last executing test programs: 12m43.863111518s ago: executing program 32 (id=3510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) (async) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@uuid_null}, {@nfs_export_on}, {@uuid_null}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r5}}, {@euid_lt={'euid<', r5}}]}) (async) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000000)={r0, 0x1, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) (async) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) symlink(&(0x7f0000000180)='./bus\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4089, 0xff9) write$sndseq(r4, &(0x7f00000005c0), 0x0) 10m24.339784157s ago: executing program 33 (id=4169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) epoll_create1(0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0) syz_usb_disconnect(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) 9m37.878129865s ago: executing program 2 (id=4380): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRESHEX=r3], 0x44}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x2000, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRESHEX=r3], 0x44}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x2000, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 9m37.647764807s ago: executing program 2 (id=4381): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$kcm(0x10, 0x100000000002, 0x4) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000080)="c1df07000000000000000001884587", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m37.504967081s ago: executing program 2 (id=4383): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080030cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 9m33.986210098s ago: executing program 2 (id=4404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x47, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x78, 0x0, 0x2000, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x0, 0x3a}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}, 0x2000}], 0x0, 0x0, 0x0}) 9m33.360962685s ago: executing program 2 (id=4406): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x80000003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x8, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x40000023, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 9m32.237118148s ago: executing program 2 (id=4416): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x8002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000340)={0x4, 0x2, @vsb={0xb}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r9, &(0x7f000001aa40)=""/102400, 0xfffffea1) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) (rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82042) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x80004) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, 0x0, 0x0) (rerun: 32) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 64) 9m28.157400711s ago: executing program 5 (id=4426): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='o', 0x1}], 0x1}}], 0x1, 0x20004000) r1 = socket(0x39, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x7c, 0x6, 0x9, 0x54, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @private1, 0x7, 0x0, 0x7fff, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = io_uring_setup(0x1de1, &(0x7f0000000180)={0x0, 0x2c42, 0x10, 0x3ffffd, 0xb}) r5 = epoll_create1(0x0) epoll_pwait2(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x20000005}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 9m26.672259426s ago: executing program 5 (id=4432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x5357, 0x4000, 0x0, 0x322}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3197, 0x40, 0x1, 0x29}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10aa, 0x2, 0x2, 0xe8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x882, 0x20, 0x0, 0xb7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd7b, 0x800, 0x2, 0x2cd}}], 0x4, &(0x7f0000001640)={0x2e, 0x23, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x3, 0x7fb, 0x0, &(0x7f0000000640)=@buf_512="b37d3fb527c577f937b76cc55b21459161d75d89a6224a440ef86b5f4a5b6b88e086a1e0bc76d3709c7b6c83e84007095f616041e37acca5abf5693692448aec2866a34f72110bad0a86fbd1049162e353ddb9e1d7ad9f62b76c60a9f5491b50a79e3de293938791ba87cd2365f40234c70762239a1d7e0352332478ba21995f01d04f9f1a7cf330def06ea7efabcb9c27dd2d45281ed99edf7c0fe34ff8bd691fd0f1fec42704eb151e4c461ddb218c490476e5dae6be9145d4b57c6a8a2146a4f1699e83c892b3ff979ef258943eb3b2101a5104297e386aadcde89081d2ef55d93ee114f52893577ef40db1e9a8b02bb2aca57b759bc883a782d3b9b0f1218440475df1792d511a958452028f63dd0a42c041986aff6fa445c6052cbcc85b05b219016eac432e56652c3bfa22b0d8eaf7097cb88826f50bcfab356ac7e7ca8b6f84f045a7db9515feb78744c8bfad2ff3a0ece617266079fd50f27052d07edf1cde2a269e3748da9c7dd05c465f93a5d88a470381e1cb744bec17c937a36c21eae668ca870aba5827c5ce20f5a2e2860fed7dcc142711334a8dba6b3def7ed6cdaea154f921b8b2709bdc5af3bf819ffa9ba808586fe02a06c4c95141bdd18107458709188be0b481f3e24acc579fb554dc6b41f90ec3f4edae0c9d96aeb2c4c91e42750096f3c677662cfcf958dd2c3fe4de585aafbc099c8c0483313552"}}, &(0x7f00000016c0)) ioctl$UBLK_U_IO_NEED_GET_DATA(r2, 0xc0107522, &(0x7f0000002700)={0x4, 0x292, 0xffff884d, &(0x7f0000001700)=@buf_4k="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"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) alarm(0xe7c5) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c2040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r7, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0xe7147754d79f220f}, 0x20000040) 9m26.433284592s ago: executing program 5 (id=4433): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) 9m25.809532906s ago: executing program 5 (id=4434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "8adb03a0b1bb7605", "5922ac9ff30d68ee7692e458bf837c51", "07f94b6b", "763f062c5f2edff2"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4004050}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r6, 0x0, 0x0) r7 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) 9m24.560384795s ago: executing program 5 (id=4437): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'lo\x00', &(0x7f0000000e40)=@ethtool_per_queue_op={0x4b, 0x44, [0x2, 0x4, 0x8, 0x3, 0x3ffc0000, 0x4, 0x5, 0x100, 0x7fffffff, 0x7, 0x87, 0x3, 0xb3, 0x7ff, 0x5, 0x3, 0xfffffffd, 0xfff, 0x1, 0x8, 0x9, 0x9, 0x0, 0x4, 0x8, 0x808, 0x3, 0x8, 0x2ce, 0x1f1c, 0x0, 0xa9f4, 0x7f, 0xfffffa60, 0x7, 0x6, 0x200, 0x1ff, 0x1, 0x80000000, 0x40e, 0x8, 0x4005, 0x85, 0x9, 0x18, 0x1, 0x8, 0x6, 0xfffff001, 0x7, 0x5, 0x6, 0x7f4, 0x6, 0x1, 0xb, 0x7cba, 0x8, 0x2bb7, 0x6, 0xe68f, 0x4, 0xf, 0xd186, 0x3ff, 0x3ff, 0x1, 0x0, 0x3e0, 0x7, 0x400, 0x40, 0xff, 0x7, 0x7, 0x8, 0x0, 0x3, 0x2, 0x5, 0x7, 0x3, 0x3, 0x5, 0x6, 0x0, 0x1, 0x7a13fb19, 0xf, 0xc3, 0x0, 0x9, 0x64a, 0x0, 0x67e4, 0x3, 0x2, 0x9, 0xffff0000, 0x10, 0x1, 0x7ff, 0x29aa, 0x800, 0x81, 0x8, 0x20, 0x5, 0x9, 0x7fffffff, 0x8, 0x9, 0x6, 0x0, 0x9, 0x4, 0x5, 0x2, 0x80000001, 0xb92f, 0x2, 0x387, 0x5, 0x9, 0x1, 0x3, 0x1ff]}}) ptrace$setsig(0x4203, r3, 0x8, &(0x7f0000000100)={0x21, 0xfcde, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x3, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'netpci0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x24040084) 9m19.351132186s ago: executing program 5 (id=4441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m18.419541341s ago: executing program 34 (id=4441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m17.114391972s ago: executing program 35 (id=4416): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x8002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000340)={0x4, 0x2, @vsb={0xb}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r9, &(0x7f000001aa40)=""/102400, 0xfffffea1) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) (rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82042) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x80004) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, 0x0, 0x0) (rerun: 32) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 64) 7m33.260212963s ago: executing program 6 (id=4802): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x14}}}}}, 0x0) 7m33.058555552s ago: executing program 6 (id=4804): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}, 0x1, 0x8c, 0x0, 0x42804}, 0x84) 7m32.827410778s ago: executing program 6 (id=4806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xeae4, 0x3) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r4, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8]}}) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r3, 0x7ffffffe}}, 0x18) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000000000) 7m31.826841817s ago: executing program 6 (id=4811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x500, 0x0, 0x880}, 0x4000000) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000000)={'ip6gretap0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0], 0x1}) 7m30.459519357s ago: executing program 6 (id=4814): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fallocate(r3, 0x3, 0x10003, 0x2d22) (async) fallocate(r3, 0x3, 0x10003, 0x2d22) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peek(0x1, r4, &(0x7f0000000240)) (async) ptrace$peek(0x1, r4, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 7m29.709750116s ago: executing program 6 (id=4815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m14.413925717s ago: executing program 36 (id=4815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m47.697113244s ago: executing program 8 (id=5851): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {0x0}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000004c0)=0xf) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000300000000000000010000001400020077616730000000000000000000000000000400088008000500000000000400088024000300"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x4048092) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000ff0f00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000002280)=""/4090, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000540)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950", 0x4c, r8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m45.34551572s ago: executing program 8 (id=5857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf0ffff}, 0x28) 3m45.190854883s ago: executing program 8 (id=5859): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe800000"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000094000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000006800038008000140000000000800024000000004540003801400010070696d367265673100000000000000001400"], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c40)={'syztnl2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r5) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000000440), 0x0, 0xc0) 3m44.720617245s ago: executing program 8 (id=5862): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000)=0x6, 0x4) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x6022, 0x1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x80080) r3 = accept4$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14, 0x80000) sendfile(r2, r3, &(0x7f00000003c0)=0xffffffffffffffc0, 0x100000000) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x1) 3m44.652944651s ago: executing program 8 (id=5865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000700)={r1, &(0x7f00000005c0)='/dev/snd/midiC#D#\x00', 0x28140, &(0x7f0000000640)={@_ha_fsid={[0x401, 0x4]}, {0x4, 0x0, 0xfffffffe, 0x47}}, 0xac, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0xd38}) r3 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) io_submit(0x0, 0x3, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f00000003c0)="500e621b", 0x4, 0x5b, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f0000000500)="a135ade3f8ed0cdece2615753728cf3d1c7559426be7a4d86009750f0583185d7bf7f13b09b36c0791f4ed27ee621c23a693401619557a0eaab395b043f127dfa0f0cfafe684380744381443e6964d589ff9dde4b279ff52537482a4d1fa6a71b3674259a78acaf22b600ba2bd69c5ccfff65232c32e67681aa2c61368c6c8db28764e279ce903a65052bbd8b8a10b2ca9f2964d7e87ff6083f4880da64db886ce95777ef6", 0xa5, 0x5b, 0x0, 0x0, r2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000780)="70690cbd34fc2ca0e1ebf0d8976928179b0635860b3de2db55aa", 0x1a, 0x5, 0x0, 0x3, r4}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5fae, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000160001002dbd7000ffdbdf2500000000000000000000000000000001ac1414180000000000000000000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14141d000000000000000000000000000000006c004000ffffffff00000000000000000000000000000000000000000000000000000000010000000000000000000000000000008c0800000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000ffffffffffffffff020000000000000000000000000000000000000000000000000000000000000000000000ff7f000005001b0000000000"], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m42.543487337s ago: executing program 8 (id=5881): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x3, 0x0, [0x4, 0x6, 0xffffffffffffffe0, 0x200], [0xffffffffffffffff, 0x8a41, 0x7, 0xff, 0x7, 0x1, 0x6, 0x5, 0x2, 0x7, 0x101, 0x3, 0xfe, 0x17, 0xfffffffffffffff7, 0x71, 0x1, 0x88, 0x3, 0x8, 0xffffffffffffffff, 0x8, 0x2, 0xfffffffffffffe01, 0x0, 0x7fffffff, 0x9, 0x200000d, 0x3, 0x9, 0x0, 0x10003, 0x8, 0x5, 0x101, 0x9, 0x6, 0x5, 0x4, 0x7fffffffffffffff, 0x7c, 0x65f80000, 0xfffffffffffffffe, 0x200, 0x81, 0x1, 0x2, 0x1, 0x1, 0x7, 0x2b, 0x200003, 0x800100000000000, 0x4, 0x3, 0x71, 0x9, 0x3d5, 0x1d7bc000000, 0x5, 0xc, 0x4, 0x7fffffff, 0xdee, 0x38, 0x81, 0x9, 0x4, 0xfffffffffffffffe, 0x7165, 0x0, 0x1, 0x1, 0x3, 0x7, 0x7, 0xfffffffffffffff4, 0x7, 0x5, 0x6, 0x2, 0x3, 0xef76, 0x100000001, 0x410, 0xf1a, 0x4, 0x0, 0x1292000, 0x7, 0x88, 0x0, 0x8000000000000000, 0x2, 0x3, 0x6, 0xff, 0x8000, 0xff, 0x8, 0x0, 0x1, 0xf4, 0x7, 0x200, 0x7, 0x6, 0x0, 0x9, 0x9, 0x0, 0x3, 0x10000000000, 0x100000000000000, 0x9b6a, 0x1e83, 0x600, 0x7, 0x3, 0x45df, 0x8000]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000300feff0500030001000000030000002dffffffffffffff06000000000000000800000000000000a12f0000000000000700000000000000010000000000000000000060fcffffff0000000053680000e70000000000000000800000000000000500000000000000d9ffffffffffffff000000000000000003"], 0xe8) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="200c02"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="200304"], 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000700)=""/196, 0xc4}], 0x1, 0x9, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000fe880000000000000000000000000101", @ANYRES16=r8, @ANYBLOB="0000000009000000001000000000000000000000000000000900000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f000002000000000000000000eaf8bcebf9cf567400000200010000000000040105007f00000100000000000000000000000000000b003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000006c8845e3000001000000000000000000000000000000006c001a79e6578e3bd8011602bbcd1fbbf17eb5cd23280c6489ee898bee57b98ed2efc1d15c388b4dea7600ff3c09f84c37b14f6c9f6b33b31a18d13111e55b5fd7b72891d5b3a64bf8840a7ef62abdebd3d3adfa6ebbdbfe15529b402519399082f024db3e471886b06db7803c3906785da817717e27861cc1a5015f501c865a36d36112741c60f29334140166c7dc4d0734f6acd7c385afe4201a3586e6bfcf6c5ccf6da3ee49f2ed91d85981c786d4eebc592890d86f9304"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$alg(0x26, 0x5, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000400)='xfs\x00', 0x0) close(r11) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10}) 3m39.287858732s ago: executing program 37 (id=5881): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x3, 0x0, [0x4, 0x6, 0xffffffffffffffe0, 0x200], [0xffffffffffffffff, 0x8a41, 0x7, 0xff, 0x7, 0x1, 0x6, 0x5, 0x2, 0x7, 0x101, 0x3, 0xfe, 0x17, 0xfffffffffffffff7, 0x71, 0x1, 0x88, 0x3, 0x8, 0xffffffffffffffff, 0x8, 0x2, 0xfffffffffffffe01, 0x0, 0x7fffffff, 0x9, 0x200000d, 0x3, 0x9, 0x0, 0x10003, 0x8, 0x5, 0x101, 0x9, 0x6, 0x5, 0x4, 0x7fffffffffffffff, 0x7c, 0x65f80000, 0xfffffffffffffffe, 0x200, 0x81, 0x1, 0x2, 0x1, 0x1, 0x7, 0x2b, 0x200003, 0x800100000000000, 0x4, 0x3, 0x71, 0x9, 0x3d5, 0x1d7bc000000, 0x5, 0xc, 0x4, 0x7fffffff, 0xdee, 0x38, 0x81, 0x9, 0x4, 0xfffffffffffffffe, 0x7165, 0x0, 0x1, 0x1, 0x3, 0x7, 0x7, 0xfffffffffffffff4, 0x7, 0x5, 0x6, 0x2, 0x3, 0xef76, 0x100000001, 0x410, 0xf1a, 0x4, 0x0, 0x1292000, 0x7, 0x88, 0x0, 0x8000000000000000, 0x2, 0x3, 0x6, 0xff, 0x8000, 0xff, 0x8, 0x0, 0x1, 0xf4, 0x7, 0x200, 0x7, 0x6, 0x0, 0x9, 0x9, 0x0, 0x3, 0x10000000000, 0x100000000000000, 0x9b6a, 0x1e83, 0x600, 0x7, 0x3, 0x45df, 0x8000]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000300feff0500030001000000030000002dffffffffffffff06000000000000000800000000000000a12f0000000000000700000000000000010000000000000000000060fcffffff0000000053680000e70000000000000000800000000000000500000000000000d9ffffffffffffff000000000000000003"], 0xe8) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="200c02"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="200304"], 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000700)=""/196, 0xc4}], 0x1, 0x9, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000fe880000000000000000000000000101", @ANYRES16=r8, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$alg(0x26, 0x5, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000400)='xfs\x00', 0x0) close(r11) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10}) 2m57.12895417s ago: executing program 0 (id=6046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="810902000000000000000300000008000100000000001c00078018000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) 2m57.017317173s ago: executing program 0 (id=6048): socket(0x10, 0x803, 0x0) getpid() r0 = gettid() userfaultfd(0x80003) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a8806558a18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@multicast2, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000000), 0x1003) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000002fc0)=""/4111, 0x1012) socket$nl_generic(0x10, 0x3, 0x10) r3 = fanotify_init(0x8, 0x101000) fanotify_mark(r3, 0x49, 0x8, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) 2m55.217309406s ago: executing program 0 (id=6056): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0xf2ff, 0xc, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x6, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x1, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0xb, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x8, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x8f4, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x1fc, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x4, 0x6a, 0x9d6, 0x200, 0x2, 0x3d, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x6, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7ffffffb, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x5c, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x89, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x0, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0x100f, 0x202, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x7, 0x6, 0x9, 0x4, 0x1, 0xb, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x10080, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 2m55.190033948s ago: executing program 0 (id=6057): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x10120, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) 2m40.561641062s ago: executing program 0 (id=6059): socket$nl_xfrm(0x10, 0x3, 0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fsopen(&(0x7f0000000340)='tmpfs\x00', 0x1) r0 = socket$inet(0x2, 0x3, 0x100008) timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x2000c800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03fd00000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) clock_adjtime(0x0, &(0x7f0000000600)={0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}) dup(r5) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) 2m38.378158804s ago: executing program 0 (id=6102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0x4, 0x4}, 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x8}], 0x2}, 0x5) r14 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r15 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x200100, 0x100) sendmsg$qrtr(r15, &(0x7f0000001400)={&(0x7f0000000080)={0x2a, 0x3, 0x4000}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000000c0)="79b89de88cdcaf13a9fed57feb62fe9c863649f19f9a62480e1b081e0034d948f2f4b48c7ba94d578b511893384d3a357946555ed84351cae3e1bae3bc6577fd513cbedc6309a094e6a30ae34cb91892efadb8b57b9e4296957784bace2cf8ed613c313db53cd012a85b2e691f5ab816640a577d68df89d060746914b7238ea67f200e8b8bb492dec93f6ca41cc7edc305935e975a9c9b5bceb4ec5fded2afd9e0e7ce7b26f6706f7beab3883405cb1ac3e6d45f28e4441cb34cf777dd6f42bb611560278c3473b6b9959ccdc5ec859140e230c455430010256880becf158db85ed3", 0xe2}], 0x1, &(0x7f00000003c0)=[{0x1010, 0x0, 0x3, "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"}], 0x1010, 0x10}, 0x38) sendfile(r14, r0, 0x0, 0x3) 2m22.982961189s ago: executing program 38 (id=6102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0x4, 0x4}, 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x8}], 0x2}, 0x5) r14 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r15 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x200100, 0x100) sendmsg$qrtr(r15, &(0x7f0000001400)={&(0x7f0000000080)={0x2a, 0x3, 0x4000}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000000c0)="79b89de88cdcaf13a9fed57feb62fe9c863649f19f9a62480e1b081e0034d948f2f4b48c7ba94d578b511893384d3a357946555ed84351cae3e1bae3bc6577fd513cbedc6309a094e6a30ae34cb91892efadb8b57b9e4296957784bace2cf8ed613c313db53cd012a85b2e691f5ab816640a577d68df89d060746914b7238ea67f200e8b8bb492dec93f6ca41cc7edc305935e975a9c9b5bceb4ec5fded2afd9e0e7ce7b26f6706f7beab3883405cb1ac3e6d45f28e4441cb34cf777dd6f42bb611560278c3473b6b9959ccdc5ec859140e230c455430010256880becf158db85ed3", 0xe2}], 0x1, &(0x7f00000003c0)=[{0x1010, 0x0, 0x3, "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"}], 0x1010, 0x10}, 0x38) sendfile(r14, r0, 0x0, 0x3) 6.371359027s ago: executing program 9 (id=6686): socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$audion(0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000180), 0x2a3, 0x0) socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x200000000000000, 0x8801}, 0x0) 6.301264907s ago: executing program 4 (id=6687): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/198, 0xc6}], 0x1000000000000239, 0x8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff"], 0x0}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c00000008", @ANYRES32], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0xfe000000000000, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 5.835997882s ago: executing program 9 (id=6688): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r5, @ANYBLOB="0000e0ffffffffffb60295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@sack_info={0x0, 0x0, 0x40}, 0xc) 5.698004906s ago: executing program 4 (id=6689): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000040000000100010009"], 0x50) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x2203, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002f00090027bd7000000000000400000004001e00180009801400ae00fe8000070000000000000000000000aa"], 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf, 0x4, [0x0, 0x2, 0x6, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x4, 0x4, 0xcfa, 0xfffffff5, 0x8, 0x3, 0x1, r7}, &(0x7f00000001c0)=0x20) 5.14909878s ago: executing program 1 (id=6690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0300000002010200000000000000000a0000e0f14ff0be96d007087bbe842664471cdefbe3fd011cd2f500b03f095305f0f56e352d575726d21eb7ee9d9c9e24abe2b34b2406cc17e25d4448846635ec083f64546d184553011046de1734d8602f8e561638937ad13071ee69c9fb6ec61382c1f33ae168db200473a69e561fedf8d8f86203c924cd240f14de92c8ab5f1d84318f68fba7bf952ce2aa7ec5681dd01e764a1f554330"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000003000000001c0012800b0001006970766c616e00000c0002"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000841) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) 4.921274404s ago: executing program 9 (id=6691): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000340)=ANY=[], 0x200002e6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) chdir(0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0xfffffffa, 0x584e4f53, 0x6, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 3.707995342s ago: executing program 1 (id=6694): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)=ANY=[], 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r0, 0x0, r2, 0x0, 0xffff, 0xa) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, 0x0, 0x8000) setpriority(0x2, 0x0, 0x6340) socket$kcm(0x2, 0xa, 0x2) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000), &(0x7f0000000380), 0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x4, 0x259, 0x0, r13}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1e8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bd, 0x800, 0x1, 0x358}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x100, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x2, 0x6b}}], 0x1, &(0x7f0000000340)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x3f, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x11b, 0x0, 0x0}}, 0x0) 3.677599416s ago: executing program 4 (id=6695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x5) (async) socket$netlink(0x10, 0x3, 0x5) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) (async) personality(0x4100001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r6 = dup2(r5, r4) ppoll(&(0x7f0000000140)=[{r3, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) preadv2(r0, &(0x7f0000003a80)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/70, 0x46}, {&(0x7f00000037c0)=""/3, 0x3}, {&(0x7f0000003800)=""/214, 0xd6}, {&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/152, 0x98}], 0x8, 0x3, 0x6, 0x8) dup2(r2, r3) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f00000002c0)={@my=0x1, 0x3}) accept4(r0, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) (async) accept4(r0, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x62201) r9 = gettid() rt_sigqueueinfo(r9, 0x7, &(0x7f0000000000)={0x11, 0x0, 0x4}) socket(0xa, 0x3, 0x3a) (async) r10 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'bond0\x00', 0x0}) write$P9_RVERSION(r8, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r11 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xffffffffffffffe1}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r11, 0x83, 0x48, &(0x7f0000000240)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r11, 0x83, 0x48, &(0x7f0000000240)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x10, &(0x7f0000000480)=@ready={0x0, 0x0, 0x8, "6a1d3590", {0x1, 0xd58, 0x1, 0x6, 0x3}}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000440), 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000440), 0x4) 3.117139923s ago: executing program 7 (id=6699): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000ba5000/0x3000)=nil, 0x3000, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x5}, 0x10) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) socket(0x40000000015, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff8500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 2.701343547s ago: executing program 7 (id=6700): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x678, 0x0, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x5a8, 0xffffffff, 0xffffffff, 0x5a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x310, 0x338, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x6, 0x1, 0x4, {0x3cff}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2b, 0x0, [{0x5, 0x2, 0x5, 0x8}, {0x3, 0x9, 0xd, 0x200}, {0x7ff, 0x8e, 0xf1, 0x7}, {0x7, 0x5, 0x1, 0x4}, {0x4, 0x2, 0x2, 0xd}, {0x7, 0x4, 0x1, 0x80000001}, {0x2, 0x36, 0x2}, {0x7, 0x0, 0x2, 0x6}, {0x2, 0xff, 0x1, 0x3ff}, {0x8, 0xc4, 0x31, 0x2}, {0x0, 0x6, 0x7, 0xcb}, {0xc, 0xa5, 0x5, 0x8}, {0x2fab, 0xff, 0x4, 0xc6}, {0x7, 0x4, 0x66, 0xe}, {0x6, 0x4, 0x4, 0x1}, {0x7, 0x2, 0x0, 0x3fb}, {0x9, 0x80, 0x0, 0xffffff7f}, {0x7f, 0x0, 0x4, 0x40}, {0x7, 0xf8, 0xf, 0xe}, {0x7, 0xe, 0x1, 0x3b73}, {0x7, 0x2, 0x8, 0x3}, {0x6, 0x2, 0x9, 0xac6}, {0xffff, 0x8, 0xfe, 0x7ff}, {0x8, 0x8, 0x0, 0x7}, {0x0, 0xc9, 0x0, 0xfffffffd}, {0xfff7, 0x6, 0x16, 0xdfd}, {0x7, 0xd, 0x8, 0x8328}, {0x9b, 0x5, 0x2, 0x200}, {0x9, 0x4, 0xf, 0x7fffffff}, {0x9, 0x8, 0x0, 0xa}, {0x5, 0x80, 0x9, 0x6}, {0x9, 0x4, 0x9, 0x5}, {0x248b, 0x9c, 0x5, 0x4}, {0x7ff, 0x6, 0x5, 0x401}, {0x1, 0x2, 0xa, 0xc}, {0x3, 0x8, 0x3, 0x3e}, {0x100, 0x5, 0x0, 0x1}, {0x1, 0x49, 0x33, 0x5}, {0x7, 0xb, 0x8, 0x8}, {0x1, 0x0, 0xd9, 0x1000a0}, {0x3, 0xfc, 0x80, 0x1}, {0x7, 0x9, 0x10, 0xda0}, {0x7ff, 0xf9, 0x80, 0x2}, {0x58, 0xb2, 0x2, 0x4}, {0x81, 0x3, 0x7e, 0xb4a2}, {0x400, 0xa, 0x4, 0x9}, {0xc4, 0xb3, 0x8, 0x8}, {0x2, 0x0, 0x7, 0x4286}, {0x8, 0x4f, 0x8, 0x6}, {0x3, 0xf3, 0xc, 0x4}, {0x7ff, 0x0, 0x8, 0x8}, {0x6, 0x9, 0x4, 0x1}, {0x5, 0x1, 0xc, 0x8}, {0x7fff, 0x7f, 0x4, 0x80000001}, {0x7f91, 0x1, 0x0, 0x80}, {0x2, 0x80, 0x5, 0x1}, {0x6, 0x0, 0x2f, 0x3}, {0x9, 0x44, 0x6, 0x7}, {0x9, 0x3, 0x50, 0xe53}, {0x6, 0xd, 0x1, 0x80}, {0x4, 0xb1, 0x1, 0x10000}, {0x1c24, 0x56, 0x2, 0x6}, {0x751b, 0x0, 0xab}, {0x35, 0x7, 0x8, 0x3}]}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x270, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x5, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1000, 0xae6, 0x7, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x70a) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x404800, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x61c1cc4e3a75f201, 0x8, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe90}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYRES16=r0, @ANYRES32, @ANYRESDEC=r5, @ANYRES64=r2], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r6, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x4}, 0x10) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) socket(0x1d, 0x2, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0xbc8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x2, &(0x7f0000000600)=0x0) io_submit(r10, 0x406946dbb70516de, &(0x7f0000002440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r9, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x2000, r0, &(0x7f0000000240)="7a1088e2ea31f286fd5e013f5eeaeaba6f732d4ad1312bb23666034b6ba3b52e9feaf90e1a82c15b12b5d272a0db630b2b26a438b4406eb287635b67edc54eb0f358423229e3703611ff", 0x4a, 0xfff, 0x0, 0x0, r1}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x3, r8, &(0x7f0000002380)="547da75d2f60b756b27a441342bd017483f0d9ca0f4a0097c2c8760c48618d29d85b68bf054afa6d955b2309025012eae70927aaded7d3142c362651d69c6d207d286805223efb32de51483102ec10cef88bdf3edb3841fc55f7b288e59a78e15eecb507e72ceb55993026a040c85e7e4e78c864", 0x74, 0xfffffffffffffff9}]) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000d50da8532a33a1c9"]) clock_nanosleep(0x4, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 2.607226911s ago: executing program 1 (id=6701): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x77ffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', 0x0, &(0x7f0000000100)='(^\xbb-\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.579889604s ago: executing program 1 (id=6702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xbb3, 0xffffffffffffffff, 0x800, 0xffffffffffffffff, 0x7fffffff, 0x81}, {0xdf, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x10000000, 0x0, 0x3, 0x8}]}]}, 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc0100"/52], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff2f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = epoll_create1(0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x2, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) 2.397559891s ago: executing program 3 (id=6703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}, 0x1, 0x3000, 0x0, 0x42804}, 0x84) 2.213381526s ago: executing program 3 (id=6704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0xf000, 0x0, 0x1}, 0x4824) 2.18477027s ago: executing program 3 (id=6705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, &(0x7f0000000140)) syz_open_dev$usbfs(0x0, 0x204, 0x82) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) r4 = syz_open_dev$ublk_bdev(&(0x7f0000000000), 0x0, 0x80) pwrite64$ublk_bdev(r4, &(0x7f00000000c0), 0x0, 0x39) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.014506753s ago: executing program 7 (id=6706): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) 1.458062723s ago: executing program 9 (id=6707): pipe2(&(0x7f0000000200), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x193f0, 0xa00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0xfe) 1.434290695s ago: executing program 7 (id=6708): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483500fdff5e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) 1.177617254s ago: executing program 3 (id=6709): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) open(0x0, 0x14927e, 0x0) r1 = mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r2, 0x5, &(0x7f0000000ac0)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r1, 0x0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000680), 0x0, 0x80000001}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x5a09, 0xffffffffffffffff, &(0x7f00000007c0)="b0bb6210630083839f440acd844d3f71e56a1b83935c56ae13ac06d73b686fa70fec43022454b307555da103cf8f24cec404a4502a521a0279c85b192c16b1ad80663e5d2d95ea9a67a9ee407cc7bab8aa34e8611a778b351e3a8942e8eed2f3436f28ebe825121c557afdf9153a6d2f4ce448b20dfc77", 0x77, 0x8, 0x0, 0x1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000880)="b2075fe6c3b7c6893d26f4819517e24d8f7f414b4732a14e1b0ab0df2e1ac362bcf20d54c9c425d3f9ff323d71c57218faa9fe194e0ecbce1abb3829bcdafe36be3e84e8f452e2428366037c2b23f01ff2586fec46f612bb7c9864458a754e6ea7495eb1fe35705bb627647aecf6d89c956dcfd57b8542ad056db1e69cc0463b6f0c5be0401bc2e0ebcf34f8291260c49d034f89e6bec1b102eb89c001b580dc3280e482672395c9283b21bc137b8537bb9d521673180c262be9d94585e06992ad", 0xc1, 0x9, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x1000000, 0x0, 0x9f, r1, &(0x7f00000009c0)="1668e3cf3a1e08fcfc3118ed6d9aabd112ee8a13358037a4d5c376e2015f0393427ceba41c777e3432fbcadcba7a5f29da0e2f5d2b0ea37fdf6419abef3a5f4e93212ce7b989bd5aa82644f6b57d9c7338f56b8f0d359088e019292b1e9a4ceb80da66388ae8ec9d796db647c537482240413c00b3eff8932032d32fa9ce6964b6fd6844b5758935220804d42006", 0x8e, 0x81, 0x0, 0x3}]) 1.144080608s ago: executing program 7 (id=6710): r0 = socket$packet(0x11, 0x3, 0x300) r1 = io_uring_setup(0x6, &(0x7f0000000080)={0x0, 0x3cab, 0x40, 0x2, 0x2b7}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0, 0x7ecb4790f5bb6c93, 0xff, 0x0, 0x4}, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x92c, 0x4) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DISCARDURB(r6, 0x550b, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[], 0xb0}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000000000000000", @ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.128233423s ago: executing program 1 (id=6711): syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r2, 0x2, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x5be, r5, 0x0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f0000000540)="896fc1ba2c99", 0x6, 0x5}]) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = fanotify_init(0x500, 0x400) fanotify_mark(r6, 0x241, 0x40000019, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0xf00, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.029054945s ago: executing program 9 (id=6712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000100)) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000185000/0x2000)=nil, 0x2000, 0x200000f, 0x10, r1, 0xec776000) r4 = socket(0x40000000015, 0x5, 0x0) io_setup(0x6, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40004011}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = fanotify_init(0x500, 0x400) fanotify_mark(r6, 0x241, 0x40000019, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000180)=0x1001, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x100, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af83, &(0x7f00000008c0)=0x8000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002000010027bd7000000000000a00204000000019c14ad3b1592f855c8b9a843977ffdaed330c631c5e66d013676a3b8f6c5a1a1b1ac92dc111d1a6e081ff5e536360021fda0e159b8e1bed93ef0cc3c1cea6d504d78b35b8bd440995868bebd2fb2c0f0ad60b26a26145e1348c6447320047ea9c6c9394026b40d0c4daa15be79006d4f75afecf884f"], 0x1c}}, 0x26000848) 537.450694ms ago: executing program 3 (id=6713): listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0005006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 506.000506ms ago: executing program 4 (id=6714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r1, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="e3013080e80001804000038006000300a3aa0000060001000300000006000100000000000c000400000100000000000006000300feff000006000300a2aa0000060001000200000008000100020000000c00050000000000000001000c000500ebfd00000000000058000380080002000100000006000100020000000800020003000000060001000000000006000300a2aa00000800020002000000060003000000000006000100000000000c0004000000000000000000060001000100000008000100000000000c00050023050000000000000800010001000000100003800c0004000201aaaaaaaaaaaa0500020005000000140004002b"], 0x264}, 0x1, 0x0, 0x0, 0x40}, 0x0) 394.875142ms ago: executing program 3 (id=6715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006580)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd30, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x4000000000000000}, 0x4000) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xc939, 0x0, 0xffffffffffffffff, 0xffffaa52, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r6, r5, 0x0, 0x80001d00c0d0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x1f, 0x8, 0x48000, r4, 0x6, '\x00', 0x0, r5, 0x2, 0x2, 0x3, 0x2}, 0x50) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc840}, 0x40000) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x2130b322, 0x4, 0x20005, 0xc69}}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r12 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f00000000c0)=@int=0x4, 0x4) write$FUSE_INIT(r12, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x80000000, 0x10400, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r14 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 305.643285ms ago: executing program 4 (id=6716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x4000000}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 272.379769ms ago: executing program 4 (id=6717): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f0000000300)={0x3, {{0xa, 0x4e20, 0x10001, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @private1, 0x101}}}, 0x108) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0xffffffffffffffff, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000440)={0x0, 0xd9, "b566edd8fe26e018bf960b27998a2eac0bb480566627f50f79879e44c171315d6cce3fcf1dfc5a7c323c0a4d89605fead8b74b2df094964f5e2528f433d74b6f58fbda129d60093a33dcaaaa374ee9b2c925ce01c1cc221aeee7fc5a4dad418df4d6c9d7ee91daf617415962108cc85be94cc0fd43093f5e01ec4497ef406789067673b9b6ac58578e3e15cb6d553b8975560ba9b90e0efd0731f8fe6cec73740b5afb2ae289effcab29ef78ca9537d054cf6c6cefcce508a89aac208a35680c762ddbcc6a5100a67ef21dca97427d60fe50e1a200a0bce5d1"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xffffffffffffff02, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x488c4) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 109.931929ms ago: executing program 7 (id=6718): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x2bf, 0x0, &(0x7f0000000940)="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", 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 9.218852ms ago: executing program 9 (id=6719): r0 = socket(0x400000000010, 0x3, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r2, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x2020) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x2c83, 0x0) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) 0s ago: executing program 1 (id=6720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast}, 0x2000000, @default, 0x8c58, @void, @val, @void, @val={0x4, 0x6, {0x31, 0xfc, 0x0, 0xef}}, @val={0x6, 0x2, 0x10}, @val={0x5, 0x3, {0x81, 0x59, 0x5}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffbfd}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): cket: 8 [ 1127.331322][ T5703] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1127.486066][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1127.612176][ T5703] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1127.725964][ T5703] usb 2-1: media controller created [ 1127.930582][ T5731] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1127.942243][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1127.950811][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.953444][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1127.978000][ T5731] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1127.978918][T26281] netlink: 'syz.4.6263': attribute type 4 has an invalid length. [ 1127.991000][ T5731] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.991049][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.000669][ T5731] usb 8-1: config 0 descriptor?? [ 1128.130974][ T30] audit: type=1326 audit(1783903217.478:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.133213][ T5703] az6027: usb out operation failed. (-71) [ 1128.248684][ T30] audit: type=1326 audit(1783903217.478:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.248870][T26284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6264'. [ 1128.275234][ T30] audit: type=1326 audit(1783903217.478:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.275287][ T30] audit: type=1326 audit(1783903217.478:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.293595][ T5703] az6027: usb out operation failed. (-71) [ 1128.293613][ T5703] stb0899_attach: Driver disabled by Kconfig [ 1128.293624][ T5703] az6027: no front-end attached [ 1128.293624][ T5703] [ 1128.294015][ T5703] az6027: usb out operation failed. (-71) [ 1128.294027][ T5703] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1128.295737][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 1128.316724][ T5703] dvb-usb: schedule remote query interval to 400 msecs. [ 1128.451589][T26284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6264'. [ 1128.467709][T26254] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1128.478139][ T30] audit: type=1326 audit(1783903217.478:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.544921][ T30] audit: type=1326 audit(1783903217.548:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb07d55e68e code=0x7ffc0000 [ 1128.609491][ T30] audit: type=1326 audit(1783903217.548:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.633968][ T5703] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1128.685870][T26292] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1128.688473][ T5703] usb 2-1: USB disconnect, device number 52 [ 1128.699936][T26292] xt_TCPMSS: Only works on TCP SYN packets [ 1128.728433][T26292] cgroup: Need name or subsystem set [ 1128.759746][ T30] audit: type=1326 audit(1783903217.548:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.835999][T26295] tipc: Started in network mode [ 1128.853830][T26295] tipc: Node identity 721a8f7023c3, cluster identity 4711 [ 1128.877836][ T5703] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1128.885408][ T30] audit: type=1326 audit(1783903217.548:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26283 comm="syz.3.6264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb07d59de59 code=0x7ffc0000 [ 1128.888002][T26295] tipc: Enabled bearer , priority 0 [ 1128.952508][T26299] syzkaller0: entered promiscuous mode [ 1128.958138][T26299] syzkaller0: entered allmulticast mode [ 1128.999271][T26295] tipc: Resetting bearer [ 1129.203911][ T5731] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1129.572828][T26317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.597750][T26291] tipc: Resetting bearer [ 1129.615859][T26317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.641232][T26291] tipc: Disabling bearer [ 1129.878641][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 1130.292015][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 1130.345452][T26328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 1130.398569][T26328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.421667][T26328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.519375][T26343] Invalid logical block size (7) [ 1130.553876][T26339] syzkaller0: entered promiscuous mode [ 1130.573358][T26339] syzkaller0: entered allmulticast mode [ 1130.850902][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1131.262058][T26358] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1131.387754][T26365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6276'. [ 1131.400732][T26365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1131.710935][T25222] usb 8-1: reset high-speed USB device number 60 using dummy_hcd [ 1131.771389][T25222] usb 8-1: device reset changed ep0 maxpacket size! [ 1131.813557][ T187] usb 8-1: USB disconnect, device number 60 [ 1131.848895][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1131.848935][ T30] audit: type=1400 audit(1783903221.198:3251): avc: denied { unmount } for pid=21161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1131.879580][ T30] audit: type=1400 audit(1783903221.198:3252): avc: denied { write } for pid=26377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.085137][ T30] audit: type=1400 audit(1783903221.448:3253): avc: denied { write } for pid=26393 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.219714][T26392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.113855][T26401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.176567][ T30] audit: type=1400 audit(1783903222.468:3254): avc: denied { read write } for pid=26396 comm="syz.9.6280" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1133.393039][ T187] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1133.498332][ T30] audit: type=1400 audit(1783903222.468:3255): avc: denied { open } for pid=26396 comm="syz.9.6280" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1133.703687][ T187] usb 8-1: Using ep0 maxpacket: 16 [ 1133.722698][ T187] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 33, changing to 7 [ 1133.736137][ T187] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 223, changing to 7 [ 1133.779800][ T187] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1133.809728][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.831333][ T187] usb 8-1: Product: Ь [ 1133.839536][ T187] usb 8-1: Manufacturer: 灁椡꨽횥뚏잳ⷭႝᄞ矿穵髕年綞௷긼 [ 1133.874238][ T187] usb 8-1: SerialNumber: syz [ 1133.890957][T25222] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1133.910920][ T30] audit: type=1400 audit(1783903223.268:3256): avc: denied { name_bind } for pid=26418 comm="syz.4.6287" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1133.934156][ T30] audit: type=1400 audit(1783903223.268:3257): avc: denied { node_bind } for pid=26418 comm="syz.4.6287" saddr=fe80::15 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1134.072483][T25222] usb 2-1: config 2 has an invalid interface number: 36 but max is 0 [ 1134.080981][T25222] usb 2-1: config 2 has no interface number 0 [ 1134.087120][T25222] usb 2-1: config 2 interface 36 has no altsetting 0 [ 1134.119294][ T30] audit: type=1400 audit(1783903223.458:3258): avc: denied { connect } for pid=26367 comm="syz.7.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1134.161984][T25222] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 1134.173915][T25222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.229216][ T30] audit: type=1400 audit(1783903223.578:3259): avc: denied { accept } for pid=26418 comm="syz.4.6287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1134.253209][T25222] usb 2-1: Product: syz [ 1134.258420][T25222] usb 2-1: Manufacturer: syz [ 1134.264797][T25222] usb 2-1: SerialNumber: syz [ 1134.300881][ T30] audit: type=1400 audit(1783903223.578:3260): avc: denied { create } for pid=26418 comm="syz.4.6287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1134.753696][ T187] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1135.025408][ T187] usb 8-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1135.066278][ T187] usb 8-1: 2:1 : unsupported sample bitwidth 8 in 104 bytes [ 1135.188040][T25222] cdc_acm 2-1:2.36: More than one union descriptor, skipping ... [ 1135.198660][ T187] usb 8-1: USB disconnect, device number 61 [ 1135.222673][T25222] usb 2-1: USB disconnect, device number 53 [ 1135.317079][T26441] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 1135.563228][T26449] : renamed from dummy0 (while UP) [ 1135.573269][ T5621] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1136.206421][T26455] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6297'. [ 1136.451647][T25222] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1136.734430][T25222] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1136.755591][T25222] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1136.786348][T25222] usb 2-1: Product: syz [ 1136.800612][T25222] usb 2-1: Manufacturer: syz [ 1136.806323][T25222] usb 2-1: SerialNumber: syz [ 1136.911857][T25222] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1137.221243][ T187] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1137.294209][T26457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.315538][T26457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.363595][T25222] vp7045: USB control message 'out' went wrong. [ 1137.376598][T25222] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1137.388978][T25222] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1137.407348][T25222] usb 2-1: USB disconnect, device number 54 [ 1137.442319][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 1137.449818][ T187] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1137.482413][ T187] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1137.519034][T26474] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 1137.519367][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.588266][ T187] usb 4-1: config 0 descriptor?? [ 1138.060260][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1138.060277][ T30] audit: type=1400 audit(1783903227.438:3275): avc: denied { name_bind } for pid=26480 comm="syz.7.6304" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1138.096754][T26471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.109431][T26471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.120185][ T187] hid_parser_main: 15 callbacks suppressed [ 1138.120214][ T187] sony 0003:054C:0374.0032: unknown main item tag 0x6 [ 1138.144587][ T187] sony 0003:054C:0374.0032: item fetching failed at offset 22/40 [ 1138.187741][ T187] sony 0003:054C:0374.0032: parse failed [ 1138.198141][ T187] sony 0003:054C:0374.0032: probe with driver sony failed with error -22 [ 1138.417383][ T5731] usb 4-1: USB disconnect, device number 119 [ 1138.462391][T26487] netlink: 'syz.9.6306': attribute type 11 has an invalid length. [ 1138.562082][ T30] audit: type=1400 audit(1783903227.898:3276): avc: denied { ioctl } for pid=26486 comm="syz.9.6306" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1138.892475][ T30] audit: type=1400 audit(1783903228.248:3277): avc: denied { mount } for pid=26493 comm="syz.1.6308" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1138.956472][ T30] audit: type=1400 audit(1783903228.318:3278): avc: denied { setopt } for pid=26495 comm="syz.1.6309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1138.972333][T26496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6309'. [ 1139.146988][ T30] audit: type=1400 audit(1783903228.508:3279): avc: denied { mount } for pid=26497 comm="syz.7.6310" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1139.186130][ T30] audit: type=1400 audit(1783903228.508:3280): avc: denied { remount } for pid=26497 comm="syz.7.6310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1139.990626][ T30] audit: type=1400 audit(1783903229.338:3281): avc: denied { unmount } for pid=19506 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1140.146736][ T30] audit: type=1400 audit(1783903229.508:3282): avc: denied { create } for pid=26501 comm="syz.9.6312" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1140.177331][ T30] audit: type=1400 audit(1783903229.508:3283): avc: denied { write } for pid=26501 comm="syz.9.6312" name="file0" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1140.305615][ T30] audit: type=1400 audit(1783903229.508:3284): avc: denied { open } for pid=26501 comm="syz.9.6312" path="/306/file0" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1141.172756][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1141.434158][T26518] fuse: Unknown parameter 'rootmode00L-#܅?0 0' [ 1141.488545][T26520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6317'. [ 1141.488856][T26516] CUSE: unknown device info "" [ 1141.520608][T26516] CUSE: unknown device info "" [ 1141.525685][T26516] CUSE: unknown device info "" [ 1141.542817][T26516] CUSE: unknown device info "" [ 1141.560630][T26516] CUSE: unknown device info "" [ 1141.571330][T26516] CUSE: unknown device info "" [ 1141.584189][T26516] CUSE: unknown device info "" [ 1141.595477][T26516] CUSE: unknown device info "" [ 1141.604117][T26516] CUSE: unknown device info "" [ 1141.620742][T26516] CUSE: unknown device info "" [ 1141.625806][T26516] CUSE: unknown device info "" [ 1141.654667][T26516] CUSE: unknown device info "r" [ 1141.669447][T26516] CUSE: unknown device info "#" [ 1141.675445][T26516] CUSE: unknown device info "" [ 1141.682086][T26516] CUSE: unknown device info "" [ 1141.687018][T26516] CUSE: unknown device info "" [ 1141.692046][T26516] CUSE: DEVNAME unspecified [ 1142.545681][T26537] xt_hashlimit: max too large, truncated to 1048576 [ 1143.361380][ T187] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1143.575522][ T187] usb 8-1: Using ep0 maxpacket: 16 [ 1143.852177][ T187] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.900869][ T187] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1143.951766][ T187] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.980385][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1143.980401][ T30] audit: type=1400 audit(1783903233.318:3296): avc: denied { setopt } for pid=26571 comm="syz.4.6333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1144.004619][ T187] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1144.015325][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.040696][ T187] usb 8-1: Product: syz [ 1144.049584][ T187] usb 8-1: Manufacturer: syz [ 1144.060607][ T187] usb 8-1: SerialNumber: syz [ 1144.095547][ T187] usb 8-1: config 0 descriptor?? [ 1144.200581][ T30] audit: type=1400 audit(1783903233.408:3297): avc: denied { create } for pid=26563 comm="syz.1.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1144.320961][ T187] appledisplay: Apple Cinema Display connected [ 1144.572716][T26572] nbd: socks must be embedded in a SOCK_ITEM attr [ 1144.588448][ T30] audit: type=1400 audit(1783903233.908:3298): avc: denied { setopt } for pid=26571 comm="syz.4.6333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1144.589016][T21365] usb 8-1: USB disconnect, device number 62 [ 1144.607983][ T30] audit: type=1400 audit(1783903233.908:3299): avc: denied { read append } for pid=26550 comm="syz.7.6327" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1144.608025][ T30] audit: type=1400 audit(1783903233.908:3300): avc: denied { open } for pid=26550 comm="syz.7.6327" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1144.608059][ T30] audit: type=1400 audit(1783903233.908:3301): avc: denied { ioctl } for pid=26550 comm="syz.7.6327" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1144.608298][ C0] usb 8-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1144.700788][ T5703] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1144.812095][ T30] audit: type=1400 audit(1783903234.148:3302): avc: denied { connect } for pid=26571 comm="syz.4.6333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1144.841875][ T30] audit: type=1400 audit(1783903234.148:3303): avc: denied { setopt } for pid=26571 comm="syz.4.6333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1144.861852][ T30] audit: type=1400 audit(1783903234.148:3304): avc: denied { bind } for pid=26571 comm="syz.4.6333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1144.907246][ T5703] usb 2-1: device descriptor read/64, error -71 [ 1145.001881][T21365] appledisplay: Apple Cinema Display disconnected [ 1145.261111][ T5703] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1145.371139][ T804] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1145.540914][ T5703] usb 2-1: device descriptor read/64, error -71 [ 1145.550220][ T30] audit: type=1400 audit(1783903234.798:3305): avc: denied { setopt } for pid=26587 comm="syz.4.6336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1145.660507][ T5703] usb usb2-port1: attempt power cycle [ 1145.774541][T26590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.781806][T26590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.833397][ T804] usb 10-1: device descriptor read/64, error -71 [ 1145.877366][T26590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.891631][ T24] IPVS: starting estimator thread 0... [ 1145.902369][T26590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.987698][ T1048] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.999737][ T1048] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.010638][T25222] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1146.022198][ T1048] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.038273][ T1048] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.112095][ T5703] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1146.161850][ T5703] usb 2-1: device descriptor read/8, error -71 [ 1146.180677][T26598] IPVS: using max 78 ests per chain, 187200 per kthread [ 1146.187712][ T804] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1146.231530][T25222] usb 8-1: Using ep0 maxpacket: 8 [ 1146.238629][T25222] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1146.247785][T25222] usb 8-1: config 7 has an invalid interface number: 101 but max is 0 [ 1146.256226][T25222] usb 8-1: config 7 has no interface number 0 [ 1146.262983][T25222] usb 8-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping [ 1146.274311][T25222] usb 8-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping [ 1146.286912][T25222] usb 8-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping [ 1146.310822][T25222] usb 8-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1146.322114][T25222] usb 8-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1146.333381][T25222] usb 8-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping [ 1146.345550][T25222] usb 8-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping [ 1146.359983][T25222] usb 8-1: config 7 interface 101 altsetting 81 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1146.410051][T25222] usb 8-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping [ 1146.493846][ T5703] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1146.538925][T25222] usb 8-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping [ 1146.665140][ T804] usb 10-1: device descriptor read/64, error -71 [ 1146.742007][T25222] usb 8-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping [ 1146.758169][T25222] usb 8-1: config 7 interface 101 has no altsetting 0 [ 1146.772192][ T5703] usb 2-1: device not accepting address 58, error -71 [ 1146.783892][ T5703] usb usb2-port1: unable to enumerate USB device [ 1146.919951][ T804] usb usb10-port1: attempt power cycle [ 1146.934911][T25222] usb 8-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f [ 1146.973663][T25222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.016903][T25222] usb 8-1: Product: ࠐ [ 1147.113405][T25222] usb 8-1: Manufacturer: К [ 1147.195245][T25222] usb 8-1: SerialNumber: syz [ 1148.223810][T26615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6337'. [ 1148.430949][ T5703] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1148.671683][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 1149.079788][ T30] kauditd_printk_skb: 949 callbacks suppressed [ 1149.079805][ T30] audit: type=1326 audit(1783903237.868:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26616 comm="syz.4.6344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f73b9de59 code=0x50000 [ 1149.134912][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.146257][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.159044][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1149.178024][T25222] uvcvideo 8-1:7.101: Found multiple Units with ID 1 [ 1149.194385][T25222] uvcvideo 8-1:7.101: probe with driver uvcvideo failed with error -22 [ 1149.243911][ T5703] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1149.285912][T25222] usb 8-1: USB disconnect, device number 63 [ 1149.295780][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.323260][ T5703] usb 2-1: config 0 descriptor?? [ 1149.488195][T26633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6349'. [ 1149.503289][T26633] tipc: Started in network mode [ 1149.508165][T26633] tipc: Node identity a212472596ba, cluster identity 4711 [ 1149.517219][T26633] tipc: Enabled bearer , priority 0 [ 1149.525100][T26633] syzkaller0: entered promiscuous mode [ 1149.530614][T26633] syzkaller0: entered allmulticast mode [ 1149.985466][ T5703] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 1149.995488][T26632] tipc: Resetting bearer [ 1149.996188][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.008853][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.016329][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.023794][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.035209][T26632] tipc: Disabling bearer [ 1150.041781][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.050123][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.058051][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.066668][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.074202][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.081450][ T5703] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1150.107874][ T5703] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0033/input/input91 [ 1150.132428][ T30] audit: type=1400 audit(1783903239.468:4256): avc: denied { getopt } for pid=26640 comm="syz.9.6352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1150.153767][T26641] block nbd0: reconnected socket [ 1150.154046][ T5621] block nbd0: Receive control failed (result -107) [ 1150.186725][ T5703] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1150.257049][T26644] netlink: 116 bytes leftover after parsing attributes in process `syz.7.6353'. [ 1150.347985][ T5703] usb 2-1: USB disconnect, device number 59 [ 1150.371424][T26642] fido_id[26642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1150.600737][ T5731] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 1150.761177][T25222] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1150.867155][T26660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1150.899949][T26662] overlayfs: missing 'workdir' [ 1150.907150][ T30] audit: type=1400 audit(1783903240.248:4257): avc: denied { map } for pid=26661 comm="syz.1.6360" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1150.992837][T25222] usb 4-1: not running at top speed; connect to a high speed hub [ 1151.003591][T25222] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1151.014744][T25222] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1151.023831][T25222] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.40 [ 1151.033115][T25222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.041566][T25222] usb 4-1: Product: syz [ 1151.045746][T25222] usb 4-1: Manufacturer: ⡭Ր撈쐌羂翆〈꜒ࡉ駷負削ᜥ⊢﹮煇궹✍쥦睶ﮃ쳊䴟擌捼ⴉ੒隒‖蛱Ỉ렩ꯢ馻⻒撌䫷璢怅皕톃绂鳱梫坢आ捘넘鵛켐酬篣자꓆ [ 1151.069727][T25222] usb 4-1: SerialNumber: syz [ 1151.400428][T26666] blktrace: Concurrent blktraces are not allowed on loop18 [ 1151.488034][T26654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.510869][T26654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.551645][T25222] usbhid 4-1:1.0: can't add hid device: -71 [ 1151.557689][T25222] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1151.571940][T25222] usb 4-1: USB disconnect, device number 120 [ 1151.700337][T26668] loop5: detected capacity change from 0 to 7 [ 1151.710913][T26668] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1151.720912][T26668] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1151.727522][T26668] Dev loop5: unable to read RDB block 7 [ 1151.733065][T26668] loop5: AHDI p2 p3 [ 1151.736940][T26668] loop5: partition table partially beyond EOD, truncated [ 1151.744102][T26668] loop5: p3 start 335544320 is beyond EOD, truncated [ 1152.030963][ T5731] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1152.041928][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1152.052828][ T5731] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1152.065961][ T5731] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1152.075057][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.096113][ T5731] usb 8-1: config 0 descriptor?? [ 1152.927346][ T30] audit: type=1400 audit(1783903241.918:4258): avc: denied { ioctl } for pid=26669 comm="syz.1.6363" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1152.967488][T26644] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1153.554419][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 1153.801692][ T5731] usb 8-1: can't set config #0, error -71 [ 1153.808948][ T5731] usb 8-1: USB disconnect, device number 64 [ 1154.054915][T26689] netlink: 2960 bytes leftover after parsing attributes in process `syz.7.6368'. [ 1154.064188][T26689] openvswitch: netlink: Flow key attr not present in new flow. [ 1154.078744][T26689] overlayfs: overlapping lowerdir path [ 1154.084839][T21365] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1154.364261][T21365] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1154.378170][T21365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.396804][T21365] usb 4-1: Product: syz [ 1154.406795][T21365] usb 4-1: Manufacturer: syz [ 1154.413216][T21365] usb 4-1: SerialNumber: syz [ 1154.419570][T21365] usb 4-1: config 0 descriptor?? [ 1154.430500][T21365] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1154.441024][T21365] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1154.451383][T21365] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1154.460672][T21365] usb 4-1: media controller created [ 1154.470980][T21365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.602414][T26692] macvlan2: entered allmulticast mode [ 1154.608189][T26692] batadv0: entered promiscuous mode [ 1154.623114][T26692] batadv0: entered allmulticast mode [ 1154.631288][T21365] DVB: Unable to find symbol mt352_attach() [ 1154.645711][T26692] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1154.654860][T26692] team0: Port device macvlan2 added [ 1154.685540][T21365] DVB: Unable to find symbol nxt6000_attach() [ 1154.699321][T21365] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1154.737666][T21365] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input93 [ 1154.791669][T21365] dvb-usb: schedule remote query interval to 1000 msecs. [ 1154.829330][T21365] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1154.840031][ T30] audit: type=1400 audit(1783903244.168:4259): avc: denied { create } for pid=26694 comm="syz.1.6370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1154.986133][T21365] dvb-usb: bulk message failed: -22 (7/0) [ 1155.000442][T21365] dvb-usb: bulk message failed: -22 (7/0) [ 1155.020659][ T30] audit: type=1400 audit(1783903244.358:4260): avc: denied { bind } for pid=26694 comm="syz.1.6370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1155.111765][ T30] audit: type=1400 audit(1783903244.468:4261): avc: denied { connect } for pid=26694 comm="syz.1.6370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1155.115348][T26705] netlink: 'syz.7.6373': attribute type 1 has an invalid length. [ 1155.157901][T26703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.166722][T26703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.246401][T26705] netlink: 'syz.7.6373': attribute type 2 has an invalid length. [ 1155.447663][T26708] netlink: 'syz.7.6374': attribute type 11 has an invalid length. [ 1155.527530][T26708] can: request_module (can-proto-5) failed. [ 1155.939931][T21365] dvb-usb: bulk message failed: -22 (7/0) [ 1156.000301][T21365] dvb-usb: error while querying for an remote control event. [ 1156.647558][ T30] audit: type=1400 audit(1783903245.988:4262): avc: denied { ioctl } for pid=26724 comm="syz.9.6379" path="socket:[108312]" dev="sockfs" ino=108312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1156.903020][ T24] usb 4-1: USB disconnect, device number 121 [ 1156.991184][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1157.075304][T26733] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 1157.160528][ T30] audit: type=1400 audit(1783903246.528:4263): avc: denied { cmd } for pid=26734 comm="iou-wrk-26735" path="socket:[109010]" dev="sockfs" ino=109010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1157.899810][ T30] audit: type=1400 audit(1783903247.268:4264): avc: denied { write } for pid=26741 comm="syz.7.6383" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1157.915343][ T24] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1157.942863][ T30] audit: type=1400 audit(1783903247.268:4265): avc: denied { open } for pid=26741 comm="syz.7.6383" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1157.969396][ T30] audit: type=1400 audit(1783903247.288:4266): avc: denied { ioctl } for pid=26741 comm="syz.7.6383" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1157.998310][ T30] audit: type=1400 audit(1783903247.288:4267): avc: denied { read } for pid=26741 comm="syz.7.6383" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1158.148747][ T5731] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1158.310800][T21365] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1158.493323][T21365] usb 10-1: Using ep0 maxpacket: 8 [ 1158.515477][T21365] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1158.526646][T21365] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1158.535818][T21365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.545553][T21365] usb 10-1: config 0 descriptor?? [ 1158.884374][ T5731] usb 2-1: Using ep0 maxpacket: 32 [ 1159.187649][T26750] netlink: 'syz.7.6386': attribute type 1 has an invalid length. [ 1159.310128][T21365] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1159.360238][T21365] usb 10-1: USB disconnect, device number 40 [ 1159.388484][ T24] usb 4-1: config 1 has an invalid interface number: 82 but max is 0 [ 1159.396596][ T24] usb 4-1: config 1 has no interface number 0 [ 1159.402684][ T24] usb 4-1: config 1 interface 82 has no altsetting 0 [ 1159.571168][T26760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26760 comm=syz.4.6388 [ 1160.048094][T26769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.055236][T26769] bridge0: port 2(bridge_slave_1) entered listening state [ 1160.062535][T26769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.069624][T26769] bridge0: port 1(bridge_slave_0) entered listening state [ 1160.226942][T26769] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 1160.233727][T26769] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 1160.241396][T26769] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 1160.248574][T26769] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 1160.256956][T26769] macvlan2: left allmulticast mode [ 1160.262052][T26769] batadv0: left allmulticast mode [ 1160.269698][T26769] bond1: left allmulticast mode [ 1160.274671][T26769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1160.282430][T26769] mac80211_hwsim hwsim47 wlan1: left promiscuous mode [ 1160.290202][T26769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1160.315173][T26769] ip6gre1: left promiscuous mode [ 1160.320126][T26769] ip6gre1: left allmulticast mode [ 1160.342957][T26769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.360589][ T30] audit: type=1400 audit(1783903249.358:4268): avc: denied { read write } for pid=26766 comm="syz.7.6392" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1160.438316][ T30] audit: type=1400 audit(1783903249.358:4269): avc: denied { open } for pid=26766 comm="syz.7.6392" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1160.467726][ T76] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.543258][T26773] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6393'. [ 1160.554862][ T30] audit: type=1400 audit(1783903249.898:4270): avc: denied { write } for pid=26770 comm="syz.9.6393" path="socket:[109081]" dev="sockfs" ino=109081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1160.705980][T22955] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1160.731454][T22955] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.916152][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 1160.926685][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1160.927464][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.077719][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1161.485630][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.493752][ T24] usb 4-1: Product: syz [ 1161.514045][ T1109] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.571447][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1161.676088][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1161.683931][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.713377][ T5731] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1161.722544][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.730686][ T5731] usb 2-1: Product: syz [ 1161.734981][ T5731] usb 2-1: Manufacturer: syz [ 1161.760998][ T24] usb 4-1: can't set config #1, error -71 [ 1161.763036][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1161.768818][ T24] usb 4-1: USB disconnect, device number 122 [ 1161.788483][ T5731] usb 2-1: config 0 descriptor?? [ 1161.964398][ T5731] usb 2-1: can't set config #0, error -71 [ 1162.014606][ T5731] usb 2-1: USB disconnect, device number 60 [ 1162.047058][T26783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6396'. [ 1162.253499][T26792] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1162.533590][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1162.541432][ T5703] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1162.781119][ T5703] usb 10-1: Using ep0 maxpacket: 16 [ 1162.788296][ T5703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.799748][ T5703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.809668][ T5703] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1162.822623][ T5703] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1162.836888][ T5703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.845383][T21365] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1162.860962][ T5703] usb 10-1: config 0 descriptor?? [ 1163.085891][T21365] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1163.100993][T21365] usb 2-1: config 0 has no interface number 0 [ 1163.107800][T21365] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1163.118138][T21365] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1163.130669][T21365] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1163.139910][T21365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.148509][T21365] usb 2-1: Product: syz [ 1163.152748][T21365] usb 2-1: Manufacturer: syz [ 1163.157351][T21365] usb 2-1: SerialNumber: syz [ 1163.164230][T21365] usb 2-1: config 0 descriptor?? [ 1163.169851][T26795] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1163.178574][T21365] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1163.189496][T21365] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1163.281331][T26800] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.289271][ T5703] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 1163.298856][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.306974][T26800] binder: 26799:26800 ioctl 4018620d 200000000100 returned -16 [ 1163.315069][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.325275][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.332614][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.339864][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.351739][ T30] audit: type=1400 audit(1783903252.708:4271): avc: denied { append } for pid=26799 comm="syz.7.6403" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1163.353906][T26800] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.374726][ T30] audit: type=1400 audit(1783903252.708:4272): avc: denied { map } for pid=26799 comm="syz.7.6403" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1163.404949][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.412876][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.420110][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.427675][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.434983][ T5703] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 1163.473008][ T5703] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0034/input/input94 [ 1163.488395][T26800] binder: 26799:26800 ioctl 4018620d 2000000002c0 returned -16 [ 1163.559761][ T5703] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1163.660400][T21365] usb 2-1: USB disconnect, device number 61 [ 1164.036027][ T5703] usb 10-1: USB disconnect, device number 41 [ 1164.182593][T21365] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1164.307309][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1164.314945][ T24] usb 4-1: can't read configurations, error -71 [ 1164.405146][T21365] cyberjack 2-1:0.69: device disconnected [ 1165.374398][T26805] fido_id[26805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1165.403782][T26811] kAFS: unable to lookup cell '' [ 1165.500685][T26810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6405'. [ 1165.553222][ T1109] net_ratelimit: 55 callbacks suppressed [ 1165.553300][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1165.590834][ T30] audit: type=1400 audit(1783903254.928:4273): avc: denied { read } for pid=26812 comm="syz.9.6406" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1165.636330][ T30] audit: type=1400 audit(1783903254.928:4274): avc: denied { open } for pid=26812 comm="syz.9.6406" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1165.692391][T22955] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1165.713745][T22955] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.784004][ T30] audit: type=1400 audit(1783903255.138:4275): avc: denied { ioctl } for pid=26812 comm="syz.9.6406" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1165.872291][T22955] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1165.884576][T26821] blktrace: Concurrent blktraces are not allowed on loop6 [ 1165.895183][T22955] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.005204][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1166.012943][ T1109] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.192008][ T804] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1166.207842][T25163] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1166.370756][T26825] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6409'. [ 1166.379854][T26825] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6409'. [ 1166.684062][T25163] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.704758][ T30] audit: type=1400 audit(1783903256.048:4276): avc: denied { read } for pid=26826 comm="syz.7.6410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1166.790712][T25163] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1167.395693][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 1167.595240][T26841] netlink: 'syz.9.6411': attribute type 3 has an invalid length. [ 1168.038314][ T804] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1168.049216][ T804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1168.090877][ T5703] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1168.363498][ T5703] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1168.372516][ T5703] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.399374][ T5703] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1168.420367][ T5703] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1168.423857][T26852] netlink: 'syz.7.6418': attribute type 1 has an invalid length. [ 1168.429997][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.445867][ T5703] usb 10-1: Product: syz [ 1168.450196][ T5703] usb 10-1: Manufacturer: syz [ 1168.455037][ T5703] usb 10-1: SerialNumber: syz [ 1168.463811][T26852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1168.518918][T26852] bond3: (slave veth0_to_bond): making interface the new active one [ 1168.528222][T26852] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1168.553594][T26852] bond3: entered promiscuous mode [ 1168.558733][T26852] veth0_to_bond: entered promiscuous mode [ 1168.566278][T26852] bond3: entered allmulticast mode [ 1168.571489][T26852] veth0_to_bond: entered allmulticast mode [ 1168.973129][ T5703] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1169.101394][ T5703] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1169.130642][ T5703] usb 10-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1169.143370][ T5703] usb 10-1: found format II with max.bitrate = 4, frame size=7372 [ 1169.452162][ T804] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1169.461357][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.517102][ T804] usb 2-1: Product: syz [ 1169.527351][ T804] usb 2-1: config 0 descriptor?? [ 1169.573540][ T804] usb 2-1: can't set config #0, error -71 [ 1169.580841][ T804] usb 2-1: USB disconnect, device number 62 [ 1169.588401][ T5703] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1169.628041][T26861] bond2: option mode: unable to set because the bond device is up [ 1169.645547][T26861] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1169.654942][T26861] bond2: (slave macvlan3): Enslaving as an active interface with a down link [ 1169.677648][ T5703] usb 10-1: USB disconnect, device number 42 [ 1169.721080][T26861] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6421'. [ 1169.722600][T12782] udevd[12782]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1169.857597][ T30] audit: type=1400 audit(1783903259.188:4277): avc: denied { write } for pid=26867 comm="syz.7.6424" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1169.890860][ T30] audit: type=1400 audit(1783903259.188:4278): avc: denied { open } for pid=26867 comm="syz.7.6424" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1170.268383][ T804] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1170.633505][T25886] net_ratelimit: 54 callbacks suppressed [ 1170.633554][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.767894][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.900783][ T80] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.908759][ T80] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.970140][T26877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=26877 comm=syz.9.6427 [ 1170.970490][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 1171.083260][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.091152][ T1109] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.224565][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.235491][ T1109] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.315840][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.323700][ T1109] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.330325][T26882] netlink: 'syz.4.6429': attribute type 10 has an invalid length. [ 1171.379962][T26882] bridge0: port 3(dummy0) entered blocking state [ 1171.390080][T26882] bridge0: port 3(dummy0) entered disabled state [ 1171.402973][T26882] dummy0: entered allmulticast mode [ 1171.415326][T26882] dummy0: entered promiscuous mode [ 1171.742077][ T30] audit: type=1400 audit(1783903261.088:4279): avc: denied { map } for pid=26887 comm="syz.4.6431" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1171.855334][T26883] SELinux: invalid class [ 1171.949141][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.955440][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.967058][ T30] audit: type=1400 audit(1783903261.088:4280): avc: denied { write } for pid=26887 comm="syz.4.6431" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1171.990658][ T30] audit: type=1400 audit(1783903261.088:4281): avc: denied { open } for pid=26887 comm="syz.4.6431" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1171.990972][T26883] SELinux: failed to load policy [ 1172.014564][ T30] audit: type=1400 audit(1783903261.088:4282): avc: denied { ioctl } for pid=26887 comm="syz.4.6431" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1172.014610][ T30] audit: type=1400 audit(1783903261.158:4283): avc: denied { load_policy } for pid=26871 comm="syz.3.6426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1172.917825][ T804] usb 2-1: unable to read config index 0 descriptor/all [ 1172.924836][ T804] usb 2-1: can't read configurations, error -71 [ 1173.130856][ T30] audit: type=1400 audit(1783903262.458:4284): avc: denied { relabelfrom } for pid=26901 comm="syz.1.6435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1173.284697][T26923] trusted_key: encrypted_key: keylen parameter is missing [ 1173.537385][ T30] audit: type=1400 audit(1783903262.528:4285): avc: denied { watch watch_reads } for pid=26909 comm="syz.4.6437" path="/37" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1173.733736][ T30] audit: type=1400 audit(1783903262.908:4286): avc: denied { relabelto } for pid=26901 comm="syz.1.6435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1173.964153][T26927] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6439'. [ 1174.016891][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 1174.025429][T26929] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6439'. [ 1174.047048][T26929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.054207][T26929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.078680][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 1174.288362][T26940] binder: BINDER_SET_CONTEXT_MGR already set [ 1174.288373][T26940] binder: 26939:26940 ioctl 4018620d 200000003280 returned -16 [ 1174.289125][T26940] binder: 26939:26940 ioctl c0306201 200000000080 returned -14 [ 1174.291176][T26940] binder: BINDER_SET_CONTEXT_MGR already set [ 1174.291184][T26940] binder: 26939:26940 ioctl 4018620d 200000000040 returned -16 [ 1174.450083][T26943] binder: 26939:26943 ioctl 4008941a 2000000000c0 returned -22 [ 1174.571950][T26945] binder: 26939:26945 ioctl c0306201 2000000003c0 returned -14 [ 1174.774553][ T30] audit: type=1400 audit(1783903263.948:4287): avc: denied { read } for pid=26946 comm="syz.4.6446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1175.062033][ T187] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1175.084105][ T30] audit: type=1400 audit(1783903264.208:4288): avc: denied { name_connect } for pid=26946 comm="syz.4.6446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1175.324201][ T187] usb 4-1: config 1 has an invalid descriptor of length 143, skipping remainder of the config [ 1175.339425][ T187] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.382408][ T187] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1175.426146][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.438867][ T187] usb 4-1: Product: syz [ 1175.450589][ T187] usb 4-1: Manufacturer: syz [ 1175.458985][ T187] usb 4-1: SerialNumber: syz [ 1175.625077][ T1109] net_ratelimit: 56 callbacks suppressed [ 1175.625097][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.658972][ T1109] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1175.676739][T26961] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1175.687088][T26961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1175.724141][ T187] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1175.764599][ T187] usb 4-1: USB disconnect, device number 125 [ 1175.816217][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.866229][T26963] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6450'. [ 1175.875667][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.875694][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1175.918423][T26966] netlink: 'syz.4.6450': attribute type 12 has an invalid length. [ 1176.069573][T26966] macsec0: entered promiscuous mode [ 1176.170922][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.178706][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.231210][T26973] netlink: zone id is out of range [ 1176.236740][T26973] netlink: zone id is out of range [ 1176.493503][T26979] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input95 [ 1176.509055][T26962] macsec0: left promiscuous mode [ 1177.201074][T26990] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6460'. [ 1177.210152][T26990] netlink: 219 bytes leftover after parsing attributes in process `syz.4.6460'. [ 1178.094089][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1178.353473][ T804] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 1178.873994][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1179.603659][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1179.611869][ T24] usb 2-1: config 0 has no interface number 0 [ 1179.617943][ T24] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1179.677984][T27017] loop5: detected capacity change from 0 to 7 [ 1179.684784][T27017] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1179.697783][T27017] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1179.704664][T27017] Dev loop5: unable to read RDB block 7 [ 1179.710289][T27017] loop5: AHDI p2 p3 [ 1179.714219][T27017] loop5: partition table partially beyond EOD, truncated [ 1179.734059][T27017] loop5: p3 start 335544320 is beyond EOD, truncated [ 1179.848871][ T804] usb 8-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1179.860093][ T804] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1179.871218][ T804] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.881120][ T804] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1179.894238][ T804] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1179.900964][ T804] usb 8-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1179.909996][ T804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.970481][ T804] usb 8-1: config 0 descriptor?? [ 1180.113963][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1180.113979][ T30] audit: type=1400 audit(1783903269.458:4294): avc: denied { connect } for pid=27023 comm="syz.3.6472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1180.487254][T27042] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1180.692138][ T13] net_ratelimit: 60 callbacks suppressed [ 1180.692172][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1180.707817][T27044] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1181.028816][ T24] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1181.037942][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.045918][ T24] usb 2-1: Product: syz [ 1181.089894][ T24] usb 2-1: config 0 descriptor?? [ 1181.141250][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.194878][ T76] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.216496][ T24] usb 2-1: can't set config #0, error -71 [ 1181.223922][ T24] usb 2-1: USB disconnect, device number 65 [ 1181.313415][ T76] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.403680][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.578844][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.593087][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.766075][ T804] usbhid 8-1:0.0: can't add hid device: -71 [ 1181.772083][ T804] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1181.782032][ T804] usb 8-1: USB disconnect, device number 65 [ 1181.791561][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.799304][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.096001][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1182.451172][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1182.978099][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1183.012718][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1183.188856][T27073] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6484'. [ 1183.262208][T27075] FAULT_INJECTION: forcing a failure. [ 1183.262208][T27075] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.274208][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1183.310589][T27075] CPU: 0 UID: 0 PID: 27075 Comm: syz.3.6485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.310611][T27075] Tainted: [L]=SOFTLOCKUP [ 1183.310615][T27075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1183.310621][T27075] Call Trace: [ 1183.310625][T27075] [ 1183.310630][T27075] dump_stack_lvl+0x100/0x190 [ 1183.310653][T27075] should_fail_ex.cold+0x5/0xa [ 1183.310664][T27075] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1183.310680][T27075] should_failslab+0xc2/0x120 [ 1183.310694][T27075] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1183.310707][T27075] ? skb_clone+0x190/0x400 [ 1183.310721][T27075] skb_clone+0x190/0x400 [ 1183.310732][T27075] netlink_deliver_tap+0xaed/0xcc0 [ 1183.310750][T27075] netlink_unicast+0x6a5/0x850 [ 1183.310767][T27075] ? __pfx_netlink_unicast+0x10/0x10 [ 1183.310786][T27075] netlink_ack+0x655/0xb80 [ 1183.310805][T27075] netlink_rcv_skb+0x333/0x420 [ 1183.310820][T27075] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1183.310833][T27075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1183.310854][T27075] ? ns_capable+0xd2/0xf0 [ 1183.310869][T27075] nfnetlink_rcv+0x1b3/0x440 [ 1183.310880][T27075] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1183.310891][T27075] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1183.310908][T27075] netlink_unicast+0x585/0x850 [ 1183.310925][T27075] ? __pfx_netlink_unicast+0x10/0x10 [ 1183.310944][T27075] netlink_sendmsg+0x8b0/0xda0 [ 1183.310961][T27075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.310977][T27075] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1183.310995][T27075] ____sys_sendmsg+0xa4d/0xbe0 [ 1183.311008][T27075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.311024][T27075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1183.311044][T27075] ___sys_sendmsg+0x190/0x1e0 [ 1183.311060][T27075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1183.311074][T27075] ? __lock_acquire+0x49f/0x1a40 [ 1183.311086][T27075] ? get_pid_task+0x106/0x250 [ 1183.311117][T27075] __sys_sendmsg+0x160/0x210 [ 1183.311128][T27075] ? __pfx___sys_sendmsg+0x10/0x10 [ 1183.311147][T27075] do_syscall_64+0x115/0x870 [ 1183.311163][T27075] ? clear_bhb_loop+0x40/0x90 [ 1183.311176][T27075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.311187][T27075] RIP: 0033:0x7fb07d59de59 [ 1183.311197][T27075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.311208][T27075] RSP: 002b:00007fb07e46b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.311220][T27075] RAX: ffffffffffffffda RBX: 00007fb07d825fa0 RCX: 00007fb07d59de59 [ 1183.311227][T27075] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1183.311233][T27075] RBP: 00007fb07e46b090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.311239][T27075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.311245][T27075] R13: 00007fb07d826038 R14: 00007fb07d825fa0 R15: 00007ffca46fec48 [ 1183.311260][T27075] [ 1183.860001][ T30] audit: type=1400 audit(1783903273.158:4295): avc: denied { mounton } for pid=27081 comm="syz.3.6488" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1183.938923][T27084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6486'. [ 1184.039999][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.050935][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1184.059967][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.098723][ T24] usb 2-1: config 0 descriptor?? [ 1184.117464][ T30] audit: type=1400 audit(1783903273.468:4296): avc: denied { accept } for pid=27086 comm="syz.9.6490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1184.734650][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1184.776894][ T24] usb 2-1: USB disconnect, device number 66 [ 1186.045936][T24432] net_ratelimit: 40 callbacks suppressed [ 1186.045954][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.059321][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.187347][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.195140][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.325968][T22955] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.333724][T22955] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.467415][ T1109] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.596632][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.734510][T22955] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.762583][T22955] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.927582][T27115] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6494'. [ 1186.938352][T27113] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1187.935410][ T30] audit: type=1400 audit(1783903277.188:4297): avc: denied { append } for pid=27130 comm="syz.9.6503" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1188.053834][T27127] bridge0: port 3(dummy0) entered blocking state [ 1188.060919][T27127] bridge0: port 3(dummy0) entered forwarding state [ 1188.147190][T27127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.154647][T27127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.176936][ T30] audit: type=1400 audit(1783903277.458:4298): avc: denied { read write } for pid=27130 comm="syz.9.6503" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1188.219443][ T30] audit: type=1400 audit(1783903277.458:4299): avc: denied { open } for pid=27130 comm="syz.9.6503" path="/345/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1188.290350][T27127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.556697][T27127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.645306][T27127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.666175][T27127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1188.676523][T27127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.715855][T27127] veth1_vlan: left promiscuous mode [ 1188.792163][T27127] veth0_vlan: left promiscuous mode [ 1188.798868][T27127] veth0_vlan: entered promiscuous mode [ 1188.806411][T27127] veth1_vlan: entered promiscuous mode [ 1188.816534][T27127] veth1_macvtap: left promiscuous mode [ 1188.823306][T27127] veth0_macvtap: left promiscuous mode [ 1188.829901][T27127] veth0_macvtap: entered promiscuous mode [ 1188.845558][T27127] veth1_macvtap: entered promiscuous mode [ 1188.928016][T27127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.936373][T27127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.944816][T27127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.953339][T27127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.998459][T27114] tipc: Enabled bearer , priority 0 [ 1189.005540][T27133] syzkaller0: entered promiscuous mode [ 1189.014387][T27133] syzkaller0: entered allmulticast mode [ 1189.086744][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.094133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.122361][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.129765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.236660][T27153] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 1189.339329][T27143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1189.366934][ T30] audit: type=1400 audit(1783903278.688:4300): avc: denied { create } for pid=27156 comm="syz.9.6508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1189.411100][T27112] tipc: Resetting bearer [ 1189.480617][T27112] tipc: Disabling bearer [ 1189.492008][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.764427][ T1121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.805041][T22955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.814878][T22955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.161319][T27168] netlink: 'syz.7.6510': attribute type 1 has an invalid length. [ 1190.372650][T27168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1190.502384][T27170] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1190.515834][T27170] bond4: entered allmulticast mode [ 1190.803331][ T30] audit: type=1400 audit(1783903280.138:4301): avc: denied { create } for pid=27183 comm="syz.7.6515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1191.141182][ T5703] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1191.149590][ T6785] net_ratelimit: 40 callbacks suppressed [ 1191.149607][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.162952][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.206855][ T30] audit: type=1400 audit(1783903280.518:4302): avc: denied { shutdown } for pid=27190 comm="syz.3.6518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1191.362386][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.370154][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.424777][ T5731] usb 10-1: new low-speed USB device number 43 using dummy_hcd [ 1191.437456][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.445232][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.560632][ T804] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1191.581856][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.589698][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.727688][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.735501][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1192.026869][ T5703] usb 8-1: Using ep0 maxpacket: 32 [ 1192.042956][ T5703] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice= 0.40 [ 1192.052371][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.060684][ T5703] usb 8-1: Product: syz [ 1192.065004][ T5703] usb 8-1: Manufacturer: syz [ 1192.069931][ T5703] usb 8-1: SerialNumber: syz [ 1192.272693][ T5731] usb 10-1: Invalid ep0 maxpacket: 64 [ 1192.468359][ T5703] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1192.534779][ T5731] usb 10-1: new low-speed USB device number 44 using dummy_hcd [ 1192.567317][ T5703] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1192.580918][ T5703] usb 8-1: USB disconnect, device number 66 [ 1192.603676][T12782] udevd[12782]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.091966][T27206] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6522'. [ 1193.219000][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.229928][ T804] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1193.238963][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.249510][ T804] usb 2-1: config 0 descriptor?? [ 1193.364667][ T5731] usb 10-1: Invalid ep0 maxpacket: 64 [ 1193.370446][ T5731] usb usb10-port1: attempt power cycle [ 1193.582526][ T30] audit: type=1400 audit(1783903282.918:4303): avc: denied { mount } for pid=27225 comm="syz.7.6526" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1193.666242][T27226] netlink: 'syz.7.6526': attribute type 10 has an invalid length. [ 1193.674104][T27226] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6526'. [ 1193.684837][T27226] team0: entered promiscuous mode [ 1193.689895][T27226] team_slave_0: entered promiscuous mode [ 1193.695695][T27226] team_slave_1: entered promiscuous mode [ 1193.704812][T27226] macvlan2: entered promiscuous mode [ 1193.711215][T27226] team0: entered allmulticast mode [ 1193.716340][T27226] team_slave_0: entered allmulticast mode [ 1193.722064][T27226] team_slave_1: entered allmulticast mode [ 1193.727913][T27226] macvlan2: entered allmulticast mode [ 1193.733290][T27226] batadv0: entered allmulticast mode [ 1193.739367][T27226] bridge0: port 3(team0) entered blocking state [ 1193.746939][T27226] bridge0: port 3(team0) entered disabled state [ 1193.941102][ T5731] usb 10-1: new low-speed USB device number 45 using dummy_hcd [ 1194.348327][ T804] usbhid 2-1:0.0: can't add hid device: -71 [ 1194.354346][ T804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1194.364417][ T804] usb 2-1: USB disconnect, device number 67 [ 1194.372933][ T5731] usb 10-1: device descriptor read/8, error -71 [ 1194.532721][T27240] blktrace: Concurrent blktraces are not allowed on loop6 [ 1195.499789][T27249] netlink: 'syz.1.6533': attribute type 10 has an invalid length. [ 1195.508434][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1195.518396][T27249] bridge0: port 3(dummy0) entered blocking state [ 1195.525523][T27249] bridge0: port 3(dummy0) entered disabled state [ 1195.532753][T27249] dummy0: entered allmulticast mode [ 1195.632343][T27249] dummy0: entered promiscuous mode [ 1195.638961][T27249] bridge0: port 3(dummy0) entered blocking state [ 1195.648305][T27249] bridge0: port 3(dummy0) entered forwarding state [ 1196.021778][ T30] audit: type=1400 audit(1783903285.378:4304): avc: denied { execute } for pid=27257 comm="syz.7.6532" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1196.183661][T25886] net_ratelimit: 53 callbacks suppressed [ 1196.183706][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.228979][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.358677][ T804] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1196.398654][ T30] audit: type=1400 audit(1783903285.728:4305): avc: denied { map } for pid=27264 comm="syz.7.6538" path="/dev/vbi8" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1196.414794][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.440591][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.532186][T27267] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1196.538739][T27267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1196.548103][T27267] vhci_hcd vhci_hcd.0: Device attached [ 1196.555341][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.563638][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.691567][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.699336][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.927917][T13922] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1196.942471][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.965947][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.068604][T27274] loop5: detected capacity change from 0 to 7 [ 1197.079395][T27274] loop5: [POWERTEC] p1 p2 p3 [ 1197.087676][T27274] loop5: p1 size 1919942656 extends beyond EOD, truncated [ 1197.112486][T27274] loop5: p2 start 876163636 is beyond EOD, truncated [ 1197.140689][T27274] loop5: p3 start 29360128 is beyond EOD, truncated [ 1197.273784][T12782] udevd[12782]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1197.316740][T27279] btrfs: Unknown parameter 'discard_fʙo5Q/_TA!Q.ܟKrL2eb8N*WEwWXF2&Ž_9du@' [ 1197.330229][ T30] audit: type=1400 audit(1783903286.688:4306): avc: denied { mounton } for pid=27278 comm="syz.7.6542" path="/syzcgroup/unified/syz7" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1197.717277][ T187] usb 8-1: new full-speed USB device number 67 using dummy_hcd [ 1197.932169][ T187] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1197.950318][ T187] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.977192][ T187] usb 8-1: config 0 descriptor?? [ 1198.024670][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.035811][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.045546][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1198.058423][ T804] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1198.067458][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.102308][ T804] usb 4-1: config 0 descriptor?? [ 1198.228961][ T187] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1198.237743][T27291] netlink: 'syz.1.6546': attribute type 1 has an invalid length. [ 1198.267625][T27291] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6546'. [ 1198.287946][T27291] netlink: 'syz.1.6546': attribute type 2 has an invalid length. [ 1198.330598][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6546'. [ 1198.465022][ T187] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1198.475604][ T187] [drm] Initialized udl on minor 2 [ 1198.644858][ T187] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1198.663212][ T187] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1198.811446][T21253] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1198.889590][ T30] audit: type=1400 audit(1783903288.218:4307): avc: denied { mount } for pid=27294 comm="syz.1.6547" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1199.183185][ T187] usb 8-1: USB disconnect, device number 67 [ 1199.312921][T21365] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1199.375630][T21365] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1199.380536][ T804] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1199.433657][T27306] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6549'. [ 1199.570558][T27309] syzkaller0: entered promiscuous mode [ 1199.572264][T27268] vhci_hcd: connection reset by peer [ 1199.579279][T27309] syzkaller0: entered allmulticast mode [ 1199.608281][T25886] vhci_hcd vhci_hcd.4: stop threads [ 1199.613520][T25886] vhci_hcd vhci_hcd.4: release socket [ 1199.621237][T25886] vhci_hcd vhci_hcd.4: disconnect device [ 1199.918433][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6536'. [ 1200.027431][ T5731] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1200.409403][ T30] audit: type=1400 audit(1783903289.738:4308): avc: denied { create } for pid=27322 comm="syz.7.6553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1200.429090][ T30] audit: type=1400 audit(1783903289.738:4309): avc: denied { write } for pid=27322 comm="syz.7.6553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1200.459462][ T30] audit: type=1400 audit(1783903289.778:4310): avc: denied { watch } for pid=27322 comm="syz.7.6553" path="/435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1200.528724][ T30] audit: type=1400 audit(1783903289.778:4311): avc: denied { watch_sb watch_reads } for pid=27322 comm="syz.7.6553" path="/435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1200.579319][T27317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.586722][T27317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.594720][T27317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.602113][T27317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.678556][ C1] plantronics 0003:047F:FFFF.0035: usb_submit_urb(ctrl) failed: -1 [ 1200.708524][T27309] tipc: Enabled bearer , priority 0 [ 1200.728666][ T30] audit: type=1400 audit(1783903290.048:4312): avc: denied { getattr } for pid=27325 comm="syz.7.6554" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1200.729797][T27321] tipc: Resetting bearer [ 1200.804990][T27307] tipc: Resetting bearer [ 1200.852237][T27307] tipc: Disabling bearer [ 1200.922542][ T804] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 1201.201046][T21365] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1201.269745][ T804] usb 4-1: device descriptor read/64, error -32 [ 1201.314735][ T6785] net_ratelimit: 49 callbacks suppressed [ 1201.314754][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.328177][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.447616][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.455380][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.514808][T21365] usb 8-1: Using ep0 maxpacket: 32 [ 1201.548266][ T5731] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1201.558989][ T5731] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1201.571865][ T5731] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1201.580905][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.591559][ T5731] usb 2-1: config 0 descriptor?? [ 1201.604619][T27341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input97 [ 1201.623012][T21365] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1201.636603][T21365] usb 8-1: config 0 has no interface number 0 [ 1201.650205][T21365] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1201.677561][T21365] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.685690][ T804] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 1201.689550][T27159] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.706037][T21365] usb 8-1: Product: syz [ 1201.709744][T27338] ip6gre1: entered promiscuous mode [ 1201.710856][T21365] usb 8-1: Manufacturer: syz [ 1201.715415][T27338] ip6gre1: entered allmulticast mode [ 1201.719428][T27338] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1201.721055][T21365] usb 8-1: SerialNumber: syz [ 1201.750115][T21365] usb 8-1: config 0 descriptor?? [ 1201.760469][T21365] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1201.770409][T21365] usb 8-1: selecting invalid altsetting 1 [ 1201.777718][T21365] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1201.809536][T21365] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1201.810598][ T5731] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1201.819906][T21365] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1201.835402][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.843143][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.854405][T21365] usb 8-1: media controller created [ 1201.867955][T21365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1201.926277][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1201.934371][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1202.011049][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1202.018805][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.062693][ T804] usb 4-1: device descriptor read/64, error -32 [ 1202.085483][ T30] audit: type=1326 audit(1783903291.428:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27348 comm="syz.4.6560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f73b9de59 code=0x0 [ 1202.104784][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1202.153510][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1202.462703][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1202.515072][T13922] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1202.542137][T21365] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1202.732315][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1202.748194][ T804] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 1202.899757][T21365] usb 8-1: USB disconnect, device number 68 [ 1203.125872][ T804] usb 4-1: device not accepting address 126, error -71 [ 1203.139975][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.150440][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.172156][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6564'. [ 1203.452530][T27373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.461252][T27373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.606247][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.616617][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.031828][T27378] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1204.042087][T27378] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1204.090606][T27378] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1204.207623][ T5724] usb 4-1: USB disconnect, device number 126 [ 1204.225760][ T30] audit: type=1400 audit(1783903293.388:4314): avc: denied { firmware_load } for pid=27376 comm="syz.4.6567" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1204.497227][ T30] audit: type=1400 audit(1783903293.818:4315): avc: denied { append } for pid=27376 comm="syz.4.6567" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1204.847010][ T5703] usb 2-1: USB disconnect, device number 68 [ 1204.884035][T27383] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6568'. [ 1205.155161][ T13] team0: Port device netdevsim1 removed [ 1205.312714][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1205.323013][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.640905][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1205.656649][T27388] netlink: 'syz.9.6571': attribute type 1 has an invalid length. [ 1206.242824][ T30] audit: type=1400 audit(1783903295.568:4316): avc: denied { sqpoll } for pid=27390 comm="syz.9.6572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1206.347829][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.358080][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.371421][T27399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6575'. [ 1206.380349][T27399] nbd: must specify a device to reconfigure [ 1206.429525][T24432] net_ratelimit: 42 callbacks suppressed [ 1206.429560][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.471171][T27399] IPVS: length: 147 != 24 [ 1206.471283][ T30] audit: type=1400 audit(1783903295.838:4317): avc: denied { getopt } for pid=27397 comm="syz.4.6575" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1206.502879][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.624513][ T804] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1206.635749][T14481] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.643492][T14481] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.768661][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.792206][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.925455][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.933193][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.013816][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1207.119187][T14481] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1207.811230][ T30] audit: type=1400 audit(1783903296.618:4318): avc: denied { ioctl } for pid=27405 comm="syz.9.6577" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1208.989632][ T5703] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1209.010432][ T804] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 727, setting to 64 [ 1209.136707][ T5703] usb 8-1: device descriptor read/64, error -71 [ 1209.531341][ T5703] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1210.274207][T27437] SQUASHFS error: Failed to read block 0x0: -5 [ 1210.281027][T27437] unable to read squashfs_super_block [ 1211.185420][ T5703] usb 8-1: device descriptor read/64, error -71 [ 1211.192531][T27439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.212147][T27439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.322930][ T5703] usb usb8-port1: attempt power cycle [ 1211.394528][ T30] audit: type=1400 audit(1783903300.738:4319): avc: denied { write } for pid=27410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1211.402880][ T804] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1211.426716][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.436107][T24432] net_ratelimit: 16 callbacks suppressed [ 1211.436122][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.577405][ T804] usb 2-1: can't set config #1, error -71 [ 1211.600083][ T1048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.614271][ T804] usb 2-1: USB disconnect, device number 69 [ 1211.673889][T27163] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.724185][ T5703] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1211.809768][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.861742][ T5703] usb 8-1: device descriptor read/8, error -71 [ 1211.947383][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.966464][ T30] audit: type=1400 audit(1783903301.318:4320): avc: denied { write } for pid=27443 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1212.084210][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1212.140942][T27163] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1212.151717][ T5703] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1212.191267][T27163] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1212.230783][ T5703] usb 8-1: device descriptor read/8, error -71 [ 1212.237897][ T1048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1212.321331][ T1048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1212.365163][ T5703] usb usb8-port1: unable to enumerate USB device [ 1212.497724][ T13] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 1212.738993][ T30] audit: type=1400 audit(1783903302.088:4321): avc: denied { lock } for pid=27445 comm="syz.7.6585" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1212.745436][ T13] bond1 (unregistering): Released all slaves [ 1212.750593][ T13] bond0 (unregistering): Released all slaves [ 1212.819656][T27432] ip6gre1: left promiscuous mode [ 1212.819671][T27432] ip6gre1: left allmulticast mode [ 1212.822899][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1212.870342][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1212.942334][T13922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.468050][ T30] audit: type=1400 audit(1783903302.788:4322): avc: denied { unmount } for pid=25032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1213.565666][ T13] tipc: Left network mode [ 1213.663386][ T30] audit: type=1400 audit(1783903303.028:4323): avc: denied { write } for pid=27458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.697330][ T5724] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1213.883572][T13922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1214.322468][ T30] audit: type=1400 audit(1783903303.678:4324): avc: denied { write } for pid=27484 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1214.545252][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1214.800656][ T5724] usb 8-1: Using ep0 maxpacket: 32 [ 1215.026435][T27496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.105058][T27496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.231082][ T30] audit: type=1400 audit(1783903304.578:4325): avc: denied { write } for pid=27490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.299229][ T30] audit: type=1400 audit(1783903304.578:4326): avc: denied { write } for pid=27509 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.390855][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1215.601923][ T5724] usb 8-1: config 4 has an invalid interface number: 44 but max is 0 [ 1215.610049][ T5724] usb 8-1: config 4 has no interface number 0 [ 1215.616129][ T5724] usb 8-1: config 4 interface 44 has no altsetting 0 [ 1215.681877][ T13] hsr_slave_0: left promiscuous mode [ 1215.691224][ T13] hsr_slave_1: left promiscuous mode [ 1215.706733][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.720615][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.739354][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.756814][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.804509][ T13] veth1_macvtap: left promiscuous mode [ 1215.812889][ T13] veth0_macvtap: left promiscuous mode [ 1215.818966][ T13] veth1_vlan: left promiscuous mode [ 1215.827280][ T13] veth0_vlan: left promiscuous mode [ 1216.429133][T25886] net_ratelimit: 37 callbacks suppressed [ 1216.429151][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.486696][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1216.518006][T24432] Bluetooth: hci2: Frame reassembly failed (-84) [ 1216.567541][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1216.571843][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.584732][T24432] Bluetooth: hci2: Frame reassembly failed (-90) [ 1216.758846][ T1048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.844176][ T5724] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 1216.853248][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.865639][T14481] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.896710][T27513] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1216.898270][ T30] audit: type=1400 audit(1783903306.218:4327): avc: denied { firmware_load } for pid=27512 comm="syz.4.6597" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1216.906039][T27513] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1216.906062][T27513] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1216.979737][ T5724] usb 8-1: can't set config #4, error -71 [ 1216.989751][ T5724] usb 8-1: USB disconnect, device number 73 [ 1217.032450][ T6012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1217.047342][ T6012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.181153][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1217.188988][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.395773][ T1048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1217.463860][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1217.681562][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1217.692065][T27532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1217.710776][ T30] audit: type=1400 audit(1783903307.058:4328): avc: denied { set_context_mgr } for pid=27527 comm="syz.3.6602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1218.473258][ T30] audit: type=1326 audit(1783903307.818:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1218.603505][T21253] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1218.611887][ T5616] Bluetooth: hci2: command 0xfc11 tx timeout [ 1218.731579][ T30] audit: type=1326 audit(1783903307.818:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1218.974644][ T30] audit: type=1326 audit(1783903307.818:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1219.040780][ T30] audit: type=1326 audit(1783903307.818:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1219.141345][ T30] audit: type=1326 audit(1783903307.818:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1219.196336][ T30] audit: type=1326 audit(1783903307.818:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1219.289813][ T30] audit: type=1326 audit(1783903307.818:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1219.316519][ T30] audit: type=1326 audit(1783903307.818:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27547 comm="syz.1.6606" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a799de59 code=0x7ffc0000 [ 1219.472702][T27558] dlm: non-version read from control device 0 [ 1219.942776][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1220.410835][T27561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.273745][T27585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.316650][T27567] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6609'. [ 1221.534008][ T1048] net_ratelimit: 49 callbacks suppressed [ 1221.534057][ T1048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.630805][ T1048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.754331][ T5731] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1221.888103][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.994174][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1222.088051][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1222.132365][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1222.175521][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1222.295872][T24432] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1222.303647][T24432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1222.441778][ T6012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1222.992315][ T29] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1223.701173][T27607] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.707183][T27607] binder: 27606:27607 ioctl 4018620d 200000000100 returned -16 [ 1223.717097][T27607] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.723087][T27607] binder: 27606:27607 ioctl 4018620d 200000004a80 returned -16 [ 1223.819256][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 1224.299413][T27615] netlink: 'syz.3.6622': attribute type 11 has an invalid length. [ 1224.641047][ T5731] usb 4-1: unable to read config index 0 descriptor/all [ 1224.648259][ T5731] usb 4-1: can't read configurations, error -71 [ 1224.656607][ T29] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1224.664731][ T29] usb 2-1: config 4 has no interface number 0 [ 1224.670978][ T29] usb 2-1: config 4 interface 44 has no altsetting 0 [ 1225.115433][T27628] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6625'. [ 1225.444173][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 1225.444190][ T30] audit: type=1400 audit(1783903314.808:4478): avc: denied { write } for pid=27621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.592924][ T30] audit: type=1400 audit(1783903314.948:4479): avc: denied { write } for pid=27641 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.755113][T27645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1225.806761][ T30] audit: type=1400 audit(1783903315.088:4480): avc: denied { write } for pid=27647 comm="syz.3.6628" path="socket:[113212]" dev="sockfs" ino=113212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1225.842771][ T29] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 1225.851828][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.859789][ T29] usb 2-1: Product: syz [ 1225.863921][ T29] usb 2-1: Manufacturer: syz [ 1225.959862][ T29] usb 2-1: can't set config #4, error -71 [ 1225.967133][ T29] usb 2-1: USB disconnect, device number 70 [ 1226.419524][T27661] xt_hashlimit: size too large, truncated to 1048576 [ 1226.724605][ T1048] net_ratelimit: 58 callbacks suppressed [ 1226.724646][ T1048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.770004][ T29] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1226.842156][ T1048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.909532][ T6012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.931448][ T6012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.980661][ T30] audit: type=1400 audit(1783903316.118:4481): avc: denied { setattr } for pid=27658 comm="syz.3.6631" name="NETLINK" dev="sockfs" ino=113223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1227.046075][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1227.083850][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.335885][ T30] audit: type=1400 audit(1783903316.118:4482): avc: denied { ioctl } for pid=27658 comm="syz.3.6631" path="socket:[112587]" dev="sockfs" ino=112587 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1227.453060][ T29] usb 2-1: device descriptor read/64, error -71 [ 1227.481005][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1227.759839][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1227.767647][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.862052][ T29] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1228.001262][T27159] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1228.091544][T27675] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6635'. [ 1228.160550][T27159] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1228.436536][ T29] usb 2-1: device descriptor read/64, error -71 [ 1228.563739][ T29] usb usb2-port1: attempt power cycle [ 1229.035341][T27691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input98 [ 1229.257716][T27695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27695 comm=syz.1.6639 [ 1229.608876][T27700] netlink: 'syz.1.6641': attribute type 12 has an invalid length. [ 1229.864024][T27700] macsec0: entered promiscuous mode [ 1229.880069][T27699] macsec0: left promiscuous mode [ 1230.398691][T27710] loop5: detected capacity change from 0 to 7 [ 1230.405619][T27710] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1230.415608][T27710] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1230.422250][T27710] Dev loop5: unable to read RDB block 7 [ 1230.427798][T27710] loop5: AHDI p2 p3 [ 1230.431686][T27710] loop5: partition table partially beyond EOD, truncated [ 1230.438861][T27710] loop5: p3 start 335544320 is beyond EOD, truncated [ 1230.491567][T19147] usb 10-1: new low-speed USB device number 47 using dummy_hcd [ 1230.525964][T27712] SET target dimension over the limit! [ 1230.679495][T27717] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 1230.687033][T27717] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 1230.699367][T27717] tipc: Started in network mode [ 1230.704260][T27717] tipc: Node identity 080211, cluster identity 4711 [ 1230.713125][T27717] tipc: Enabled bearer , priority 0 [ 1230.904763][ T29] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1230.940961][T27719] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6647'. [ 1230.950527][T27719] netlink: 'syz.7.6647': attribute type 1 has an invalid length. [ 1230.958262][T27719] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6647'. [ 1231.337942][T27727] syzkaller0: entered promiscuous mode [ 1231.343454][T27727] syzkaller0: entered allmulticast mode [ 1231.352809][T27727] tipc: Enabled bearer , priority 0 [ 1231.371427][T27726] tipc: Resetting bearer [ 1231.397763][T27726] tipc: Disabling bearer [ 1231.652805][T27732] syz_tun: entered allmulticast mode [ 1231.660890][T27732] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1231.669415][T27732] net_ratelimit: 46 callbacks suppressed [ 1231.669431][T27732] mroute: pending queue full, dropping entries [ 1231.726313][T13922] tipc: Node number set to 134353152 [ 1231.727018][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1231.731785][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 1231.755031][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1231.861081][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1231.879923][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.042288][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1232.050049][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.277144][ T30] audit: type=1400 audit(1783903321.648:4483): avc: denied { write } for pid=27730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.303300][T25886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1232.350716][T25886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.473047][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1232.561801][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.572698][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.582443][ T29] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1232.591467][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.602348][ T29] usb 2-1: config 0 descriptor?? [ 1232.636306][ T30] audit: type=1400 audit(1783903321.938:4484): avc: denied { write } for pid=27753 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.399270][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.405577][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.534347][T19147] usb 10-1: unable to read config index 0 descriptor/all [ 1233.541546][T19147] usb 10-1: can't read configurations, error -71 [ 1233.818093][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 1233.824288][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1233.837722][ T29] usb 2-1: USB disconnect, device number 74 [ 1233.902681][T27768] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1234.404114][ T30] audit: type=1400 audit(1783903323.758:4485): avc: denied { write } for pid=27757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.971714][ T30] audit: type=1400 audit(1783903324.338:4486): avc: denied { write } for pid=27785 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1235.436770][T27597] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1235.529885][T27816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6665'. [ 1235.911150][ T30] audit: type=1400 audit(1783903325.228:4487): avc: denied { write } for pid=27805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.009157][ T30] audit: type=1400 audit(1783903325.348:4488): avc: denied { write } for pid=27834 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.219992][T27597] usb 4-1: Using ep0 maxpacket: 8 [ 1236.373153][T27839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1236.686764][ T6012] net_ratelimit: 53 callbacks suppressed [ 1236.686781][ T6012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1236.700141][ T6012] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1236.827917][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1236.835690][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.500300][T27597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1237.539315][T14481] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1237.547070][T14481] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.569680][T27597] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1237.586905][T27597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.661753][T14481] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1237.663219][T27597] usb 4-1: config 0 descriptor?? [ 1237.789472][T14481] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1238.292474][T14481] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1238.399844][T27597] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1238.464186][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1238.519788][ T30] audit: type=1400 audit(1783903327.748:4489): avc: denied { getopt } for pid=27875 comm="syz.3.6682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1238.552581][T27597] usb 4-1: USB disconnect, device number 3 [ 1238.635012][ T48] Bluetooth: hci2: Frame reassembly failed (-84) [ 1238.964411][T19147] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1239.128973][T27891] loop5: detected capacity change from 0 to 7 [ 1239.151484][T27891] loop5: [POWERTEC] p1 p2 p3 [ 1239.156267][T27891] loop5: p1 size 1919942656 extends beyond EOD, truncated [ 1239.166535][T27891] loop5: p2 start 876163636 is beyond EOD, truncated [ 1239.173640][T27891] loop5: p3 start 29360128 is beyond EOD, truncated [ 1239.248858][T27862] syzkaller1: entered promiscuous mode [ 1239.259074][T27862] syzkaller1: entered allmulticast mode [ 1239.730870][T19147] usb 8-1: Using ep0 maxpacket: 16 [ 1240.221234][T27905] netlink: 'syz.4.6689': attribute type 9 has an invalid length. [ 1240.338908][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6690'. [ 1240.459583][T19147] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.469686][T19147] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1240.480549][T19147] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1240.490163][T19147] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1240.499768][T19147] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1240.633632][T21253] Bluetooth: hci2: command 0x1003 tx timeout [ 1240.642939][ T5621] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1240.936678][T19147] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1240.945877][T19147] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1240.953926][T19147] usb 8-1: Manufacturer: syz [ 1240.962202][T19147] usb 8-1: config 0 descriptor?? [ 1241.480206][T27919] netlink: 'syz.7.6696': attribute type 21 has an invalid length. [ 1241.506702][ T30] audit: type=1400 audit(1783903330.848:4490): avc: denied { create } for pid=27921 comm="syz.4.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1241.588220][ T30] audit: type=1400 audit(1783903330.848:4491): avc: denied { create } for pid=27921 comm="syz.4.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1241.645876][T27932] syz.7.6697 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1241.679290][T19147] rc_core: IR keymap rc-hauppauge not found [ 1241.685226][T19147] Registered IR keymap rc-empty [ 1241.690160][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1241.803018][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1241.803720][ T48] net_ratelimit: 46 callbacks suppressed [ 1241.803734][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1241.843802][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1241.925613][T19147] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1241.938149][T19147] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input99 [ 1241.965340][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1241.973585][ T6788] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1241.981331][ T6788] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1242.039830][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1242.188776][ T6788] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1242.196714][ T6788] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1242.204695][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1242.332919][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1242.380794][ T6785] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1242.388571][ T6785] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1242.468397][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1242.586966][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1242.594714][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1242.602141][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1242.705767][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1242.833146][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1242.957773][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1243.085041][T19147] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1243.227291][T27971] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6705'. [ 1243.236388][T27971] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6705'. [ 1243.506651][T19147] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1243.515866][T19147] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1243.539967][T19147] usb 8-1: USB disconnect, device number 74 [ 1243.771418][T27988] macvlan3: entered allmulticast mode [ 1243.778330][T27988] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1243.787137][T27988] team0: Port device macvlan3 added [ 1243.931152][T27990] netlink: 'syz.7.6708': attribute type 10 has an invalid length. [ 1244.160586][T27997] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6711'. [ 1244.698527][T28005] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6714'. [ 1244.715267][T28005] netlink: 219 bytes leftover after parsing attributes in process `syz.4.6714'. [ 1244.950341][T28009] sctp: [Deprecated]: syz.3.6715 (pid 28009) Use of int in max_burst socket option deprecated. [ 1244.950341][T28009] Use struct sctp_assoc_value instead [ 1245.419703][T19147] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1245.580589][T28023] kAFS: unable to lookup cell '' [ 1254.370818][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1310.070668][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1350.720490][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1350.728151][ C0] rcu: 1-...!: (2 GPs behind) idle=783c/1/0x4000000000000000 softirq=153352/153353 fqs=1 [ 1350.739483][ C0] rcu: (detected by 0, t=10505 jiffies, g=116501, q=841 ncpus=2) [ 1350.747289][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1350.747315][ C1] NMI backtrace for cpu 1 [ 1350.747328][ C1] CPU: 1 UID: 0 PID: 28019 Comm: syz.9.6719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.747348][ C1] Tainted: [L]=SOFTLOCKUP [ 1350.747353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1350.747361][ C1] RIP: 0010:__lock_acquire+0x4be/0x1a40 [ 1350.747382][ C1] Code: 48 89 de 48 89 ef e8 f1 ee ff ff 85 c0 0f 84 e9 fe ff ff 44 8b 1d e2 6a 8d 19 45 85 db 75 11 4d 63 e4 4c 0f a3 25 b2 be 84 14 <0f> 83 69 0b 00 00 48 8b b5 90 0b 00 00 45 85 ed 0f 84 93 01 00 00 [ 1350.747395][ C1] RSP: 0000:ffffc90000a08ca8 EFLAGS: 00000047 [ 1350.747407][ C1] RAX: 0000000000000001 RBX: ffff888038be0bc8 RCX: 0000000000000200 [ 1350.747416][ C1] RDX: 0000000000000000 RSI: ffff888038be0bc8 RDI: ffff888038be0000 [ 1350.747425][ C1] RBP: ffff888038be0000 R08: 0000000000000000 R09: 0000000000000001 [ 1350.747434][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000007 [ 1350.747442][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 1350.747451][ C1] FS: 00007f5bb86806c0(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 1350.747466][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1350.747475][ C1] CR2: 000020000004a030 CR3: 000000003962b000 CR4: 00000000003526f0 [ 1350.747484][ C1] Call Trace: [ 1350.747490][ C1] [ 1350.747498][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1350.747516][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1350.747534][ C1] lock_acquire+0x1b9/0x370 [ 1350.747548][ C1] ? advance_sched+0x707/0xd20 [ 1350.747562][ C1] ? advance_sched+0x6a2/0xd20 [ 1350.747577][ C1] advance_sched+0x718/0xd20 [ 1350.747589][ C1] ? advance_sched+0x707/0xd20 [ 1350.747603][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1350.747620][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1350.747633][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1350.747654][ C1] ? rcu_is_watching+0x12/0xc0 [ 1350.747673][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1350.747696][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1350.747716][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1350.747736][ C1] [ 1350.747741][ C1] [ 1350.747747][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1350.747763][ C1] RIP: 0010:lock_release+0x46/0x310 [ 1350.747778][ C1] Code: 89 6c 24 10 48 89 f5 0f 1f 44 00 00 65 8b 05 d5 d9 7d 12 83 f8 07 0f 87 07 02 00 00 48 0f a3 05 20 be 3c 0f 0f 82 02 02 00 00 <44> 8b 05 e7 f1 3c 0f 45 85 c0 0f 84 48 01 00 00 65 8b 05 43 20 7e [ 1350.747792][ C1] RSP: 0000:ffffc9000702f9e8 EFLAGS: 00000202 [ 1350.747803][ C1] RAX: 0000000000000001 RBX: ffff888088e41d38 RCX: edbc7214ceca522d [ 1350.747813][ C1] RDX: 0000000000000000 RSI: ffffffff8c400f00 RDI: ffffffff8e46a928 [ 1350.747822][ C1] RBP: ffffffff825d3205 R08: 00000000ffffffff R09: 00000000000001c8 [ 1350.747832][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888038be05c0 [ 1350.747841][ C1] R13: ffffffff825d3205 R14: 000020000004a100 R15: dffffc0000000000 [ 1350.747851][ C1] ? __might_fault+0xc5/0x140 [ 1350.747870][ C1] ? __might_fault+0xc5/0x140 [ 1350.747892][ C1] ? lock_release+0x24d/0x310 [ 1350.747907][ C1] __might_fault+0x10c/0x140 [ 1350.747926][ C1] _copy_from_user+0x29/0xd0 [ 1350.747948][ C1] copy_msghdr_from_user+0x9f/0x4c0 [ 1350.747966][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1350.747985][ C1] ? rcu_is_watching+0x12/0xc0 [ 1350.748003][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 1350.748019][ C1] ? kfree+0x1e5/0x6c0 [ 1350.748038][ C1] ___sys_recvmsg+0xdd/0x1a0 [ 1350.748055][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1350.748077][ C1] ? __pfx___might_resched+0x10/0x10 [ 1350.748093][ C1] do_recvmmsg+0x2f3/0x740 [ 1350.748111][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1350.748129][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1350.748152][ C1] ? find_held_lock+0x2b/0x80 [ 1350.748170][ C1] ? kcov_ioctl+0x17a/0x750 [ 1350.748184][ C1] ? rcu_is_watching+0x12/0xc0 [ 1350.748202][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 1350.748218][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1350.748231][ C1] ? kcov_ioctl+0x17a/0x750 [ 1350.748246][ C1] do_syscall_64+0x115/0x870 [ 1350.748265][ C1] ? clear_bhb_loop+0x40/0x90 [ 1350.748280][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.748293][ C1] RIP: 0033:0x7f5bb779de59 [ 1350.748306][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.748318][ C1] RSP: 002b:00007f5bb8680028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1350.748330][ C1] RAX: ffffffffffffffda RBX: 00007f5bb7a26090 RCX: 00007f5bb779de59 [ 1350.748339][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1350.748348][ C1] RBP: 00007f5bb7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1350.748356][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1350.748364][ C1] R13: 00007f5bb7a26128 R14: 00007f5bb7a26090 R15: 00007ffc57569be8 [ 1350.748378][ C1] [ 1350.749310][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g116501 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1351.245366][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1351.255321][ C0] rcu: RCU grace-period kthread stack dump: [ 1351.261191][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1351.274680][ C0] Call Trace: [ 1351.277971][ C0] [ 1351.280894][ C0] __schedule+0x125c/0x6730 [ 1351.285413][ C0] ? __pfx___schedule+0x10/0x10 [ 1351.290256][ C0] ? find_held_lock+0x2b/0x80 [ 1351.294947][ C0] ? schedule+0x225/0x2c0 [ 1351.299277][ C0] schedule+0xdd/0x2c0 [ 1351.303361][ C0] schedule_timeout+0x127/0x280 [ 1351.308218][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1351.313589][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1351.318880][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.324681][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1351.330133][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1351.334905][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1351.340185][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1351.345130][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1351.350343][ C0] ? rcu_is_watching+0x12/0xc0 [ 1351.355107][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1351.360915][ C0] rcu_gp_kthread+0x179/0x230 [ 1351.365587][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1351.370774][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1351.376577][ C0] ? __kthread_parkme+0x18c/0x230 [ 1351.381598][ C0] ? kthread+0x13a/0x450 [ 1351.385836][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1351.391043][ C0] kthread+0x370/0x450 [ 1351.395111][ C0] ? __pfx_kthread+0x10/0x10 [ 1351.399700][ C0] ret_from_fork+0x72b/0xd50 [ 1351.404286][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1351.409393][ C0] ? __switch_to+0x800/0x10f0 [ 1351.414068][ C0] ? __pfx_kthread+0x10/0x10 [ 1351.418658][ C0] ret_from_fork_asm+0x1a/0x30 [ 1351.423613][ C0] [ 1351.426628][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1351.432942][ C0] CPU: 0 UID: 0 PID: 6788 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.444038][ C0] Tainted: [L]=SOFTLOCKUP [ 1351.448346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1351.458397][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1351.464894][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 1351.471560][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 1351.491157][ C0] RSP: 0018:ffffc9000751f878 EFLAGS: 00000293 [ 1351.497218][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd45bd [ 1351.505188][ C0] RDX: ffff888074658000 RSI: ffffffff81fd4597 RDI: ffff888074658000 [ 1351.513169][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 1351.521133][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1351.529092][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 1351.537051][ C0] FS: 0000000000000000(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000 [ 1351.545971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1351.552543][ C0] CR2: 0000001b2de0bff8 CR3: 000000000e992000 CR4: 00000000003526f0 [ 1351.560503][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1351.568461][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1351.576420][ C0] Call Trace: [ 1351.579778][ C0] [ 1351.582704][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1351.587737][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1351.594055][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1351.599439][ C0] ? __pfx___text_poke+0x10/0x10 [ 1351.604375][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1351.609393][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1351.614496][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1351.620383][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1351.626095][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1351.631977][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1351.638221][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1351.644451][ C0] ? find_held_lock+0x2b/0x80 [ 1351.649134][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1351.655101][ C0] jump_label_update+0x37a/0x550 [ 1351.660030][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1351.665913][ C0] static_key_enable+0x1a/0x20 [ 1351.670666][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1351.675942][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1351.681830][ C0] ? rcu_is_watching+0x12/0xc0 [ 1351.686596][ C0] process_one_work+0xa23/0x1940 [ 1351.691535][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1351.696905][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1351.702789][ C0] worker_thread+0x5ef/0xe50 [ 1351.707375][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1351.712476][ C0] ? kthread+0x13a/0x450 [ 1351.716713][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1351.721809][ C0] kthread+0x370/0x450 [ 1351.725879][ C0] ? __pfx_kthread+0x10/0x10 [ 1351.730469][ C0] ret_from_fork+0x72b/0xd50 [ 1351.735055][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1351.740163][ C0] ? rcu_is_watching+0x12/0xc0 [ 1351.744937][ C0] ? __switch_to+0x800/0x10f0 [ 1351.749613][ C0] ? __pfx_kthread+0x10/0x10 [ 1351.754201][ C0] ret_from_fork_asm+0x1a/0x30 [ 1351.758987][ C0]