412c32c85604bb0ae2ccf4f036ee628eb9fe1418e2d2aef455b3b1b71495c16358e42571760f7e0ee3ecbcd0b5de488a0f5fd6276955a6d472712a7df0a6afc8b3983b4c77a3a8d9cb53b5bd392091c53f8eb9522c7eba5f3e3c134d7b6571b04b89031f5dd14abc6365f245576a6780c6d64dbdb3f1a3dccfa98aa725723a27c191192c719020a3d8614f206f3c7362940", 0xaa}, {&(0x7f00000052c0)="69e49c3764cf713c471043c9f74b6f764cdf0e3b363ff0ace589cafc7f2125c71667590f1271ba83e0f8c6e586e6777b5ef9f5c1215b78a0fbae55a9d3b5b0aef58cac5f2a2a5906c5b0afd75262337e689a0bd52a5f9a0ba1ab52e23008e68edd834453500036c1c4478bdaa72509dc7672a34b48b2f1d01c5234946b764ce8157295791d", 0x85}], 0x2, &(0x7f0000005480)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4000}}, {{&(0x7f0000005580)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000058c0)=[{&(0x7f0000005600)="26384c7a17412b85224a7973b1560c37674bb03ea9f48fbd55f254b00195c56d4cc6ca8a2e6f2c7e863801c20644bb00f6e9e9a745a6729926d1a80d371e92eab2a7ccb3307daeec1c81475fc5f515867f511bd2ea08eee4d795271fa3c118e8aa7fc7727a58115c6dbe42eea6ed86934b9a7de238fbee174e6458b0f7442388bdd5bfeb4d9b409df2c2ed9b2de0968c69de708926c522a9e2cff0", 0x9b}, {&(0x7f0000000740)="a8fe5746d94a9096dab9b2d3c265c64af15d13217297143ca1bb221b6c62430902b6fd53eadf0d69f03d47af8ea3e3150b9b42b25f164e79d2a3a71ba5cf2703ccef7bfcc585bae825309db58a5f352491b5778932d31b98495d2b8ea60b69605fe5028e839bbe37b8bbf71243ac3446433dea29a633a303e00cc6b077a363f6b24853d8940c54de83d2146d534b91efd3913b5724af13ce6429e0fdcd5c304e6ccea7d5f354a4d1e0f64dee4ce39bd4d3ce45853ad6cf847599823e483305b9d8d7ba570889e4020438c34e4e109b45b55ae8707d677fe083b2d34e0c843fee864a5cd45cf09b2adbe0b8de3e9b8fa4d590a4f00a5e5f42b7e8d702f6072e25fab39d46400f939a397c916371f4ef7a1f31e35f73a7d29d568d9a21db", 0x11d}, {&(0x7f0000000600)="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", 0x131}], 0x3, &(0x7f0000005900)=[@cred={{0x1c}}], 0x20, 0x4008000}}, {{&(0x7f0000005940)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000005b00)=[{0x0}, {&(0x7f0000005a40)="8ad26b4923b16ca766c1b2b940c190eade96830bcc4d49a50e3a96af90bbc40457a0dde00f6f05c332bfcc377676d9decb519e2e734516bcb9c3c603722ddf37097aea83d27e8b9d4818a9cc8eb457947f1c5ba82a3e465a23acc5a455f808cf485ba0", 0x63}, {&(0x7f0000000900)="5a4317b677ea90eb50c184c5b60f64a522139b62869df34141e6497c963a530eb51bb4fb7c0a0828ee9b2a1e35be894b1b6402191e467c796ae6373771", 0x3d}], 0x3, 0x0, 0x0, 0x40000}}], 0x8, 0x48804) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], &(0x7f0000000100)='GPL\x00', 0xfffffff7, 0xfd6b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x94) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000040)=0x2) 9m37.868630401s ago: executing program 6 (id=6911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x4000000000002df, 0xb071d8a2db9aa3ed) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a0000000500010007000000050004000900020073797a3000000f0700000000000073683a6e65742c706f72742c6e65740000000c2027af080006400000000000000000"], 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000010426fd700000000000e2ff0000", @ANYRES32=0x0, @ANYBLOB="03010000608802001c001280110018016272696467655f736c6176650000000004000580140003006272696467655f736c6176655f30000024000e001d0200000000000009000000000000000900000000"], 0x74}, 0x1, 0x0, 0x0, 0x60004895}, 0x48000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e64, 0x2, @mcast1, 0xff7bfffd}}, {{0xa, 0x4e20, 0x4a3, @remote, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000180)={0x24, {{0xa, 0x4e22, 0x6ed, @mcast1, 0x200}}, {{0xa, 0x4e24, 0x8, @mcast2, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e22, 0x2, @mcast1, 0x1}}, {{0xa, 0x4e22, 0x7, @remote, 0x3}}}, 0x108) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 9m37.164222431s ago: executing program 6 (id=6917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @empty, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x7ff, 0x7}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x7, 0x240080) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000200)) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0) 9m36.934307124s ago: executing program 6 (id=6920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x0, 0x100000000000000}], 0x0, 0x1000000, 0x0}) 9m20.904617146s ago: executing program 35 (id=6920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x0, 0x100000000000000}], 0x0, 0x1000000, 0x0}) 16.920011842s ago: executing program 1 (id=9005): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 16.873200711s ago: executing program 1 (id=9007): socket$inet_icmp(0x2, 0x2, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') fchmod(r1, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000002c0)={0x800, 0x5, 0x7, 0x8, 0x80, "89449fbfac521cc1"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, 0x0, 0x0, 0x12}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/7, &(0x7f0000000500)="009ea08f5fcedf5b802da89b010354498b8f118d233d6e235038ee90b259d2d92d14f1c676c553476371338707ac2d65e8a9c9617e15f8", &(0x7f00000005c0)="1c0f4c2d9e466f707ad2aa6c44e3778bb62e2d77a78b3ff5824686b6455aebca6a84e7c401d6514a0f56a3365b96a14b6da2f52d8faef3b0dbad602fca11a27a4b274dc4135dd023fc121f326ecf7657cc3cfcad218554bf3dc658ca3a6f430be33e61ff73d9db823c2e5fc3952996c6e030c65380671355313f02ce5902ad7fd2a9335f56c63a7846355b2ff616aec5b2bbc40f3eb9b4b2de3f6e85037aae4666dce71e9c7069e536c632f34e87540b3bfbb3fb44892a79d596c35be91d3763e938aa8225bb187c0e106cba48cb9a830229befcc1fcb643cb823f9ffac2b4eae12918f797", 0x81, r6}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r8, @ANYBLOB="01800000000000000000010000"], 0x28}}, 0x40000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) 15.741285867s ago: executing program 1 (id=9013): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x0, 0x5001) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x3, "b25cb9fbaf0500040000ba28840000200000000000000000004000800500", 0x40464c7d}) 14.411267923s ago: executing program 1 (id=9017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff023}]}, 0x10) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r1, r4, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x20058840) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, 0x0, 0x0) (async) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000002c0), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x4}, {0x7, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x5}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x4}, {0x7, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x5}}, 0xe8) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) r9 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) accept$netrom(r9, 0x0, 0x0) (async) accept$netrom(r9, 0x0, 0x0) 12.626045699s ago: executing program 1 (id=9022): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spmi_read_end\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0xff73, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)) 12.21377109s ago: executing program 3 (id=9023): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_PERIODIC_INQ={{0x3}}}}, 0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap$snddsp_status(&(0x7f0000526000/0x2000)=nil, 0x1000, 0x200000a, 0x20010, 0xffffffffffffffff, 0x82000000) r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x40000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x6, 0xfffffffffffffde3, 0x2, 0x8}) syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 11.01743767s ago: executing program 3 (id=9026): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, 0x0, 0x0, 0x7000, 0x0, 0x3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 9.684945659s ago: executing program 1 (id=9029): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000600)={0x14002000, &(0x7f0000000100), 0x0, 0x0, {0x2f}, &(0x7f00000002c0)=""/202, 0xca, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r2}}, 0x58) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020}, 0x2032) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="1544010001800000"], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 8.725549247s ago: executing program 3 (id=9033): memfd_create(0x0, 0x6) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x181100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cf5fe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 7.627204634s ago: executing program 7 (id=9035): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = semget$private(0x0, 0x3, 0x502) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0xc1d, 0x1, 0x0]) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001380), &(0x7f00000013c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x40800, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x980901, 0xfffffff2, @value=0x9}) ptrace$pokeuser(0x6, r7, 0x388, 0x7a09280d) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x8080) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xfffffff8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 6.723882406s ago: executing program 8 (id=9036): openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c4"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x141) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r0, &(0x7f0000000040), 0x4) 6.303936636s ago: executing program 7 (id=9037): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, 0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x500, 0x0, 0xb5315241, 0x0, 0x0, [{0x0, 0x40}, {0x0, 0xfffffffe}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0xfffffffc}], 0x8, 0x0, 0x0, 0x0, 0x1}}) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x0, 0x30383653, 0x1, 0x800, 0x4, 0x5, 0x2, 0x0, 0x4, 0x1, 0x6}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x67, &(0x7f0000000a80)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaa8a0086dd60cb653e00313afffe800000000000000000000000000000fe8000000000000000000000000000aa8900907800000000fe800000000000000000000000000020fc01000000000000000000000000000004019595f429ae086d"], 0x0) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', '', [{}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '%'}]}, 0x27) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x4, 0x4) 5.170602107s ago: executing program 7 (id=9038): io_uring_setup(0x5476, &(0x7f0000000400)={0x0, 0x120b70e, 0x1, 0x0, 0x306}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000101000040000000", 0x9}], 0x1}, 0x4004) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x208000, 0x0) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f00000000c0)={0x840, 0x5, 0x2ff8, 0x6, 0x3, 0x10000, 0x641}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0x6, &(0x7f00000001c0)={0x6, 0x8}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x801) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x68642, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000300)=@known='user.incfs.size\x00') r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) 4.989007938s ago: executing program 4 (id=9039): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) 4.913742388s ago: executing program 4 (id=9040): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x0, 0x5001) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f00000001c0)=0x4, 0x4) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x3, "b25cb9fbaf0500040000ba28840000200000000000000000004000800500", 0x40464c7d}) 4.817345731s ago: executing program 8 (id=9041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0xfffffd76}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x0, r4, 0xd, {0x7, 0xa42}, 0x80}, 0x1) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x560f, &(0x7f0000000100)={0x1, 0x1, 0x19, 0x1f, 0xbb, 0x0}) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 4.000083805s ago: executing program 7 (id=9042): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) close(0x3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x16, 0xfffffff9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff0701006b", @ANYRES32=0x0, @ANYBLOB="488400000040000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004048}, 0x0) mq_open(&(0x7f0000000300)='\xe1\xb7}=\x9ag\v|\xec\b\xb4\x160\xd8W\xadC5\x93} \x00', 0x8c2, 0x30, &(0x7f0000000080)={0x1, 0x100000001, 0x2, 0x9}) 3.858378018s ago: executing program 4 (id=9043): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = userfaultfd(0x801) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 3.531924843s ago: executing program 8 (id=9044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x700000c, 0x43033, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r6, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xbef\x98\xcd\x03d\x8e\xc1\x91x\xbd7\xfbi\xddF\xa8\x9dK\xa8S5BY_\x98\xd8\xd9;\fN\xc5j\xe4^\xc5\xea\xeb\xfeH\x86\xccrs\xb5s$\x18<\xee1l\xd8\x8c\xd9\xd0\xbbT*\x85&w\xda\xfb\xd9\x9f\xbf\xc9\xcb\xd4$\xddW\x9e6f%\\\xb3Y\xd5l$\xd1;\n\x9eLvN\xa5\x179&\xa5\xbdG\t\xd1M\x14\xd5\xed\xa4\x00\x00\x00\x00\x00', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81\x13)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xf5\x8f\xfb[\x9c\x11d\x12e\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0/file0'}, 0x2aa) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r5, 0x0, 0x480c4) r7 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r7) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) 3.434269197s ago: executing program 3 (id=9045): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x3, 0x63) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r4}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r5 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000027ae9140ac055902b2f0000000010902"], 0x0) write$usbip_server(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000300000001", @ANYBLOB="81db"], 0x35) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) 2.909937117s ago: executing program 4 (id=9046): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f0000000800)='\x02\xfe\xff\xff\xff\xff\xff\xff\xffcontrg\x01\x00G$\f:\xe0[{\x19\xef~q\"\x94\xd6Z\xc0\xb6\xe7\xb9\x04DL^\xa1\xe2b\xb2\x04\xf5:\xd6\xe5\x83D\f\x86\xc8\xaa$\xcax\xe0H\xcbu\x9dgc\x9e\xdaY\xb7\x81\x8c\xf7u\xfb\x01\xef/IrP)\x9cML\xfc\x8b\x9d\x1ar\xd0\xdf\x9d5\xaa\x85&\xca/\xea\x14\xea\v\xea\x1f\xb7\x10j\xf8\xfa[\xf6\x9f\xbeGj`f\be8\xef\x88\xf4\x9a#UB\x9a\xdb\xf0\xd37y\x8b(\xe1\xea\x9bd\x7f\xbc\x92\xf8\xb0M\xf9\"\x00\x18\n\x89\x84A\x85\xb6\xd1\xbb\x9d\x9b\x13\x003\xf5\xb4\xaa=Y\xe7\xbaFd\xd4H\x89\xf1\x15\xea\x15\x87#\x89\xc0\xcbb\xa4\xbexA\xaerV\xbe\'e\xd1\xd2A\xf6\x97]\x95a[\xa4(\xab\xc0D\x03\xbf\xddW\xa4\xcd\x88%ejr\x9e\xabMW\x10a\x1d2\x9ck\xdb\x1e\xf6\xb9\xee\xd4\xc9\xe9g\xbb\x1b\xf2\xf5\x10W\x86y\x16\xe2E\xe8\x00\x11I\xf5\xd8pU%\xba\xba6S\x04<\xd0L\xbfa\xaf\xcb\xeeb\x80v[\v\nRVl\xca\xc5\xda\xd7\x12\x88\x8fG\x17\xa6') 2.693678675s ago: executing program 4 (id=9047): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = semget$private(0x0, 0x3, 0x502) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0xc1d, 0x1, 0x0]) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001380), &(0x7f00000013c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x40800, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x980901, 0xfffffff2, @value=0x9}) ptrace$pokeuser(0x6, r5, 0x388, 0x7a09280d) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x8080) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xfffffff8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 2.533103114s ago: executing program 4 (id=9048): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000840) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0x31f, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x1000, 0x0, 0x0, 0x8, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x0, 0x0, r2}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x4c, 0x4ea3, 0xb, 0x56cd, 0x5, 0x6, 0x2, 0x80000001, 0x201, 0x8e, 0x3fb, 0x1, 0x9, 0x0, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff5, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x7, 0x2, 0x7ffc, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x46, 0x401, 0x3, 0xffffffff, 0x1ff, 0x10002, 0x42, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x2, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x3, 0xc74, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x0, 0x6, 0x0, 0x6, 0x8000, 0x10007e, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0x3, 0x1b13, 0x4, 0x85, 0x6, 0x4, 0x100000001, 0x9, 0xa, 0xffffffffffff66e5, 0xfffffffffffffff6, 0x851a, 0x5e9b7b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x2100, 0x4, 0x0, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x8, 0x6, 0xfffffffffffffd96, 0x3f3, 0x0, 0x4, 0xffffffffffffeffe, 0x7, 0x5, 0x8, 0x1, 0xe1, 0xec2, 0x40, 0x7, 0xfff, 0x0, 0x80]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(r4, 0x4f, 0x0) mmap(&(0x7f0000529000/0x4000)=nil, 0x4000, 0xb635773f05ebbee3, 0x4000010, 0xffffffffffffffff, 0xb5e6a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0xfffffffffffffd3d) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket(0xf, 0x803, 0x4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb", 0x1d}) 2.260749299s ago: executing program 7 (id=9049): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 1.464973945s ago: executing program 3 (id=9050): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) 1.33757415s ago: executing program 8 (id=9051): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x8098f904, 0x7, @value=0x800}) gettid() syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x82040, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000000c0)={0x60, 0x17, 0x4, "1f0a007e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0x22, 0x92, {0x92, 0x7, "ffeffd14e7941e83b2c2e20a4b96118da63ffe0a5e416c2b0380de2641ce32e9665c9bb5869ac54098ff7a8a01cb8e7c9abc8e19bea1418d8ecc41fb62a8dd1aa3e13864e51718f6e3897deb20447e46ae7979f752cbbf658cca382a267b902fa30273a6ea04dc6fd9eded1b24954869c37de7064efdc7100bc3eac8c806d296b0180ac0ea2bd40ed2ac38d23f73e78a"}}, &(0x7f0000000480)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "78472f5541cc859b20354e3ea948137c4c44847c1acda510deb59364a847c568b80470573046dab11bf51e89916da0cc2a936855b8a5e5c09f56a5deccf5a80c346e61e0873966d6ba06d802542977da38c119a4a032294e947891c66e385ada7a30799721fb8d4b69baef8d029f83acc27e41ccce3c9a4c24deb8528b35c927e70fb0f74da47e24a2839744b06357a5a6a993234b2912f056cb5388212c3308f2506ae2763c5a531820082e2c"}}, &(0x7f0000000140)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x98, 0x5}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x6, 0x9, "cc5f55d7", "6559d012"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x55, 0x3, 0x0, 0x200, 0x3ff}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000600)={0x20, 0xf, 0x37, "0e742c6c55ed39c276ac10000a54fbc19feae5257c8dccdbeec7a4c64b81de5103b7f47111de7ac609fb34c04a1ad014139616d184ee69"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf0]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0xb, 0x2, "d243"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "be3c"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x40}}) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000900000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[], 0x0) 1.337213045s ago: executing program 3 (id=9052): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x3, 0x63) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5}, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockname$packet(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r7 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000027ae9140ac055902b2f0000000010902"], 0x0) write$usbip_server(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000300000001", @ANYBLOB="81db"], 0x35) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) 1.228110915s ago: executing program 7 (id=9053): syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6a, 0xfb, 0xd7, 0x40, 0x71d, 0x1005, 0x46a2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x3, 0x2, 0x56, 0x33, 0x11, 0x9, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x8, 0xf, 0x7f}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x6, 0x4, 0xf}}]}}, {{0x9, 0x4, 0x82, 0x0, 0x0, 0xff, 0x6, 0x65, 0x6}}]}}]}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x3}], 0x1000, 0x0, &(0x7f0000000080)="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"}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x9a5, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffffff9, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r2, 0x0, 0x0, 0x0}, 0x30) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 591.29544ms ago: executing program 8 (id=9054): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000039000100faff070002dcdf25010000000800ec00bbb9619ebd9e76b8b8bfb0cfb3920c4efefe13795282cb50f54a5b3c00a7ba3685f8411a26127efb39f18177ad5fefc60f3f746f7c7e771f7430b79650b04a1ba3181f7b864fff6f87ba9140fe10c8fe7c615e05b2e0b109256dd456bed7149e1384c687722fdbff83e4320976f9d1102c3086ea712853e13026e2f9822e5ba90e1f20e8e3070340baa99d328dd772366722ad736a9c2dbf358f010ba63ce658dbc53a7b09390d8440effa978cf5efec7d598875ab43b69c0f3be62764239bd0425c62bef0d4882f7fee35fd8ba1cad8db8d8ca735d58db408cb45191dd8613228a7df59cbd266bf3d10da2dc3bddeacd0e7c1a7b17d53fed711d9e18e3cf0b9fe823552f8390bec0449711fcbd901214c8cf38bebecd634d044cd1045a0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x40001, 0x5, 0x5, 0x80000004, 0x7, "9393858308cadc3fe5df0af03652b354deb58c", 0x1e, 0x103}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280080006400000007a3000000000090002007379000000000000000000000000000000b7b7366a274e29ec"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020306010300000000001a8473387b607b0900000000000000030000000a70d07a9203bdab8e5475b06ed06ded210fd24803973bb04b9c1e52a87cbcfc8379b6b2354fbbcffcc42e3f506f020a9a876bed90951c34bcb5e1d1d870f4c76771121d51f0c1f0e8c6ee32dc64c92922c5eb24420c3870bfc10a7b2886bf6921ce998db45d752bc12089"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010000100000000000000000000000800200000000e0a010200000000000000000a0000000900010073797a3100000000140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba02, 0x91) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'dt2801\x00', [0x4f23, 0x7f, 0x1, 0x3, 0x2, 0xdea7, 0xc, 0x6, 0xa, 0xfd, 0xfffffffa, 0xffffffff, 0x3fe, 0x1, 0x6, 0x101, 0x7, 0x7f, 0x1, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x4, 0x81, 0x0, 0xc6]}) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '#! ', 0x3a, '#! ', 0x3a, './file1', 0x3a, [0x43, 0x43]}, 0x2f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480)="c1c2b31536e327e6714e17ab7202a6ba78d06f14e81e5d403b1b0726f2882bcddefe2f115442d85a56aa75f006dce847572d7a9f60f3c855106ded60a4e703ae66abdac3955bbe055bc9f88d6cf40db6a3cd2308e1d5464ed3cf5f911adc9dd5ecd643a973a2a9fea221aabab96f6bd5b8426fe5b7fef7d83af648a1418b69effb5b105f82c7803f7999df2a210c81fa1da3b61ae3092ffbc95d12c8bf89ab6a34aa84e5b371694cb1590361731b91e9e51c44539e15d609e00fc587f53355fafb1fea9c44c4c8d20cd2b86a77eeb3088305a60676e05fe33b17abdbbef2", 0xde}, 0x68) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 8 (id=9055): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x18, r8}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000300)={@local, 0x18, r8}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8936, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x9, @remote, 0x7ff}, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7a}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x10000}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x5, @empty, 0x40}], 0xbc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): utes in process `syz.1.8340'. [ 2570.630899][ T5780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2570.690763][ T5174] usb 8-1: Using ep0 maxpacket: 32 [ 2571.048225][ T5174] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2571.075081][ T5174] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 2571.084282][ T5174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.114696][ T5783] No source specified [ 2571.126435][ T5174] usb 8-1: config 0 descriptor?? [ 2571.143329][ T5174] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 2571.184708][ T5174] usb 8-1: Detected SIO [ 2571.205324][ T5174] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2571.321212][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8343'. [ 2571.362375][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8344'. [ 2571.578415][ T5793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2572.582226][ T30] audit: type=1400 audit(1768807648.693:5791): avc: denied { mounton } for pid=5766 comm="syz.7.8337" path="mnt:[4026532972]" dev="nsfs" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2572.678840][ T5808] fuse: Unknown parameter '">R۱E"(dߒ^or9pOa⤹II_W?&`gT-![L6$I4f[8ǬW?ڪ\ }{9Coµ;' [ 2572.701103][T17814] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2572.971104][ T5813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8350'. [ 2573.083788][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8346'. [ 2573.413744][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8351'. [ 2573.876709][T19529] usb 8-1: USB disconnect, device number 27 [ 2573.900854][T19529] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2573.943847][T19529] ftdi_sio 8-1:0.0: device disconnected [ 2574.505742][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8355'. [ 2574.553021][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8357'. [ 2574.757862][ T5845] netlink: 220 bytes leftover after parsing attributes in process `syz.8.8360'. [ 2575.337658][ T5851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2576.831219][T21574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2576.848889][T21574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2576.864562][T21574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2576.872526][T21574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2576.882183][T21574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2576.924714][ T5863] lo speed is unknown, defaulting to 1000 [ 2577.109850][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 2577.425567][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2577.475187][ T5877] No source specified [ 2577.500289][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 2577.531771][ T5863] bridge_slave_0: entered allmulticast mode [ 2577.551624][ T5863] bridge_slave_0: entered promiscuous mode [ 2577.572521][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 2577.589671][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 2577.617251][ T5863] bridge_slave_1: entered allmulticast mode [ 2577.648712][ T5863] bridge_slave_1: entered promiscuous mode [ 2577.800570][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2577.840626][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2577.917522][T17814] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 2578.108068][ T1960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2578.126271][T17814] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2578.201349][ T5863] team0: Port device team_slave_0 added [ 2578.220698][ T5882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2578.415265][T17814] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2578.425773][T17814] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2578.437060][T17814] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2578.449705][T17814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.458105][T17814] usb 8-1: Product: syz [ 2578.462374][T17814] usb 8-1: Manufacturer: syz [ 2578.466979][T17814] usb 8-1: SerialNumber: syz [ 2578.504899][ T5863] team0: Port device team_slave_1 added [ 2578.586063][ T5884] xt_hashlimit: size too large, truncated to 1048576 [ 2578.715280][ T1960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.293434][T21574] Bluetooth: hci2: command tx timeout [ 2579.344249][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8374'. [ 2579.527915][ T1960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.600706][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2579.635669][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2579.731477][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2579.743815][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8375'. [ 2579.868594][ T1960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.939662][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2579.973146][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2580.142778][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2580.350883][ T5863] hsr_slave_0: entered promiscuous mode [ 2580.366733][ T5863] hsr_slave_1: entered promiscuous mode [ 2580.638471][ T1960] bridge_slave_1: left allmulticast mode [ 2580.646809][ T1960] bridge_slave_1: left promiscuous mode [ 2580.661143][ T1960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2580.825754][ T1960] bridge_slave_0: left allmulticast mode [ 2580.832213][ T1960] bridge_slave_0: left promiscuous mode [ 2581.451446][ T1960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2581.491785][T17814] usb 8-1: 0:2 : does not exist [ 2581.523800][T21574] Bluetooth: hci2: command tx timeout [ 2581.535299][T17814] usb 8-1: USB disconnect, device number 28 [ 2581.678536][ T5911] netlink: 220 bytes leftover after parsing attributes in process `syz.8.8378'. [ 2581.692734][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8379'. [ 2581.936273][ T5916] comedi comedi3: pcmmio: I/O port conflict (0x4f26,32) [ 2583.733099][T21574] Bluetooth: hci2: command tx timeout [ 2583.954956][ T5934] xt_hashlimit: size too large, truncated to 1048576 [ 2584.463917][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8385'. [ 2584.672436][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8386'. [ 2584.882453][ T1960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2584.904223][ T1960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2584.922521][ T1960] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2584.941629][T19666] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2584.961693][ T1960] bond0 (unregistering): Released all slaves [ 2585.030015][ T5927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2585.111885][T19666] usb 8-1: Using ep0 maxpacket: 8 [ 2585.154188][T19666] usb 8-1: config 127 has an invalid interface number: 171 but max is 1 [ 2585.193086][T19666] usb 8-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2585.194450][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8387'. [ 2585.223155][T19666] usb 8-1: config 127 has no interface number 1 [ 2585.234263][T19666] usb 8-1: config 127 interface 171 has no altsetting 0 [ 2585.270580][T19666] usb 8-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2585.289244][T19666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.309276][T19666] usb 8-1: Product: syz [ 2585.320344][T19666] usb 8-1: Manufacturer: syz [ 2585.333170][T19666] usb 8-1: SerialNumber: syz [ 2585.562369][ T1960] hsr_slave_0: left promiscuous mode [ 2585.580741][ T1960] hsr_slave_1: left promiscuous mode [ 2585.596119][ T1960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2585.609204][T19666] xr_serial 8-1:127.171: xr_serial converter detected [ 2585.624610][ T1960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2585.640593][T19666] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 2585.656830][ T1960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2585.666290][T19666] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2585.679492][ T1960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2585.708110][T19666] usb 8-1: USB disconnect, device number 29 [ 2585.726752][T19666] xr_serial 8-1:127.171: device disconnected [ 2585.746409][ T1960] veth1_macvtap: left promiscuous mode [ 2585.762699][ T1960] veth0_macvtap: left allmulticast mode [ 2585.773847][ T1960] veth0_macvtap: left promiscuous mode [ 2585.786949][ T1960] veth1_vlan: left promiscuous mode [ 2585.794382][ T1960] veth0_vlan: left promiscuous mode [ 2585.956599][T21574] Bluetooth: hci2: command tx timeout [ 2586.241301][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8390'. [ 2586.333470][ T1960] team0 (unregistering): Port device team_slave_1 removed [ 2586.406215][ T1960] team0 (unregistering): Port device team_slave_0 removed [ 2586.448155][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2586.477802][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8391'. [ 2586.597976][ T9] usb 8-1: device descriptor read/64, error -71 [ 2586.865498][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2587.014736][ T9] usb 8-1: device descriptor read/64, error -71 [ 2587.134950][ T9] usb usb8-port1: attempt power cycle [ 2587.340913][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8392'. [ 2587.355181][ T1960] IPVS: stop unused estimator thread 0... [ 2587.387633][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2587.399715][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2587.421742][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2587.438424][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2587.506582][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2587.541177][ T9] usb 8-1: device descriptor read/8, error -71 [ 2587.609425][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2587.634238][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 2587.655778][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2587.662840][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2587.684795][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2587.691903][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2587.806193][ T9] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2587.908562][ T9] usb 8-1: device descriptor read/8, error -71 [ 2588.387029][ T9] usb usb8-port1: unable to enumerate USB device [ 2588.554905][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2588.664175][ T5863] veth0_vlan: entered promiscuous mode [ 2588.731925][ T5863] veth1_vlan: entered promiscuous mode [ 2588.850596][ T5863] veth0_macvtap: entered promiscuous mode [ 2588.873167][ T5863] veth1_macvtap: entered promiscuous mode [ 2588.941119][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2588.956660][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2589.056685][T17944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2589.567149][T17944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2589.598477][T17944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2589.632854][T17944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2589.683811][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8399'. [ 2589.914332][ T5993] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2590.576851][ T6017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2590.624753][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2591.260673][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2591.451931][T14492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2591.486648][T14492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2592.170357][ T6028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2593.184422][ T6045] overlayfs: failed to clone upperpath [ 2593.333006][ T9] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2593.348778][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8410'. [ 2593.443078][ T6049] FAULT_INJECTION: forcing a failure. [ 2593.443078][ T6049] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.459076][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: syz.4.8411 Tainted: G L syzkaller #0 PREEMPT(full) [ 2593.459102][ T6049] Tainted: [L]=SOFTLOCKUP [ 2593.459108][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2593.459118][ T6049] Call Trace: [ 2593.459124][ T6049] [ 2593.459132][ T6049] dump_stack_lvl+0x16c/0x1f0 [ 2593.459161][ T6049] should_fail_ex+0x512/0x640 [ 2593.459177][ T6049] ? fs_reclaim_acquire+0xae/0x150 [ 2593.459203][ T6049] should_failslab+0xc2/0x120 [ 2593.459227][ T6049] __kmalloc_noprof+0xeb/0x910 [ 2593.459244][ T6049] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2593.459275][ T6049] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2593.459298][ T6049] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2593.459324][ T6049] ? tomoyo_profile+0x47/0x60 [ 2593.459344][ T6049] tomoyo_path_number_perm+0x245/0x580 [ 2593.459364][ T6049] ? tomoyo_path_number_perm+0x237/0x580 [ 2593.459388][ T6049] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2593.459410][ T6049] ? find_held_lock+0x2b/0x80 [ 2593.459459][ T6049] ? find_held_lock+0x2b/0x80 [ 2593.459483][ T6049] ? hook_file_ioctl_common+0x144/0x410 [ 2593.459506][ T6049] ? __fget_files+0x20e/0x3c0 [ 2593.459540][ T6049] security_file_ioctl+0x9b/0x240 [ 2593.459566][ T6049] __x64_sys_ioctl+0xb7/0x210 [ 2593.459589][ T6049] do_syscall_64+0xcd/0xf80 [ 2593.459614][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2593.459632][ T6049] RIP: 0033:0x7f03f8b8f749 [ 2593.459647][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2593.459663][ T6049] RSP: 002b:00007f03f9a6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2593.459680][ T6049] RAX: ffffffffffffffda RBX: 00007f03f8de5fa0 RCX: 00007f03f8b8f749 [ 2593.459692][ T6049] RDX: 0000200000000340 RSI: 00000000000089e2 RDI: 0000000000000003 [ 2593.459702][ T6049] RBP: 00007f03f9a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 2593.459712][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2593.459721][ T6049] R13: 00007f03f8de6038 R14: 00007f03f8de5fa0 R15: 00007ffc440279b8 [ 2593.459747][ T6049] [ 2593.459773][ T6049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2593.696513][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2593.703190][ T9] usb 8-1: config index 0 descriptor too short (expected 19222, got 18) [ 2593.711621][ T9] usb 8-1: config 28 has too many interfaces: 241, using maximum allowed: 32 [ 2593.737646][ T9] usb 8-1: config 28 has 1 interface, different from the descriptor's value: 241 [ 2593.757628][ T9] usb 8-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d [ 2593.786729][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.797093][ T9] usb 8-1: Product: syz [ 2593.845280][ T9] usb 8-1: Manufacturer: syz [ 2593.875233][ T9] usb 8-1: SerialNumber: syz [ 2594.072583][T19666] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2594.132444][ T9] usb 8-1: USB disconnect, device number 34 [ 2594.263822][T19666] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2594.298057][T19666] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2594.327161][T19666] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 2594.349156][T19666] usb 5-1: config 8 has no interface number 0 [ 2594.355316][T19666] usb 5-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2594.367706][T19666] usb 5-1: config 8 interface 130 has no altsetting 1 [ 2594.374645][T19666] usb 5-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2594.384143][T19666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.553343][ T6071] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8419'. [ 2595.845715][ T6084] xt_hashlimit: size too large, truncated to 1048576 [ 2595.929120][ T6089] netlink: 4804 bytes leftover after parsing attributes in process `syz.8.8425'. [ 2595.940265][ T6089] netlink: 4804 bytes leftover after parsing attributes in process `syz.8.8425'. [ 2596.081281][T17073] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2596.732704][T17073] usb 8-1: Using ep0 maxpacket: 8 [ 2596.741701][T17073] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2596.755204][T17073] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2596.772818][T17073] usb 8-1: Product: syz [ 2596.785918][T17073] usb 8-1: Manufacturer: syz [ 2596.795716][T17073] usb 8-1: SerialNumber: syz [ 2596.814543][T17073] usb 8-1: config 0 descriptor?? [ 2596.829493][T17073] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2596.850176][T17073] pctv452e: pctv452e_power_ctrl: 1 [ 2596.850176][T17073] [ 2596.868092][T17073] usb 8-1: selecting invalid altsetting 3 [ 2596.881213][T17073] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2596.881213][T17073] [ 2596.924408][T17073] dvb-usb: bulk message failed: -22 (5/0) [ 2596.954555][T17073] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2597.000029][T17073] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2597.009241][T17073] usb 8-1: media controller created [ 2597.067455][T19666] usb 5-1: string descriptor 0 read error: -71 [ 2597.075721][T19666] HFC-S_USB 5-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2597.084680][T17073] dvb-usb: bulk message failed: -22 (8/0) [ 2597.108966][T17073] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2597.117165][T17073] dvb-usb: MAC address reading failed. [ 2597.132508][T19666] usb 5-1: USB disconnect, device number 32 [ 2597.139754][ T6080] dvb-usb: bulk message failed: -22 (7/0) [ 2597.145535][ T6080] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 2597.171378][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8421'. [ 2597.208488][T17073] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2597.426982][T17073] DVB: Unable to find symbol stb0899_attach() [ 2597.447434][T17073] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2597.983332][T17073] rc_core: IR keymap rc-tt-1500 not found [ 2597.989100][T17073] Registered IR keymap rc-empty [ 2598.055191][T17073] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 2598.144666][T17073] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input79 [ 2598.223642][ T6123] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8436'. [ 2598.257481][T17073] dvb-usb: schedule remote query interval to 100 msecs. [ 2598.277211][T17073] pctv452e: pctv452e_power_ctrl: 0 [ 2598.277211][T17073] [ 2598.314982][T17073] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2598.372739][ T6127] xt_hashlimit: size too large, truncated to 1048576 [ 2598.389990][T17073] usb 8-1: USB disconnect, device number 35 [ 2598.559271][T17073] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2598.676109][ T6133] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.8438'. [ 2598.685467][ T6133] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.8438'. [ 2599.648609][ T6143] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 2599.655235][ T6143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2599.703873][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8442'. [ 2599.805014][ T6143] vhci_hcd vhci_hcd.0: Device attached [ 2600.047035][T19529] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2600.100220][ T9] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 2600.263944][T19529] usb 8-1: config 0 has no interfaces? [ 2600.272803][T19529] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2600.290827][T19529] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.865430][T19529] usb 8-1: config 0 descriptor?? [ 2601.089827][ T6145] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 2601.108407][T17195] usb 8-1: USB disconnect, device number 36 [ 2601.136831][ T13] vhci_hcd vhci_hcd.7: stop threads [ 2601.152993][ T13] vhci_hcd vhci_hcd.7: release socket [ 2601.162883][ T6165] Device name cannot be null; rc = [-22] [ 2601.167556][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8449'. [ 2601.172844][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 2601.183636][ T6165] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8448'. [ 2601.194610][ T6165] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8448'. [ 2601.215395][ T6165] overlay: Unknown parameter '/' [ 2601.223279][ T6167] veth1_macvtap: left promiscuous mode [ 2601.650472][T17073] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2601.693690][ T6171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2602.099788][T17073] usb 5-1: Using ep0 maxpacket: 32 [ 2602.117779][T17073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2602.342087][T17073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2602.532885][T17073] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2602.543304][T17073] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2602.553047][T17073] usb 5-1: Product: syz [ 2602.557276][T17073] usb 5-1: Manufacturer: syz [ 2602.562176][T17073] usb 5-1: SerialNumber: syz [ 2602.568829][T17073] usb 5-1: config 0 descriptor?? [ 2602.575577][T17073] hub 5-1:0.0: bad descriptor, ignoring hub [ 2602.581921][T17073] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2603.060581][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2603.069792][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2603.190939][T19529] usb 5-1: USB disconnect, device number 33 [ 2604.300072][ T6217] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2604.396737][ T6218] lo speed is unknown, defaulting to 1000 [ 2605.325331][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8465'. [ 2605.837131][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 2605.897773][ T6238] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 2606.168897][ T6241] IPVS: stopping backup sync thread 6238 ... [ 2606.674254][ T6244] xt_hashlimit: size too large, truncated to 1048576 [ 2608.608269][ T6263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2608.849716][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2608.856371][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2609.506161][ T6269] SELinux: failed to load policy [ 2609.614734][T28272] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2609.981316][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8478'. [ 2610.595152][T28272] usb 4-1: Using ep0 maxpacket: 8 [ 2610.623480][T28272] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2610.650907][T28272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.760194][T28272] usb 4-1: Product: syz [ 2610.768898][T28272] usb 4-1: Manufacturer: syz [ 2610.780186][T28272] usb 4-1: SerialNumber: syz [ 2610.792333][T28272] usb 4-1: config 0 descriptor?? [ 2611.214576][T28272] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2611.431057][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2611.441338][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2611.629194][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8483'. [ 2612.848630][T28272] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2613.137851][ T6309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2613.464729][T28272] usb 4-1: USB disconnect, device number 45 [ 2615.785608][ T6331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2616.893526][ T6343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2617.544611][ T6349] overlayfs: failed to clone upperpath [ 2617.861366][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8499'. [ 2618.278449][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8500'. [ 2618.655105][ T6368] netlink: 'syz.3.8503': attribute type 11 has an invalid length. [ 2619.647658][ T6376] erspan0: entered promiscuous mode [ 2619.813682][ T6377] 9p: Could not find request transport: f5/dno=0x0000000000000003 [ 2619.984449][ T6014] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2620.618529][ T6014] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2620.647109][ T6014] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2620.647132][ T6014] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 2620.647150][ T6014] usb 5-1: config 8 has no interface number 0 [ 2620.647172][ T6014] usb 5-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2620.647186][ T6014] usb 5-1: config 8 interface 130 has no altsetting 1 [ 2620.647203][ T6014] usb 5-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2620.647216][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.777976][ T6387] ceph: No mds server is up or the cluster is laggy [ 2622.519879][T21574] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2622.530978][T21574] Bluetooth: hci4: Injecting HCI hardware error event [ 2622.541991][ T5041] Bluetooth: hci4: hardware error 0x00 [ 2622.854590][ T6407] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 2622.861212][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2622.871381][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 2623.138392][T28274] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2623.146010][ T5174] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 2623.216107][ T6014] usb 5-1: string descriptor 0 read error: -71 [ 2623.223051][ T6014] HFC-S_USB 5-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2623.262876][ T6014] usb 5-1: USB disconnect, device number 34 [ 2623.428070][T28274] usb 8-1: config 0 has no interfaces? [ 2623.433580][T28274] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2623.459629][T28274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.482728][T28274] usb 8-1: config 0 descriptor?? [ 2623.719917][ T6408] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 2623.731840][ T9] usb 8-1: USB disconnect, device number 37 [ 2623.745597][ T3009] vhci_hcd vhci_hcd.7: stop threads [ 2623.753293][ T3009] vhci_hcd vhci_hcd.7: release socket [ 2623.768940][ T3009] vhci_hcd vhci_hcd.7: disconnect device [ 2623.822298][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2623.847503][ T6429] lo speed is unknown, defaulting to 1000 [ 2623.853269][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2624.356802][ T6438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2624.697373][ T30] audit: type=1804 audit(1768807697.437:5792): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.8523" name="/newroot/392/file0" dev="tmpfs" ino=2087 res=1 errno=0 [ 2624.875578][ T5041] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2624.934352][T28274] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2625.137526][T28274] usb 8-1: Using ep0 maxpacket: 16 [ 2625.148383][T28274] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2625.161371][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8525'. [ 2625.204323][T28274] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2625.253739][T28274] usb 8-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 2625.309904][T28274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2625.351764][T28274] usb 8-1: config 0 descriptor?? [ 2625.389295][ T6459] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 2625.395902][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2625.459261][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 2625.627792][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.671999][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.698616][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.707560][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.715704][ T9] usb 49-1: new low-speed USB device number 7 using vhci_hcd [ 2625.755667][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.797660][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.822748][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.853726][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.896163][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2625.925051][T28274] macally 0003:060B:0001.001F: unknown main item tag 0x0 [ 2626.177280][ T30] audit: type=1400 audit(1768807698.737:5793): avc: denied { setopt } for pid=6475 comm="syz.1.8530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2626.238757][T28274] macally 0003:060B:0001.001F: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.7-1/input0 [ 2626.349711][T28274] usb 8-1: USB disconnect, device number 38 [ 2626.628065][ T6485] evm: overlay not supported [ 2626.728766][ T6486] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2626.864721][ T30] audit: type=1400 audit(1768807699.251:5794): avc: denied { setattr } for pid=6479 comm="syz.3.8532" name="file1" dev="overlay" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2626.903639][ T30] audit: type=1400 audit(1768807699.270:5795): avc: denied { rename } for pid=6479 comm="syz.3.8532" name="#41" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2626.994876][ T30] audit: type=1400 audit(1768807699.279:5796): avc: denied { link } for pid=6479 comm="syz.3.8532" name="00fb21000190e12724b43e47e19e4fd34b6187622054def0628e00000000000000" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2627.108911][ T30] audit: type=1400 audit(1768807699.700:5797): avc: denied { setattr } for pid=6491 comm="syz.1.8534" name="/" dev="configfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2627.343387][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8535'. [ 2627.468050][ T6157] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2627.628330][ T6157] usb 5-1: Using ep0 maxpacket: 16 [ 2627.635819][ T6157] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2627.645028][ T6157] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2627.659411][ T6157] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2627.681034][ T6157] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2627.702717][ T6157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.728869][ T6157] usb 5-1: Product: syz [ 2627.741611][ T6157] usb 5-1: Manufacturer: syz [ 2627.755693][ T6157] usb 5-1: SerialNumber: syz [ 2628.208542][ T6157] usb 5-1: 0:2 : does not exist [ 2628.213426][ T6157] usb 5-1: unit 0 not found! [ 2628.243170][ T6157] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2628.268054][ T6157] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2628.314555][ T6157] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2628.340645][ T6157] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2628.353466][ T6157] usb 5-1: USB disconnect, device number 35 [ 2628.656110][ T6511] xt_hashlimit: size too large, truncated to 1048576 [ 2628.681739][ T6460] vhci_hcd: connection reset by peer [ 2628.701835][T16794] vhci_hcd vhci_hcd.8: stop threads [ 2628.707056][T16794] vhci_hcd vhci_hcd.8: release socket [ 2628.712770][ T5174] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 2628.772268][T16794] vhci_hcd vhci_hcd.8: disconnect device [ 2629.816981][ T6532] batman_adv: batadv0: Adding interface: dummy0 [ 2629.823385][ T6532] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2629.875978][ T6532] batman_adv: batadv0: Interface activated: dummy0 [ 2630.461412][ T6547] batadv0: mtu less than device minimum [ 2630.468947][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.480286][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.491175][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.502005][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.512834][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.523628][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.534439][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.545272][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2630.556098][ T6547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2631.188377][ T9] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2631.523420][ T6567] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 2631.530019][ T6567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2631.649947][ T6567] vhci_hcd vhci_hcd.0: Device attached [ 2631.776356][T19529] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2631.918969][T17195] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 2631.940746][T19529] usb 5-1: config 0 has no interfaces? [ 2631.948061][T19529] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2631.970118][T19529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.459370][T19529] usb 5-1: config 0 descriptor?? [ 2632.683891][ T6568] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 2632.728170][ T5978] vhci_hcd vhci_hcd.4: stop threads [ 2633.140399][T19529] usb 5-1: USB disconnect, device number 36 [ 2633.158074][ T5978] vhci_hcd vhci_hcd.4: release socket [ 2633.264978][ T5978] vhci_hcd vhci_hcd.4: disconnect device [ 2633.845376][ T30] audit: type=1400 audit(1768807706.005:5798): avc: denied { shutdown } for pid=6590 comm="syz.7.8559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2634.046520][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8562'. [ 2634.203901][ T6608] xt_hashlimit: size too large, truncated to 1048576 [ 2634.331452][T28272] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2634.545275][T28272] usb 4-1: Using ep0 maxpacket: 8 [ 2634.693161][T28272] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 2634.702490][T28272] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2634.715340][T28272] usb 4-1: config 127 has no interface number 1 [ 2634.727132][T28272] usb 4-1: config 127 interface 171 has no altsetting 0 [ 2634.748415][T28272] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2634.758596][T28272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.767035][T28272] usb 4-1: Product: syz [ 2634.773631][T28272] usb 4-1: Manufacturer: syz [ 2634.780592][T28272] usb 4-1: SerialNumber: syz [ 2635.036191][T28272] xr_serial 4-1:127.171: xr_serial converter detected [ 2635.045442][T28272] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 2635.054818][T28272] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2635.065840][T28272] usb 4-1: USB disconnect, device number 46 [ 2635.073524][T28272] xr_serial 4-1:127.171: device disconnected [ 2635.282956][T17814] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2635.477623][T17814] usb 8-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2635.502746][T17814] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2635.520407][T17814] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 2635.544917][T17814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2635.574930][T17814] usb 8-1: config 0 descriptor?? [ 2636.133358][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8570'. [ 2636.895677][ T6648] xt_hashlimit: size too large, truncated to 1048576 [ 2637.215586][T17814] usbhid 8-1:0.0: can't add hid device: -71 [ 2637.225609][T17814] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2637.272914][T17814] usb 8-1: USB disconnect, device number 39 [ 2637.431780][T17195] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2637.444003][ T6654] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.8575'. [ 2638.460469][ T6660] xt_hashlimit: size too large, truncated to 1048576 [ 2640.915675][ T6686] net_ratelimit: 11 callbacks suppressed [ 2640.915682][ T6686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2641.024888][T28272] IPVS: starting estimator thread 0... [ 2641.152039][ T6696] IPVS: using max 81 ests per chain, 194400 per kthread [ 2642.615878][ T6706] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 2642.628040][ T6706] SELinux: failed to load policy [ 2644.243967][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8598'. [ 2644.342639][ T30] audit: type=1326 audit(1768807715.817:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.495409][ T30] audit: type=1326 audit(1768807715.845:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.566785][ T30] audit: type=1326 audit(1768807715.845:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.605154][ T6014] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2644.651322][ T30] audit: type=1326 audit(1768807715.845:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.726835][ T30] audit: type=1326 audit(1768807715.845:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.786768][ T6014] usb 4-1: Using ep0 maxpacket: 8 [ 2644.796995][ T6014] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 2644.825291][ T30] audit: type=1326 audit(1768807715.845:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.856702][ T6014] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2644.904161][ T6014] usb 4-1: config 127 has no interface number 1 [ 2644.932455][ T6014] usb 4-1: config 127 interface 171 has no altsetting 0 [ 2644.941060][ T30] audit: type=1326 audit(1768807715.845:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.970344][ T6014] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2644.984381][ T30] audit: type=1326 audit(1768807715.845:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2644.984564][ T6014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.089010][ T6014] usb 4-1: Product: syz [ 2645.089254][ T30] audit: type=1326 audit(1768807715.845:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2645.198169][ T6014] usb 4-1: Manufacturer: syz [ 2645.199584][ T30] audit: type=1326 audit(1768807715.845:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.7.8596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9038f749 code=0x7fc00000 [ 2645.289296][ T6014] usb 4-1: SerialNumber: syz [ 2645.411636][ T6752] sit0: mtu less than device minimum [ 2645.627614][ T6014] xr_serial 4-1:127.171: xr_serial converter detected [ 2645.644165][ T6014] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 2645.658074][ T6014] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2646.108793][ T6014] usb 4-1: USB disconnect, device number 47 [ 2646.116696][ T6014] xr_serial 4-1:127.171: device disconnected [ 2646.833248][ T6769] xt_hashlimit: size too large, truncated to 1048576 [ 2648.219756][ T6788] SELinux: failed to load policy [ 2649.049414][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8615'. [ 2650.356383][ T6825] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.8620' sets config #485 [ 2650.688278][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8619'. [ 2650.857810][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2650.857826][ T30] audit: type=1400 audit(1768807721.907:5866): avc: denied { setattr } for pid=6831 comm="syz.8.8622" name="RAWv6" dev="sockfs" ino=135743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2651.153838][ T6842] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 2651.160445][ T6842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2651.203404][ T6842] vhci_hcd vhci_hcd.0: Device attached [ 2651.468585][ T6014] usb 47-1: new low-speed USB device number 6 using vhci_hcd [ 2651.473328][T17195] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2651.651542][T17195] usb 8-1: config 0 has no interfaces? [ 2651.668877][T17195] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2651.691566][T17195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.714593][T19529] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2651.745514][T17195] usb 8-1: config 0 descriptor?? [ 2651.906910][T19529] usb 5-1: device descriptor read/64, error -71 [ 2652.023183][ T6861] xt_hashlimit: size too large, truncated to 1048576 [ 2652.227615][ T6843] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 2652.228144][T28274] usb 8-1: USB disconnect, device number 40 [ 2652.249803][ T3009] vhci_hcd vhci_hcd.7: stop threads [ 2652.270465][T19529] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2652.278557][ T3009] vhci_hcd vhci_hcd.7: release socket [ 2652.286070][ T3009] vhci_hcd vhci_hcd.7: disconnect device [ 2652.312770][ T6862] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8628'. [ 2652.462942][T19529] usb 5-1: device descriptor read/64, error -71 [ 2652.580711][T19529] usb usb5-port1: attempt power cycle [ 2652.810034][ T6880] bridge_slave_0: left allmulticast mode [ 2652.815998][ T6880] bridge_slave_0: left promiscuous mode [ 2652.822646][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2652.986521][T19529] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2653.107509][T19529] usb 5-1: device descriptor read/8, error -71 [ 2653.189510][ T6880] bridge_slave_1: left allmulticast mode [ 2653.200837][ T6880] bridge_slave_1: left promiscuous mode [ 2653.238917][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2653.370278][ T6880] bond0: (slave bond_slave_0): Releasing backup interface [ 2653.382304][T19529] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2653.404789][T19529] usb 5-1: device descriptor read/8, error -71 [ 2653.487026][ T6880] bond0: (slave bond_slave_1): Releasing backup interface [ 2653.522692][T19529] usb usb5-port1: unable to enumerate USB device [ 2653.540746][ T6880] team0: Port device team_slave_0 removed [ 2653.561191][ T6880] team0: Port device team_slave_1 removed [ 2653.567693][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2653.602892][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2653.640076][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2653.739580][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2653.752053][ T6880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2654.421004][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2654.593900][ T6895] batadv_slave_0: entered promiscuous mode [ 2655.437387][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8638'. [ 2655.557609][ T6913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2656.229828][ T30] audit: type=1400 audit(1768807726.939:5867): avc: denied { setopt } for pid=6933 comm="syz.8.8644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2656.758386][ T6931] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 2656.765006][ T6931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2656.796800][ T6931] vhci_hcd vhci_hcd.0: Device attached [ 2656.939376][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8645'. [ 2656.953295][ T6014] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 2657.029608][T28272] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2657.150175][T17073] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 2657.242775][T28272] usb 5-1: config 0 has no interfaces? [ 2657.249744][T28272] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2657.282871][T28272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.325971][T28272] usb 5-1: config 0 descriptor?? [ 2657.476588][T17814] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2657.585056][ T6937] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 2657.592598][ T37] vhci_hcd vhci_hcd.4: stop threads [ 2657.603452][T28272] usb 5-1: USB disconnect, device number 41 [ 2657.609494][ T37] vhci_hcd vhci_hcd.4: release socket [ 2657.620428][ T37] vhci_hcd vhci_hcd.4: disconnect device [ 2657.636903][T17814] usb 8-1: Using ep0 maxpacket: 32 [ 2657.651765][T17814] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 2657.681649][T17814] usb 8-1: config 0 has no interface number 0 [ 2657.702021][T17814] usb 8-1: config 0 interface 184 has no altsetting 0 [ 2657.728877][T17814] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2657.757615][T17814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.785329][T17814] usb 8-1: Product: syz [ 2657.801636][T17814] usb 8-1: Manufacturer: syz [ 2657.816231][T17814] usb 8-1: SerialNumber: syz [ 2657.835977][T17814] usb 8-1: config 0 descriptor?? [ 2657.856856][T17814] smsc75xx v1.0.0 [ 2659.476462][T17814] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2659.815468][T17814] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2660.430143][T17814] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2660.441674][T17814] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2660.453791][T17814] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2660.465457][T17814] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2660.509046][ T6974] lo speed is unknown, defaulting to 1000 [ 2660.536052][T17814] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 2660.681396][ T6985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2660.995030][ T6989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2661.838061][ T9] usb 8-1: USB disconnect, device number 41 [ 2661.929266][ T7003] netlink: 'syz.7.8661': attribute type 1 has an invalid length. [ 2662.038069][ T7003] bond1: entered promiscuous mode [ 2662.043889][ T7003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2662.641946][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2662.648892][ T7004] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 2662.659646][ T7004] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 2662.669216][T17073] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2662.682769][ T7004] bond1: (slave wireguard0): making interface the new active one [ 2662.690780][ T7004] wireguard0: entered promiscuous mode [ 2662.697920][ T7004] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 2662.729320][ T7005] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 2662.870099][ T7005] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 2662.892659][ T7013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2662.949505][ T30] audit: type=1400 audit(1768807733.225:5868): avc: denied { accept } for pid=7020 comm="syz.8.8664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2665.291775][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8671'. [ 2665.315467][ T7042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2665.321978][ T7042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2665.330604][T21574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2665.472692][T21574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2665.478407][ T7042] vhci_hcd vhci_hcd.0: Device attached [ 2665.487019][T21574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2665.504153][T21574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2665.511660][T21574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2665.658268][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8672'. [ 2665.687006][ T6014] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2666.196531][ T7057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8674'. [ 2666.296784][ T7043] lo speed is unknown, defaulting to 1000 [ 2666.321356][ T6014] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 2666.360390][ T7062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=7062 comm=syz.8.8675 [ 2666.575292][ T7048] vhci_hcd: connection reset by peer [ 2666.624155][T17943] vhci_hcd vhci_hcd.3: stop threads [ 2666.636747][T17943] vhci_hcd vhci_hcd.3: release socket [ 2666.642307][T17943] vhci_hcd vhci_hcd.3: disconnect device [ 2666.819054][ T7043] chnl_net:caif_netlink_parms(): no params data found [ 2667.384063][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 2667.412941][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 2667.455852][ T7043] bridge_slave_0: entered allmulticast mode [ 2667.476667][ T7043] bridge_slave_0: entered promiscuous mode [ 2667.509658][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 2667.600649][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 2667.632897][ T7043] bridge_slave_1: entered allmulticast mode [ 2667.640119][ T7043] bridge_slave_1: entered promiscuous mode [ 2667.825102][T21574] Bluetooth: hci3: command tx timeout [ 2667.958111][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2667.979544][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2668.074840][ T7043] team0: Port device team_slave_0 added [ 2668.116276][ T7043] team0: Port device team_slave_1 added [ 2668.425896][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2668.444007][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2668.510654][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2668.610271][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2668.617389][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2668.643565][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2668.777473][ T7043] hsr_slave_0: entered promiscuous mode [ 2668.798513][ T7043] hsr_slave_1: entered promiscuous mode [ 2668.810490][ T7043] debugfs: 'hsr0' already exists in 'hsr' [ 2668.822547][ T7043] Cannot create hsr debugfs directory [ 2669.212944][ T7093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2669.499167][ T7043] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.637553][ T7043] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.755944][ T7043] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.820914][ T7043] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2670.039199][T21574] Bluetooth: hci3: command tx timeout [ 2670.431589][ T7108] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8687'. [ 2670.657209][ T7043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2670.685107][ T7043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2670.707197][ T7043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2670.732185][ T7043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2670.973700][ T30] audit: type=1400 audit(1768807740.727:5869): avc: denied { ioctl } for pid=7110 comm="syz.3.8688" path="socket:[137018]" dev="sockfs" ino=137018 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2671.141399][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8689'. [ 2671.196401][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2671.221336][ T7125] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8690'. [ 2671.243272][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 2671.260176][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.267232][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2671.313143][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.320220][T11368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2671.532684][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2671.595634][ T7043] veth0_vlan: entered promiscuous mode [ 2671.617698][ T7043] veth1_vlan: entered promiscuous mode [ 2671.662213][ T7043] veth0_macvtap: entered promiscuous mode [ 2671.680287][ T7043] veth1_macvtap: entered promiscuous mode [ 2671.705608][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2671.720135][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2671.743983][T11368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2671.756940][T11368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2671.811789][ T1960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2671.826063][ T6014] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2671.837582][ T1960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2671.887545][T11368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2671.900365][T11368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2671.929585][ T1960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2671.946897][ T1960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2672.433413][T21574] Bluetooth: hci3: command tx timeout [ 2672.634691][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880355f4400: rx timeout, send abort [ 2672.646324][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880355f4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2673.828524][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8698'. [ 2674.153965][ T6014] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2674.347299][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2674.364772][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2674.645706][T21574] Bluetooth: hci3: command tx timeout [ 2675.047728][ T7174] netlink: 4804 bytes leftover after parsing attributes in process `syz.8.8701'. [ 2675.057074][ T7174] netlink: 4804 bytes leftover after parsing attributes in process `syz.8.8701'. [ 2675.128187][ T6014] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2675.856372][ T6014] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2676.379661][ T7180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2676.429070][ T6014] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2676.463108][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2676.471134][ T6014] usb 2-1: SerialNumber: syz [ 2678.375708][ T7219] netlink: 'syz.4.8712': attribute type 1 has an invalid length. [ 2678.427834][ T7219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2678.540180][ T7219] bond5: (slave gretap1): making interface the new active one [ 2678.957064][ T7215] orangefs_mount: mount request failed with -4 [ 2679.751053][ T7219] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 2679.911144][ T6014] usb 2-1: 0:2 : does not exist [ 2680.961235][ T6014] usb 2-1: USB disconnect, device number 95 [ 2681.744549][ T6014] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2681.917055][ T6014] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2681.938875][ T6014] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2681.952205][ T6014] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 2681.971312][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.992542][ T6014] usb 2-1: config 0 descriptor?? [ 2682.176205][ T7257] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2682.600635][ T7256] lo speed is unknown, defaulting to 1000 [ 2682.726983][T19666] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2683.260338][ T7236] Bluetooth: hci3: command 0x0405 tx timeout [ 2683.337208][T19666] usb 4-1: Using ep0 maxpacket: 16 [ 2683.380982][T19666] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2683.431186][T19666] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2683.482246][T19666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2683.505260][T19666] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2683.554151][T19666] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 2683.584351][T19666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2683.629263][T19666] usb 4-1: Product: syz [ 2683.649318][T19666] usb 4-1: Manufacturer: syz [ 2683.678833][T19666] usb 4-1: SerialNumber: syz [ 2683.711646][ T5174] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2683.720733][T19666] usb 4-1: config 0 descriptor?? [ 2683.753073][T19666] xbox_remote_probe: Unexpected endpoint_in [ 2683.901611][ T6014] usbhid 2-1:0.0: can't add hid device: -71 [ 2683.909941][ T6014] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2683.919245][ T5174] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2683.929658][ T6014] usb 2-1: USB disconnect, device number 96 [ 2683.938528][ T5174] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2683.962641][ T5174] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 2684.009032][ T5174] usb 5-1: config 8 has no interface number 0 [ 2684.018266][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8720'. [ 2684.028872][ T5174] usb 5-1: config 8 interface 130 has no altsetting 1 [ 2684.038123][ T5174] usb 5-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2684.051541][ T5174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2685.188980][ T6014] usb 4-1: USB disconnect, device number 48 [ 2686.849869][ T5174] usb 5-1: string descriptor 0 read error: -71 [ 2686.857429][ T5174] HFC-S_USB 5-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2686.898338][ T5174] usb 5-1: USB disconnect, device number 42 [ 2686.929186][T17814] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2687.192912][T17814] usb 2-1: Using ep0 maxpacket: 16 [ 2687.199358][ T30] audit: type=1400 audit(1768807755.908:5870): avc: denied { getopt } for pid=7275 comm="syz.3.8725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2687.242312][T17814] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 2687.268556][T17814] usb 2-1: config 0 has no interface number 0 [ 2687.288022][T17814] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 2687.322436][T17814] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2687.346220][T17814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.369438][T17814] usb 2-1: Product: syz [ 2687.381865][T17814] usb 2-1: Manufacturer: syz [ 2687.422115][T17814] usb 2-1: SerialNumber: syz [ 2687.441629][T17814] usb 2-1: config 0 descriptor?? [ 2687.464021][ T7283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2687.503060][T17814] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2687.617872][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056547c00: rx timeout, send abort [ 2687.626217][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031b92c00: rx timeout, send abort [ 2687.634748][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888056547c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2687.649149][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888031b92c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2688.586434][ T3505] usb 2-1: Failed to submit usb control message: -110 [ 2688.611275][ T3505] usb 2-1: unable to send the bmi data to the device: -110 [ 2688.658985][ T3505] usb 2-1: unable to get target info from device [ 2688.677795][ T3505] usb 2-1: could not get target info (-110) [ 2688.693206][ T3505] usb 2-1: could not probe fw (-110) [ 2688.705884][ T7316] fuse: Bad value for 'fd' [ 2689.184934][T19666] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2689.528147][T19666] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2689.591156][T19666] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2689.612784][T19666] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 2689.633905][T19666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2689.648103][ T7332] lo speed is unknown, defaulting to 1000 [ 2689.731028][T19666] usb 4-1: config 0 descriptor?? [ 2691.108613][T19666] usbhid 4-1:0.0: can't add hid device: -71 [ 2691.135405][T19666] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2691.167606][T19529] usb 2-1: USB disconnect, device number 97 [ 2691.175779][ T6399] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2691.186542][T19666] usb 4-1: USB disconnect, device number 49 [ 2691.369472][ T6399] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2691.390102][ T6399] usb 5-1: config 8 has an invalid interface number: 130 but max is 1 [ 2691.407664][ T6399] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 2691.419374][ T6399] usb 5-1: config 8 has no interface number 0 [ 2691.426441][ T6399] usb 5-1: config 8 interface 130 has no altsetting 1 [ 2691.433392][ T6399] usb 5-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2691.448186][ T6399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.856776][ T30] audit: type=1400 audit(1768807760.258:5871): avc: denied { remount } for pid=7350 comm="syz.8.8744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2692.809061][T17814] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2692.841601][ T7364] fuse: Bad value for 'fd' [ 2692.926777][ T7131] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2692.984270][T17814] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2692.993741][T17814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.002787][T17814] usb 2-1: Product: syz [ 2693.007129][T17814] usb 2-1: Manufacturer: syz [ 2693.011760][T17814] usb 2-1: SerialNumber: syz [ 2693.030797][T17814] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2693.046587][T19529] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2693.065689][T19666] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2693.099619][ T7131] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2693.108940][ T7131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.123724][ T7131] usb 4-1: config 0 descriptor?? [ 2693.241858][T19666] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2693.260911][T19666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.279253][T19666] usb 8-1: Product: syz [ 2693.288154][T19666] usb 8-1: Manufacturer: syz [ 2693.298507][T19666] usb 8-1: SerialNumber: syz [ 2693.311246][T19666] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2693.332519][ T5174] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2693.371931][T17814] usb 2-1: USB disconnect, device number 98 [ 2693.805380][ T7375] fuse: Bad value for 'fd' [ 2694.032647][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8753'. [ 2694.065949][T17650] usb 8-1: USB disconnect, device number 42 [ 2694.121035][ T6399] usb 5-1: string descriptor 0 read error: -71 [ 2694.148015][T19529] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2694.156114][ T6399] HFC-S_USB 5-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2694.177005][T19529] ath9k_htc: Failed to initialize the device [ 2694.184327][ T6399] usb 5-1: USB disconnect, device number 43 [ 2694.196969][T17814] usb 2-1: ath9k_htc: USB layer deinitialized [ 2694.763330][ T5174] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 2694.785704][ T5174] ath9k_htc: Failed to initialize the device [ 2694.792404][T17650] usb 8-1: ath9k_htc: USB layer deinitialized [ 2695.038495][T17814] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2695.290694][T17814] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2695.307614][T17814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2695.320657][ T7387] xt_hashlimit: size too large, truncated to 1048576 [ 2695.397691][T17814] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 2695.418226][T17814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2695.559953][T17814] usb 2-1: config 0 descriptor?? [ 2695.761777][ T7131] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2695.789133][ T7131] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2695.800481][ T7131] dib0700: firmware download failed at 7 with -22 [ 2695.814760][ T7131] usb 4-1: USB disconnect, device number 50 [ 2695.888030][ T7411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2695.894550][ T7411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2696.059431][ T7411] vhci_hcd vhci_hcd.0: Device attached [ 2696.562034][ T7131] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2696.572152][ T7419] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 2696.755335][ T7131] usb 4-1: config 0 has no interfaces? [ 2696.771973][ T7131] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2696.801646][ T7131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2696.846292][ T7131] usb 4-1: config 0 descriptor?? [ 2696.891917][T17814] usbhid 2-1:0.0: can't add hid device: -71 [ 2696.903416][T17814] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2697.030478][T17814] usb 2-1: USB disconnect, device number 99 [ 2697.462122][ T6014] usb 4-1: USB disconnect, device number 51 [ 2697.501682][ T7415] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 2697.524545][ T4248] vhci_hcd vhci_hcd.3: stop threads [ 2697.530878][ T4248] vhci_hcd vhci_hcd.3: release socket [ 2697.538431][ T4248] vhci_hcd vhci_hcd.3: disconnect device [ 2697.619413][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8767'. [ 2697.901592][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8769'. [ 2697.958546][ T7448] xt_hashlimit: size too large, truncated to 1048576 [ 2700.026494][ T7487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2700.033031][ T7487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2700.047019][ T7487] vhci_hcd vhci_hcd.0: Device attached [ 2700.230492][ T7494] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 2700.237108][ T7494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2700.257035][ T7494] vhci_hcd vhci_hcd.0: Device attached [ 2700.303439][T19666] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2700.335381][ T6014] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2700.517652][ T5174] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 2700.527610][ T6014] usb 2-1: config 0 has no interfaces? [ 2700.527701][T17814] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2700.533119][ T6014] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2700.559808][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2700.582602][ T6014] usb 2-1: config 0 descriptor?? [ 2700.726121][T17814] usb 5-1: config 0 has no interfaces? [ 2700.736814][T17814] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2700.747534][T17814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2700.759385][T17814] usb 5-1: config 0 descriptor?? [ 2700.810738][ T7488] usb 35-1: recv xbuf, 0 [ 2700.815608][T17814] usb 2-1: USB disconnect, device number 100 [ 2700.827909][T17936] vhci_hcd vhci_hcd.1: stop threads [ 2700.834395][T17936] vhci_hcd vhci_hcd.1: release socket [ 2700.842195][T17936] vhci_hcd vhci_hcd.1: disconnect device [ 2700.880498][T19666] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2700.998589][ T7495] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 2701.006000][T17650] usb 5-1: USB disconnect, device number 44 [ 2701.015555][T17936] vhci_hcd vhci_hcd.4: stop threads [ 2701.021396][T17936] vhci_hcd vhci_hcd.4: release socket [ 2701.027653][T17936] vhci_hcd vhci_hcd.4: disconnect device [ 2702.465050][T28274] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2702.501494][ T7517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2702.690818][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8787'. [ 2702.742127][ T7419] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2702.743437][T28274] usb 2-1: config 8 has an invalid interface number: 130 but max is 0 [ 2702.757227][T28274] usb 2-1: config 8 has no interface number 0 [ 2702.768340][T28274] usb 2-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2702.779814][T28274] usb 2-1: config 8 interface 130 has no altsetting 0 [ 2702.786911][T28274] usb 2-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2702.796585][T28274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2703.008237][T17650] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2704.606058][T17650] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2704.625270][T17650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2704.634475][T17650] usb 5-1: Product: syz [ 2704.640069][T17650] usb 5-1: Manufacturer: syz [ 2704.645250][T17650] usb 5-1: SerialNumber: syz [ 2704.657271][T17650] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2704.673886][T17814] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2705.030666][ T7419] usb 5-1: USB disconnect, device number 45 [ 2705.047692][ T7541] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2705.054228][ T7541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2705.062948][ T7541] vhci_hcd vhci_hcd.0: Device attached [ 2705.114119][ T30] audit: type=1400 audit(1768807772.671:5872): avc: denied { unmount } for pid=5863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2705.422093][T18280] usb 47-1: new low-speed USB device number 7 using vhci_hcd [ 2705.430086][ T6014] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2705.672001][ T30] audit: type=1400 audit(1768807772.933:5873): avc: denied { write } for pid=7550 comm="syz.3.8797" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2705.765354][T28274] usb 2-1: string descriptor 0 read error: -71 [ 2705.781517][T28274] HFC-S_USB 2-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2705.794913][T28274] usb 2-1: USB disconnect, device number 101 [ 2705.795334][T17814] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2705.816909][T17814] ath9k_htc: Failed to initialize the device [ 2705.826546][ T7419] usb 5-1: ath9k_htc: USB layer deinitialized [ 2705.983886][ T6014] usb 8-1: config 0 has no interfaces? [ 2705.989970][ T6014] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2706.006414][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2706.373447][ T5174] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2706.394962][ T6014] usb 8-1: config 0 descriptor?? [ 2706.980999][ T7546] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6 [ 2706.990398][ T7419] usb 8-1: USB disconnect, device number 43 [ 2707.009169][T16794] vhci_hcd vhci_hcd.7: stop threads [ 2707.022134][T16794] vhci_hcd vhci_hcd.7: release socket [ 2707.040642][T16794] vhci_hcd vhci_hcd.7: disconnect device [ 2707.058993][ T7572] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2707.065504][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2707.089498][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 2707.444532][ T7131] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 2707.455424][T17814] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2707.704803][T17814] usb 2-1: config 0 has no interfaces? [ 2707.718939][T17814] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2707.757169][T17814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.785762][T17814] usb 2-1: config 0 descriptor?? [ 2707.795698][ T7590] overlayfs: conflicting lowerdir path [ 2707.872186][ T6014] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2708.388184][ T7573] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 2708.437610][ T3461] vhci_hcd vhci_hcd.1: stop threads [ 2708.455468][ T3461] vhci_hcd vhci_hcd.1: release socket [ 2708.471407][ T3461] vhci_hcd vhci_hcd.1: disconnect device [ 2708.509972][ T5174] usb 2-1: USB disconnect, device number 102 [ 2708.598462][ T7599] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2708.686472][ T6014] usb 4-1: config 8 has an invalid interface number: 130 but max is 1 [ 2708.699663][ T6014] usb 4-1: config 8 has an invalid interface number: 130 but max is 1 [ 2708.748895][ T6014] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 2708.757773][ T6014] usb 4-1: config 8 has no interface number 0 [ 2708.808530][ T6014] usb 4-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2708.823965][ T7604] veth0_to_hsr: mtu less than device minimum [ 2708.842052][ T6014] usb 4-1: config 8 interface 130 has no altsetting 1 [ 2708.849137][ T7603] ALSA: mixer_oss: invalid OSS volume '' [ 2708.854915][ T6014] usb 4-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2708.875118][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.023941][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8813'. [ 2709.507261][ T5041] Bluetooth: hci2: command 0x0406 tx timeout [ 2711.009927][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8822'. [ 2711.154207][T18280] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 2711.324661][ T6014] usb 4-1: string descriptor 0 read error: -71 [ 2711.378101][ T6014] HFC-S_USB 4-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2711.443691][ T6014] usb 4-1: USB disconnect, device number 52 [ 2712.330012][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8823'. [ 2712.560876][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8824'. [ 2712.607175][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8825'. [ 2712.639301][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 2712.646481][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.278527][ T7659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2713.324934][ T7131] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2713.467141][ T7663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2714.004814][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8824'. [ 2714.063210][ T7645] nbd: device at index 64 is going down [ 2715.488836][ T7684] siw: device registration error -23 [ 2715.509963][ T7684] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 2716.119542][ T7676] netlink: 'syz.1.8831': attribute type 2 has an invalid length. [ 2716.165381][ T7676] random: crng reseeded on system resumption [ 2716.193947][ T30] audit: type=1400 audit(1768807782.998:5874): avc: denied { append } for pid=7671 comm="syz.1.8831" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2716.830471][T18280] IPVS: starting estimator thread 0... [ 2716.940242][ T7699] IPVS: using max 81 ests per chain, 194400 per kthread [ 2717.720149][ T7713] xt_hashlimit: size too large, truncated to 1048576 [ 2718.306119][ T7131] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2718.610116][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.617260][ T7730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.624666][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.631766][ T7730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.782799][ T7730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2718.936907][ T7131] usb 2-1: Using ep0 maxpacket: 8 [ 2718.998950][ T7131] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2719.020075][ T7131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.090005][ T7131] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2719.126440][ T7131] pvrusb2: ********** [ 2719.168753][ T7131] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2719.208133][ T7131] pvrusb2: Important functionality might not be entirely working. [ 2719.236793][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8845'. [ 2719.248267][ T7131] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2719.284267][ T7131] pvrusb2: ********** [ 2719.331215][ T2335] pvrusb2: Invalid write control endpoint [ 2719.366783][ T7741] 9p: Bad value for 'rfdno' [ 2719.385285][T19666] usb 2-1: USB disconnect, device number 103 [ 2719.437390][ T2335] pvrusb2: Invalid write control endpoint [ 2719.459841][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2719.508416][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2719.534926][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2719.662783][ T7746] program syz.3.8848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2719.674006][ T7746] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2719.707001][ T2335] pvrusb2: Device being rendered inoperable [ 2719.771371][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2719.780230][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 2719.795475][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2719.808338][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2719.948249][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2720.164227][ T7751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2720.170759][ T7751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2720.207882][ T7751] vhci_hcd vhci_hcd.0: Device attached [ 2720.465805][ T6014] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 2720.476341][T18280] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2720.733234][T19666] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2720.853215][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8853'. [ 2721.197902][ T30] audit: type=1400 audit(1768807787.385:5875): avc: denied { connect } for pid=7762 comm="syz.4.8853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2721.339480][T18280] usb 4-1: config 0 has no interfaces? [ 2721.346070][T18280] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2721.355763][T18280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2721.365172][T18280] usb 4-1: config 0 descriptor?? [ 2721.450274][T19666] usb 2-1: Using ep0 maxpacket: 16 [ 2721.457977][T19666] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2721.466297][T19666] usb 2-1: config 1 has no interface number 0 [ 2721.474669][T19666] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2721.484595][T19666] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2721.532489][T19666] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2721.543987][T19666] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2721.554338][T19666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.563322][T19666] usb 2-1: Product: syz [ 2721.567645][T19666] usb 2-1: Manufacturer: syz [ 2721.572282][T19666] usb 2-1: SerialNumber: syz [ 2721.612698][ T7750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2721.620335][ T7750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2721.667747][ T7752] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 2721.677145][T18280] usb 4-1: USB disconnect, device number 53 [ 2721.684970][T17937] vhci_hcd vhci_hcd.3: stop threads [ 2721.690806][T17937] vhci_hcd vhci_hcd.3: release socket [ 2721.696387][T17937] vhci_hcd vhci_hcd.3: disconnect device [ 2722.060443][ T7750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2722.067819][ T7750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2722.251037][ T7773] nbd4: detected capacity change from 0 to 63 [ 2722.277412][ T7774] block nbd4: NBD_DISCONNECT [ 2722.298926][ T7774] block nbd4: Disconnected due to user request. [ 2722.318466][ T7774] block nbd4: shutting down sockets [ 2722.736927][T19666] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2722.769987][T19666] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2722.806443][ T7785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2722.864087][T19666] aqc111 2-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 6a:f0:5a:eb:e2:6f [ 2722.914344][T19666] usb 2-1: USB disconnect, device number 104 [ 2722.938203][T19666] aqc111 2-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2723.021119][ T5174] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2723.096303][T19666] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2723.138472][T19666] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2723.170497][T19666] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2723.213124][ T5174] usb 8-1: Using ep0 maxpacket: 16 [ 2723.231449][ T5174] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 2723.253627][ T5174] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2723.286893][ T5174] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2723.301839][ T5174] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2723.319279][ T5174] usb 8-1: Product: syz [ 2723.329999][ T5174] usb 8-1: SerialNumber: syz [ 2723.351138][ T5174] usb 8-1: config 0 descriptor?? [ 2724.030787][ T30] audit: type=1400 audit(1768807790.359:5876): avc: denied { create } for pid=7795 comm="syz.8.8860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2725.873592][ T7817] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8864'. [ 2726.070904][ T6014] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2726.684544][ T6399] usb 8-1: USB disconnect, device number 44 [ 2727.438025][ T7825] lo speed is unknown, defaulting to 1000 [ 2727.571837][ T7836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=7836 comm=syz.3.8869 [ 2727.873242][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8869'. [ 2728.479196][ T7853] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8872'. [ 2728.849216][ T7855] siw: device registration error -23 [ 2730.265995][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8878'. [ 2730.561577][ T7869] can0: slcan on ttyS3. [ 2730.633405][T18280] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2730.691026][ T7874] xt_hashlimit: size too large, truncated to 1048576 [ 2730.772132][ T7858] can0 (unregistered): slcan off ttyS3. [ 2730.891325][T18280] usb 5-1: Using ep0 maxpacket: 8 [ 2730.918814][T18280] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 2730.980048][T18280] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2731.008927][T18280] usb 5-1: config 127 has no interface number 1 [ 2731.057891][T18280] usb 5-1: config 127 interface 171 has no altsetting 0 [ 2731.102846][ T7131] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2731.103552][T18280] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2731.197370][T18280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.237931][T18280] usb 5-1: Product: syz [ 2731.243016][T18280] usb 5-1: Manufacturer: syz [ 2731.247649][T18280] usb 5-1: SerialNumber: syz [ 2731.312580][ T7131] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2731.336624][ T7131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.411124][ T7894] fuse: Bad value for 'fd' [ 2731.958837][ T7131] usb 2-1: Product: syz [ 2731.974062][ T7131] usb 2-1: Manufacturer: syz [ 2731.987610][ T7131] usb 2-1: SerialNumber: syz [ 2732.001897][T18280] xr_serial 5-1:127.171: xr_serial converter detected [ 2732.022621][ T7131] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2732.022859][T18280] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 2732.052434][ T6399] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2732.061882][T18280] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2732.094177][T18280] usb 5-1: USB disconnect, device number 46 [ 2732.117033][T18280] xr_serial 5-1:127.171: device disconnected [ 2732.526155][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8889'. [ 2732.786858][ T7131] usb 2-1: USB disconnect, device number 105 [ 2732.813316][ T5174] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2732.884300][ T7906] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2732.897034][ T30] audit: type=1326 audit(1768807798.647:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.4.8890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03f8b8f749 code=0x0 [ 2733.016438][ T5174] usb 8-1: Using ep0 maxpacket: 8 [ 2733.023927][ T5174] usb 8-1: config 127 has an invalid interface number: 171 but max is 1 [ 2733.035494][ T5174] usb 8-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2733.073883][ T5174] usb 8-1: config 127 has no interface number 1 [ 2733.081751][ T5174] usb 8-1: config 127 interface 171 has no altsetting 0 [ 2733.093254][ T5174] usb 8-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2733.116516][ T5174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2733.125448][ T5174] usb 8-1: Product: syz [ 2733.129607][ T5174] usb 8-1: Manufacturer: syz [ 2733.136996][ T5174] usb 8-1: SerialNumber: syz [ 2733.160173][ T30] audit: type=1400 audit(1768807798.899:5878): avc: denied { nosuid_transition } for pid=7911 comm="syz.8.8892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 2733.183479][ T30] audit: type=1400 audit(1768807798.899:5879): avc: denied { transition } for pid=7911 comm="syz.8.8892" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=4164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 2733.218120][ T30] audit: type=1400 audit(1768807798.899:5880): avc: denied { entrypoint } for pid=7911 comm="syz.8.8892" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=4164 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2733.249793][ T6399] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2733.257602][ T6399] ath9k_htc: Failed to initialize the device [ 2733.264306][ T7131] usb 2-1: ath9k_htc: USB layer deinitialized [ 2733.270512][ T30] audit: type=1400 audit(1768807798.899:5881): avc: denied { noatsecure } for pid=7911 comm="syz.8.8892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 2733.372516][ T5174] xr_serial 8-1:127.171: xr_serial converter detected [ 2733.387669][ T5174] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 2733.395305][ T5174] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2733.413668][ T5174] usb 8-1: USB disconnect, device number 45 [ 2733.426969][ T5174] xr_serial 8-1:127.171: device disconnected [ 2733.796796][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2733.943189][ T7925] binder: 7915:7925 ioctl c018620c 0 returned -14 [ 2733.967881][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2733.975904][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2733.985047][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.995462][ T9] usb 4-1: config 0 descriptor?? [ 2734.006566][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2734.272297][ T7936] netlink: 'syz.7.8899': attribute type 22 has an invalid length. [ 2734.280380][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8899'. [ 2734.289697][ T7936] bond0: option ad_select: unable to set because the bond device is up [ 2734.596026][ T9] gspca_sunplus: reg_w_riv err -71 [ 2734.602861][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2734.627076][ T9] usb 4-1: USB disconnect, device number 54 [ 2735.069333][ T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2735.475693][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2735.548491][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.561027][ T9] usb 2-1: Product: syz [ 2735.565243][ T9] usb 2-1: Manufacturer: syz [ 2735.569830][ T9] usb 2-1: SerialNumber: syz [ 2735.590098][ T7966] xt_hashlimit: size too large, truncated to 1048576 [ 2735.600411][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2735.682023][ T7131] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2735.867064][ T9] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2736.107167][ T9] usb 8-1: config 8 has an invalid interface number: 130 but max is 0 [ 2736.139057][ T9] usb 8-1: config 8 has no interface number 0 [ 2736.145161][ T9] usb 8-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2736.229424][T17814] usb 2-1: USB disconnect, device number 106 [ 2736.277360][ T9] usb 8-1: config 8 interface 130 has no altsetting 0 [ 2736.305982][ T9] usb 8-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2736.326722][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2737.168945][ T7131] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2737.169496][ T5174] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2737.176088][ T7131] ath9k_htc: Failed to initialize the device [ 2737.266567][T17814] usb 2-1: ath9k_htc: USB layer deinitialized [ 2738.022049][ T5174] usb 4-1: config 8 has an invalid interface number: 130 but max is 0 [ 2738.042602][ T5174] usb 4-1: config 8 has no interface number 0 [ 2738.057558][ T5174] usb 4-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2738.082206][ T5174] usb 4-1: config 8 interface 130 has no altsetting 0 [ 2738.229442][ T5174] usb 4-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2738.239043][ T5174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.414386][ T7996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2739.577386][ T9] usb 8-1: string descriptor 0 read error: -71 [ 2739.598412][ T9] HFC-S_USB 8-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2739.623705][ T9] usb 8-1: USB disconnect, device number 46 [ 2739.998964][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2740.010921][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2740.266448][ T7994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2740.709869][ T5174] usb 4-1: string descriptor 0 read error: -71 [ 2740.730300][ T5174] HFC-S_USB 4-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2740.751879][ T5174] usb 4-1: USB disconnect, device number 55 [ 2740.767690][ T8013] dvmrp0: entered allmulticast mode [ 2741.406340][ T8025] tipc: Started in network mode [ 2741.416945][ T8025] tipc: Node identity a2ab5fd8a7df, cluster identity 4711 [ 2741.438390][ T8025] tipc: Enabled bearer , priority 0 [ 2741.472009][ T8026] syzkaller0: entered promiscuous mode [ 2741.498708][ T8026] syzkaller0: entered allmulticast mode [ 2741.566073][ T8025] tipc: Resetting bearer [ 2741.602017][ T8024] tipc: Resetting bearer [ 2741.690595][ T8024] tipc: Disabling bearer [ 2741.756282][ T8030] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2741.765702][ T8030] overlayfs: missing 'lowerdir' [ 2741.802999][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8929'. [ 2742.040611][ T8033] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8928'. [ 2743.646642][ T8041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2743.857939][ T7131] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 2743.943051][ T6014] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2744.034989][ T7131] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2744.058647][ T7131] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2744.093321][ T7131] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2744.116909][ T7131] usb 8-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2744.126145][ T7131] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.136321][ T7131] usb 8-1: Product: syz [ 2744.141291][ T7131] usb 8-1: Manufacturer: syz [ 2744.146034][ T6014] usb 2-1: Using ep0 maxpacket: 8 [ 2744.146036][ T7131] usb 8-1: SerialNumber: syz [ 2744.147851][ T7131] usb 8-1: config 0 descriptor?? [ 2744.160718][T17814] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2744.173717][ T7131] ti_usb_3410_5052 8-1:0.0: required endpoints missing [ 2744.194748][ T6014] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 2744.213096][ T6014] usb 2-1: config 0 has no interface number 0 [ 2744.232142][ T6014] usb 2-1: config 0 interface 191 has no altsetting 0 [ 2744.256450][ T6014] usb 2-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 2744.280996][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.308195][ T6014] usb 2-1: Product: syz [ 2744.323508][ T6014] usb 2-1: Manufacturer: syz [ 2744.333321][T17814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2744.344674][T17814] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2744.353437][ T6014] usb 2-1: SerialNumber: syz [ 2744.360327][T17814] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2744.382758][ T6014] usb 2-1: config 0 descriptor?? [ 2744.391337][ T7131] usb 8-1: USB disconnect, device number 47 [ 2744.398091][T17814] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 2744.420997][ T6014] usbtest 2-1:0.191: EZ-USB device [ 2744.430671][T17814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.441595][ T6014] usbtest 2-1:0.191: high-speed {control bulk-in bulk-out} tests (+alt) [ 2744.456224][T17814] usb 4-1: Product: syz [ 2744.460381][T17814] usb 4-1: Manufacturer: syz [ 2744.465064][T17814] usb 4-1: SerialNumber: syz [ 2744.473375][T17814] usb 4-1: config 0 descriptor?? [ 2744.485700][T17814] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 2744.649908][ T7131] usb 2-1: USB disconnect, device number 107 [ 2744.698082][T17814] usb 4-1: USB disconnect, device number 56 [ 2745.274059][ T8064] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 2745.280692][ T8064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2745.319409][ T8064] vhci_hcd vhci_hcd.0: Device attached [ 2745.349284][ T8065] vhci_hcd: connection closed [ 2745.349438][T17940] vhci_hcd vhci_hcd.8: stop threads [ 2745.364040][T17940] vhci_hcd vhci_hcd.8: release socket [ 2745.369420][T17940] vhci_hcd vhci_hcd.8: disconnect device [ 2745.419183][ T8069] netlink: 'syz.3.8937': attribute type 20 has an invalid length. [ 2745.439445][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8937'. [ 2745.471802][T17937] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2745.480649][ T8069] netlink: 'syz.3.8937': attribute type 20 has an invalid length. [ 2745.507566][T17937] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2745.525290][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8937'. [ 2745.536961][T17937] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2745.559946][T17937] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2745.698578][ T30] audit: type=1400 audit(1768807810.620:5882): avc: denied { name_bind } for pid=8070 comm="syz.1.8938" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 2745.740710][ T8077] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[8077] [ 2747.137369][ T8086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2747.609208][T18280] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2747.919161][T18280] usb 5-1: Using ep0 maxpacket: 16 [ 2747.936554][T18280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2747.962761][T18280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2747.972597][T18280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2747.991328][T18280] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2748.015518][T18280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.034677][T18280] usb 5-1: config 0 descriptor?? [ 2748.814778][T18280] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0020/input/input84 [ 2748.863467][T18280] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2748.968448][T18280] usb 5-1: USB disconnect, device number 47 [ 2749.290062][ T30] audit: type=1326 audit(1768807813.987:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.1.8948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b1f8f749 code=0x0 [ 2750.485476][ T8135] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 2750.492117][ T8135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2750.529555][ T8135] vhci_hcd vhci_hcd.0: Device attached [ 2750.538402][ T8136] vhci_hcd: connection closed [ 2750.538764][ T7533] vhci_hcd vhci_hcd.8: stop threads [ 2750.554879][ T7533] vhci_hcd vhci_hcd.8: release socket [ 2750.565604][ T7533] vhci_hcd vhci_hcd.8: disconnect device [ 2750.699005][T28272] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2750.771717][ T8145] lo speed is unknown, defaulting to 1000 [ 2750.894587][T28272] usb 4-1: config 8 has an invalid interface number: 130 but max is 0 [ 2750.903140][T28272] usb 4-1: config 8 has no interface number 0 [ 2750.909316][T28272] usb 4-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2750.920674][T28272] usb 4-1: config 8 interface 130 has no altsetting 0 [ 2750.927557][T28272] usb 4-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2750.945114][T28272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2751.137122][T18280] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2751.853454][T18280] usb 2-1: Using ep0 maxpacket: 8 [ 2751.994035][T18280] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2752.020995][T18280] usb 2-1: config 9 has an invalid interface number: 165 but max is 0 [ 2752.043636][T18280] usb 2-1: config 9 has no interface number 0 [ 2752.052119][T18280] usb 2-1: config 9 interface 165 has no altsetting 0 [ 2752.060938][T18280] usb 2-1: language id specifier not provided by device, defaulting to English [ 2752.078456][T18280] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=7f.30 [ 2752.087697][T18280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.095898][T18280] usb 2-1: SerialNumber: ᧵悙癞섿冘觲峤녃㒸ﰾ¤潨 [ 2752.130955][ T8164] xt_hashlimit: size too large, truncated to 1048576 [ 2752.344868][T18280] uvcvideo 2-1:9.165: Found UVC 0.00 device (17dc:0202) [ 2752.371209][T18280] uvcvideo 2-1:9.165: No valid video chain found. [ 2752.389345][T18280] usb 2-1: USB disconnect, device number 108 [ 2753.176477][ T30] audit: type=1400 audit(1768807817.617:5884): avc: denied { transfer } for pid=8173 comm="syz.1.8967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2753.198517][ T8174] binder: 8173:8174 ioctl c0306201 200000000180 returned -14 [ 2753.251343][ T8180] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 2753.257950][ T8180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2753.270020][ T8180] vhci_hcd vhci_hcd.0: Device attached [ 2753.602146][T17814] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2753.610859][ T7131] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 2753.681777][T28272] usb 4-1: string descriptor 0 read error: -71 [ 2753.812269][T28272] HFC-S_USB 4-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2753.822277][T28272] usb 4-1: USB disconnect, device number 57 [ 2753.832375][T17814] usb 2-1: config 0 has no interfaces? [ 2753.837896][T17814] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2753.847033][T17814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2753.859006][T17814] usb 2-1: config 0 descriptor?? [ 2754.313784][ T8181] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 2754.323820][T17814] usb 2-1: USB disconnect, device number 109 [ 2754.332870][T14492] vhci_hcd vhci_hcd.1: stop threads [ 2754.345241][T14492] vhci_hcd vhci_hcd.1: release socket [ 2754.350633][ T8195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2754.350726][T14492] vhci_hcd vhci_hcd.1: disconnect device [ 2754.373420][ T7419] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2754.547458][ T7419] usb 5-1: Using ep0 maxpacket: 16 [ 2754.556579][ T7419] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2754.578158][ T7419] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2754.592135][ T7419] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2754.601258][ T7419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2754.611465][T28272] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2754.619722][ T7419] usb 5-1: config 0 descriptor?? [ 2754.643357][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8976'. [ 2754.786159][T28272] usb 4-1: Using ep0 maxpacket: 16 [ 2754.799784][T28272] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2754.819331][T28272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.835668][T28272] usb 4-1: Product: syz [ 2754.844389][T28272] usb 4-1: Manufacturer: syz [ 2754.863175][T28272] usb 4-1: SerialNumber: syz [ 2754.884994][T28272] usb 4-1: config 0 descriptor?? [ 2755.189556][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8977'. [ 2755.446140][T28272] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2756.091073][ T30] audit: type=1400 audit(1768807820.348:5885): avc: denied { setattr } for pid=8192 comm="syz.3.8974" name="event3" dev="devtmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2757.086330][ T7419] usb 5-1: string descriptor 0 read error: -71 [ 2757.143457][ T7419] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2757.154012][ T7419] usb 5-1: USB disconnect, device number 48 [ 2758.456244][ T8240] tipc: Started in network mode [ 2758.461204][ T8240] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2758.470179][ T8240] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2758.478291][ T8240] tipc: Enabled bearer , priority 10 [ 2758.949396][ T8246] can: request_module (can-proto-3) failed. [ 2759.133652][ T7131] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2759.199819][ T8256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 2759.206339][ T8256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2759.657619][ T8256] vhci_hcd vhci_hcd.0: Device attached [ 2759.678365][ T8260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2759.808236][T17073] tipc: Node number set to 1 [ 2759.839820][T17814] usb 4-1: USB disconnect, device number 58 [ 2760.300831][ T8269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2760.331989][ T6399] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2760.504760][ T6399] usb 2-1: config 0 has no interfaces? [ 2760.515009][ T6399] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2760.534824][ T6399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2760.555316][ T6399] usb 2-1: config 0 descriptor?? [ 2760.555458][ T7131] usb 35-1: device descriptor read/64, error -110 [ 2760.864805][ T8258] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 2760.873374][ T7131] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 2760.885404][T17938] vhci_hcd vhci_hcd.1: stop threads [ 2760.897044][ T6399] usb 2-1: USB disconnect, device number 110 [ 2760.903572][T17938] vhci_hcd vhci_hcd.1: release socket [ 2760.936888][T17938] vhci_hcd vhci_hcd.1: disconnect device [ 2762.006912][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9000'. [ 2762.550883][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9004'. [ 2763.373194][ T8320] trusted_key: encrypted_key: key trusted:syz not found [ 2763.393988][ T8320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2763.402159][ T8323] FAULT_INJECTION: forcing a failure. [ 2763.402159][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.423651][ T8323] CPU: 0 UID: 0 PID: 8323 Comm: syz.8.9012 Tainted: G L syzkaller #0 PREEMPT(full) [ 2763.423678][ T8323] Tainted: [L]=SOFTLOCKUP [ 2763.423684][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2763.423694][ T8323] Call Trace: [ 2763.423700][ T8323] [ 2763.423707][ T8323] dump_stack_lvl+0x16c/0x1f0 [ 2763.423735][ T8323] should_fail_ex+0x512/0x640 [ 2763.423752][ T8323] ? fs_reclaim_acquire+0xae/0x150 [ 2763.423779][ T8323] should_failslab+0xc2/0x120 [ 2763.423803][ T8323] __kmalloc_noprof+0xeb/0x910 [ 2763.423820][ T8323] ? tomoyo_encode2+0x100/0x3e0 [ 2763.423849][ T8323] ? tomoyo_encode2+0x100/0x3e0 [ 2763.423872][ T8323] tomoyo_encode2+0x100/0x3e0 [ 2763.423899][ T8323] tomoyo_encode+0x29/0x50 [ 2763.423922][ T8323] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2763.423949][ T8323] ? tomoyo_profile+0x47/0x60 [ 2763.423973][ T8323] tomoyo_path_number_perm+0x245/0x580 [ 2763.423993][ T8323] ? tomoyo_path_number_perm+0x237/0x580 [ 2763.424017][ T8323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2763.424040][ T8323] ? find_held_lock+0x2b/0x80 [ 2763.424089][ T8323] ? find_held_lock+0x2b/0x80 [ 2763.424113][ T8323] ? hook_file_ioctl_common+0x144/0x410 [ 2763.424136][ T8323] ? __fget_files+0x20e/0x3c0 [ 2763.424165][ T8323] security_file_ioctl+0x9b/0x240 [ 2763.424190][ T8323] __x64_sys_ioctl+0xb7/0x210 [ 2763.424212][ T8323] do_syscall_64+0xcd/0xf80 [ 2763.424238][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2763.424255][ T8323] RIP: 0033:0x7fb91318f749 [ 2763.424269][ T8323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2763.424285][ T8323] RSP: 002b:00007fb913fba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2763.424301][ T8323] RAX: ffffffffffffffda RBX: 00007fb9133e5fa0 RCX: 00007fb91318f749 [ 2763.424312][ T8323] RDX: 0000200000000100 RSI: 0000000000008912 RDI: 0000000000000003 [ 2763.424322][ T8323] RBP: 00007fb913fba090 R08: 0000000000000000 R09: 0000000000000000 [ 2763.424332][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2763.424341][ T8323] R13: 00007fb9133e6038 R14: 00007fb9133e5fa0 R15: 00007fff4642c708 [ 2763.424367][ T8323] [ 2763.424382][ T8323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2763.438080][ T8320] batadv0: entered promiscuous mode [ 2763.571402][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9011'. [ 2763.594456][ T8320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2763.678942][ T8320] bond2: (slave macvlan2): making interface the new active one [ 2763.690632][ T8320] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:5c:43:3b:56:e9 [ 2763.707484][ T8320] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:5c:43:3b:56:e9 [ 2763.708839][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9011'. [ 2763.722204][ T8320] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 2763.970069][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2763.995366][ T8324] bond2: (slave bond0): making interface the new active one [ 2764.018320][ T8324] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2764.958259][ T30] audit: type=1400 audit(1768807828.645:5886): avc: denied { connect } for pid=8332 comm="syz.8.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2764.984842][ T8324] bond2: (slave bond0): Enslaving as an active interface with an up link [ 2765.080291][ T30] audit: type=1400 audit(1768807828.739:5887): avc: denied { accept } for pid=8332 comm="syz.8.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2765.161403][ T8342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2765.263783][T17938] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2765.399833][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9017'. [ 2766.627732][ T7131] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2766.995585][ T8355] binder: 8353:8355 ioctl c0046686 0 returned -22 [ 2767.327677][ T7236] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 2767.454971][ T4248] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2768.023283][ T4248] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2768.116136][T17938] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2768.130626][ T8364] tipc: Started in network mode [ 2768.136491][ T8364] tipc: Node identity ac14140f, cluster identity 4711 [ 2768.143500][ T8364] tipc: New replicast peer: 255.255.255.255 [ 2768.150183][ T8364] tipc: Enabled bearer , priority 10 [ 2768.156925][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9023'. [ 2768.327466][ T8362] mkiss: ax0: crc mode is auto. [ 2768.584241][ T7131] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2769.134691][ T8376] xt_hashlimit: size too large, truncated to 1048576 [ 2769.708177][T21625] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2770.360090][T14492] bond0 (unregistering): Released all slaves [ 2770.385027][T28272] tipc: Node number set to 2886997007 [ 2770.764951][T14492] hsr_slave_0: left promiscuous mode [ 2770.810569][T14492] veth1_macvtap: left promiscuous mode [ 2770.822050][T14492] veth0_macvtap: left promiscuous mode [ 2770.859994][T14492] veth1_vlan: left promiscuous mode [ 2770.885958][T14492] veth0_vlan: left promiscuous mode [ 2770.948100][T17938] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2771.832927][T14492] team0 (unregistering): Port device batadv1 removed [ 2772.400756][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2772.787868][T23688] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2773.473787][ T8419] xt_hashlimit: size too large, truncated to 1048576 [ 2774.410936][ T5978] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2775.639105][ T7625] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2775.681830][ T30] audit: type=1326 audit(1768807838.673:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.4.9043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03f8b8f749 code=0x0 [ 2775.914361][ T8435] : renamed from wg2 (while UP) [ 2776.137706][ T8450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2776.144220][ T8450] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2776.174776][ T8450] vhci_hcd vhci_hcd.0: Device attached [ 2776.283983][T14492] IPVS: stop unused estimator thread 0... [ 2776.431162][ T7131] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2776.431267][T18280] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 2776.625393][ T7131] usb 4-1: config 0 has no interfaces? [ 2776.639939][ T7131] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2776.659057][ T7131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2776.710227][ T7131] usb 4-1: config 0 descriptor?? [ 2776.902431][ T2125] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2776.970488][ T7131] usb 4-1: USB disconnect, device number 59 [ 2776.981197][ T8451] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 2776.997265][T14492] vhci_hcd vhci_hcd.3: stop threads [ 2777.011152][T14492] vhci_hcd vhci_hcd.3: release socket [ 2777.027564][T14492] vhci_hcd vhci_hcd.3: disconnect device [ 2778.251994][T17937] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2778.364866][ T8472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 2778.371512][ T8472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2778.419504][ T8472] vhci_hcd vhci_hcd.0: Device attached [ 2778.626450][T28272] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2778.676407][ T49] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2778.831729][T28272] usb 8-1: config 8 has an invalid interface number: 130 but max is 1 [ 2778.850340][ T49] usb 4-1: config 0 has no interfaces? [ 2778.872057][ T49] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 2778.890909][T28272] usb 8-1: config 8 has an invalid interface number: 130 but max is 1 [ 2778.910884][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2778.927701][T28272] usb 8-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 2778.960214][T28272] usb 8-1: config 8 has no interface number 0 [ 2778.968038][ T49] usb 4-1: config 0 descriptor?? [ 2778.977531][T28272] usb 8-1: config 8 interface 130 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2779.003546][T28272] usb 8-1: config 8 interface 130 has no altsetting 1 [ 2779.014999][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9054'. [ 2779.027222][T28272] usb 8-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=46.a2 [ 2779.036884][T28272] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.397011][ T8475] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 2779.424910][T17944] vhci_hcd vhci_hcd.3: stop threads [ 2779.430154][T17944] vhci_hcd vhci_hcd.3: release socket [ 2779.436456][ T49] usb 4-1: USB disconnect, device number 60 [ 2779.488527][T17937] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2781.038748][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2797.459509][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2830.985247][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2891.750505][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2891.757464][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P793/1:b..l P7043/1:b..l [ 2891.766969][ C0] rcu: (detected by 0, t=10502 jiffies, g=207601, q=533 ncpus=2) [ 2891.774742][ C0] task:syz-executor state:R running task stack:23640 pid:7043 tgid:7043 ppid:7035 task_flags:0x400140 flags:0x00080000 [ 2891.789121][ C0] Call Trace: [ 2891.792385][ C0] [ 2891.795298][ C0] ? __schedule+0x10b9/0x5ee0 [ 2891.799963][ C0] __schedule+0x1138/0x5ee0 [ 2891.804457][ C0] ? __pfx___schedule+0x10/0x10 [ 2891.809289][ C0] ? mark_held_locks+0x49/0x80 [ 2891.814027][ C0] preempt_schedule_irq+0x51/0x90 [ 2891.819035][ C0] irqentry_exit+0x1d8/0x8c0 [ 2891.823604][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2891.829557][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 2891.834728][ C0] Code: e0 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 02 bc ee 0e 0f 82 74 02 00 00 8b 35 9a ec ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 e0 18 12 0f 85 ad 02 00 00 48 83 c4 [ 2891.854320][ C0] RSP: 0018:ffffc90004aef460 EFLAGS: 00000206 [ 2891.860362][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 00000000b8a8fc11 [ 2891.868318][ C0] RDX: 0000000000000000 RSI: ffffffff8daa92f6 RDI: ffffffff8bf2b280 [ 2891.876363][ C0] RBP: 0000000000000002 R08: 0000000087c2471e R09: 00000000e87c2471 [ 2891.884306][ C0] R10: 0000000000000002 R11: ffff88802b0a2ff0 R12: 0000000000000000 [ 2891.892252][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2891.900223][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 2891.905406][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2891.911549][ C0] unwind_next_frame+0xd1/0x20b0 [ 2891.916497][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 2891.921610][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 2891.926626][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2891.932756][ C0] arch_stack_walk+0x94/0x100 [ 2891.937414][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 2891.942413][ C0] stack_trace_save+0x8e/0xc0 [ 2891.947063][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2891.952415][ C0] kasan_save_stack+0x33/0x60 [ 2891.957068][ C0] ? kasan_save_stack+0x33/0x60 [ 2891.961900][ C0] ? kasan_save_track+0x14/0x30 [ 2891.966730][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 2891.971743][ C0] kasan_save_track+0x14/0x30 [ 2891.976401][ C0] __kasan_slab_alloc+0x89/0x90 [ 2891.981225][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 2891.986657][ C0] ? seq_open+0x55/0x170 [ 2891.990907][ C0] ? seq_open+0x55/0x170 [ 2891.995130][ C0] ? mutex_init_lockep+0x110/0x150 [ 2892.000218][ C0] seq_open+0x55/0x170 [ 2892.004269][ C0] kernfs_fop_open+0x59f/0xda0 [ 2892.009011][ C0] do_dentry_open+0x748/0x1590 [ 2892.013762][ C0] ? __pfx_kernfs_fop_open+0x10/0x10 [ 2892.019037][ C0] vfs_open+0x82/0x3f0 [ 2892.023101][ C0] path_openat+0x2078/0x3140 [ 2892.027697][ C0] ? __pfx_path_openat+0x10/0x10 [ 2892.032629][ C0] do_filp_open+0x20b/0x470 [ 2892.037118][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 2892.042138][ C0] ? alloc_fd+0x471/0x7d0 [ 2892.046455][ C0] do_sys_openat2+0x121/0x290 [ 2892.051103][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 2892.056272][ C0] ? putname+0xf5/0x1a0 [ 2892.060404][ C0] ? do_unlinkat+0x152/0x660 [ 2892.064987][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 2892.069911][ C0] __x64_sys_openat+0x174/0x210 [ 2892.074741][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 2892.080093][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 2892.085441][ C0] do_syscall_64+0xcd/0xf80 [ 2892.089939][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2892.095815][ C0] RIP: 0033:0x7f25b1f8df90 [ 2892.100202][ C0] RSP: 002b:00007ffdaee18230 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2892.108583][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f25b1f8df90 [ 2892.116523][ C0] RDX: 0000000000000000 RSI: 00007ffdaee18360 RDI: 00000000ffffff9c [ 2892.124460][ C0] RBP: 00007ffdaee18360 R08: 0000000000000000 R09: 0000000000000000 [ 2892.132398][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffdaee19450 [ 2892.140338][ C0] R13: 00007f25b2013d7d R14: 0000555583c5d4a8 R15: 0000000000000007 [ 2892.148283][ C0] [ 2892.151272][ C0] task:syz-executor state:R running task stack:23064 pid:793 tgid:793 ppid:785 task_flags:0x400140 flags:0x00080000 [ 2892.164713][ C0] Call Trace: [ 2892.167962][ C0] [ 2892.170870][ C0] ? __schedule+0x10b9/0x5ee0 [ 2892.175530][ C0] __schedule+0x1138/0x5ee0 [ 2892.180026][ C0] ? __pfx___schedule+0x10/0x10 [ 2892.184865][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2892.190214][ C0] preempt_schedule_common+0x44/0xc0 [ 2892.195483][ C0] preempt_schedule_thunk+0x16/0x30 [ 2892.200667][ C0] _raw_spin_unlock+0x3e/0x50 [ 2892.205325][ C0] copy_page_range+0x22d0/0x6780 [ 2892.210279][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 2892.215541][ C0] ? __pfx___might_resched+0x10/0x10 [ 2892.220797][ C0] ? __pfx_mas_store+0x10/0x10 [ 2892.225559][ C0] ? dup_mmap+0xba4/0x20e0 [ 2892.229963][ C0] ? down_write+0x14d/0x200 [ 2892.234468][ C0] ? up_write+0x282/0x4e0 [ 2892.238778][ C0] dup_mmap+0xbea/0x20e0 [ 2892.243019][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 2892.247684][ C0] copy_process+0x3b9f/0x7430 [ 2892.252340][ C0] ? do_wp_page+0x1c04/0x5010 [ 2892.257006][ C0] ? __pfx_copy_process+0x10/0x10 [ 2892.262007][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2892.267008][ C0] kernel_clone+0xfc/0x910 [ 2892.271409][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2892.276424][ C0] __do_sys_clone+0xce/0x120 [ 2892.280994][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 2892.286172][ C0] ? count_memcg_events+0x122/0x290 [ 2892.291367][ C0] ? do_user_addr_fault+0x843/0x1370 [ 2892.296641][ C0] do_syscall_64+0xcd/0xf80 [ 2892.301137][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2892.307015][ C0] RIP: 0033:0x7fb913185e93 [ 2892.311401][ C0] RSP: 002b:00007fff4642c988 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2892.319792][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb913185e93 [ 2892.327738][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2892.335693][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2892.343640][ C0] R10: 00005555581297d0 R11: 0000000000000246 R12: 0000000000000000 [ 2892.351590][ C0] R13: 00000000000927c0 R14: 000000000029f439 R15: 00007fff4642cb20 [ 2892.359549][ C0] [ 2892.362548][ C0] rcu: rcu_preempt kthread starved for 10558 jiffies! g207601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2892.373793][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2892.383730][ C0] rcu: RCU grace-period kthread stack dump: [ 2892.389590][ C0] task:rcu_preempt state:R running task stack:27792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2892.403048][ C0] Call Trace: [ 2892.406298][ C0] [ 2892.409208][ C0] ? __schedule+0x10b9/0x5ee0 [ 2892.413879][ C0] __schedule+0x1138/0x5ee0 [ 2892.418374][ C0] ? __lock_acquire+0x436/0x2890 [ 2892.423301][ C0] ? __pfx___schedule+0x10/0x10 [ 2892.428143][ C0] ? find_held_lock+0x2b/0x80 [ 2892.432816][ C0] ? schedule+0x2d7/0x3a0 [ 2892.437126][ C0] schedule+0xe7/0x3a0 [ 2892.441178][ C0] schedule_timeout+0x123/0x290 [ 2892.445999][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2892.451346][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2892.456612][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2892.462402][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2892.467848][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 2892.472590][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2892.477864][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2892.483038][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2892.487963][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 2892.492803][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2892.498599][ C0] rcu_gp_kthread+0x26d/0x380 [ 2892.503256][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2892.508433][ C0] ? rcu_is_watching+0x12/0xc0 [ 2892.513167][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2892.518347][ C0] ? __kthread_parkme+0x19e/0x250 [ 2892.523348][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2892.528522][ C0] kthread+0x3c5/0x780 [ 2892.532569][ C0] ? __pfx_kthread+0x10/0x10 [ 2892.537144][ C0] ? rcu_is_watching+0x12/0xc0 [ 2892.541888][ C0] ? __pfx_kthread+0x10/0x10 [ 2892.546447][ C0] ret_from_fork+0x983/0xb10 [ 2892.551008][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2892.556093][ C0] ? __switch_to+0x7af/0x10d0 [ 2892.560747][ C0] ? __pfx_kthread+0x10/0x10 [ 2892.565319][ C0] ret_from_fork_asm+0x1a/0x30 [ 2892.570073][ C0] [ 2892.573063][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2892.579358][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2892.584544][ C1] NMI backtrace for cpu 1 [ 2892.584556][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2892.584574][ C1] Tainted: [L]=SOFTLOCKUP [ 2892.584578][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2892.584589][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2892.584607][ C1] Code: 16 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 89 11 00 fb f4 4c 33 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2892.584618][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 2892.584630][ C1] RAX: 000000000b242cc1 RBX: 0000000000000001 RCX: ffffffff8b78d6d9 [ 2892.584639][ C1] RDX: 0000000000000000 RSI: ffffffff8dacf385 RDI: ffffffff8bf2b280 [ 2892.584647][ C1] RBP: ffffed1003b57498 R08: 0000000000000001 R09: ffffed10170a673d [ 2892.584655][ C1] R10: ffff8880b85339eb R11: ffff88801dabaff0 R12: 0000000000000001 [ 2892.584663][ C1] R13: ffff88801daba4c0 R14: ffffffff9088cbd0 R15: 0000000000000000 [ 2892.584671][ C1] FS: 0000000000000000(0000) GS:ffff8881249f1000(0000) knlGS:0000000000000000 [ 2892.584685][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2892.584693][ C1] CR2: 000000110c38a85c CR3: 00000000443ad000 CR4: 00000000003526f0 [ 2892.584702][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2892.584709][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2892.584717][ C1] Call Trace: [ 2892.584722][ C1] [ 2892.584726][ C1] default_idle+0x13/0x20 [ 2892.584737][ C1] default_idle_call+0x6c/0xb0 [ 2892.584748][ C1] do_idle+0x38d/0x510 [ 2892.584771][ C1] ? __pfx_do_idle+0x10/0x10 [ 2892.584792][ C1] cpu_startup_entry+0x4f/0x60 [ 2892.584809][ C1] start_secondary+0x21d/0x2d0 [ 2892.584822][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2892.584837][ C1] common_startup_64+0x13e/0x148 [ 2892.584856][ C1] [ 2892.870604][T17944] vhci_hcd vhci_hcd.3: disconnect device [ 2892.876490][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2892.882731][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2892.906605][T28272] usb 8-1: string descriptor 0 read error: -71 [ 2892.914241][T28272] HFC-S_USB 8-1:8.130: probe with driver HFC-S_USB failed with error -5 [ 2892.925032][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2892.932398][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2893.006064][T18280] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2893.092969][T28272] usb 8-1: USB disconnect, device number 48 SYZFAIL: failed to send rpc fd=3 want=240 sent=0 n=-1 (errno 32: Broken pipe) [ 2893.465142][ T30] audit: type=1400 audit(1768807948.853:5889): avc: denied { write } for pid=5801 comm="syz-executor" path="pipe:[5243]" dev="pipefs" ino=5243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2893.538049][ T5041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2893.659352][ T5041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2893.699522][ T5041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2893.721106][ T5041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2893.731340][ T5041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2894.313254][ T8486] lo speed is unknown, defaulting to 1000 [ 2894.617356][T21625] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2895.002933][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 2895.221415][ T5816] Bluetooth: hci3: command 0x0405 tx timeout [ 2895.604942][T17944] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.697974][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.716927][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.728109][ T8486] bridge_slave_0: entered allmulticast mode [ 2895.735310][ T8486] bridge_slave_0: entered promiscuous mode [ 2895.777397][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.784638][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.791988][ T8486] bridge_slave_1: entered allmulticast mode [ 2895.798565][ T8486] bridge_slave_1: entered promiscuous mode [ 2895.834811][T17944] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.849832][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2895.860533][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2895.882728][ T8486] team0: Port device team_slave_0 added [ 2895.890662][ T8486] team0: Port device team_slave_1 added [ 2895.898943][ T5816] Bluetooth: hci0: command tx timeout [ 2895.920622][T21625] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 2895.937195][T17944] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.961090][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2895.968094][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2895.994046][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2896.007449][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2896.014382][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2896.041091][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2896.063906][T17944] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.096014][ T8486] hsr_slave_0: entered promiscuous mode [ 2896.102272][ T8486] hsr_slave_1: entered promiscuous mode [ 2896.108111][ T8486] debugfs: 'hsr0' already exists in 'hsr' [ 2896.113875][ T8486] Cannot create hsr debugfs directory [ 2896.201526][T17944] bridge_slave_1: left allmulticast mode [ 2896.207179][T17944] bridge_slave_1: left promiscuous mode [ 2896.212908][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2896.221388][T17944] bridge_slave_0: left allmulticast mode [ 2896.227004][T17944] bridge_slave_0: left promiscuous mode [ 2896.232768][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2896.550030][T17944] bond2 (unregistering): (slave bond0): Releasing active interface [ 2896.559005][T17944] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:5c:43:3b:56:e9 [ 2896.574076][T17944] bond2 (unregistering): (slave macvlan2): making interface the new active one [ 2896.587021][T17944] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:5c:43:3b:56:e9 [ 2896.601477][T17944] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:5c:43:3b:56:e9 [ 2896.617514][T17944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2896.627535][T17944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2896.636998][T17944] bond0 (unregistering): Released all slaves [ 2896.733461][T17944] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 2896.741787][T17944] wireguard0: left promiscuous mode [ 2896.748426][T17944] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 2896.757828][T17944] bond1 (unregistering): Released all slaves [ 2896.853982][T17944] bond2 (unregistering): (slave macvlan2): Releasing active interface [ 2896.862760][T17944] batadv0: left promiscuous mode [ 2896.868665][T17944] bond2 (unregistering): Released all slaves [ 2896.949689][T17944] tipc: Left network mode [ 2896.951555][ T8486] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2896.984136][ T8486] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2897.010655][ T8486] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2897.019913][ T8486] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2897.091394][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2897.115815][T17944] hsr_slave_0: left promiscuous mode [ 2897.122181][T17944] hsr_slave_1: left promiscuous mode [ 2897.128650][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2897.136010][T17944] batadv0: mtu less than device minimum [ 2897.143412][T17944] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2897.155127][T17944] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2897.165965][T17944] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2897.176792][T17944] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2897.196429][T17944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2897.204181][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2897.221563][T17944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2897.229478][T17944] batman_adv: batadv0: Interface deactivated: dummy0 [ 2897.236377][T17944] batman_adv: batadv0: Removing interface: dummy0 [ 2897.252358][T17944] veth1_macvtap: left promiscuous mode [ 2897.259341][T17944] veth0_macvtap: left promiscuous mode [ 2897.264872][T17944] veth1_vlan: left promiscuous mode [ 2897.272543][T17944] veth0_vlan: left promiscuous mode [ 2897.591487][T17944] team0 (unregistering): Port device team_slave_1 removed [ 2897.627055][T17944] team0 (unregistering): Port device team_slave_0 removed [ 2897.941918][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 2897.953645][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 2897.960689][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2897.985814][T21625] bridge0: port 2(bridge_slave_1) entered blocking state [ 2897.992897][T21625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2898.128054][ T5816] Bluetooth: hci0: command tx timeout [ 2898.167077][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2898.298162][T17944] IPVS: stop unused estimator thread 0... [ 2898.331312][ T8486] veth0_vlan: entered promiscuous mode [ 2898.342763][ T8486] veth1_vlan: entered promiscuous mode [ 2898.390933][T17944] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2898.412403][ T8486] veth0_macvtap: entered promiscuous mode [ 2898.420480][ T8486] veth1_macvtap: entered promiscuous mode [ 2898.432795][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2898.444479][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2898.460429][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2898.477253][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2898.486937][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2898.495699][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2898.515535][T17944] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2898.589662][T17944] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2898.611368][ T7533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2898.619282][ T7533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2898.634763][T17944] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2898.659731][ T7533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2898.667678][ T7533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2898.779389][T17944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2898.875713][T17944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2898.971123][T17944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.044014][T17944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.185051][T17944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.264621][T17944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.326957][T17944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.389173][T17944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.517628][T17944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2899.529367][T17944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.595171][T17944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2899.605621][T17944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.676222][T17944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2899.686720][T17944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.746991][T17944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2899.758706][T17944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2899.828192][T17944] bridge_slave_1: left allmulticast mode [ 2899.836073][T17944] bridge_slave_1: left promiscuous mode [ 2899.841716][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2899.851793][T17944] bridge_slave_0: left allmulticast mode [ 2899.857503][T17944] bridge_slave_0: left promiscuous mode [ 2899.863700][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2899.874914][T17944] bridge_slave_1: left allmulticast mode [ 2899.880631][T17944] bridge_slave_1: left promiscuous mode [ 2899.886561][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2899.894530][T17944] bridge_slave_0: left allmulticast mode [ 2899.900885][T17944] bridge_slave_0: left promiscuous mode [ 2899.906473][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2900.260482][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 2900.270159][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 2900.486364][ T7131] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 2900.519180][T17944] bond0 (unregistering): Released all slaves [ 2900.779273][T17944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2900.789390][T17944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2900.799048][T17944] bond0 (unregistering): Released all slaves [ 2900.894526][T17944] bond1 (unregistering): Released all slaves [ 2900.976644][T17944] bond5 (unregistering): (slave gretap1): Releasing active interface [ 2901.158987][T17944] bond0 (unregistering): Released all slaves [ 2901.252789][T17944] bond1 (unregistering): Released all slaves [ 2901.346151][T17944] bond2 (unregistering): Released all slaves [ 2901.376149][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 2901.384670][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 2901.454753][T17944] bond3 (unregistering): Released all slaves [ 2901.464929][T17944] bond4 (unregistering): Released all slaves [ 2901.563330][T17944] bond5 (unregistering): Released all slaves [ 2901.668404][T17944] dvmrp0 (unregistering): left allmulticast mode