last executing test programs: 2m54.480601968s ago: executing program 0 (id=487): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140), 0x0, 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x9f1bc7bdd2042b30, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x9, 0x3ff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f00000001c0)=0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000380)=@file={0x1, './file0/file0\x00'}, 0x9) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r10) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000100)='gfs2\x00', 0x0, 0x0) r11 = gettid() syz_open_procfs(r11, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m50.999053059s ago: executing program 0 (id=498): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x200080) (rerun: 32) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x10, 0x4, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8d, 0x12) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x7f, 0xfffffffffffffffd}, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0xa89, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b00010000000009040000012e6d0a000905", @ANYRES32], 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000"], 0x28}}, 0x0) (rerun: 64) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) r8 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r8, &(0x7f00000001c0), 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0xff, 0x6, @broadcast}, 0x14) 2m50.675337198s ago: executing program 0 (id=500): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x8000005, 0x6, "e22e845e3ede57135adc514d00000000001af2bb6b1543835f00", 0x0, 0x4, 0x8000, 0x9, 0x230}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000f2ffffff0000000000000418110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000700b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 2m50.534792235s ago: executing program 0 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8802, 0x0) r1 = syz_io_uring_setup(0x22e, &(0x7f0000000080)={0x0, 0x74df, 0x20, 0x0, 0x1, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) (async) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="69f6404e36d00c2aab52283a209889d00dbe4f7038", 0x15}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x7ff}}, './file1/file0\x00'}) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) (async) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1000}) r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfffa, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) accept4(r4, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 2m50.408235834s ago: executing program 0 (id=503): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@rnullb, r1, &(0x7f0000000080)={0xffffffffffffff3c, 0x0, 0x0, 0x3}) epoll_create(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x4, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 2m50.292133274s ago: executing program 0 (id=505): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="153a5727ebd2b0d0f688b9af", @ANYRES32=r7, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="b80000001300040029bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="04000000210204000800200000000000050027000800000015002200313d0da81a108b1aff8c4241c16040e96400000005002100090000004c0012800b00010067726574617000003c00028006000f0000000000050017000100000008000100", @ANYRES32=r5, @ANYBLOB="080004000900000006000f000400000008000400ff03000008001500f28401001400140076657468315f766c616e00000010000008000a25acc73e472ec79873d500", @ANYRES32=r7, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x5}, 0x4000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2000) ioctl$EVIOCRMFF(r9, 0x40044581, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = memfd_secret(0x0) (async) r14 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r13, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r14, {0x8}}, './file0\x00'}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r12, 0xc0709411, &(0x7f00000000c0)={{r15, 0x8, 0xa, 0x200, 0x0, 0x5, 0x2, 0x5, 0x4, 0x3, 0x8, 0x0, 0xb, 0x182c, 0x100000000000000}, 0x8, [0x0]}) r16 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r16, &(0x7f0000000100)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r16, @ANYRES16=r11, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0xf0}, 0x8010) 2m50.066215578s ago: executing program 32 (id=505): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="153a5727ebd2b0d0f688b9af", @ANYRES32=r7, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="b80000001300040029bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="04000000210204000800200000000000050027000800000015002200313d0da81a108b1aff8c4241c16040e96400000005002100090000004c0012800b00010067726574617000003c00028006000f0000000000050017000100000008000100", @ANYRES32=r5, @ANYBLOB="080004000900000006000f000400000008000400ff03000008001500f28401001400140076657468315f766c616e00000010000008000a25acc73e472ec79873d500", @ANYRES32=r7, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x5}, 0x4000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2000) ioctl$EVIOCRMFF(r9, 0x40044581, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = memfd_secret(0x0) (async) r14 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r13, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r14, {0x8}}, './file0\x00'}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r12, 0xc0709411, &(0x7f00000000c0)={{r15, 0x8, 0xa, 0x200, 0x0, 0x5, 0x2, 0x5, 0x4, 0x3, 0x8, 0x0, 0xb, 0x182c, 0x100000000000000}, 0x8, [0x0]}) r16 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r16, &(0x7f0000000100)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r16, @ANYRES16=r11, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0xf0}, 0x8010) 2m44.09679722s ago: executing program 3 (id=529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x4, &(0x7f0000000180)=[{0x7, 0x5, 0xbf, 0x4}, {0x52c1, 0x7e, 0x3, 0x2}, {0x8, 0x81, 0xc3, 0x4}, {0x0, 0x3, 0x6, 0x5}]}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) (async, rerun: 32) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x1, r3, 0x0) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f0200000200000005de000000000000000000000000000000000000000000008102000000000000000000000000000000001b00046ed6ca65767b65766f6f7e0539c60005000037d93a8b93000000380070673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e1000000000000000003000000005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f4", @ANYRES32=0x0, @ANYRES32=0x0], 0x21f) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200}) (async) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) (async) modify_ldt$write2(0x11, 0x0, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40081271, &(0x7f0000000980)=0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'gretap0\x00', {0x2}}) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='iso9660\x00', 0x21c000, 0x0) 2m43.635302212s ago: executing program 3 (id=530): eventfd(0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x10, 0x103) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0xb, 0x1a3, 0x3, 0x12, "9d1392b5de53b8a39daf332823c2c7ea9d150d"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) socket$inet6(0xa, 0x1, 0x85) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 2m42.085765876s ago: executing program 3 (id=532): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80002, 0x40}, 0x18) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) 2m41.496096411s ago: executing program 3 (id=535): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x0, 0xf0, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @rand_addr=0x64010100, 0x0, 0xffffffff, 0xb, 0xd, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0xff]}}, 0x8000, 0x21, 0xff80, 0x5f7d, 0x8, 0x0, 'wg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x0, 0x23}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x10, 0x2cbd, 0x4, 0x2}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xff000000, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x8, 0x5, 0x1, 0x1, 0x9, 'vcan0\x00', 'xfrm0\x00', {0xff}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @multicast1, @loopback, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r3 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x9000001c}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) fgetxattr(r5, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000000000000000000005000600000000000a000000000000000000000000000000000000000000000103000000000000000200010000000000000007020000000005000500000000000a00000000000001200100000000000000000000000000020700000000000000f791d67a6d7120f3ca7b3968c550124e145f387f15063ba596bd56a689e60af63f0f2b7e413d42ca378197ba0a9c31eed990209711517bfefd27f8a4726cac03117e50fc3407d25580661f5b4ebb18d3c6c92bbb5de4bbbf03cacecedc60"], 0x80}, 0x1, 0x7}, 0x4008000) 2m40.472350609s ago: executing program 3 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x34}}, 0x0) 2m40.357481753s ago: executing program 3 (id=540): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdc4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000280)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 2m24.946302064s ago: executing program 33 (id=540): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdc4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000280)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 2m21.415496596s ago: executing program 5 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x32, 0xa8, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0xe0, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x517}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x1, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xb6, 0x6, 0x2}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x1, 0x2, 0xff, 0xda}, 0xcd, &(0x7f0000000140)={0x5, 0xf, 0xcd, 0x6, [@generic={0x92, 0x10, 0x2, "5712b599a99287671a2aa794ca97b8bf493b910b0ae8c68cc0dead38ce355f0ae6dacf83fc7550760349723e421cf88e69ff8f96a79b8994c37bce13de4f65197e0721577cc720d8d5b58dd460071b8e5b73d56961ae8f7af9e60e17ad834fde20fb01d95b049d78c08e7fa6d986a8b97c9606911195ace62d4589cd936cf2a54b52a299e2809e8c4150cf0f0e4dfd"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x7fffff7, 0xf00, 0xa, [0xff00c0, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0xc, 0x9, 0xfff8, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x8, 0xf, 0x5}]}, 0xa, [{0x63, &(0x7f0000000240)=@string={0x63, 0x3, "3403ab84813cc3c28efa8ddea6ad751eb289e8560c61c81cb1d75aa79fd0a93f6239d5681b6bf3ddacb78d753d4f0da20ff641da9c150317a0a02f5e1b5ae45b96d07f3045a31e3fd6c469cd043b2ebe79324a9335d80dc45eb9f0685d674575fe"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x69, &(0x7f00000002c0)=@string={0x69, 0x3, "58d006963753cf1d6bef7df93e10a99cdded30bd3f66b51020b7595d739114df6a861c9dc5905b6956da194afeb7bb5976f75b53f8f8d6bcd484fb7c13907ec59d653fcff58c0f18834d49c810e24a8df69e33475e6a851dd54d3de137e16b9a9519a766dfd322"}}, {0x1a, &(0x7f0000000340)=@string={0x1a, 0x3, "371ccfc49b2007c6caf67a4d0ca3e91210c9d80307ac297a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x410}}, {0xee, &(0x7f0000000440)=@string={0xee, 0x3, "3f56a094d4dd817f5573860eac6dca63c480d8a8f467a4d35d46d1144ac76629b78af38fcead12f40223cab8a2afcc4b9d3b29b0870d66646b077fb41eec5ad14f19bd582e6b4fafd9f404ecf399ec52aeacaa28084988c3efaff24f90c96bd6ae28289d5129abb274fdf3d83c306e055b093aaf2ff3b1cfa68891f6418b905c2672636d7f1b4cd4aa15a33436eaf69e50bad8ca75b3a3be929f6dd09e7c2b2ec6d43fa459646c2ab57313ab4776d51a2459bc58d13785daf9d27e7e76501a020e24252babcaaac99c88f901bdce9feb62f262e81a38ee02566db8839041f8c73756d586b7003e2276491c3a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000006c0), 0x78c27829badc988c, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000007c0)={&(0x7f0000000700)=""/170, 0xaa, 0x7, 0x498}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000001980)={0x0, 0x16, 0x3, "b844a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m18.929930893s ago: executing program 5 (id=594): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x181042, 0x15) pwrite64(r0, &(0x7f00000007c0)='2', 0x1, 0xa6c9) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x140, 0x12, 0x60a, 0x0, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x804}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioprio_set$pid(0x2, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x181042, 0x15) (async) pwrite64(r0, &(0x7f00000007c0)='2', 0x1, 0xa6c9) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendfile(r1, r0, 0x0, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x140, 0x12, 0x60a, 0x0, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x804}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) (async) 2m18.735665179s ago: executing program 5 (id=595): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a20000000000a01020000000000000000010080030900010073797a3000030a01010000000000000000010000000900030073797a32000000003c000000060a010400000000000000000100000208000b4000000003140004801000018086ff01006c6f6f6b757000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xa4}}, 0x20008000) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, 0x0, 0x880) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2, 0x1, 0x2}, 0x18, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000300000058000180440004a8200001000a004e2000000006000000000000000000000000000000010000000020000200d81b6e03a98455b6fc0000000000000000000000000010000e000c000d0001007564703a738e0bbc7905"], 0x6c}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r0, 0xffffffffffffffff) 2m16.785869291s ago: executing program 5 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x400, 0x0, 0x1}, 0x18, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m16.527048672s ago: executing program 5 (id=607): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) (async) socket(0x23, 0x3, 0x1) socket(0x3, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getpid() (async) clock_getres(0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) timer_create(0x4, &(0x7f0000000380)={0x0, 0x5, 0x4}, &(0x7f00000003c0)=0x0) (async) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000600)={{0x0, 0x3938700}, {r3, r4+60000000}}, &(0x7f0000000640)) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7f66646e6f3d21f21f911250517e12391e86adf57bf03bd18336225669e19e4df57637da6738e8af85c74deac31260433c07323d7d487b6a53010e54c00bb7b1138cf29f28facc6bc8bf88c59a403992805054f5e400d7e16cc630d605160d901c1227dc195d23c23ba2ffcd86c727bdbd103dafb6e8f43cfc41ec53a6cf38d95f9f5ce66e321a2b6c5cc089d3", @ANYRESHEX=r5, @ANYBLOB=',\x00']) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="670000000000000000000000000073944d0e0cb2c9e453858add38bcf0f6002a305160"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) 2m15.951259012s ago: executing program 5 (id=609): r0 = openat$comedi(0xffffff9c, &(0x7f0000000240)='/dev/comedi5\x00', 0x12d582, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4044811) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0xb013, 0x7, 0x0, 0xdd9, 0x88d7, 0x8f, 0x2, 0x8012, 0x400, 0xffffffff, 0x203, 0x88, 0x10000209, 0x3, 0x5, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x3, 0x8, 0x800, 0x0, 0x4, 0x1, 0xb0c4, 0xc, 0x2, 0x420002, 0x22]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000002600)=ANY=[@ANYBLOB="1800000000400000000000000900000085000000050000009500"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000980)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1, 0x0, 0x4d}, 0x0) 2m15.798497794s ago: executing program 34 (id=609): r0 = openat$comedi(0xffffff9c, &(0x7f0000000240)='/dev/comedi5\x00', 0x12d582, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4044811) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0xb013, 0x7, 0x0, 0xdd9, 0x88d7, 0x8f, 0x2, 0x8012, 0x400, 0xffffffff, 0x203, 0x88, 0x10000209, 0x3, 0x5, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x3, 0x8, 0x800, 0x0, 0x4, 0x1, 0xb0c4, 0xc, 0x2, 0x420002, 0x22]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000002600)=ANY=[@ANYBLOB="1800000000400000000000000900000085000000050000009500"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000980)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1, 0x0, 0x4d}, 0x0) 1m6.874641198s ago: executing program 6 (id=874): chdir(&(0x7f0000001000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00') syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f00000000c0), 0x881000, &(0x7f0000000100)={'trans=virtio,', {[{@noxattr}, {@nodevmap}, {@cache_none}, {@access_client}, {@access_client}, {@posixacl}, {@cache_loose}, {@version_L}], [{@dont_hash}, {@subj_role={'subj_role', 0x3d, '/dev/input/mice\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/input/mice\x00'}}]}}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 1m5.13380082s ago: executing program 4 (id=882): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000000001000000000000000c410000001400"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d700"], 0x218}}, 0xc000) (async, rerun: 64) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) (rerun: 64) sendfile(r0, r0, 0x0, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000260000002600000002000000040000000121a60f0100000000000000000000000800000049000000000000000f00ffde000000000000"], 0x0, 0x42}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x20, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 1m4.586779933s ago: executing program 4 (id=883): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r3 = getpgrp(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getpriority(0x0, r3) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x29b0, &(0x7f0000000700)={0x0, 0x695d, 0x1000, 0x0, 0x1b3}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000340)={0x800, 0x9, 0x7}, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0), &(0x7f0000000200)) connect$unix(r9, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1m3.398415178s ago: executing program 6 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x14, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1, 0x90}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = getpid() (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0xfa60f000775a5d09}, 0xc) close_range(r8, 0xffffffffffffffff, 0x0) 1m2.887958611s ago: executing program 4 (id=885): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="0000001d", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x3}, 0x14) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) 1m2.471435406s ago: executing program 6 (id=888): r0 = syz_io_uring_setup(0x70c9, &(0x7f0000000040)={0x0, 0x2028a7, 0x100, 0x2, 0x7e}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000e80)=[{0xf00, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) r5 = getpid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c80), 0x20400) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000b80)=0xe8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000bc0)=0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000240)=0x1) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r9}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) sendmmsg$unix(r4, &(0x7f0000000c40)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000680)="7bc8086ed562726d6ce2b61ac77603aa44f4b203b64bbbd01d3c69429685e50042c4b541caf68dd0e855c4c0a5721c3cca4e9afeb7cdde7db8fa5572d7c808bd24665af267e69c37339e2129a07f9fe4c09301ee5a878c1a99a4517f36ec50aa903a5cb8039ff9b09171d322b1a8bec2be3043be3cead8e466e80d3ea83219a8e5d3eeabc2a67a82e70a7ae6b240a2ee79bdea799671735919485256eb4b4c993b8b4cddbf77920201a0fa1522846d02cea64cad6c38fff5b8540d10a0b59fcd4901f1b90d307d201d14e9", 0xcb}, {&(0x7f0000000780)="4fe29045047217a4b7a6c6e1ed24fdd068d9500d30f72462c534450397dbf313a143f5fc9138b9669894864fda8503c020fbcef703c5c6e1149ac41f231fe87f979e00376a1a24d9c80dc210aa29d0aea62f68df971587764c9427e676d5f0dea38b8338b69fbabc2ac1f5b9cfb56f1d08e090059f65bf1aae479f818b25259ef685", 0x82}, {&(0x7f0000000840)="9ebcdfdb88414cd30a", 0x9}, {&(0x7f0000000880)="79ba608042e841b88dc4173641e2918cc8ea7821eb4a914902cbd7963a7710a12183aed5f9b254ef1a18a2f56251a99496fa13a4755e7fc265be20fc66c73be8b7d81c5657d592fe88e45e6dcabdff451e158a6689995985bd57d59ea795826e54ab09f6e918787f4e60bf1e7709973bb9ba131a1359a9b598b2f28221fd9341603c5800b6325843ed3c41ecb7ccac516244fe3320b334e5948b8afdd43883997f9ae9b023713fcdaccd4da19333b241d77564c1a05d737091ce4b9430ff886326eed2eca4e54e92848530626d373a9907e4f8679ca446506f1d377513ecba", 0xdf}, {&(0x7f0000000980)="ccd940df9fea7916a01ef2032587", 0xe}, {&(0x7f00000009c0)="ac34f52f7c36836a4a123b3e6a724e0143de002e4d486bf7679b802335246d6d63368da312d6c92d5acdc7c8", 0x2c}], 0x6, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9}}}], 0x40, 0x200488c0}}], 0x1, 0x240408c0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000240000000000800054000000000080003400000000008000840000008"], 0x9c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001c00010028bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000020000deffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000140)) 1m1.823159043s ago: executing program 6 (id=893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x63, {"65660f3881428f440f20c0350f000000440f22c0c4c1a172d2f0b8010000000f01d90f0666ba6100b0d7ee450f06460f0866baf80cb80fd16b8aef66bafc0cb000ee66baf80cb83a6e668bef66bafc0c66ed"}}, @cpuid={0x64, 0x18, {0x5}}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x71, {0x2, "450f01df4b0fc72b64440f32c4a2c5bb612e470f0170b148b80c000000000000000f23d80f21f835000000b00f23f8460f21a4b9800000c00f3235000100000f30410f00d566baf80cb88a46f18eef66bafc0c66b8000066ef"}}, @nested_vmlaunch={0x12f, 0x18}, @set_irq_handler={0xc8, 0x20, {0x90, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x800000}}, @wr_crn={0x67, 0x20, {0x8}}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0x7}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x5, @ro32=0x440e, 0x1, 0xe89, 0x2}}, @out_dx={0x6a, 0x28, {0x78c4, 0x0, 0x1000}}, @cpuid={0x64, 0x18, {0x80000001, 0x9f}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x4, 0x18, 0x6, 0x10}}, @cpuid={0x64, 0x18, {0xfffffffb, 0x2de3}}, @cpuid={0x64, 0x18, {0x3, 0x4}}, @wrmsr={0x65, 0x20, {0xad3, 0x9}}, @cpuid={0x64, 0x18, {0x8, 0x6}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x6632}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0x7, 0x1, 0x4}}, @set_irq_handler={0xc8, 0x20, {0xfe, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x8001, 0x200000000000, 0x8}}, @rdmsr={0x66, 0x18, {0x587}}, @nested_load_code={0x12e, 0x95, {0x3, "0f01c348b823c79e60000000000f23d00f21f835200000020f23f8420f01d1c74424001cfa9b34c7442402c4f90000c7442406000000000f0114240f1c45f20f2bbb0008000048b82a000000000000000f23d80f21f835c00000200f23f8650f005c3c7fc4c2fd9de466baf80cb85c3ac280ef66bafc0cb877c90000ef"}}, @in_dx={0x69, 0x20, {0x52c2, 0x4}}], 0x4c1}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@arm64={0x3, 0x6, 0x7, '\x00', 0x10}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}], 0x1) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async, rerun: 64) r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (rerun: 64) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r6}, 0x18) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async) sendmmsg(r7, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x2b}, [@NFT_MSG_NEWOBJ={0x44, 0x12, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x30, 0x4, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}], {0x14}}, 0x6c}}, 0x8080) 1m1.584999502s ago: executing program 4 (id=895): request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syz', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}], 0x2}], 0x1, 0x800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000058a2ae245e8e4422a978383abdd7a19457", @ANYRES16=r0, @ANYBLOB="00012bbd7000fedbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0c0099002d00000067000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x8000) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x21081c22) (async) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r4, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, r5) 1m1.460048859s ago: executing program 4 (id=897): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{0x1, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xfcdd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r6}}, 0x18) 1m0.688165284s ago: executing program 4 (id=900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x40000, &(0x7f00000001c0)="38456e15768459fe37f79530a27747d55f6c04ec877260c2223d698bb673c85506784992a7dab9d5ec2c1369bc3c3dcffa0fdeeeca783c1cba44af63d1458260bc50e935b9b15b36068ada0e2527a404c3e0ce4753858522c648e8b3720deeb1a5080216b2a6e23b0c70ead9a2558d2409d4430daed887669134f808d01f8f530f53eec0fe6bf1a29d370ba0e940f8543705f244af4bfed62defbcc460dca156e2e07bdf98810067a0c36687d741521fd23e421ba1683ee82b08cc91e1", 0xbd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000500)="13789ec17d6bf343e55c826d94ddd8744b0e7b90b7c215e40d6749cf0c469d4015e28ed8e5454ac2faa1399c9d059337a9dfa7eab0343110c9fb9c7bd5101dbbd0daae57353359e9733aea282d90a1389d6301c62a7d7860d62742978b948d7b5252dbd42ca6c6f0dae474e5b512730b07ae6d0344d8ea30738c9a6f67827cfdd0b01b4dabca9411786eb44b61016adc910a216ba085551267bc49d3e48daab6a9e99f7ca6e9c8860620b0ac731fb241121ef091a451c00bc96323b753fa72e0de147f92524b2660310b125598b2506c8dc841b1da82407dce0609ab99f318b9aa54") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_BULK(r6, 0xc0105502, &(0x7f0000000080)={{{0xe}}, 0x0, 0x94, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setgroups(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 1m0.433748753s ago: executing program 6 (id=904): syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0xfffffffffffffffb, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8000000000a2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000380)=ANY=[], 0xaf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0xa, 0xdcf, 0x490, 0x1000, 0x3}}) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1d0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x4, 0xc, 0x1, @mcast1, @empty, 0x7800, 0x40, 0x8, 0x101}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r9}, 0x18) 58.43090829s ago: executing program 6 (id=907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000006, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xa, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x40000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000500)="13789ec17d6bf343e55c826d94ddd8744b0e7b90b7c215e40d6749cf0c469d4015e28ed8e5454ac2faa1399c9d059337a9dfa7eab0343110c9fb9c7bd5101dbbd0daae57353359e9733aea282d90a1389d6301c62a7d7860d62742978b948d7b5252dbd42ca6c6f0dae474e5b512730b07ae6d0344d8ea30738c9a6f67827cfdd0b01b4dabca9411786eb44b61016adc910a216ba085551267bc49d3e48daab6a9e99f7ca6e9c8860620b0ac731fb241121ef091a451c00bc96323b753fa72e0de147f92524b2660310b125598b2506c8dc841b1da82407dce0609ab99f318b9aa54") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r9, 0x29, 0x7, 0x0, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x300000, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20085881}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000140a09db560020040000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close_range(r6, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 45.586969944s ago: executing program 35 (id=900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x40000, &(0x7f00000001c0)="38456e15768459fe37f79530a27747d55f6c04ec877260c2223d698bb673c85506784992a7dab9d5ec2c1369bc3c3dcffa0fdeeeca783c1cba44af63d1458260bc50e935b9b15b36068ada0e2527a404c3e0ce4753858522c648e8b3720deeb1a5080216b2a6e23b0c70ead9a2558d2409d4430daed887669134f808d01f8f530f53eec0fe6bf1a29d370ba0e940f8543705f244af4bfed62defbcc460dca156e2e07bdf98810067a0c36687d741521fd23e421ba1683ee82b08cc91e1", 0xbd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000500)="13789ec17d6bf343e55c826d94ddd8744b0e7b90b7c215e40d6749cf0c469d4015e28ed8e5454ac2faa1399c9d059337a9dfa7eab0343110c9fb9c7bd5101dbbd0daae57353359e9733aea282d90a1389d6301c62a7d7860d62742978b948d7b5252dbd42ca6c6f0dae474e5b512730b07ae6d0344d8ea30738c9a6f67827cfdd0b01b4dabca9411786eb44b61016adc910a216ba085551267bc49d3e48daab6a9e99f7ca6e9c8860620b0ac731fb241121ef091a451c00bc96323b753fa72e0de147f92524b2660310b125598b2506c8dc841b1da82407dce0609ab99f318b9aa54") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_BULK(r6, 0xc0105502, &(0x7f0000000080)={{{0xe}}, 0x0, 0x94, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setgroups(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 42.640994011s ago: executing program 36 (id=907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000006, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xa, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x40000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000500)="13789ec17d6bf343e55c826d94ddd8744b0e7b90b7c215e40d6749cf0c469d4015e28ed8e5454ac2faa1399c9d059337a9dfa7eab0343110c9fb9c7bd5101dbbd0daae57353359e9733aea282d90a1389d6301c62a7d7860d62742978b948d7b5252dbd42ca6c6f0dae474e5b512730b07ae6d0344d8ea30738c9a6f67827cfdd0b01b4dabca9411786eb44b61016adc910a216ba085551267bc49d3e48daab6a9e99f7ca6e9c8860620b0ac731fb241121ef091a451c00bc96323b753fa72e0de147f92524b2660310b125598b2506c8dc841b1da82407dce0609ab99f318b9aa54") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r9, 0x29, 0x7, 0x0, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x300000, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20085881}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000140a09db560020040000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close_range(r6, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10.840642768s ago: executing program 2 (id=1094): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4a24, @broadcast}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1da, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x1, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x4000000) 9.39140772s ago: executing program 2 (id=1098): unshare(0x6a040000) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x163}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r3, 0x0, &(0x7f0000000240)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2019452, &(0x7f0000001280)={[{@cpuset_v2_mode}], [{@pcr={'pcr', 0x3d, 0x39}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'cp\x95se\x88_v2_mode'}}, {@fowner_gt={'fowner>', r10}}, {@subj_user={'subj_user', 0x3d, ':'}}, {@permit_directio}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {r10, 0xee01}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001380)="3efcfd", 0x3}], 0x1}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x4880) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010429bd700000000000006f0000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600400012800b00010067656e6576650000300002800800010001"], 0x74}}, 0x2000000) 7.564149843s ago: executing program 1 (id=1104): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0}) (async) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mount(&(0x7f0000000440)=@sg0, &(0x7f0000000200)='./cgroup/file0\x00', 0x0, 0x0, &(0x7f00000001c0)='discard') r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.640654754s ago: executing program 1 (id=1105): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4000}}, './file0\x00'}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0xfffffffffffffee4}}, 0x48040) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x4, 0x4, 0x20}, 0x50) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x80047456, &(0x7f0000000180)) 4.633694865s ago: executing program 1 (id=1110): ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x8, 0x0, 0x1, 0x52, 0x80, 0xfffffffc, 0x4, 0x1}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x11, r2, 0xf0667000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) (async) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x1, 0x9) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 64) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000340)=""/150, &(0x7f0000000240)=0x96) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bind$netlink(r10, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) (async, rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 4.579619432s ago: executing program 7 (id=1111): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge_slave_0\x00', 0x200}) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x7, 0xf32, 0x9, 0x7e133d1f}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) r2 = inotify_init() fallocate(r2, 0x1, 0x1, 0xffff) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x10200, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001240)={r0, &(0x7f0000000140)="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", &(0x7f0000001140)=""/226}, 0x20) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000012c0), 0x0) fcntl$setstatus(r0, 0x4, 0xc000) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getresgid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)=0x0) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{&(0x7f0000001340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f00000013c0)="44c9041878f0c1baf7da58c1427c7c6ac5d0b34522b9afcd722b7ec8066fc8aef4dca7d133321b8bef121e93dce53684e6f51267751a166e9b560101f39fac258836e3dc4f61526f42a9c198a8a6f2e845ae9105cf8921476223058fd3485734175a5a6c5220b4a5954eaeac9612eed94d53d7b430956b473f749fdae3d2abc4b4d39df4189c5fb462779f5d7d749e4b", 0x90}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="c872bf073bfe1801349ff47790f392473bd874d65af778868984fba329bf47e04009ee5aee804d0189be5d399fded1e8af7d258b2d3142966909d5508759ebdc2b530c805a786adbc9ba7baca102684a880a3a3db3d77c282173911a846f6de0ea4b98344393ae1282aeec719f5071b624a9a19e2741f16ade4dfffa939dd59b494bfc4b42588ca06bf24def72679f8b4b7e11ba219ba37351dfe2b424ffc61fc9caf380f99452013bcb1285819f1e9c6d5bb1327a1e38a497ca7eefccb157fbd56014afba15002d25841e66", 0xcc}, {&(0x7f00000015c0)="3a0a30e98dcb0181d8d67c7ed9b19c8774f9e52359686dfe0004ec66ab9d61274b98", 0x22}, {&(0x7f0000001600)="ba6606a15a18ad363c7708296532414b", 0x10}, {&(0x7f0000001640)="805ab73be9b46c427b38bef023ea298704736872ffc306ca143f61e723d40ae460e080c3206c4e4409298e34b06e9eb7a12f3840efb4202fb4fc2200e0f424f34c2cc118143335a051cdee54afd85e11d92f5143e7e522a81441abe31207c8baf2adace422d7dd8824b56c37cc649ff45230452cf74376f028b1e46ab6ffdb4c0fd4014fe62204340c5fd5ba5a7908ce0625588898f5be09ab01492613024983c0e656674e4c5f12d61e", 0xaa}, {&(0x7f0000001700)="2231fb466d6f090e87786f715c91630bc870a3db35db93820845a118b5cc3a6c70fc917c98eb55d1ab8f70d2077d5b6756d2714a86cb5926aae5cfa2ffe8f842ec45523484ebe27813137b3eba34671911ae06b3c6e24e90128cd85b99a8db02e43ae79c69a066ccef83f663c29ae2f5b2bd71de388bc3cc6b15277fbad5b095d06a1dd2392ed39bd59ce3af506803d48b51716265e40bdee4cdbc8f685e999f3d72989197e71be20fd40169c38df690adf060457824c8d3da7869e3edb6823d0a7f4f4377a8500ee21fbec92ea4c7254cb1a17e108e7fcbd5155f9fa6d77098e84272b618a952d63f0ee05f5f6c5614d3e3e398c0a004", 0xf7}, {&(0x7f0000001800)="0891b63c86daeb7e72a5347870ebbdb93ffd21b74c7c8bd0437df559e0a85ff92e941bfd2f8b4cb9db822935d62720dee0ea64b1177dc5fd9dfd6fe6dac8384b1abb5019377d03f946c229697f7e257004986df368f2d73f468eff977064", 0x5e}, {&(0x7f0000001880)="e9996c66e1374a529d7e45d21b426a87aebcad589618e4670c218706d38311be0093ab28aef73495485bb7647469f3892065de2e1903ce6a22bfa0da70fcfce87cc06978be3b91f3cc7b131a4755ecf722c1aaa92be0e8f2f349d2d1d04f524f3928b4b0e0b934f5d4adea238cdaa48ca945d4d95648efdf2fc33bc8bc5c2628e758625436c40453d0b6517e34eb04c95bc2a6b764bddb8e9e7730be850be060ae4eb41b2f73e4bc13ea0388ea4b43", 0xaf}], 0x9, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x80}}], 0x1, 0x1) close(r2) r9 = dup(r3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000003c80)=0x0) write$FUSE_LK(r4, &(0x7f0000003cc0)={0x28, 0x0, r11, {{0xffffffffffffffff, 0xb, 0x0, r13}}}, 0x28) ioctl$RTC_EPOCH_SET(r9, 0x4008700e, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003d00)={{0x1, 0x1, 0x18, r10, {r12, r7}}, './file0\x00'}) write$FUSE_NOTIFY_INVAL_ENTRY(r14, &(0x7f0000003d40)={0x30, 0x3, 0x0, {0x2, 0xf, 0x0, 'bridge_slave_0\x00'}}, 0x30) openat$cgroup_ro(r4, &(0x7f0000003d80)='blkio.bfq.io_serviced\x00', 0x0, 0x0) getsockname$packet(r14, &(0x7f0000003dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003e00)=0x14) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000003e40)={0x14}, 0x14) 4.413529945s ago: executing program 1 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="00000000001b0000000000000000d800000000000000000000000000c8f16119d224eccf57390a5d7c64124abe0c8704ec14c5819f79e014250586150b5c6aac5048adb5ba3071058ea3aae94f471951d0f735cadc4510d34cd80bcfe4c31c45b435e0cc6aae4e5226e7babfbdd88e1bb6ca3762e9c89125d07389723f658a5421373a5432f00c4cc8c3734e6e6ac4e2701057c393ee0890fa06b81986178da1b0470812972f3dbc7cb5f6775ff222d018e4f0e3e461c9"], 0x50) (rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r3}, 0x38) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0606120c"], 0x9) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000005c0)=@urb_type_iso={0x0, {0x9}, 0xe7f, 0xc5, &(0x7f0000000300)="fc6a55d8a752ec906111a2dbd024cd4670fab565b231a8921650a5b733f60d8c09e2d22ff517e4e6446fcf430ea03368692fcd7b6e392422c64f79bafee26f4a5cd0dc8800a034b4fd06afa374204b710ba1cb5c0419ba7b41768ad4323aad3a05b41022ea56a9e8b2a9e77a83a11e9edfd6aa44f825e78c8c30f4822ff87c11ab2f01df9ee86691fd852cdf3fa24d702e7c33416b40ba343b2d78e4095af9d5c6df290ad7605cb85946bbcd5a6598d755", 0xb1, 0x6, 0x3, 0x0, 0x9, 0x2, &(0x7f0000000600)="742d80412412d5bd4a3359973d25f88a45a4435668c6a858dc0dbd514409877169a18fd5e37f616ec7caa6e542870258b158bd7982a46fd40bbfe0f006231a449f244aa2c0ba72efc2f94e862e56696db669fb75a16251c58652c889615c7341e7d50dbc46bc1eaa03a5b6eb866c8abb143f182c9c4aef6baa247c2b97de404434ac88e89467b53c47215194d600000000000000000000000000000000e0ff12804a5b102ffed927a3318e57cfc132f13026912b1ec084ae5dc87408504fa3d7f1421a57e0269a9617b08fc5"}) (async) mmap(&(0x7f0000edb000/0x3000)=nil, 0x3000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) (rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x25, 0x208000) ioctl$USBDEVFS_RELEASEINTERFACE(r8, 0x80045510, &(0x7f0000000240)) (async, rerun: 64) syz_open_dev$vbi(0x0, 0x2, 0x2) (rerun: 64) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) 4.368464559s ago: executing program 2 (id=1115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x1c7401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x8855}, 0x404c801) prlimit64(r4, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$nl_route_sched(r7, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 4.183728399s ago: executing program 1 (id=1116): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/cpu/#/msr\x00', 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = eventfd2(0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000480)) read$eventfd(r3, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000ca1cb0bfeeb78abbc118cd5560ba0000000086dd60122d9200083a"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x8, 0x8, 0x2, 0x2}, {0x1, 0xf, 0x7, 0x9}, {0x320a, 0xca, 0x5, 0x3}, {0x38ca, 0x0, 0x0, 0x1}, {0x6, 0x0, 0xc4, 0x7fff}]}) getpid() 4.164060695s ago: executing program 8 (id=1117): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x100}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000080000000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b01009293312ca2270c400001983f6e2d4922d85c57997e87c4a6cd2a3735fd29e1bbaaf09e7d059c22c77670be527f0dd9150aa6e0422d23d0587fe85321357ef06c3917f20000000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3ff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xc315}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x81}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x70}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300020d0000000000000000000000010016004e20000005000600000000000a004e2100000000fe8000000000000000000000000000aafd00000000030000000000000000000000000001000000200300050000000000020000000a0101020000000000000000"], 0x68}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300020d0000000000000000000000010016004e20000005000600000000000a004e2100000000fe8000000000000000000000000000aafd00000000030000000000000000000000000001000000200300050000000000020000000a0101020000000000000000"], 0x68}, 0x1, 0x7}, 0x0) r4 = socket(0x10, 0x803, 0xcd59) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000400)="b2dd19c81bf98349488c6d30b3427bab8c646b907f2899e63a1c7a0074f9743455144a9dff36e7acaaf1e385f5fe0bcbb3506d6e58b2b037bf34a833c556dc595f5904097c54bea3e9fae6b48a0bafe160a8aa07c4a572d7fe82187b0cc8e71f9f84bceee90193a63289d3050303ca045694be080ea85bbb9e0eb69df92465b9599ca337c85d29fec5b3de4140759cbf116d90e25cecc1e27dbe3356add71b494e82094eded74a4d0ac68527a1a129374253dbbb382af922db33f8726ebdc41722807c57df85958d55252f986d", &(0x7f0000001300)="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"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1\x00'}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x20003, 0x0, 0x0) io_uring_setup(0x2eee, &(0x7f00000001c0)={0x0, 0x653f, 0x200, 0x0, 0x38}) (async) r5 = io_uring_setup(0x2eee, &(0x7f00000001c0)={0x0, 0x653f, 0x200, 0x0, 0x38}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000003}]}) dup(r6) (async) r10 = dup(r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) ioctl$SNDCTL_DSP_GETBLKSIZE(r10, 0xc0045004, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) memfd_secret(0x0) 3.936341634s ago: executing program 2 (id=1118): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc0405602, &(0x7f00000001c0)=@fd={0x8000000, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x20, 0x0, 0x8, 0x82, ';\'S;'}, 0x0, 0x4, {}, 0x0, 0x0, r0}) 3.851192955s ago: executing program 9 (id=1119): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/98) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/net\x00') close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xfff2, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000500)="926f130a672102cdcc6801f377e465b07c721359fff10d20d20ae16e81a6e0eea1be99f1c5a32dbc41c89a65b3e44f2ba14a771e7c9194e6b4b083b3cef3d29e72669e45fc8a0d6d26ff8f1705d7469ae21af48d6956de5bd0785a8256739e6a05525920a411c43df764f67d50ee34f69108c52e397fdb90c914c7ca04e3cabf5f3cd2fe03fc75e637b9fff653f07091dcbe1c8a169777e1caff9703f450fcf74d11ab703256539815b266f699c56cd8dc2d0db18d011559f460af78ffc262a97a3f3e3c5e105382366fbc5af6fbda7e05c5dbf2790480c0ff8d489a86885778889f1a8ff4", 0xe5}, {&(0x7f0000000340)}, {&(0x7f0000000600)="9d6eb9845c2dc1c3ce3cd9322dd401d68e4e0248e1d8b96ee37ea84a461dc59769a3782808b21fc44e65c37a7f6f15741bdbd67ac95e7824a76fbe2bfc9ba4e12185b62413593ec52c3aae8b6de867ce16d836b327b2598bad874cdeb73ab8da805a90cafe1f8d9f8b435de4bf4fb78114ac7e365bb2c22b8c4373f42b87d15ab64b51fe726c6099571263acacd0a6f60f5cc3068a7e5cb81129ac30c9e63d", 0x9f}], 0x3, 0x60a, 0xfffffffe) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000000010002", 0x7) creat(&(0x7f0000000400)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 3.508334824s ago: executing program 2 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '*@+*\x0e$'}], 0xa, "7a89d0407dba9e1fdde0c7c9b6068c18fcfc24dcc578f8faf302bd32a5289993a87cdd1b6d1e7ace78078326a5d4f907d3003a32e35975f11407e798885fa72e5692c7b6e58dd75fddad3bedca8f8404433e2f8e7ebf70cd02943d3976d43727d250943ef5a3634a19cfdf79eae98b5c4ba6e3e67c9e31aaf973d7e640a3fe5b6b7f10cd894e30b4fff0cb09757bc9fb115ccbb8fe9d2829ec551851fd5e20cdeb91b02cc00fc5ccb662b764a4f57925317415be4414ecf0e406921867e76b5b33057455afab6069df92d1fff6c1e6d1cc9c21d1195f7ab373eeed59b750"}, 0xf0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x7, 0x0, 0x10001, 0x691f, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x66, 0x0, 0xd, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, {[@rr={0x7, 0x17, 0x46, [@broadcast, @broadcast, @multicast1, @broadcast, @local]}, @noop, @lsrr={0x83, 0x13, 0x5a, [@loopback, @local, @remote, @broadcast]}]}}}}}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x800, 0xb, {0x0, 0xea60}, {}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x32, 0x1, 0x0, 0x0, "3d909e707e549c70be7c3fd011672d9d68c0ba95e1cb87043cb8ac5d113221d4e6369aea70535131ce9c2e6eac7650e4652e36730e00b1e2f05387687c705af1"}}, 0x80}, 0x1, 0x0, 0x0, 0x8081}, 0x24080001) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000500)={0xd000, 0x2000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x6, 0x4, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000680)=r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x110, &(0x7f00000006c0)=0x3, 0x0, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r8) mknod$loop(&(0x7f0000000740)='./file0\x00', 0x200, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r8) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x30) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f00000007c0)={0x2, 0x101}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40004043) setsockopt$inet6_buf(r5, 0x29, 0x0, &(0x7f0000000980)="b8c429a337d867635ded66c5a7cade845ce35b0b32f7d6804d4b297816427b", 0x1f) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f00000009c0)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="f750c5f8f1ba26d1b06948a59b13ba326111dab8f634d27c40428aaf3ce650a57ff6ca3c059e7e47a5910ac62b485277e7ba3a80dba00a41fb570c7b6aaf54ce683ea8e9f6daffebc4bac727d710f195d6004b75c8d7fbac0f22f6b9289b8d", 0x5f}, {&(0x7f0000000a80)="e5", 0x1}], 0x2, &(0x7f0000000b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x18}}, {{&(0x7f0000000b40)={0xa, 0x4e24, 0x3, @loopback, 0x6}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000b80)="0cec7f02d00a514492ededaaa691fb1b90105786e208469f3fe9bc6290358ff1f318ed581d74168fec279043bbe9d2e4b9d1ced1215c00c3ddc408662c1de7c7c8de97332dc0c16b5a87830fb3fc6f229bd000855b47c41a8d3490b4a79aade6f96f75beed09d5562eba20a7f8bfa7df0da5bd0c51f87205c4c67984047055acfc3253dfe03b4bd37820913bca7e0bd70777db9b1bfc7b14dc69531c3fe39c4bb8b6c919c8d42a569e69dcad048620687977d17d58e46d9aaca8e9d3ba1a6778bf67c254207088", 0xc7}], 0x1, &(0x7f0000000cc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dstopts={{0x98, 0x29, 0x37, {0x84, 0xf, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x50, {0x3, 0x12, 0x5, 0x7fff, [0x5, 0xc9, 0x0, 0x8000000000000001, 0x0, 0x5, 0x1, 0x3, 0xb]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r4}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r4}}}, @dstopts={{0xb8, 0x29, 0x37, {0x47, 0x13, '\x00', [@ra={0x5, 0x2, 0x2}, @padn={0x1, 0x1, [0x0]}, @generic={0x7f, 0x50, "aa209ce464fbd4ee22f949721e2b57585303799672ee4e37f450cf98a72cfeb8f724197d900e7125d58bb8489ea9c1dee63806a90267bb63830e92f17dc86005e26a5fbaad92817bb6bf846b4e703d08"}, @calipso={0x7, 0x40, {0x1, 0xe, 0xa, 0x0, [0x6, 0x1, 0xdae, 0x0, 0x9, 0x0, 0x40]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r4}}}], 0x1f8}}], 0x2, 0x2000001) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00') ioctl$F2FS_IOC_DEFRAGMENT(r10, 0xc010f508, &(0x7f0000000f80)={0x7, 0xb}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f0000000fc0)=0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000020c0)={r5, &(0x7f0000001000)="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", &(0x7f0000002000)=""/190}, 0x20) 2.732808125s ago: executing program 9 (id=1121): ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.666272933s ago: executing program 8 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_delrule={0x1c, 0x21, 0x200, 0x70bd2c, 0x25dfdbff, {0x2, 0x90, 0x20, 0xf, 0x0, 0x0, 0x0, 0x6, 0x10015}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000001) r1 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r2) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xc5, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x3, 0x50, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x5, 0x5, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x3, 0x1, [0x5], 0x10}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x1, "5917c5ea"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "b13c94"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9f, 0xc, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x6, 0xe1, "b7641f65c0cf8061"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x22, "75c5b8", "e737"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x40, 0x8, 0x6, '_'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x5, {0x7, 0x25, 0x1, 0x1, 0x4, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x1, 0x3, {0x7, 0x25, 0x1, 0x83, 0x9, 0x3}}}}}}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0xd0, 0x4, 0x10, 0x8}, 0x95, &(0x7f00000002c0)={0x5, 0xf, 0x95, 0x1, [@generic={0x90, 0x10, 0x2, "f43a1b0ce3213f316d4b185bb985945c42af005d01f3a79f4c168115a9c3b91303ba7de5e1704d92037bda3a6e4544e259bd21953f313f0284fe9110155818f77909b74aab48794dea62c03fa6b343e44446603761656f992d1b4497156909db62ccd9d9b37c207e4f82a2d1ff583d84e36344ccf7149b01053659db293cd00534281a2c488686ca24b7d56e74"}]}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_delrule={0x1c, 0x21, 0x200, 0x70bd2c, 0x25dfdbff, {0x2, 0x90, 0x20, 0xf, 0x0, 0x0, 0x0, 0x6, 0x10015}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000001) (async) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) (async) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$unlink(0x9, 0x0, r2) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_connect$uac1(0x2, 0xc5, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x3, 0x50, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x5, 0x5, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x3, 0x1, [0x5], 0x10}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x1, "5917c5ea"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "b13c94"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9f, 0xc, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x6, 0xe1, "b7641f65c0cf8061"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x22, "75c5b8", "e737"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x40, 0x8, 0x6, '_'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x5, {0x7, 0x25, 0x1, 0x1, 0x4, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x1, 0x3, {0x7, 0x25, 0x1, 0x83, 0x9, 0x3}}}}}}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0xd0, 0x4, 0x10, 0x8}, 0x95, &(0x7f00000002c0)={0x5, 0xf, 0x95, 0x1, [@generic={0x90, 0x10, 0x2, "f43a1b0ce3213f316d4b185bb985945c42af005d01f3a79f4c168115a9c3b91303ba7de5e1704d92037bda3a6e4544e259bd21953f313f0284fe9110155818f77909b74aab48794dea62c03fa6b343e44446603761656f992d1b4497156909db62ccd9d9b37c207e4f82a2d1ff583d84e36344ccf7149b01053659db293cd00534281a2c488686ca24b7d56e74"}]}}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) 1.832248775s ago: executing program 1 (id=1123): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000002662809b04d230580000040001090224000100000000090400000103000000092105000001220500090581030002000007", @ANYRESOCT=0x0], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r7], 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xffffffffffffffff}) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000ffff2f3d7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13200200313402001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100feffff040000004002000000000400000000000005001b00010000002e7728444c35168782039685dded057e00ffafd17916a5"], 0x24}}, 0x24008800) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r10}) 1.797257657s ago: executing program 9 (id=1124): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000580)=""/133, 0x85, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd0000", 0x23) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1.736195388s ago: executing program 7 (id=1125): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1.693065974s ago: executing program 7 (id=1126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@private2, 0x9, 0x1, 0xff, 0x1}, 0x20) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000300)=""/234, &(0x7f0000000180)=0xea) (async) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) (async) r3 = accept4(r0, &(0x7f0000000400)=@ll, &(0x7f0000000480)=0x80, 0x80800) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]]}, 0x24}}, 0x20088000) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x210, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1cc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x164, 0xe, 0x0, 0x1, [{0xd9, 0x0, "212ade643c4499b45520d0f05422d4947a5cb5e69500fd354fe4735b6bde56dec9f2171b7cfb538695645ebf5cacb142c4d3c1103b3726705183f865786c0e6b59ecf6e27ac62692aef4a7e32135d4d696772aa4bec07899b0ee76e4d5cd3a8bd77c8dbe913b651640d8266d6bb97614ad2b325769bd1ed679801f4b6a334b7ed6c733922214e3913ae8eafc2deb4fdfd4a9b34278911709ffe98c7dd91ca0c9ede0b3f05d771e4e340c659dfe39123399e8a9e04819d10ada7243d2b7e9f6c9ea35e70d8222893ad14031f68708f724a1b2252c0a"}, {0x84, 0x0, "f414c81e140a687d8cd9c4be67f0ceceb9b1742d0297a1f6787bdfd2704d02b3ed507f4ec2310e154d1d7bbd3f5e9bf44932fa2b2e63e217217939d01a34d949c03d3f805b7e7357afc42e4714f5a8dbb12e1d1036c15953724f409f4016b01a6c0b9c8e42b75f3e783d464d79b944b75f508a18533cf458d8ed18211c89e480"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x51, 0xb, "31503f99d4ac84c0a6ed02f93a4eab1682a6d27ac469909bb171fb89897bab6cdecfcc978ef66c3ef8607056804d7661f4e177968c55e2ff537fd9c477344b0fb5aea4470e00b242da1dc70369"}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c40afb1a0c01"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) (async) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r12, 0xc0303e03, &(0x7f00000001c0)={"0180bced01eb0100000000000000000700000000000000c900", r13, 0xffffffffffffffff}) close_range(r11, r13, 0x0) ppoll(&(0x7f0000000200)=[{r14, 0x4000}], 0x1, &(0x7f00000002c0), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) r15 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r15, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.466684466s ago: executing program 7 (id=1127): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x1, 0x23ce}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000380)=@ll={0x11, 0x19, 0x0, 0x1, 0x0, 0x6, @multicast}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.198478478s ago: executing program 7 (id=1128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='objagg_create\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0x7, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x4, 0x4002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x8, 0x8, 0x2d0f9a5b, 0x8, {{0x24, 0x4, 0x3, 0x19, 0x90, 0x68, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@cipso={0x86, 0x19, 0x0, [{0x5, 0x3, "8a"}, {0x0, 0x8, "1cd84a454c00"}, {0x0, 0x8, "40e2a25e85cd"}]}, @generic={0x44, 0x9, "6a22e8bb25c6c9"}, @timestamp_addr={0x44, 0x44, 0xec, 0x1, 0xe, [{@remote, 0x40}, {@multicast1, 0x8}, {@empty, 0x3d}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x400}, {@remote, 0x80000001}, {@empty, 0x2}, {@private=0xa010102, 0x3}, {@local, 0x5}]}, @noop, @noop, @lsrr={0x83, 0x7, 0xc0, [@private=0xa010101]}, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010102, @loopback]}, @end]}}}}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c900)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x400a040}}, {{&(0x7f0000002e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{0x0, 0x0, &(0x7f0000007740)=[{&(0x7f00000072c0)="8191339972f3dcfd058ad5ac7a800c1ace626052d4035f8c29f246a72322aabaed3fe4640f49c43173498ad66e15ce84b2e307421a0743f887a8a97b053fffce7bf585738647237148ac6355f63e984140fcd853fdc7e6785ff48f2263b2e864076705fd907caad2458c5c9129cc730b5a0b89cd2a3491e6950555b38ace317d98234aa84dd2e288c69e2bda7aaebcecacbb658b2d2a6c268be2b46a451675566de203976c913ffb054c7fa07adf4f74572cb9c4eab708968c69273fcfa26bc8b683a9882cc3cb17c25e27670025017dedf02e3d6f", 0xd5}], 0x1, 0x0, 0x0, 0x800}}], 0x4, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x5, 0x0, 0x2000, &(0x7f00008b0000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_io_uring_setup(0x12a, &(0x7f0000000340)={0x0, 0x5cb1, 0x0, 0x1, 0x1b1}, 0x0, &(0x7f0000000140)) 587.602534ms ago: executing program 8 (id=1129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x48011) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x20008011}, 0x40) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4048aecb, &(0x7f0000001440)={{0x1, 0x0, 0x80, {0xffffffffffff3fff, 0xa5df13d9b40fa5c3, 0x3}}, "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", "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"}) 423.899191ms ago: executing program 2 (id=1130): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x7ff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0xd477, 0x100, 0x805, 0x222, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x5, 0x8, 0x20000004, 0x40000003, 0x9844]}, &(0x7f00000001c0)=0x54) 373.292442ms ago: executing program 9 (id=1131): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_create(0x1, &(0x7f0000000000)={0x0, 0x17, 0x1, @thr={&(0x7f0000000700)="abf787ab11ba0ce55c574ebdcc66c01d97abd99bae907d65977a129ad9d3660a2e2ebfc974d3025895254085cd1292f8c0a0c695bcc766cfb7353feb25aa1b3907ed1ac7807654530391c41ba0edceaf0d4e3b2d18a8c67e20f70227f1c76f6b5c2cceb3e39938c96a6a8341d660cba9b4aa7cedea74ae83a0433e2264edc373499c2754b05f6c2d1ab706e2c752dff2c8348b9bef2a79346d102d765a60e366e659c192ecd04bdd8513b58a5b56c81a50011985a963209831404a4b10fe2dea805fc162aae5ba0cb22f362f", &(0x7f0000000800)="34e07a0fea97ee40ab3a1bc70cccebaba76341827cc3bf5fd35362e29bd6a207119cf6115f67dd2dfa299aedf212c5a22b188bd133c6312167bc15bc39e4302dd40c16a8aa5d1542af7d97b5d6fc7f13bd85e1fc348fe82a0a7658145b0331f8ad4126e6ca59df687335af774c8216b9caa7443969e828fe13e60b3fdb6b37ece9933c4a042dfc0d6791b2"}}, &(0x7f00000008c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1a0, 0x300, 0xd0, 0x0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [0x0, 0x0, 0xffffff00], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0xff, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [0xff], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 364.740093ms ago: executing program 8 (id=1132): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES8=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8a"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000002c0)={0xdddd0000, 0x192000}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) (async) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000040)=0x2, 0x4) 271.520383ms ago: executing program 9 (id=1133): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@local, 0x4e24, 0x0, 0x4e23, 0x8, 0x2, 0x20, 0x0, 0x1, 0x0, r2}, {0x3, 0x5d81, 0x8001, 0x0, 0xc136, 0x10001, 0x1, 0x9}, {0x0, 0x8000, 0x8000000000000000, 0x7}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2b}, 0x2, @in=@loopback, 0x3501, 0x4, 0x0, 0x3, 0x7ff, 0xffffffff, 0x5}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012160, 0x0) 207.483614ms ago: executing program 8 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (rerun: 64) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010000100feffff7f0300000000000006", @ANYRES32=r6, @ANYBLOB="600000008008000008000300", @ANYRES32=r3], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000400012800c0001006d6163766c616e00300002801c000580180004"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000bf02001c358e7b276bf3c3362020f62026f572e7c4eeed78415c820dec360c41bb7d0c6c46682c9832017c15cdfadabba6b15bc45d1d56c0bc", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf258800000008000300", @ANYRES32=r10, @ANYBLOB="0a0006000802110000000000160033008400100008021100000108021100000007000000"], 0x40}, 0x1, 0x0, 0x0, 0x404c081}, 0x8800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async, rerun: 64) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r13, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async, rerun: 64) r17 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_FRAME(r17, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010800000000f8f300efbfa1f8c5f40ec79b0b44a900", @ANYRES32=r13, @ANYBLOB="05005b00f6000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r18, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[], 0x24}}, 0x0) (async, rerun: 64) r19 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r19, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x400}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x2c}}, 0x8000) 127.76286ms ago: executing program 9 (id=1135): syz_usb_connect(0x0, 0x4d, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x0) 54.965082ms ago: executing program 7 (id=1136): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)=0x0) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="a75618c9357220ae979e5e4e463e1401", 0x10}], 0x1, 0x0, 0x0, 0x24040004}, 0x24000090) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000080)='=', 0x1}]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001040)={0x0, 0x0}) getpgrp(r5) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockname$netrom(r6, &(0x7f0000000240)={{0x3, @default}, [@default, @netrom, @null, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f00000001c0)=0x48) 0s ago: executing program 8 (id=1137): r0 = fanotify_init(0x4, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x1038, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000005c0)={@empty, @dev={0xfe, 0x80, '\x00', 0x14}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3a9, 0x2, 0x0, 0x100, 0x8000, 0x42a20201, r5}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0xffff116b, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execve(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='\x00', &(0x7f0000000300)='%.[]-)\xebi-\xb6[\x00', &(0x7f0000000340)='*)\x00', &(0x7f0000000380)='io_uring_create\x00', &(0x7f00000003c0)='[\x00', &(0x7f00000004c0)='GPL\x00']}, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r8, r8, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={r10, 0xa5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000180)={r10, 0x8}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r6}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x1, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) readv(r11, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100027da8e340ba0d0050881b000000010902129ea2641a8e337521f4692acf930001"], 0x0) kernel console output (not intermixed with test programs): sb_ep_enable returned -22 [ 249.472435][ T8926] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 249.563844][ T30] audit: type=1400 audit(1766777534.285:2257): avc: denied { map } for pid=8935 comm="syz.6.676" path="socket:[23055]" dev="sockfs" ino=23055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.166120][ T24] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 250.179238][ T24] usb 8-1: USB disconnect, device number 3 [ 250.213617][ T8943] [U] [ 250.216504][ T8943] [U] [ 250.219195][ T8943] [U] [ 250.221879][ T8943] [U] [ 250.224563][ T8943] [U] [ 250.227251][ T8943] [U] [ 250.229938][ T8943] [U] [ 250.232627][ T8943] [U] [ 250.238417][ T8943] [U] [ 250.241116][ T8943] [U] [ 250.243800][ T8943] [U] [ 250.248864][ T8939] [U] [ 250.332756][ T6259] wlan1: Trigger new scan to find an IBSS to join [ 250.556715][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 250.567710][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.679'. [ 250.578761][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 250.588718][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.679'. [ 251.386677][ T5945] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 251.535283][ T5945] usb 7-1: device descriptor read/64, error -71 [ 251.610252][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 251.738928][ T8983] /dev/nullb0: Can't open blockdev [ 252.170906][ T5945] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 252.310767][ T5945] usb 7-1: device descriptor read/64, error -71 [ 252.350690][ T5886] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 252.483987][ T5945] usb usb7-port1: attempt power cycle [ 252.525658][ T5886] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 252.561181][ T5886] usb 2-1: config 7 has no interface number 0 [ 252.589108][ T5886] usb 2-1: config 7 interface 101 has no altsetting 0 [ 252.622987][ T5886] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 252.646687][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.672285][ T5886] usb 2-1: Product: syz [ 252.683818][ T5886] usb 2-1: Manufacturer: syz [ 252.692191][ T5886] usb 2-1: SerialNumber: syz [ 252.841020][ T5945] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 252.881209][ T5945] usb 7-1: device descriptor read/8, error -71 [ 253.673698][ T6331] wlan1: Trigger new scan to find an IBSS to join [ 253.683598][ T30] audit: type=1400 audit(1766777538.365:2258): avc: denied { listen } for pid=8984 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.710379][ T30] audit: type=1400 audit(1766777538.385:2259): avc: denied { connect } for pid=8984 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.730788][ T5886] as10x_usb: device has been detected [ 253.752299][ T9018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9018 comm=syz.4.689 [ 253.765651][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 253.796890][ T5886] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 253.820689][ T5945] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 253.840982][ T5826] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 253.884276][ T5945] usb 7-1: device descriptor read/8, error -71 [ 253.892265][ T5886] as10x_usb: error during firmware upload part1 [ 253.910224][ T5886] Registered device Elgato EyeTV DTT Deluxe [ 253.920397][ T5886] usb 2-1: USB disconnect, device number 47 [ 254.059201][ T5945] usb usb7-port1: unable to enumerate USB device [ 254.071603][ T5826] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 254.092530][ T5886] Unregistered device Elgato EyeTV DTT Deluxe [ 254.092624][ T5826] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 254.093703][ T5886] as10x_usb: device has been disconnected [ 254.121519][ T5826] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 254.137320][ T5826] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 254.191876][ T5826] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 254.258979][ T5826] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 254.283403][ T9048] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 254.289361][ T5826] usb 8-1: string descriptor 0 read error: -22 [ 254.298211][ T5826] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 254.311914][ T9048] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 254.331534][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.350729][ T9048] ALSA: mixer_oss: invalid OSS volume 'lg' [ 254.356782][ T9048] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 254.381730][ T9048] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 254.390893][ T5945] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 254.410792][ T9048] ALSA: mixer_oss: invalid OSS volume '' [ 254.416556][ T9048] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 254.440805][ T9048] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 254.455094][ T9048] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 254.480706][ T9048] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 254.497582][ T9048] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 254.515334][ T9048] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 254.553474][ T5945] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 254.592990][ T5945] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 254.607756][ T30] audit: type=1400 audit(1766777539.325:2260): avc: denied { bind } for pid=9009 comm="syz.7.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.640331][ T24] usb 8-1: USB disconnect, device number 4 [ 254.660692][ T5945] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 254.695721][ T5945] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 254.718351][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.739324][ T5945] usb 7-1: Product: syz [ 254.750824][ T5945] usb 7-1: Manufacturer: syz [ 254.760849][ T5945] usb 7-1: SerialNumber: syz [ 254.771180][ T5945] usb 7-1: config 0 descriptor?? [ 254.788774][ T9033] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 254.801975][ T9033] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 254.827765][ T5945] usb 7-1: ucan: probing device on interface #0 [ 254.971058][ T24] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 255.150945][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 255.241163][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.248286][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.290727][ T24] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 255.460773][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 255.466445][ T24] usb usb5-port1: attempt power cycle [ 255.568654][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.631280][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.742405][ T5945] ucan 7-1:0.0: probe with driver ucan failed with error -71 [ 255.778691][ T30] audit: type=1400 audit(1766777540.495:2261): avc: denied { mount } for pid=9088 comm="syz.1.701" name="/" dev="autofs" ino=23737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 255.839206][ T5945] usb 7-1: USB disconnect, device number 11 [ 255.860909][ T24] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 255.883135][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 256.011803][ T24] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 256.044458][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 256.050719][ T7485] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 256.064814][ T24] usb usb5-port1: unable to enumerate USB device [ 256.210858][ T7485] usb 8-1: device descriptor read/64, error -71 [ 256.377414][ T30] audit: type=1400 audit(1766777541.095:2262): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 256.461611][ T7485] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 256.641435][ T7485] usb 8-1: device descriptor read/64, error -71 [ 256.661341][ T5945] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 256.750901][ T7485] usb usb8-port1: attempt power cycle [ 256.800771][ T5945] usb 3-1: device descriptor read/64, error -71 [ 257.088100][ T9110] netlink: 56 bytes leftover after parsing attributes in process `syz.1.707'. [ 257.112942][ T5945] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 257.282940][ T7485] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 257.305366][ T5945] usb 3-1: device descriptor read/64, error -71 [ 257.494025][ T7301] wlan1: Trigger new scan to find an IBSS to join [ 257.506657][ T7485] usb 8-1: device descriptor read/8, error -71 [ 257.581173][ T5945] usb usb3-port1: attempt power cycle [ 257.760735][ T7485] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 257.804174][ T7485] usb 8-1: device descriptor read/8, error -71 [ 257.968995][ T5945] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 257.977042][ T7485] usb usb8-port1: unable to enumerate USB device [ 258.012875][ T5945] usb 3-1: device descriptor read/8, error -71 [ 258.300856][ T5945] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 258.321803][ T5945] usb 3-1: device descriptor read/8, error -71 [ 258.337865][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 258.349982][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9144 comm=syz.1.713 [ 258.447483][ T5945] usb usb3-port1: unable to enumerate USB device [ 258.591000][ T12] wlan1: Creating new IBSS network, BSSID 42:1c:11:12:3c:66 [ 258.611128][ T7485] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 258.901118][ T7485] usb 5-1: Using ep0 maxpacket: 32 [ 258.920336][ T7485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 258.931825][ T7485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.944156][ T7485] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 258.969616][ T7485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.003507][ T7485] usb 5-1: config 0 descriptor?? [ 259.230705][ T5993] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 259.316224][ T9156] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[9156] [ 259.495237][ T5993] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.509632][ T5993] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.523736][ T5993] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.539987][ T7485] usbhid 5-1:0.0: can't add hid device: -71 [ 259.548328][ T7485] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 259.549210][ T5993] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.567237][ T5993] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.582774][ T7485] usb 5-1: USB disconnect, device number 51 [ 259.609345][ T5993] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.620462][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.629827][ T30] audit: type=1326 audit(1766777544.345:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4916f8f749 code=0x7ffc0000 [ 259.631060][ T5993] usb 8-1: Product: syz [ 259.657287][ T30] audit: type=1326 audit(1766777544.345:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4916f8f749 code=0x7ffc0000 [ 259.657805][ T5993] usb 8-1: Manufacturer: syz [ 259.688001][ T30] audit: type=1326 audit(1766777544.345:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4916f8f749 code=0x7ffc0000 [ 259.693030][ T5993] cdc_wdm 8-1:1.0: skipping garbage [ 259.718683][ T9157] XFS (nbd1): SB validate failed with error -5. [ 259.741869][ T9171] cgroup: subsys name conflicts with all [ 259.755249][ T5993] cdc_wdm 8-1:1.0: skipping garbage [ 259.784278][ T30] audit: type=1326 audit(1766777544.505:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4916f8f749 code=0x7ffc0000 [ 259.784585][ T5993] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 259.889215][ T30] audit: type=1326 audit(1766777544.505:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4916f8f749 code=0x7ffc0000 [ 259.925217][ T5993] cdc_wdm 8-1:1.0: Unknown control protocol [ 260.003307][ T5993] usb 8-1: USB disconnect, device number 9 [ 260.005014][ T9176] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 260.060365][ T9176] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.117596][ T30] audit: type=1804 audit(1766777544.825:2268): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.720" name="/newroot/146/file0" dev="tmpfs" ino=800 res=1 errno=0 [ 261.287037][ T9154] bridge1: entered promiscuous mode [ 261.308188][ T9196] input: syz0 as /devices/virtual/input/input22 [ 261.468803][ T30] audit: type=1400 audit(1766777546.175:2269): avc: denied { read } for pid=9195 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.501120][ T9154] bridge1: entered allmulticast mode [ 262.404113][ T9214] input: syz1 as /devices/virtual/input/input23 [ 262.825777][ T30] audit: type=1400 audit(1766777547.545:2270): avc: denied { accept } for pid=9230 comm="syz.6.732" path="socket:[24086]" dev="sockfs" ino=24086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.150810][ T7485] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 263.350856][ T7485] usb 5-1: Using ep0 maxpacket: 32 [ 263.528073][ T7485] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 263.536805][ T7485] usb 5-1: config 0 has no interface number 0 [ 263.548772][ T7485] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 263.558958][ T7485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.568485][ T7485] usb 5-1: Product: syz [ 263.572754][ T7485] usb 5-1: Manufacturer: syz [ 263.577412][ T7485] usb 5-1: SerialNumber: syz [ 263.582123][ T5826] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 263.597685][ T7485] usb 5-1: config 0 descriptor?? [ 263.620438][ T7485] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 263.742742][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.756287][ T5826] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.766409][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.777129][ T30] audit: type=1400 audit(1766777548.495:2271): avc: granted { setsecparam } for pid=9251 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 263.799984][ T5826] usb 2-1: config 0 descriptor?? [ 264.332446][ T5826] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 264.664022][ T5826] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input24 [ 265.377156][ T5826] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 265.433034][ T7485] usb 5-1: qt2_attach - failed to power on unit: -71 [ 265.439844][ T7485] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 265.494014][ T5826] usb 2-1: USB disconnect, device number 48 [ 265.552261][ T9263] fido_id[9263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 265.686066][ T5945] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 265.707342][ T7485] usb 5-1: USB disconnect, device number 52 [ 265.753364][ T9271] kernel profiling enabled (shift: 17) [ 265.785564][ T9272] trusted_key: encrypted_key: insufficient parameters specified [ 265.911267][ T5945] usb 8-1: Using ep0 maxpacket: 16 [ 266.009148][ T5945] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.539889][ T5945] usb 8-1: config 0 interface 0 has no altsetting 0 [ 266.548582][ T5945] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 266.557710][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.635704][ T5945] usb 8-1: config 0 descriptor?? [ 267.040831][ T6260] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 267.150798][ T5993] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 267.199504][ T6260] usb 3-1: device descriptor read/64, error -71 [ 267.280701][ T5826] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 267.322062][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 267.333298][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.343140][ T5993] usb 7-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 267.353170][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.363240][ T5993] usb 7-1: config 0 descriptor?? [ 267.440742][ T6260] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 267.452400][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.473259][ T5826] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.484347][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.494492][ T5826] usb 2-1: config 0 descriptor?? [ 267.590486][ T5993] smartjoyplus 0003:0B43:0003.0014: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.6-1/input0 [ 267.605414][ T5993] smartjoyplus 0003:0B43:0003.0014: Force feedback for SmartJoy PLUS PS2/USB adapter [ 267.630839][ T6260] usb 3-1: device descriptor read/64, error -71 [ 267.639133][ T5945] hid-led 0003:1D34:000A.0013: probe with driver hid-led failed with error -71 [ 267.677109][ T5945] usb 8-1: USB disconnect, device number 10 [ 267.741007][ T6260] usb usb3-port1: attempt power cycle [ 268.738576][ T5915] usb 7-1: USB disconnect, device number 12 [ 268.750990][ T5826] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 268.773052][ T5826] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0015/input/input25 [ 268.876625][ T5826] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 268.990698][ T6260] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 269.011150][ T6260] usb 3-1: device descriptor read/8, error -71 [ 269.755796][ T30] audit: type=1400 audit(1766777554.085:2272): avc: denied { link } for pid=9294 comm="syz.7.749" name="#14" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 269.755972][ T6260] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 269.778675][ T30] audit: type=1400 audit(1766777554.095:2273): avc: denied { rename } for pid=9294 comm="syz.7.749" name="#15" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 269.830838][ T30] audit: type=1804 audit(1766777554.135:2274): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.749" name="/newroot/14/bus/file0" dev="overlay" ino=104 res=1 errno=0 [ 269.853821][ T30] audit: type=1804 audit(1766777554.155:2275): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.749" name="/newroot/14/bus/file0" dev="overlay" ino=104 res=1 errno=0 [ 269.989711][ T6260] usb 3-1: device descriptor read/8, error -71 [ 270.071167][ T5915] usb 2-1: USB disconnect, device number 49 [ 270.110976][ T6260] usb usb3-port1: unable to enumerate USB device [ 270.131654][ T30] audit: type=1400 audit(1766777554.705:2276): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.275565][ T30] audit: type=1400 audit(1766777554.705:2277): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.321586][ T30] audit: type=1400 audit(1766777554.705:2278): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.413944][ T30] audit: type=1326 audit(1766777554.875:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.2.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd18f749 code=0x7ffc0000 [ 270.494810][ T30] audit: type=1326 audit(1766777554.875:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.2.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fcd18f749 code=0x7ffc0000 [ 270.552849][ T30] audit: type=1326 audit(1766777554.885:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.2.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1fcd18f749 code=0x7ffc0000 [ 270.697311][ T5915] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 270.863003][ T5915] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 270.883154][ T5915] usb 2-1: config 7 has no interface number 0 [ 270.921339][ T5915] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 270.938946][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.947743][ T5915] usb 2-1: Product: syz [ 270.952942][ T5915] usb 2-1: Manufacturer: syz [ 270.957541][ T5915] usb 2-1: SerialNumber: syz [ 270.990548][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.756'. [ 271.410852][ T6260] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 271.590742][ T6260] usb 7-1: Using ep0 maxpacket: 16 [ 271.598163][ T6260] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.615483][ T6260] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.625387][ T5873] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 271.664698][ T6260] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.697176][ T6260] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.721347][ T6260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.762632][ T6260] usb 7-1: config 0 descriptor?? [ 271.780693][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 271.787240][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.801379][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.848765][ T5915] as10x_usb: device has been detected [ 271.859814][ T5873] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 271.881851][ T5915] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 271.892150][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.910931][ T5915] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 271.937677][ T5873] usb 8-1: config 0 descriptor?? [ 271.982238][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.991512][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.148931][ T5915] as10x_usb: error during firmware upload part1 [ 272.179538][ T5915] Registered device Elgato EyeTV DTT Deluxe [ 272.184811][ T5915] usb 2-1: USB disconnect, device number 50 [ 272.219302][ T5873] usbhid 8-1:0.0: can't add hid device: -71 [ 272.229912][ T5873] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 272.303491][ T5873] usb 8-1: USB disconnect, device number 11 [ 272.436970][ T5915] Unregistered device Elgato EyeTV DTT Deluxe [ 272.438988][ T5915] as10x_usb: device has been disconnected [ 273.300728][ T5915] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 274.393579][ T6260] usbhid 7-1:0.0: can't add hid device: -71 [ 274.418097][ T6260] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 274.471773][ T5915] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.487354][ T9376] netlink: 'syz.7.768': attribute type 10 has an invalid length. [ 274.510681][ T5915] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.529392][ T5915] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.539061][ T6260] usb 7-1: USB disconnect, device number 13 [ 274.546393][ T9377] netlink: 'syz.7.768': attribute type 10 has an invalid length. [ 274.560676][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.590034][ T9357] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 274.611038][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.646414][ T9376] team0: Port device netdevsim0 added [ 274.772336][ T9377] team0: Port device netdevsim0 removed [ 274.975696][ T9377] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 275.083214][ T6260] usb 2-1: USB disconnect, device number 51 [ 275.183203][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 275.183218][ T30] audit: type=1400 audit(1766777559.905:2349): avc: denied { setattr } for pid=9395 comm="syz.2.774" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.222291][ T30] audit: type=1400 audit(1766777559.935:2350): avc: denied { ioctl } for pid=9395 comm="syz.2.774" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.379829][ T30] audit: type=1400 audit(1766777560.095:2351): avc: denied { create } for pid=9399 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 276.145679][ T30] audit: type=1400 audit(1766777560.355:2352): avc: denied { setopt } for pid=9399 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 276.173015][ T9401] gfs2: error -5 reading superblock [ 276.181059][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 277.960758][ T5826] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 277.979794][ T11] block nbd0: Possible stuck request ffff888025eb0000: control (read@0,1024B). Runtime 120 seconds [ 277.991030][ T11] block nbd0: Possible stuck request ffff888025eb0200: control (read@1024,1024B). Runtime 120 seconds [ 278.003239][ T11] block nbd0: Possible stuck request ffff888025eb0400: control (read@2048,1024B). Runtime 120 seconds [ 278.014463][ T11] block nbd0: Possible stuck request ffff888025eb0600: control (read@3072,1024B). Runtime 120 seconds [ 278.140029][ T9433] Driver unsupported XDP return value 0 on prog (id 251) dev N/A, expect packet loss! [ 278.182041][ T5826] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.206002][ T5826] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.223545][ T5826] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 278.243556][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.264422][ T5826] usb 8-1: config 0 descriptor?? [ 278.280959][ T5873] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 278.440668][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 278.447493][ T5873] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.459301][ T5873] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.471040][ T5873] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 278.480292][ T5873] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 278.489039][ T5873] usb 3-1: Product: syz [ 278.499660][ T5873] usb 3-1: Manufacturer: syz [ 278.514263][ T5873] hub 3-1:4.0: USB hub found [ 278.550685][ T5993] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 278.702910][ T5826] isku 0003:1E7D:319C.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.7-1/input0 [ 278.711993][ T5993] usb 7-1: Using ep0 maxpacket: 32 [ 278.747513][ T5993] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 278.756078][ T5993] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 278.774854][ T5993] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 278.940383][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.972755][ T5826] isku 0003:1E7D:319C.0016: couldn't init struct isku_device [ 278.980150][ T5826] isku 0003:1E7D:319C.0016: couldn't install keyboard [ 279.004405][ T5993] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.021458][ T5993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 279.025132][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.037433][ T5826] isku 0003:1E7D:319C.0016: probe with driver isku failed with error -71 [ 279.038587][ T5993] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.056026][ T5993] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.073907][ T5826] usb 8-1: USB disconnect, device number 12 [ 279.098427][ T9440] fido_id[9440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 279.122145][ T5993] usb 7-1: Product: syz [ 279.126308][ T5993] usb 7-1: Manufacturer: syz [ 279.152287][ T5993] usb 7-1: SerialNumber: syz [ 279.166300][ T5993] usb 7-1: config 0 descriptor?? [ 279.183634][ T5873] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 279.194550][ T5993] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.224327][ T5993] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.253923][ T5873] usb 3-1: USB disconnect, device number 46 [ 279.382620][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.478175][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.497555][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.548119][ T5826] usb 7-1: USB disconnect, device number 14 [ 279.548967][ T9448] No such timeout policy "syz1" [ 279.562093][ T5826] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 279.627150][ T30] audit: type=1400 audit(1766777564.345:2353): avc: denied { write } for pid=9449 comm="syz.7.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 280.110767][ T5873] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 280.290732][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 280.298980][ T5873] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 280.310395][ T5873] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 280.323842][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.330455][ T5873] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 280.381598][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.423522][ T5873] usb 3-1: config 0 descriptor?? [ 280.648693][ T9473] Invalid source name [ 280.652943][ T9473] UBIFS error (pid: 9473): cannot open "/dev/sg0", error -22 [ 280.860847][ T7485] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 281.034199][ T5873] gt683r_led 0003:1770:FF00.0017: collection stack underflow [ 281.044961][ T5873] gt683r_led 0003:1770:FF00.0017: item 0 4 0 12 parsing failed [ 281.056443][ T5873] gt683r_led 0003:1770:FF00.0017: hid parsing failed [ 281.065558][ T5873] gt683r_led 0003:1770:FF00.0017: probe with driver gt683r_led failed with error -22 [ 281.184631][ T7485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.212134][ T7485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.229076][ T7485] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 281.260670][ T7485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.272883][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.301147][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.309975][ T7485] usb 2-1: config 0 descriptor?? [ 281.451310][ T5873] usb 3-1: USB disconnect, device number 47 [ 281.931669][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.945332][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.954269][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.979496][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.048355][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 282.055776][ T7485] usbhid 2-1:0.0: can't add hid device: -71 [ 282.062439][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 282.071731][ T7485] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 282.098274][ T7485] usb 2-1: USB disconnect, device number 52 [ 282.104477][ T9484] ceph: No mds server is up or the cluster is laggy [ 282.127175][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 282.140536][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 282.684453][ T9506] netlink: 'syz.1.803': attribute type 2 has an invalid length. [ 283.324737][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.332497][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.619670][ T30] audit: type=1400 audit(1766777568.335:2354): avc: denied { ioctl } for pid=9514 comm="syz.7.804" path="uts:[4026533983]" dev="nsfs" ino=4026533983 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.704241][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.726962][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.730788][ T5893] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 283.920717][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 283.931349][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 283.933563][ T5893] usb 5-1: config 0 has no interfaces? [ 283.970295][ T4095] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.010222][ T4095] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.031400][ T5893] usb 5-1: New USB device found, idVendor=0df6, idProduct=0041, bcdDevice=c7.f1 [ 284.052231][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.069412][ T4095] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.073115][ T5893] usb 5-1: Product: syz [ 284.119178][ T5893] usb 5-1: Manufacturer: syz [ 284.120769][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 284.133391][ T5893] usb 5-1: SerialNumber: syz [ 284.149509][ T24] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 284.158874][ T4095] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.191755][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.199767][ T24] usb 8-1: Product: syz [ 284.212414][ T5893] usb 5-1: config 0 descriptor?? [ 284.234849][ T24] usb 8-1: Manufacturer: syz [ 284.250706][ T24] usb 8-1: SerialNumber: syz [ 284.270080][ T24] usb 8-1: config 0 descriptor?? [ 284.723497][ T24] usb read operation failed. (-71) [ 284.740464][ T24] usb write operation failed. (-71) [ 284.754634][ T24] usb write operation failed. (-71) [ 284.764168][ T24] usb write operation failed. (-71) [ 284.771486][ T24] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 284.793386][ T24] usb 8-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 284.806699][ T30] audit: type=1400 audit(1766777569.525:2355): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 284.827643][ T24] usb 8-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 284.937850][ T9543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.810'. [ 284.947610][ T9543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.810'. [ 285.319441][ T9557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.367197][ T9557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.403820][ T9560] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 285.415680][ T30] audit: type=1400 audit(1766777570.135:2356): avc: denied { mounton } for pid=9555 comm="syz.6.815" path="/" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 285.432170][ T9560] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 285.585772][ T30] audit: type=1400 audit(1766777570.235:2357): avc: denied { connect } for pid=9552 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 285.673181][ T7485] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 285.833534][ T5893] kernel write not supported for file /603/oom_score_adj (pid: 5893 comm: kworker/0:5) [ 285.880500][ T30] audit: type=1400 audit(1766777570.235:2358): avc: denied { write } for pid=9552 comm="syz.2.813" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 285.916457][ T9513] usb 5-1: USB disconnect, device number 53 [ 285.944903][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.974237][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.992270][ T7485] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 286.002283][ T7485] usb 2-1: config 1 has no interface number 1 [ 286.008735][ T7485] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 286.101656][ T7485] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.120682][ T7485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.130841][ T7485] usb 2-1: Product: syz [ 286.137438][ T7485] usb 2-1: Manufacturer: syz [ 286.148815][ T7485] usb 2-1: SerialNumber: syz [ 286.340694][ T9513] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 286.472881][ T30] audit: type=1400 audit(1766777571.195:2359): avc: denied { ioctl } for pid=9571 comm="syz.6.819" path="socket:[26630]" dev="sockfs" ino=26630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.521661][ T9513] usb 5-1: Using ep0 maxpacket: 32 [ 286.538533][ T30] audit: type=1400 audit(1766777571.195:2360): avc: denied { remount } for pid=9571 comm="syz.6.819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 286.572391][ T7485] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 286.585410][ T7485] usb 2-1: failed to enable PITCH for EP 0x82 [ 286.591535][ T9513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.603423][ T9513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.623344][ T9513] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 286.638554][ T7485] usb 2-1: USB disconnect, device number 53 [ 286.644678][ T9513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.660289][ T9513] usb 5-1: config 0 descriptor?? [ 286.690909][ T9522] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 286.720282][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.853848][ T9522] usb 3-1: Using ep0 maxpacket: 16 [ 286.862619][ T9522] usb 3-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 16 [ 286.875200][ T9522] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.888487][ T9522] usb 3-1: config 1 interface 0 has no altsetting 0 [ 286.898074][ T9522] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 286.907271][ T9522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.916218][ T9522] usb 3-1: Product: syz [ 286.920394][ T9522] usb 3-1: Manufacturer: syz [ 286.925026][ T9522] usb 3-1: SerialNumber: syz [ 286.932398][ T9581] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 287.100932][ T9513] waltop 0003:172F:0032.0018: item fetching failed at offset 0/2 [ 287.111325][ T9513] waltop 0003:172F:0032.0018: probe with driver waltop failed with error -22 [ 287.139742][ T9586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.823'. [ 287.144793][ T9522] usblp0: Disabling reads from problematic bidirectional printer [ 287.161344][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 287.170502][ T9522] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 253 proto 1 vid 0x03F0 pid 0x0004 [ 287.206993][ T9522] usb 3-1: USB disconnect, device number 48 [ 287.233073][ T9522] usblp0: removed [ 287.280721][ T9513] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 287.345160][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.358255][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.442122][ T9513] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.452738][ T9513] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 287.461896][ T9513] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 287.473320][ T9513] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 287.482594][ T9513] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.493549][ T9584] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 287.502399][ T9513] hub 7-1:1.0: bad descriptor, ignoring hub [ 287.508320][ T9513] hub 7-1:1.0: probe with driver hub failed with error -5 [ 287.516211][ T9513] cdc_wdm 7-1:1.0: skipping garbage [ 287.522974][ T9513] cdc_wdm 7-1:1.0: skipping garbage [ 287.530401][ T9513] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 287.536413][ T9513] cdc_wdm 7-1:1.0: Unknown control protocol [ 287.704396][ T30] audit: type=1400 audit(1766777572.425:2361): avc: denied { read write } for pid=9583 comm="syz.6.822" name="cdc-wdm0" dev="devtmpfs" ino=3517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 287.729985][ T30] audit: type=1400 audit(1766777572.425:2362): avc: denied { open } for pid=9583 comm="syz.6.822" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 287.784525][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 287.791682][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 287.798781][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 287.805374][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 287.811927][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 287.818502][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 287.826655][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 287.833255][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 287.839374][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 287.955227][ T7485] usb 7-1: USB disconnect, device number 15 [ 287.970760][ T9522] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 288.140943][ T9522] usb 3-1: Using ep0 maxpacket: 16 [ 288.155946][ T9522] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.170807][ T5139] Bluetooth: hci1: command 0x0405 tx timeout [ 288.172471][ T9522] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.184954][ T9522] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 288.195191][ T9522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.212245][ T9522] usb 3-1: config 0 descriptor?? [ 288.560496][ T30] audit: type=1400 audit(1766777573.275:2363): avc: denied { execute } for pid=9602 comm="syz.1.829" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.718838][ T30] audit: type=1800 audit(1766777573.415:2364): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.828" name="bus" dev="overlay" ino=274 res=0 errno=0 [ 288.822116][ T9522] input: HID 05ac:8243 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8243.0019/input/input26 [ 288.955517][ T9607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31944 sclass=netlink_route_socket pid=9607 comm=syz.6.828 [ 289.299462][ T9522] appleir 0003:05AC:8243.0019: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 289.562575][ T5917] usb 5-1: USB disconnect, device number 54 [ 289.570881][ T9522] usb 3-1: USB disconnect, device number 49 [ 289.725217][ T30] audit: type=1400 audit(1766777574.435:2365): avc: denied { read append } for pid=9617 comm="syz.4.832" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 289.796318][ T30] audit: type=1400 audit(1766777574.435:2366): avc: denied { open } for pid=9617 comm="syz.4.832" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 289.886381][ T9619] fido_id[9619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 290.049564][ T30] audit: type=1326 audit(1766777574.765:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.4.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f454fd8f749 code=0x0 [ 290.242795][ T9522] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 290.257609][ T9629] netlink: 44 bytes leftover after parsing attributes in process `syz.6.833'. [ 290.372673][ T30] audit: type=1400 audit(1766777575.075:2368): avc: denied { shutdown } for pid=9633 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.442348][ T9522] usb 3-1: Using ep0 maxpacket: 32 [ 290.473508][ T9522] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.529738][ T9641] ceph: No mds server is up or the cluster is laggy [ 290.545796][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 290.555444][ T9522] usb 3-1: config 7 has an invalid interface number: 122 but max is 0 [ 290.674633][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 290.688388][ T9522] usb 3-1: config 7 has no interface number 0 [ 290.716825][ T9522] usb 3-1: config 7 interface 122 has no altsetting 0 [ 290.730195][ T9522] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a9.d6 [ 290.747931][ T9522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.764653][ T9522] usb 3-1: Product: syz [ 290.773463][ T9522] usb 3-1: Manufacturer: syz [ 290.780894][ T9522] usb 3-1: SerialNumber: syz [ 290.853733][ T5917] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 290.997933][ T9522] gspca_main: conex-2.14.0 probing 0572:0041 [ 291.010795][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 291.056285][ T9648] vlan2: entered promiscuous mode [ 291.082378][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.115555][ T5917] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 291.127478][ T9648] vlan2: entered allmulticast mode [ 291.138681][ T5917] usb 5-1: config 5 has no interface number 0 [ 291.155933][ T9648] hsr_slave_1: entered allmulticast mode [ 291.163127][ T5917] usb 5-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 291.191517][ T5917] usb 5-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 291.227330][ T5917] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 291.238307][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.247727][ T5917] usb 5-1: Product: syz [ 291.259984][ T5917] usb 5-1: Manufacturer: syz [ 291.265828][ T5917] usb 5-1: SerialNumber: syz [ 291.306178][ T9522] usb 3-1: USB disconnect, device number 50 [ 291.509024][ T5917] aircable 5-1:5.52: aircable converter detected [ 291.526494][ T5917] usb 5-1: aircable converter now attached to ttyUSB0 [ 291.553206][ T5917] usb 5-1: USB disconnect, device number 55 [ 291.565147][ T5917] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 291.595228][ T5917] aircable 5-1:5.52: device disconnected [ 291.860737][ T9522] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 292.046889][ T9522] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 292.055960][ T9522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.072323][ T9522] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 292.081739][ T9522] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 292.089807][ T9522] usb 3-1: Manufacturer: syz [ 292.119717][ T9522] usb 3-1: config 0 descriptor?? [ 292.161650][ T9522] igorplugusb 3-1:0.0: endpoint incorrect [ 292.275160][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 292.396353][ T10] usb 3-1: USB disconnect, device number 51 [ 293.782239][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 293.942859][ T30] audit: type=1400 audit(1766777578.665:2369): avc: denied { connect } for pid=9686 comm="syz.6.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.943057][ T9687] RDS: rds_bind could not find a transport for fe80::7, load rds_tcp or rds_rdma? [ 293.969464][ T30] audit: type=1400 audit(1766777578.685:2370): avc: denied { read } for pid=9688 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.990899][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 293.999405][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.009799][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 294.020131][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.033460][ T30] audit: type=1400 audit(1766778091.754:2371): avc: denied { write } for pid=9688 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.035641][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.062864][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.070948][ T10] usb 2-1: Product: syz [ 294.075240][ T10] usb 2-1: Manufacturer: syz [ 294.080438][ T10] usb 2-1: SerialNumber: syz [ 294.088599][ T9671] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 294.203992][ T30] audit: type=1400 audit(1766778091.924:2372): avc: denied { map } for pid=9692 comm="syz.2.851" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.211389][ T7485] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 294.330318][ T9696] Scaler: ================= START STATUS ================= [ 294.337894][ T9696] Scaler: ================== END STATUS ================== [ 294.470688][ T7485] usb 7-1: Using ep0 maxpacket: 16 [ 294.477374][ T7485] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 294.488627][ T7485] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.499824][ T7485] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.510038][ T7485] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 294.520101][ T7485] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.534947][ T7485] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 294.544251][ T7485] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 294.552297][ T7485] usb 7-1: Manufacturer: syz [ 294.558903][ T7485] usb 7-1: config 0 descriptor?? [ 294.719920][ T30] audit: type=1400 audit(1766778092.434:2373): avc: denied { map } for pid=9699 comm="syz.7.853" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 294.820830][ T7485] rc_core: IR keymap rc-hauppauge not found [ 294.826755][ T7485] Registered IR keymap rc-empty [ 294.838074][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 294.871182][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 294.898283][ T7485] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 294.917907][ T10] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 294.924005][ T7485] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input27 [ 294.941990][ T10] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 294.958361][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 294.966102][ T30] audit: type=1400 audit(1766778092.654:2374): avc: denied { setattr } for pid=9705 comm="syz.7.854" name="secretmem" dev="secretmem" ino=26324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 294.967248][ T10] cdc_ncm 2-1:1.0: bind() failure [ 294.996577][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.022279][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.040912][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.063578][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.084848][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 295.100767][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.117790][ T10] cdc_ncm 2-1:1.1: bind() failure [ 295.132174][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.149946][ T10] usb 2-1: USB disconnect, device number 54 [ 295.156783][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.230702][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.250755][ T7485] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 295.279531][ T7485] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 295.288694][ T7485] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 295.339855][ T7485] usb 7-1: USB disconnect, device number 16 [ 295.425458][ T30] audit: type=1400 audit(1766778093.144:2375): avc: denied { write } for pid=9722 comm="syz.4.858" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 295.631734][ T30] audit: type=1400 audit(1766778093.274:2376): avc: denied { getopt } for pid=9729 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 295.667547][ T30] audit: type=1400 audit(1766778093.384:2377): avc: denied { create } for pid=9731 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 295.982704][ T7485] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 296.632908][ T7485] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 296.643073][ T7485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.658300][ T7485] usb 3-1: config 0 descriptor?? [ 296.850687][ T9520] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 297.040860][ T5917] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 297.084504][ T9520] usb 2-1: Using ep0 maxpacket: 32 [ 297.096159][ T9520] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 297.116638][ T9520] usb 2-1: config 0 has no interface number 0 [ 297.163169][ T9520] usb 2-1: config 0 interface 137 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 297.174262][ T9520] usb 2-1: config 0 interface 137 has no altsetting 0 [ 297.232602][ T9520] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=b2.d0 [ 297.241861][ T9520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.249923][ T9520] usb 2-1: Product: syz [ 297.255598][ T9520] usb 2-1: Manufacturer: syz [ 297.260198][ T9520] usb 2-1: SerialNumber: syz [ 297.283890][ T7485] ath6kl: Failed to read usb control message: -71 [ 297.291059][ T7485] ath6kl: Unable to read the bmi data from the device: -71 [ 297.298461][ T5917] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 297.298480][ T7485] ath6kl: unable to read target info byte count: -71 [ 297.306783][ T7485] ath6kl: Failed to init ath6kl core: -71 [ 297.310246][ T9520] usb 2-1: config 0 descriptor?? [ 297.314703][ T7485] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 297.327628][ T9748] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 297.344226][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.383298][ T7485] usb 3-1: USB disconnect, device number 52 [ 297.397213][ T5917] usb 5-1: config 0 descriptor?? [ 297.447806][ T9768] 9p: Bad value for 'rfdno' [ 297.683776][ T9520] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 297.725089][ T9520] dvb-usb: bulk message failed: -22 (2/0) [ 297.747750][ T9520] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.779504][ T9520] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 297.789215][ T9520] usb 2-1: media controller created [ 297.805836][ T9520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.825853][ T9520] cxusb: set interface failed [ 297.830558][ T9520] dvb-usb: bulk message failed: -22 (1/0) [ 297.865215][ T9520] DVB: Unable to find symbol mt352_attach() [ 297.872436][ T9520] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 297.918477][ T5917] ath6kl: mismatched byte count 0 vs. expected 12 [ 297.940652][ T9520] rc_core: IR keymap rc-dvico-portable not found [ 297.954190][ T5917] ath6kl: Failed to init ath6kl core: -22 [ 297.960288][ T5917] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 297.969749][ T9520] Registered IR keymap rc-empty [ 297.976467][ T9520] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 298.013854][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 298.019965][ T9520] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input28 [ 298.039388][ T9520] dvb-usb: schedule remote query interval to 100 msecs. [ 298.054662][ T9520] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 298.208247][ T9520] usb 2-1: USB disconnect, device number 55 [ 298.212575][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 298.272678][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 298.282814][ T30] audit: type=1800 audit(1766778095.994:2378): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.875" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 298.398015][ T10] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 298.454603][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.514212][ T9513] usb 5-1: USB disconnect, device number 56 [ 298.642099][ T10] usb 7-1: Product: syz [ 298.747774][ T10] usb 7-1: Manufacturer: syz [ 298.799399][ T10] usb 7-1: SerialNumber: syz [ 298.814989][ T9520] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 298.847766][ T10] usb 7-1: config 0 descriptor?? [ 298.865974][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 298.878408][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 298.955591][ T10] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input29 [ 299.411893][ T9520] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 299.419496][ T30] audit: type=1400 audit(1766778097.134:2379): avc: denied { read } for pid=9779 comm="syz.6.874" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 299.510816][ T9522] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 299.581176][ T9520] usb 2-1: device descriptor read/64, error -71 [ 299.589504][ T9807] netlink: zone id is out of range [ 299.601236][ T9807] netlink: zone id is out of range [ 299.606502][ T9807] netlink: zone id is out of range [ 299.613294][ T9807] netlink: zone id is out of range [ 299.618575][ T9807] netlink: zone id is out of range [ 299.624669][ T9807] netlink: zone id is out of range [ 299.629783][ T9807] netlink: zone id is out of range [ 299.638057][ T9807] netlink: zone id is out of range [ 299.643343][ T9807] netlink: zone id is out of range [ 299.661950][ T9807] netlink: zone id is out of range [ 299.682235][ T9522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.698147][ T9522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.714183][ T9522] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 299.723442][ T9522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.748595][ T9522] usb 3-1: config 0 descriptor?? [ 299.841748][ T9520] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 299.971816][ T9520] usb 2-1: device descriptor read/64, error -71 [ 300.172233][ T9520] usb usb2-port1: attempt power cycle [ 301.306335][ T9522] hid (null): invalid report_count 18376 [ 301.533966][ T9522] uclogic 0003:5543:0042.001A: unknown main item tag 0x6 [ 301.555515][ T9522] uclogic 0003:5543:0042.001A: invalid report_count 18376 [ 301.562825][ T9522] uclogic 0003:5543:0042.001A: item 0 2 1 9 parsing failed [ 301.570755][ T9522] uclogic 0003:5543:0042.001A: parse failed [ 301.576827][ T9522] uclogic 0003:5543:0042.001A: probe with driver uclogic failed with error -22 [ 301.586284][ T9520] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 301.606352][ T9522] usb 3-1: USB disconnect, device number 53 [ 301.754643][ T9520] usb 2-1: device descriptor read/8, error -71 [ 302.260132][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.888'. [ 302.839397][ T9838] SELinux: ebitmap: map size 5 does not match my size 64 (high bit was 6) [ 302.861386][ T9838] SELinux: failed to load policy [ 303.253731][ T9862] input: syz0 as /devices/virtual/input/input30 [ 303.797069][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.891'. [ 304.259239][ T30] audit: type=1400 audit(1766778101.964:2380): avc: denied { connect } for pid=9887 comm="syz.7.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 304.338267][ T30] audit: type=1400 audit(1766778102.054:2381): avc: denied { getopt } for pid=9887 comm="syz.7.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 304.741034][ T9520] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 304.926343][ T9520] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.186911][ T9520] usb 3-1: config 0 has no interface number 0 [ 305.228960][ T9520] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.293836][ T10] usb 7-1: USB disconnect, device number 17 [ 305.316659][ T9520] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.377218][ T9520] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 305.415894][ T9520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.010993][ T9520] usb 3-1: config 0 descriptor?? [ 306.338707][ T9903] netlink: 56 bytes leftover after parsing attributes in process `syz.7.906'. [ 306.456298][ T9520] prodikeys 0003:041E:2801.001B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 306.479537][ T9903] Bluetooth: MGMT ver 1.23 [ 306.576515][ T9520] hid_prodikeys: hid-prodikeys: failed to find output report [ 306.576515][ T9520] [ 306.656315][ T9520] usb 3-1: USB disconnect, device number 54 [ 306.853813][ T9909] fido_id[9909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 307.947526][ T9928] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.912'. [ 308.130927][ T9932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9932 comm=syz.1.913 [ 308.162626][ T9933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9933 comm=syz.1.913 [ 308.337068][ T11] block nbd0: Possible stuck request ffff888025eb0000: control (read@0,1024B). Runtime 150 seconds [ 308.347817][ T11] block nbd0: Possible stuck request ffff888025eb0200: control (read@1024,1024B). Runtime 150 seconds [ 308.358770][ T11] block nbd0: Possible stuck request ffff888025eb0400: control (read@2048,1024B). Runtime 150 seconds [ 308.369742][ T11] block nbd0: Possible stuck request ffff888025eb0600: control (read@3072,1024B). Runtime 150 seconds [ 309.214047][ T9522] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 309.730751][ T9522] usb 2-1: Using ep0 maxpacket: 32 [ 309.749475][ T9522] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 309.757981][ T9522] usb 2-1: config 0 has no interface number 0 [ 309.770258][ T9522] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 309.786825][ T9522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.816743][ T9522] usb 2-1: Product: syz [ 309.825204][ T9522] usb 2-1: Manufacturer: syz [ 309.829815][ T9522] usb 2-1: SerialNumber: syz [ 309.861174][ T9522] usb 2-1: config 0 descriptor?? [ 309.877537][ T9522] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 310.300771][ T5923] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 310.378555][ T30] audit: type=1400 audit(1766778108.084:2382): avc: denied { shutdown } for pid=9951 comm="syz.7.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.619608][ T9522] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 310.635459][ T9522] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 310.741064][ T5923] usb 3-1: device descriptor read/64, error -71 [ 310.980841][ T5923] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 311.140724][ T5923] usb 3-1: device descriptor read/64, error -71 [ 311.341096][ T5923] usb usb3-port1: attempt power cycle [ 311.680731][ T5923] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 311.701139][ T5923] usb 3-1: device descriptor read/8, error -71 [ 311.940714][ T5923] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 311.961185][ T5923] usb 3-1: device descriptor read/8, error -71 [ 312.071045][ T5923] usb usb3-port1: unable to enumerate USB device [ 312.357583][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 312.368057][ T9522] usb 2-1: USB disconnect, device number 60 [ 312.384486][ T9522] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 312.408911][ T9522] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 312.422517][ T9522] quatech2 2-1:0.51: device disconnected [ 312.441218][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.923'. [ 313.912641][ T9984] xt_bpf: check failed: parse error [ 315.222349][ T9987] overlayfs: failed to resolve './file7/file0': -2 [ 315.237022][ T9987] binder: Unknown parameter 'uid>00000000000000000000' [ 315.574640][ T9996] kAFS: No cell specified [ 316.485402][ T30] audit: type=1326 audit(1766778114.204:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10011 comm="syz.7.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9177f8f749 code=0x0 [ 316.659836][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.666703][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.765342][T10028] net_ratelimit: 12 callbacks suppressed [ 317.765385][T10028] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 317.859146][T10030] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 317.911824][ T30] audit: type=1400 audit(1766778115.634:2384): avc: denied { bind } for pid=10031 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.585177][ T30] audit: type=1400 audit(1766778116.304:2385): avc: denied { map } for pid=10037 comm="syz.7.943" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 319.243408][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.252805][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.260964][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.269451][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.276993][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.300803][ T9520] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 319.481083][ T9520] usb 2-1: Using ep0 maxpacket: 32 [ 319.501883][ T9520] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 319.523912][ T9520] usb 2-1: config 0 has no interface number 0 [ 319.530029][ T9520] usb 2-1: config 0 interface 2 has no altsetting 0 [ 319.588389][ T9520] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 319.630855][ T9520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.638873][ T9520] usb 2-1: Product: syz [ 319.678121][ T9520] usb 2-1: Manufacturer: syz [ 319.683038][ T9520] usb 2-1: SerialNumber: syz [ 319.731510][ T9520] usb 2-1: config 0 descriptor?? [ 319.741046][T10058] chnl_net:caif_netlink_parms(): no params data found [ 319.794361][ T30] audit: type=1400 audit(1766778117.514:2386): avc: denied { map_create } for pid=10067 comm="syz.7.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.892264][ T30] audit: type=1400 audit(1766778117.534:2387): avc: denied { map_read map_write } for pid=10067 comm="syz.7.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 320.070685][ T30] audit: type=1400 audit(1766778117.544:2388): avc: denied { prog_load } for pid=10067 comm="syz.7.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 320.106700][ T30] audit: type=1400 audit(1766778117.544:2389): avc: denied { bpf } for pid=10067 comm="syz.7.951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 320.178641][ T30] audit: type=1400 audit(1766778117.544:2390): avc: denied { perfmon } for pid=10067 comm="syz.7.951" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 320.466832][ T30] audit: type=1400 audit(1766778117.544:2391): avc: denied { prog_run } for pid=10067 comm="syz.7.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 320.562051][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.611067][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.699116][T10058] bridge_slave_0: entered allmulticast mode [ 320.708350][T10058] bridge_slave_0: entered promiscuous mode [ 320.716997][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.724417][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.732354][T10058] bridge_slave_1: entered allmulticast mode [ 320.739971][T10058] bridge_slave_1: entered promiscuous mode [ 320.792351][ T30] audit: type=1400 audit(1766778118.514:2392): avc: denied { read write } for pid=10074 comm="syz.7.952" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 320.886013][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.922421][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.290292][T10082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31944 sclass=netlink_route_socket pid=10082 comm=syz.7.954 [ 321.360148][ T5829] Bluetooth: hci6: command tx timeout [ 321.684684][T10058] team0: Port device team_slave_0 added [ 321.816380][T10058] team0: Port device team_slave_1 added [ 322.403540][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.410504][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.498455][ T5139] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.508057][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.519207][ T5139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.527618][ T5139] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.529036][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.543444][ T5139] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.552216][ T5139] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.594014][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.664740][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 322.664771][ T30] audit: type=1400 audit(1766778120.384:2400): avc: denied { setopt } for pid=10088 comm="syz.7.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 322.710662][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.789540][ T9520] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.892777][ T9520] usb 2-1: USB disconnect, device number 61 [ 323.322726][T10058] hsr_slave_0: entered promiscuous mode [ 323.341567][T10058] hsr_slave_1: entered promiscuous mode [ 323.356277][T10058] debugfs: 'hsr0' already exists in 'hsr' [ 323.372146][ T5139] Bluetooth: hci6: command tx timeout [ 323.380645][T10058] Cannot create hsr debugfs directory [ 323.784946][T10086] chnl_net:caif_netlink_parms(): no params data found [ 324.009937][T10058] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.023482][T10086] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.031271][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.038441][T10086] bridge_slave_0: entered allmulticast mode [ 324.046530][T10086] bridge_slave_0: entered promiscuous mode [ 324.053911][T10058] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.064672][T10086] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.072354][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.079527][T10086] bridge_slave_1: entered allmulticast mode [ 324.090917][T10086] bridge_slave_1: entered promiscuous mode [ 324.098105][T10058] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.121317][T10058] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.164436][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.186371][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.223371][T10086] team0: Port device team_slave_0 added [ 324.231649][T10086] team0: Port device team_slave_1 added [ 324.262217][T10086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.269174][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.296812][T10086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.309762][T10086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.317098][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.352586][T10086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.394196][T10086] hsr_slave_0: entered promiscuous mode [ 324.400234][T10086] hsr_slave_1: entered promiscuous mode [ 324.406297][T10086] debugfs: 'hsr0' already exists in 'hsr' [ 324.412585][T10086] Cannot create hsr debugfs directory [ 324.429537][T10128] tmpfs: Bad value for 'mpol' [ 324.535927][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.575741][T10058] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.582915][T10086] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 324.594020][T10086] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 324.604019][T10086] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 324.615685][T10086] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.626881][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.633980][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.648293][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.655390][ T7305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.662804][ T5139] Bluetooth: hci7: command tx timeout [ 324.757905][T10086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.779436][T10086] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.794921][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.802022][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.844437][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.851650][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.887660][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.106368][ T30] audit: type=1400 audit(1766778122.824:2401): avc: denied { mounton } for pid=10143 comm="syz.1.965" path="/proc/741/task" dev="proc" ino=30130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 325.192884][T10086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.334059][T10058] veth0_vlan: entered promiscuous mode [ 325.353092][T10058] veth1_vlan: entered promiscuous mode [ 325.426808][T10058] veth0_macvtap: entered promiscuous mode [ 325.448875][T10058] veth1_macvtap: entered promiscuous mode [ 325.454748][ T5139] Bluetooth: hci6: command tx timeout [ 325.477613][T10160] netlink: 48 bytes leftover after parsing attributes in process `syz.1.967'. [ 325.499072][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.579904][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.600439][ T154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.623736][ T154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.645008][ T154] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.661539][ T7301] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.888710][ T6088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.897129][ T30] audit: type=1400 audit(1766778123.594:2402): avc: denied { lock } for pid=10167 comm="syz.1.969" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.906826][ T6088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.151997][ T6259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.181589][ T6259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.203125][T10086] veth0_vlan: entered promiscuous mode [ 326.243784][T10086] veth1_vlan: entered promiscuous mode [ 326.319429][T10086] veth0_macvtap: entered promiscuous mode [ 326.330339][T10086] veth1_macvtap: entered promiscuous mode [ 326.354320][T10086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.359320][ T30] audit: type=1804 audit(1766778124.074:2403): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.970" name="/newroot/204/file0" dev="tmpfs" ino=1081 res=1 errno=0 [ 326.368752][T10086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.401603][ T6259] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.462791][ T6259] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.534749][ T6259] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.571325][ T6259] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.740903][ T5829] Bluetooth: hci7: command tx timeout [ 327.057381][ T6331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.081418][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.162159][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.255852][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.331749][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.340252][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.508700][T10194] netlink: 24 bytes leftover after parsing attributes in process `syz.9.955'. [ 327.520700][ T6260] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 327.565698][T10194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10194 comm=syz.9.955 [ 327.588640][ T9522] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 327.611125][ T5139] Bluetooth: hci6: command tx timeout [ 327.760760][ T9522] usb 3-1: Using ep0 maxpacket: 32 [ 327.780587][ T9522] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 327.801668][ T9522] usb 3-1: config 0 has no interface number 0 [ 327.812509][ T9522] usb 3-1: config 0 interface 225 has no altsetting 0 [ 327.822448][ T6260] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.839887][ T9522] usb 3-1: New USB device found, idVendor=0572, idProduct=1324, bcdDevice=f4.61 [ 327.857351][ T6260] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.970682][ T9522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.979845][ T6260] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 327.990067][ T9522] usb 3-1: Product: syz [ 327.996965][ T6260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.006335][ T9522] usb 3-1: Manufacturer: syz [ 328.014588][ T9522] usb 3-1: SerialNumber: syz [ 328.023490][ T6260] usb 9-1: config 0 descriptor?? [ 328.031657][ T9522] usb 3-1: config 0 descriptor?? [ 328.303088][T10186] Mount JFS Failure: -5 [ 328.331132][ T6260] usbhid 9-1:0.0: can't add hid device: -71 [ 328.340141][ T9522] usb 3-1: USB disconnect, device number 59 [ 328.350147][ T6260] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 328.384396][ T6260] usb 9-1: USB disconnect, device number 2 [ 328.442239][T10196] vlan2: entered promiscuous mode [ 328.447304][T10196] macvtap0: entered promiscuous mode [ 328.948633][ T30] audit: type=1400 audit(1766778126.664:2404): avc: denied { ioctl } for pid=10204 comm="syz.1.979" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 328.973784][ T5829] Bluetooth: hci7: command tx timeout [ 329.306284][T10207] vlan3: entered promiscuous mode [ 329.450893][T10207] bridge0: entered promiscuous mode [ 330.081518][ T30] audit: type=1400 audit(1766778127.404:2405): avc: denied { bind } for pid=10211 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.304099][T10218] syz_tun: entered allmulticast mode [ 330.311406][ T30] audit: type=1400 audit(1766778128.034:2406): avc: denied { map } for pid=10219 comm="syz.2.983" path="/208" dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 330.560484][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.7.984'. [ 331.053671][ T5829] Bluetooth: hci7: command tx timeout [ 331.146636][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.8.985'. [ 331.238254][T10217] syz_tun: left allmulticast mode [ 331.434215][T10250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10250 comm=syz.7.990 [ 331.456791][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.991'. [ 331.817184][T10264] sp0: Synchronizing with TNC [ 331.910790][T10266] netlink: 'syz.2.994': attribute type 4 has an invalid length. [ 331.936964][T10266] netlink: 'syz.2.994': attribute type 4 has an invalid length. [ 332.183551][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.192577][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.491095][ T5915] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 332.874424][ T5915] usb 9-1: device descriptor read/64, error -71 [ 332.877316][T10287] netlink: 'syz.7.999': attribute type 1 has an invalid length. [ 332.919912][ T30] audit: type=1400 audit(1766778134.627:2407): avc: denied { getopt } for pid=10286 comm="syz.7.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.120728][ T5915] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 333.440763][ T5915] usb 9-1: device descriptor read/64, error -71 [ 333.605258][ T5915] usb usb9-port1: attempt power cycle [ 334.100698][ T5893] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 334.130728][ T5915] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 334.161791][ T5915] usb 9-1: device descriptor read/8, error -71 [ 334.262119][ T5893] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 334.276591][ T5893] usb 3-1: config 0 has no interface number 0 [ 334.288258][ T5893] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 334.306212][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.325287][ T5893] usb 3-1: config 0 descriptor?? [ 334.339377][ T5893] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 334.411306][ T5915] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 334.441267][ T5915] usb 9-1: device descriptor read/8, error -71 [ 334.560965][ T5915] usb usb9-port1: unable to enumerate USB device [ 334.900820][ T5915] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 335.052173][ T5915] usb 10-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.062574][ T5915] usb 10-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.075919][ T5915] usb 10-1: config 0 interface 0 has no altsetting 0 [ 335.082691][ T5915] usb 10-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 335.091941][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.101554][ T5915] usb 10-1: config 0 descriptor?? [ 335.206796][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880254adc00: rx timeout, send abort [ 335.217083][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880254adc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 335.234534][ T30] audit: type=1400 audit(1766778136.947:2408): avc: denied { read } for pid=5170 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 335.262814][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.319017][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.382052][ T30] audit: type=1400 audit(1766778136.947:2409): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.449212][ T30] audit: type=1400 audit(1766778136.947:2410): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.471426][ T5893] gspca_sunplus: reg_w_riv err -110 [ 335.474354][ T30] audit: type=1400 audit(1766778136.947:2411): avc: denied { add_name } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.499157][ T30] audit: type=1400 audit(1766778136.947:2412): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 335.528851][ T30] audit: type=1400 audit(1766778136.947:2413): avc: denied { append open } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 335.555033][ T5893] sunplus 3-1:0.99: probe with driver sunplus failed with error -110 [ 335.566668][ T5915] sony 0003:054C:0268.001C: item fetching failed at offset 5/7 [ 335.603655][ T30] audit: type=1400 audit(1766778137.007:2414): avc: denied { getattr } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 335.626646][ T5915] sony 0003:054C:0268.001C: parse failed [ 335.659315][ T5915] sony 0003:054C:0268.001C: probe with driver sony failed with error -22 [ 335.690709][ T9521] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 335.780959][ T5915] usb 10-1: USB disconnect, device number 2 [ 335.861076][ T9521] usb 2-1: Using ep0 maxpacket: 8 [ 335.872683][ T9521] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 335.882447][ T9521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.899682][ T9521] usb 2-1: Product: syz [ 335.910677][ T9521] usb 2-1: Manufacturer: syz [ 335.920793][ T9521] usb 2-1: SerialNumber: syz [ 335.931417][ T9521] usb 2-1: config 0 descriptor?? [ 336.161051][ T9521] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 336.308635][ T9520] usb 3-1: USB disconnect, device number 60 [ 337.341557][T10350] pimreg: entered allmulticast mode [ 337.513388][ T5829] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 337.534697][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 337.579428][T10354] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 337.587613][T10354] bridge0: port 3(netdevsim0) entered blocking state [ 337.595049][T10354] bridge0: port 3(netdevsim0) entered disabled state [ 337.603508][T10354] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 337.615867][T10354] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 337.870706][ T978] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 338.033342][ T978] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 338.041472][ T978] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 338.052168][ T978] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 338.062203][ T978] usb 3-1: config 1 has no interface number 1 [ 338.068383][ T978] usb 3-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 338.084402][ T978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.093692][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.101719][ T978] usb 3-1: Product: syz [ 338.105965][ T978] usb 3-1: Manufacturer: 锾髯섄㰼ᷔ⊫髰툡땖칙鱢榸묽왴䎦മŨ똭ꚝᕌ쨔魋긺໭ၯ媁ݢ猊襂犑끤㪉ἲ꾡쾺綠Ɠꏎϻἥ헻ᠯꕌ᝻씑䳓 [ 338.137505][ T978] usb 3-1: SerialNumber: syz [ 338.351412][ T978] usb 3-1: 0:2 : does not exist [ 338.368687][ T978] usb 3-1: USB disconnect, device number 61 [ 338.422053][ T11] block nbd0: Possible stuck request ffff888025eb0000: control (read@0,1024B). Runtime 180 seconds [ 338.422373][ T9521] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 338.433000][ T11] block nbd0: Possible stuck request ffff888025eb0200: control (read@1024,1024B). Runtime 180 seconds [ 338.444697][ T9521] dvbdev: DVB: registering new adapter (Terratec H7) [ 338.454639][ T11] block nbd0: Possible stuck request ffff888025eb0400: control (read@2048,1024B). Runtime 180 seconds [ 338.454670][ T11] block nbd0: Possible stuck request ffff888025eb0600: control (read@3072,1024B). Runtime 180 seconds [ 338.487175][ T9521] usb 2-1: media controller created [ 338.616248][ T9521] usb read operation failed. (-71) [ 338.625448][ T9521] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 338.637393][ T9521] usb 2-1: USB disconnect, device number 62 [ 338.730767][ T5923] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 338.892380][ T5923] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 338.906236][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.917651][ T5923] usb 9-1: config 0 descriptor?? [ 338.925173][ T5923] cp210x 9-1:0.0: cp210x converter detected [ 339.177711][T10374] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 339.185623][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 339.656315][ T30] audit: type=1400 audit(1766778141.367:2415): avc: denied { execute } for pid=10371 comm="syz.2.1024" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=32193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 339.836387][ T30] audit: type=1400 audit(1766778141.547:2416): avc: denied { map } for pid=10387 comm="syz.2.1028" path="socket:[31029]" dev="sockfs" ino=31029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.872963][ T30] audit: type=1400 audit(1766778141.577:2417): avc: denied { accept } for pid=10387 comm="syz.2.1028" path="socket:[31029]" dev="sockfs" ino=31029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.059610][ T9521] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 340.275459][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 340.275477][ T30] audit: type=1326 audit(1766778141.947:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.311008][ T30] audit: type=1326 audit(1766778141.947:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.363953][ T9521] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 340.372633][ T9521] usb 2-1: config 0 has no interface number 0 [ 340.378735][ T9521] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 340.406268][ T30] audit: type=1326 audit(1766778141.947:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.411488][ T9521] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 340.431052][ T30] audit: type=1326 audit(1766778141.947:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.469334][ T30] audit: type=1326 audit(1766778141.947:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.506183][ T30] audit: type=1326 audit(1766778141.947:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.531077][ T30] audit: type=1326 audit(1766778141.947:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.559317][T10397] netlink: 'syz.9.1031': attribute type 1 has an invalid length. [ 340.567627][T10397] netlink: 'syz.9.1031': attribute type 2 has an invalid length. [ 340.575983][T10397] netlink: 'syz.9.1031': attribute type 1 has an invalid length. [ 340.591064][ T30] audit: type=1326 audit(1766778141.947:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.615132][ T30] audit: type=1326 audit(1766778141.957:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.615663][ T9521] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 340.639142][ T30] audit: type=1326 audit(1766778141.957:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.7.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9177f8f749 code=0x7ffc0000 [ 340.724571][ T9521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.767179][ T9521] usb 2-1: Product: syz [ 340.784181][ T9521] usb 2-1: Manufacturer: syz [ 340.800489][ T9521] usb 2-1: SerialNumber: syz [ 340.819181][ T9521] usb 2-1: config 0 descriptor?? [ 340.835309][T10383] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 340.852262][ T9521] usb-storage 2-1:0.20: USB Mass Storage device detected [ 340.899083][ T9521] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 341.047150][T10406] dlm: no locking on control device [ 341.076523][ T9521] scsi host1: usb-storage 2-1:0.20 [ 341.279397][ T9521] usb 2-1: USB disconnect, device number 63 [ 341.435820][ T5923] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 341.451252][ T5923] cp210x 9-1:0.0: querying part number failed [ 341.468284][ T5923] usb 9-1: cp210x converter now attached to ttyUSB0 [ 341.483707][ T5923] usb 9-1: USB disconnect, device number 7 [ 341.519736][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 341.532895][ T5923] cp210x 9-1:0.0: device disconnected [ 342.911012][ T5923] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 343.547569][T10472] netlink: 'syz.8.1050': attribute type 1 has an invalid length. [ 343.605679][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 343.692273][T10476] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 343.738203][T10476] CIFS mount error: No usable UNC path provided in device string! [ 343.738203][T10476] [ 343.775404][T10476] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.818758][T10480] vlan2: entered promiscuous mode [ 343.824047][T10480] bridge0: entered promiscuous mode [ 344.070681][ T5923] usb 2-1: device descriptor read/64, error -71 [ 344.094753][ T7485] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 344.264297][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1058'. [ 344.285630][ T7485] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.303055][ T7485] usb 3-1: config 0 has no interface number 0 [ 344.312849][ T7485] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.325538][ T5923] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 344.341059][ T7485] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.362458][ T7485] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 344.383315][ T7485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.415896][ T7485] usb 3-1: config 0 descriptor?? [ 344.502108][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.526693][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.547444][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 344.559245][ T5923] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.573621][ T5923] usb 2-1: Manufacturer: syz [ 344.592003][ T5923] usb 2-1: config 0 descriptor?? [ 345.106614][ T5923] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 345.115226][ T5923] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 345.124692][ T5923] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 345.132606][ T5923] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 345.139873][ T5923] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 345.153641][ T5923] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 345.160561][ T5923] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 345.170348][ T5923] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 345.596316][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.640776][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.758833][ T5923] pyra 0003:1E7D:2CF6.001D: couldn't init struct pyra_device [ 345.775919][ T5923] pyra 0003:1E7D:2CF6.001D: couldn't install mouse [ 345.794011][ T5923] pyra 0003:1E7D:2CF6.001D: probe with driver pyra failed with error -71 [ 345.828793][ T5923] usb 2-1: USB disconnect, device number 65 [ 345.987933][T10534] fuse: Bad value for 'fd' [ 346.160677][ T5923] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 346.272403][ T9523] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 346.322863][ T5923] usb 2-1: config index 0 descriptor too short (expected 42, got 36) [ 346.332356][ T5923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 346.343873][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.355688][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.368153][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 219 [ 346.387785][ T5923] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 346.397414][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 346.408615][ T5923] usb 2-1: Product: syz [ 346.413346][ T5923] usb 2-1: SerialNumber: syz [ 346.425655][ T5923] r8152-cfgselector 2-1: Unknown version 0x0000 [ 346.431134][ T9523] usb 9-1: Using ep0 maxpacket: 32 [ 346.432603][ T5923] r8152-cfgselector 2-1: config 0 descriptor?? [ 346.446830][ T9523] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 346.447182][ T5923] hub 2-1:0.0: USB hub found [ 346.470839][ T9523] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.479042][ T9523] usb 9-1: Product: syz [ 346.491536][ T9523] usb 9-1: Manufacturer: syz [ 346.505515][ T9523] usb 9-1: SerialNumber: syz [ 346.512877][ T9523] usb 9-1: config 0 descriptor?? [ 346.519787][ T9523] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 346.532167][ T5826] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 346.596288][ T7485] usbhid 3-1:0.1: can't add hid device: -71 [ 346.606639][ T7485] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 346.620289][ T7485] usb 3-1: USB disconnect, device number 62 [ 346.692434][ T5826] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 346.711570][ T5826] usb 10-1: config 1 has no interface number 1 [ 346.718437][ T5826] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 346.744432][ T5826] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.753993][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.762596][ T5826] usb 10-1: Product: syz [ 346.766870][ T5826] usb 10-1: Manufacturer: syz [ 346.771973][ T5826] usb 10-1: SerialNumber: syz [ 347.014778][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.024227][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.273484][ T5826] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 347.301452][ T5826] usb 10-1: failed to enable PITCH for EP 0x82 [ 347.345471][ T5826] usb 10-1: USB disconnect, device number 3 [ 347.378885][ T24] usb 8-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 347.417668][ T24] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 347.459032][ T6216] udevd[6216]: failed to send result of seq 16520 to main daemon: Connection refused [ 347.478196][ T24] usb 8-1: USB disconnect, device number 13 [ 347.793841][ T24] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 348.051144][ T9523] gspca_ov534_9: reg_w failed -110 [ 348.191888][ T9520] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 348.352263][ T9523] gspca_ov534_9: Unknown sensor 0000 [ 348.352339][ T9523] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 348.389464][ T9520] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 348.398088][ T9520] usb 10-1: config 1 has no interface number 0 [ 348.405154][ T9520] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 348.429093][ T9520] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 348.465281][ T9520] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.506634][ T9520] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 348.516239][ T9520] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.524424][ T9520] usb 10-1: Product: syz [ 348.528763][ T9520] usb 10-1: Manufacturer: syz [ 348.533604][ T9520] usb 10-1: SerialNumber: syz [ 348.542394][T10565] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 348.764271][T10565] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 349.466005][ T5923] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 349.484006][ T9520] sierra_net 10-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 349.503536][ T24] usb 9-1: USB disconnect, device number 8 [ 349.517406][ T5923] r8152-cfgselector 2-1: USB disconnect, device number 66 [ 349.543337][ T9520] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 349.568185][ T9520] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 349.596033][ T9520] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 349.766008][ T9520] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 349.779951][ T9520] usb 10-1: USB disconnect, device number 4 [ 349.792207][ T9520] sierra_net 10-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem [ 350.355723][ T7305] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.480928][T10593] syzkaller0: entered promiscuous mode [ 350.486419][T10593] syzkaller0: entered allmulticast mode [ 350.723476][ T9520] sierra_net 10-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 350.742744][ T7305] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.843161][ T7305] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.021425][ T7305] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.357299][T10609] No such timeout policy "syz1" [ 351.376479][T10609] No control pipe specified [ 351.404442][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 351.564544][ T9521] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 351.652420][ T7305] bridge_slave_1: left allmulticast mode [ 351.658084][ T7305] bridge_slave_1: left promiscuous mode [ 351.680802][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.707318][ T7305] bridge_slave_0: left allmulticast mode [ 351.725270][ T7305] bridge_slave_0: left promiscuous mode [ 351.740649][ T9521] usb 8-1: Using ep0 maxpacket: 8 [ 351.746228][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.762492][ T9521] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 351.778676][ T9521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.809569][ T9521] usb 8-1: config 0 descriptor?? [ 351.948065][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 351.948079][ T30] audit: type=1326 audit(1766778153.667:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 352.020673][ T30] audit: type=1326 audit(1766778153.667:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 352.598519][ T30] audit: type=1326 audit(1766778153.667:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 352.635273][T10610] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1080'. [ 352.667890][ T30] audit: type=1326 audit(1766778153.667:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 352.762931][ T30] audit: type=1326 audit(1766778153.667:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 352.972578][ T30] audit: type=1326 audit(1766778153.667:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 352.999474][ T30] audit: type=1326 audit(1766778153.677:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 353.036660][ T30] audit: type=1326 audit(1766778153.677:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 353.354573][ T30] audit: type=1326 audit(1766778153.677:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 353.452285][ T30] audit: type=1326 audit(1766778153.677:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.9.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f013a58f749 code=0x7ffc0000 [ 353.628493][ T7305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.639312][ T7305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.650786][ T7305] bond0 (unregistering): Released all slaves [ 353.665728][ T7305] bond1 (unregistering): Released all slaves [ 353.790951][ T978] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 353.892061][T10659] syzkaller1: entered promiscuous mode [ 353.898929][T10659] syzkaller1: entered allmulticast mode [ 353.919342][T10664] netlink: 'syz.8.1096': attribute type 5 has an invalid length. [ 354.962680][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 355.023041][ T978] usb 10-1: not running at top speed; connect to a high speed hub [ 355.039660][ T978] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 355.049538][ T978] usb 10-1: config 1 has no interface number 1 [ 355.056858][ T978] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 355.073068][ T978] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.082916][ T978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.183185][ T978] usb 10-1: Product: 藂೅ᗊ믂筧뿅腞ꢞ谘㶵䏞胰条찁鮶ᱧ떉㍱ᰇ吲〝纒㙚ƪ딁꫚纬遤䬏⁥矞ྒⱓ语᲼뤨売菳 [ 355.230715][ T978] usb 10-1: Manufacturer: 蜯恏伱坬뼿鎂 [ 355.247649][ T978] usb 10-1: SerialNumber: syz [ 355.304406][ T9521] usb 8-1: string descriptor 0 read error: -71 [ 355.330933][ T9521] uvcvideo 8-1:0.0: Found UVC 0.00 device (2833:0201) [ 355.339275][ T9521] uvcvideo 8-1:0.0: No valid video chain found. [ 355.382494][ T9521] usb 8-1: USB disconnect, device number 15 [ 355.518714][ T7305] hsr_slave_0: left promiscuous mode [ 355.532734][ T978] usb 10-1: 2:1 : unsupported format bits 0x80 [ 355.550798][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.560847][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.571810][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.589659][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.593251][ T978] usb 10-1: USB disconnect, device number 5 [ 355.626952][ T7305] veth1_macvtap: left promiscuous mode [ 355.665308][ T7305] veth0_macvtap: left promiscuous mode [ 355.679581][ T7305] veth1_vlan: left promiscuous mode [ 355.685578][ T7305] veth0_vlan: left promiscuous mode [ 355.730671][ T9521] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 355.827703][T10672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 355.839351][T10672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1098'. [ 355.911449][ T9521] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.922581][ T9521] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.933502][ T9521] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.946633][ T9521] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.956572][ T9521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.966799][ T9521] usb 8-1: config 0 descriptor?? [ 357.740726][ T978] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 357.830708][ T5886] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 358.020664][ T5886] usb 10-1: Using ep0 maxpacket: 32 [ 358.046376][ T5886] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 358.061029][ T5886] usb 10-1: config 0 has no interface number 0 [ 358.072345][ T7305] team0 (unregistering): Port device team_slave_1 removed [ 358.109343][ T5886] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 358.118713][ T5886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.126879][ T5886] usb 10-1: Product: syz [ 358.133078][ T5886] usb 10-1: Manufacturer: syz [ 358.138219][ T5886] usb 10-1: SerialNumber: syz [ 358.149835][ T5886] usb 10-1: config 0 descriptor?? [ 358.237303][ T7305] team0 (unregistering): Port device team_slave_0 removed [ 358.398202][ T5886] radio-si470x 10-1:0.35: this is not a si470x device. [ 358.902309][T10672] geneve2: entered promiscuous mode [ 358.930193][T10674] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.939252][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.954513][T10701] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.961785][T10701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.969165][T10701] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.970875][ T5886] radio-raremono 10-1:0.35: this is not Thanko's Raremono. [ 358.976350][T10701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.001590][T10701] bridge0: entered promiscuous mode [ 359.136921][T10701] bridge0: entered allmulticast mode [ 359.177660][ T9521] usbhid 8-1:0.0: can't add hid device: -71 [ 359.186716][ T9521] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 359.194771][T10713] CUSE: info not properly terminated [ 359.202476][T10713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.216464][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 359.216478][ T30] audit: type=1400 audit(1766778160.927:2507): avc: denied { write } for pid=10711 comm="syz.8.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.248374][ T9521] usb 8-1: USB disconnect, device number 16 [ 359.854696][T10713] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 359.862903][T10713] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 360.211252][ T9521] usb 10-1: USB disconnect, device number 6 [ 360.243289][ T7305] IPVS: stop unused estimator thread 0... [ 362.700991][ T30] audit: type=1400 audit(1766778163.967:2508): avc: denied { append } for pid=10764 comm="syz.9.1121" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 362.850713][ T5923] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 362.873637][ T30] audit: type=1400 audit(1766778164.587:2509): avc: granted { setsecparam } for pid=10771 comm="syz.7.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 362.929803][ T30] audit: type=1400 audit(1766778164.617:2510): avc: granted { setsecparam } for pid=10771 comm="syz.7.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 362.984582][T10780] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 363.091257][T10786] xt_TCPMSS: Only works on TCP SYN packets [ 363.109037][ T5923] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.123282][ T5923] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.136704][ T5923] usb 9-1: config 1 has no interface number 0 [ 363.151257][ T5923] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.170924][ T978] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 363.173435][ T5923] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 363.208639][ T5923] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 363.239866][ T5923] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.262021][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.278901][ T5923] usb 9-1: Product: syz [ 363.287624][ T5923] usb 9-1: Manufacturer: syz [ 363.296895][ T5923] usb 9-1: SerialNumber: syz [ 363.310678][ T978] usb 2-1: device descriptor read/64, error -71 [ 363.317251][T10769] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 363.560732][ T978] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 363.700928][ T978] usb 2-1: device descriptor read/64, error -71 [ 363.727044][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.757726][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.781457][T10769] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 363.810980][ T978] usb usb2-port1: attempt power cycle [ 364.050975][ T5923] cdc_ncm 9-1:1.1: failed GET_NTB_PARAMETERS [ 364.085052][ T5923] cdc_ncm 9-1:1.1: bind() failure [ 364.111504][ T5923] usb 9-1: USB disconnect, device number 10 [ 364.210725][ T978] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 364.261357][ T978] usb 2-1: device descriptor read/8, error -71 [ 364.314900][ T9521] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 364.348587][ T9521] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.520787][ T978] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 364.545662][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1134'. [ 364.545754][T10812] all: renamed from lo (while UP) [ 364.571870][ T978] usb 2-1: device descriptor read/8, error -71 [ 364.601214][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1134'. [ 364.652250][ T31] INFO: task syz.3.540:8132 blocked for more than 143 seconds. [ 364.670359][ T31] Tainted: G L syzkaller #0 [ 364.689205][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.698717][ T978] usb usb2-port1: unable to enumerate USB device [ 364.705964][ T31] task:syz.3.540 state:D stack:25720 pid:8132 tgid:8128 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 364.706681][ T30] audit: type=1400 audit(1766778166.417:2511): avc: denied { watch_mount } for pid=10820 comm="syz.8.1137" path="/41" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 364.718189][ T31] Call Trace: [ 364.745911][ T31] [ 364.748873][ T31] ? __schedule+0x10b9/0x6150 [ 364.754663][ T31] __schedule+0x1139/0x6150 [ 364.760354][ T31] ? __pfx___schedule+0x10/0x10 [ 364.765421][ T31] ? find_held_lock+0x2b/0x80 [ 364.770119][ T31] ? schedule+0x2d7/0x3a0 [ 364.776298][ T31] schedule+0xe7/0x3a0 [ 364.780378][ T31] io_schedule+0xbf/0x130 [ 364.806682][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 364.813119][ T9523] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 364.830934][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 364.843050][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 364.855665][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 364.868730][ T31] ? __pfx___might_resched+0x10/0x10 [ 364.884853][ T31] ? compaction_free+0x148/0x3c0 [ 364.889828][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 364.911753][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 364.917147][ T31] ? __pfx_compaction_free+0x10/0x10 [ 364.928636][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 364.950685][ T9523] usb 10-1: device descriptor read/64, error -71 [ 364.957149][ T31] ? rcu_is_watching+0x12/0xc0 [ 364.962677][ T31] ? trace_sched_exit_tp+0xd1/0x110 [ 364.967867][ T31] ? __schedule+0x10b9/0x6150 [ 364.974974][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 364.980013][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 364.990710][ T31] ? __pfx_compaction_free+0x10/0x10 [ 364.995998][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 365.011023][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 365.016589][ T31] migrate_pages+0x1b0b/0x2350 [ 365.030619][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 365.036012][ T31] ? __pfx_compaction_free+0x10/0x10 [ 365.050641][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 365.055891][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 365.063712][ T31] ? __nr_to_section+0xa0/0xe0 [ 365.069001][ T31] ? pfn_to_online_page+0x16b/0x4a0 [ 365.074273][ T31] compact_zone+0x1e78/0x4540 [ 365.078971][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.084380][ T31] ? __pfx_debug_object_free+0x10/0x10 [ 365.089870][ T31] ? __pfx_compact_zone+0x10/0x10 [ 365.095010][ T31] ? __flush_work+0x938/0xcc0 [ 365.099703][ T31] ? __flush_work+0x4d0/0xcc0 [ 365.104538][ T31] compact_node+0x1a3/0x2c0 [ 365.109062][ T31] ? __pfx_compact_node+0x10/0x10 [ 365.121483][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 365.126711][ T31] sysctl_compaction_handler+0x141/0x210 [ 365.133843][ T31] proc_sys_call_handler+0x493/0x5b0 [ 365.139183][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 365.146508][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 365.152176][ T31] iter_file_splice_write+0xa24/0x12b0 [ 365.157687][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 365.160261][ T30] audit: type=1400 audit(1766778166.867:2512): avc: denied { cmd } for pid=10822 comm="syz.2.1130" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 365.163637][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 365.163684][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 365.195254][ T5923] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 365.199329][ T9523] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 365.200551][ T31] direct_splice_actor+0x192/0x6c0 [ 365.224795][ T31] splice_direct_to_actor+0x345/0xa30 [ 365.230271][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 365.246074][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 365.261259][ T31] ? rcu_is_watching+0x12/0xc0 [ 365.266075][ T31] do_splice_direct+0x174/0x240 [ 365.280618][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 365.286169][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 365.292541][ T31] ? rw_verify_area+0xcf/0x6c0 [ 365.297323][ T31] do_sendfile+0xb06/0xe50 [ 365.310733][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 365.315802][ T31] __x64_sys_sendfile64+0x154/0x220 [ 365.321077][ T9523] usb 10-1: device descriptor read/64, error -71 [ 365.340956][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 365.346742][ T31] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 365.360706][ T31] do_syscall_64+0xcd/0xf80 [ 365.365344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.372638][ T31] RIP: 0033:0x7f6863b8f749 [ 365.377360][ T31] RSP: 002b:00007f686499a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 365.386363][ T31] RAX: ffffffffffffffda RBX: 00007f6863de6180 RCX: 00007f6863b8f749 [ 365.394530][ T31] RDX: 00002000000000c0 RSI: 0000000000000009 RDI: 000000000000000a [ 365.402741][ T5923] usb 9-1: config index 0 descriptor too short (expected 40466, got 18) [ 365.411120][ T31] RBP: 00007f6863c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 365.419120][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 365.427149][ T5923] usb 9-1: config 100 has too many interfaces: 162, using maximum allowed: 32 [ 365.436164][ T5923] usb 9-1: config 100 has an invalid descriptor of length 117, skipping remainder of the config [ 365.441038][ T9523] usb usb10-port1: attempt power cycle [ 365.446679][ T31] R13: 00007f6863de6218 R14: 00007f6863de6180 R15: 00007ffdd0153968 [ 365.462575][ T31] [ 365.465933][ T5923] usb 9-1: config 100 has 0 interfaces, different from the descriptor's value: 162 [ 365.475851][ T31] [ 365.475851][ T31] Showing all locks held in the system: [ 365.483663][ T5923] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=1b.88 [ 365.510149][ T31] 1 lock held by khungtaskd/31: [ 365.515425][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 365.525594][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.548478][ T31] 5 locks held by kworker/u8:8/2021: [ 365.555113][ T31] #0: ffff88801badc948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 365.566559][ T31] #1: ffffc900054a7c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 365.577087][ T31] #2: ffffffff9012b3d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 365.586967][ T31] #3: ffffffff90141ba8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 365.596163][ T31] #4: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 365.606297][ T31] 2 locks held by getty/5579: [ 365.610995][ T31] #0: ffff8880316950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 365.620793][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 365.630955][ T31] 4 locks held by kworker/0:7/5923: [ 365.636165][ T31] #0: ffff88801fefe948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 365.647030][ T31] #1: ffffc90002f47c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 365.659060][ T31] #2: ffff888143746198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 365.668064][ T31] #3: ffff88807c4bb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 365.677351][ T31] 1 lock held by udevd/6219: [ 365.682444][ T31] #0: ffff888025d88358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 365.691919][ T31] 3 locks held by kworker/u8:19/6331: [ 365.697312][ T31] 1 lock held by syz.3.540/8132: [ 365.702300][ T31] #0: ffff8880254d6420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 365.712391][ T31] 6 locks held by kworker/1:14/9523: [ 365.717686][ T31] #0: ffff88801fefe948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 365.728566][ T31] #1: ffffc90003f6fc90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 365.739832][ T31] #2: ffff88802974e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 365.748752][ T31] #3: ffff888029821518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 365.759252][ T31] #4: ffff88802966f268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 365.769208][ T31] #5: ffffffff8f6fe630 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1d50 [ 365.779987][ T31] [ 365.782787][ T31] ============================================= [ 365.782787][ T31] [ 365.792384][ T31] NMI backtrace for cpu 0 [ 365.792405][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 365.792430][ T31] Tainted: [L]=SOFTLOCKUP [ 365.792442][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.792452][ T31] Call Trace: [ 365.792459][ T31] [ 365.792465][ T31] dump_stack_lvl+0x116/0x1f0 [ 365.792499][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 365.792528][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 365.792549][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 365.792580][ T31] sys_info+0x133/0x180 [ 365.792605][ T31] watchdog+0xe66/0x1180 [ 365.792630][ T31] ? rcu_is_watching+0x12/0xc0 [ 365.792649][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.792667][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.792692][ T31] ? __kthread_parkme+0x19e/0x250 [ 365.792712][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.792731][ T31] kthread+0x3c5/0x780 [ 365.792752][ T31] ? __pfx_kthread+0x10/0x10 [ 365.792775][ T31] ? rcu_is_watching+0x12/0xc0 [ 365.792791][ T31] ? __pfx_kthread+0x10/0x10 [ 365.792812][ T31] ret_from_fork+0x983/0xb10 [ 365.792832][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 365.792854][ T31] ? __switch_to+0x7af/0x10d0 [ 365.792877][ T31] ? __pfx_kthread+0x10/0x10 [ 365.792899][ T31] ret_from_fork_asm+0x1a/0x30 [ 365.792939][ T31] [ 365.792962][ T31] Sending NMI from CPU 0 to CPUs 1: [ 365.813992][ T9523] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 365.822575][ C1] NMI backtrace for cpu 1 [ 365.822595][ C1] CPU: 1 UID: 0 PID: 9523 Comm: kworker/1:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.822618][ C1] Tainted: [L]=SOFTLOCKUP [ 365.822624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.822634][ C1] Workqueue: usb_hub_wq hub_event [ 365.822661][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x20b0 [ 365.822684][ C1] Code: 89 c3 39 d0 0f 83 17 16 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d 2c 9c dc 91 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c [ 365.822701][ C1] RSP: 0018:ffffc90000a087d0 EFLAGS: 00000802 [ 365.822712][ C1] RAX: 000000000000a963 RBX: 0000000000000002 RCX: 000000000000a963 [ 365.822722][ C1] RDX: dffffc0000000000 RSI: 00000000000a7c15 RDI: ffffffff91df41b8 [ 365.822731][ C1] RBP: ffffc90000a08888 R08: 0000000000000000 R09: 00000000ba9d4ab2 [ 365.822741][ C1] R10: 0000000000000002 R11: 000000000000a963 R12: ffffc90000a08890 [ 365.822750][ C1] R13: ffffc90000a08840 R14: ffffc90000a08875 R15: ffffffff81a9635d [ 365.822760][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 365.822775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.822784][ C1] CR2: 00007f91781b7198 CR3: 0000000073b9e000 CR4: 00000000003526f0 [ 365.822794][ C1] Call Trace: [ 365.822799][ C1] [ 365.822805][ C1] ? stack_trace_save+0x8e/0xc0 [ 365.822822][ C1] ? __unwind_start+0x45f/0x7f0 [ 365.822843][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 365.822859][ C1] arch_stack_walk+0x94/0x100 [ 365.822879][ C1] ? stack_trace_save+0x8e/0xc0 [ 365.822896][ C1] stack_trace_save+0x8e/0xc0 [ 365.822912][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 365.822929][ C1] ? __lock_acquire+0x436/0x2890 [ 365.822947][ C1] kasan_save_stack+0x33/0x60 [ 365.822982][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 365.823004][ C1] insert_work+0x36/0x230 [ 365.823023][ C1] __queue_work+0x94f/0x10e0 [ 365.823044][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 365.823063][ C1] call_timer_fn+0x19a/0x5a0 [ 365.823080][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 365.823097][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 365.823117][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 365.823135][ C1] ? __run_timers+0x559/0xae0 [ 365.823152][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 365.823170][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 365.823194][ C1] __run_timers+0x569/0xae0 [ 365.823214][ C1] ? __pfx___run_timers+0x10/0x10 [ 365.823239][ C1] run_timer_base+0x114/0x190 [ 365.823256][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 365.823274][ C1] run_timer_softirq+0x1a/0x40 [ 365.823290][ C1] handle_softirqs+0x219/0x950 [ 365.823312][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 365.823339][ C1] __irq_exit_rcu+0x109/0x170 [ 365.823359][ C1] irq_exit_rcu+0x9/0x30 [ 365.823379][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 365.823397][ C1] [ 365.823402][ C1] [ 365.823407][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 365.823425][ C1] RIP: 0010:vprintk_emit+0x556/0x6b0 [ 365.823439][ C1] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 b5 d7 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 73 d2 21 00 48 85 ed 0f 85 25 01 00 00 95 d7 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 365.823452][ C1] RSP: 0018:ffffc90003f6f5c8 EFLAGS: 00000287 [ 365.823463][ C1] RAX: 0000000000097560 RBX: 000000000000003c RCX: ffffc9001af97000 [ 365.823472][ C1] RDX: 0000000000100000 RSI: ffffffff819d0ff5 RDI: 0000000000000007 [ 365.823482][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 365.823490][ C1] R10: 0000000000000000 R11: ffff88802a25d4b0 R12: 1ffff920007edebb [ 365.823499][ C1] R13: 0000000000000200 R14: ffff88801ea9a4c0 R15: ffffc90003f6f690 [ 365.823513][ C1] ? vprintk_emit+0x675/0x6b0 [ 365.823528][ C1] ? vprintk_emit+0x675/0x6b0 [ 365.823542][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 365.823558][ C1] dev_printk_emit+0xfa/0x140 [ 365.823581][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 365.823600][ C1] ? kernfs_notify+0x1a4/0x400 [ 365.823625][ C1] ? hub_port_reset+0x606/0x1d50 [ 365.823649][ C1] __dev_printk+0xf5/0x270 [ 365.823671][ C1] _dev_info+0xe4/0x120 [ 365.823692][ C1] ? __pfx__dev_info+0x10/0x10 [ 365.823712][ C1] ? __pfx_hub_port_reset+0x10/0x10 [ 365.823738][ C1] hub_port_init+0x11ac/0x3a90 [ 365.823761][ C1] hub_event+0x2ee7/0x52f0 [ 365.823792][ C1] ? __pfx_hub_event+0x10/0x10 [ 365.823812][ C1] ? debug_objects_fill_pool+0x140/0x660 [ 365.823829][ C1] ? finish_task_switch.isra.0+0x202/0xbd0 [ 365.823855][ C1] ? rcu_is_watching+0x12/0xc0 [ 365.823870][ C1] process_one_work+0x9ba/0x1b20 [ 365.823891][ C1] ? __pfx_process_one_work+0x10/0x10 [ 365.823912][ C1] ? assign_work+0x1a0/0x250 [ 365.823930][ C1] worker_thread+0x6c8/0xf10 [ 365.823951][ C1] ? __kthread_parkme+0x19e/0x250 [ 365.823966][ C1] ? __pfx_worker_thread+0x10/0x10 [ 365.823983][ C1] kthread+0x3c5/0x780 [ 365.824014][ C1] ? __pfx_kthread+0x10/0x10 [ 365.824031][ C1] ? rcu_is_watching+0x12/0xc0 [ 365.824044][ C1] ? __pfx_kthread+0x10/0x10 [ 365.824062][ C1] ret_from_fork+0x983/0xb10 [ 365.824079][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 365.824094][ C1] ? __switch_to+0x7af/0x10d0 [ 365.824113][ C1] ? __pfx_kthread+0x10/0x10 [ 365.824129][ C1] ret_from_fork_asm+0x1a/0x30 [ 365.824157][ C1] [ 365.824637][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 365.824652][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 365.824674][ T31] Tainted: [L]=SOFTLOCKUP [ 365.824679][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.824689][ T31] Call Trace: [ 365.824695][ T31] [ 365.824701][ T31] dump_stack_lvl+0x3d/0x1f0 [ 365.824727][ T31] vpanic+0x640/0x6f0 [ 365.824747][ T31] panic+0xca/0xd0 [ 365.824764][ T31] ? __pfx_panic+0x10/0x10 [ 365.824780][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 365.824802][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 365.824829][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 365.824855][ T31] ? watchdog+0xe83/0x1180 [ 365.824873][ T31] ? watchdog+0xe76/0x1180 [ 365.824891][ T31] watchdog+0xe94/0x1180 [ 365.824914][ T31] ? rcu_is_watching+0x12/0xc0 [ 365.824930][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.824946][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.824968][ T31] ? __kthread_parkme+0x19e/0x250 [ 365.824985][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.825002][ T31] kthread+0x3c5/0x780 [ 365.825022][ T31] ? __pfx_kthread+0x10/0x10 [ 365.825042][ T31] ? rcu_is_watching+0x12/0xc0 [ 365.825057][ T31] ? __pfx_kthread+0x10/0x10 [ 365.825076][ T31] ret_from_fork+0x983/0xb10 [ 365.825094][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 365.825114][ T31] ? __switch_to+0x7af/0x10d0 [ 365.825135][ T31] ? __pfx_kthread+0x10/0x10 [ 365.825155][ T31] ret_from_fork_asm+0x1a/0x30 [ 365.825190][ T31] [ 365.828085][ T31] Kernel Offset: disabled