last executing test programs: 2m48.970790997s ago: executing program 2 (id=691): r0 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000000)={'bond0\x00', @local}) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.066696525s ago: executing program 2 (id=695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0xd, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="0fc769000f20d5670f229cc4c33d5f1ed264f365f3662ed9f10fc76e00b9bf0b0000b800000000ba010000000f3066ba410066ed66baf80cb86019238def66bafc0cb823000000eff20f1ef9", 0x4c}], 0x1, 0x58, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="35e7ddef292e6e"], 0xe) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m47.853065698s ago: executing program 2 (id=697): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x68a2681eafebba8d) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffffff4b, 0x4a40) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000000c0)=0x9) (async) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000380)=""/52, 0x34}], 0x2, &(0x7f0000000200)=""/217, 0xd9}, 0xaf43}, {{&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}}, {{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/31, 0x1f}], 0x4, &(0x7f0000000680)=""/42, 0x2a}, 0xc}], 0x3, 0x40002161, &(0x7f00000007c0)={r2, r3+10000000}) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 2m47.73654912s ago: executing program 2 (id=699): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000002c0)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000003000000090000000400000080000100", @ANYRES32=r0, @ANYBLOB="086b2ce40dd90e2773d64d5500000000080000f4270000000000000ad2072ec13c30e80000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000e00"/24, @ANYRES32=r0, @ANYBLOB], 0x50) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x1, r4, 0x0, 0x80000000000000) ptrace$ARCH_SET_GS(0x1e, r4, 0x0, 0x1001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x980903, 0x4}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {r5}}, './file1\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r8, &(0x7f0000000640)='\x00', 0x81101) bind$bt_hci(r8, &(0x7f00000003c0)={0x1f, 0x2, 0x1}, 0x6) syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 2m45.992992699s ago: executing program 2 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT, @ANYRES16=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) name_to_handle_at(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000000000001"], &(0x7f00000004c0), 0x200) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x40010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x8011) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) 2m45.675734332s ago: executing program 2 (id=717): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x64c159d03152c38, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fsopen(&(0x7f0000000040)='efivarfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='mm_page_alloc\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = fsmount(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) read$FUSE(r7, &(0x7f00000004c0)={0x2020}, 0x2020) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) 2m45.516600452s ago: executing program 32 (id=717): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x64c159d03152c38, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fsopen(&(0x7f0000000040)='efivarfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='mm_page_alloc\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = fsmount(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) read$FUSE(r7, &(0x7f00000004c0)={0x2020}, 0x2020) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) 1m27.678050382s ago: executing program 1 (id=1145): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x56, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xc01, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x503, 0xc000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x20000085) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x27, 0x3202, @vifc_lcl_ifindex, @local}, 0x10) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000000)) (async) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.524326546s ago: executing program 1 (id=1146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000002000000238655ba00e702f9f92bf402000000f1b92c9793c8c5f9ff0095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1d0000001000000008"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000faffffffff17110000b536e9605dbf97b53f12e3cff6035273263b78774832de82268d9ed7927c36a5cbe00a8449db421c5ceb6a7ff1402821fa1d936e8aaff6bfd0dcad034c85300280ea9455940e36f195eecd14497d21e15a5daf34b287bfb4e920d4606ab70a50809bf6216e09c12bc46049d0b6a45965817b4ecd89d73d20d07c7168ddcea06bc6905efa14", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r8, 0x0, 0x0}, 0x20) 1m27.228553306s ago: executing program 1 (id=1150): read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/26, 0x1a) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x4e21c0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x100) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f0000000240)}], 0x2) r7 = io_uring_setup(0x3eae, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m26.254806568s ago: executing program 1 (id=1154): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x8015) 1m26.224810191s ago: executing program 1 (id=1157): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) (async) rseq(&(0x7f00000004c0), 0xfffffda9, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x8) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="243b2c30d2", 0x5}, {&(0x7f0000000080)}], 0x2, &(0x7f0000000800)=[{0xffffffffffffffd2, 0x19d, 0x7, "abdc4a176b280c870e32463e1220441fac6b7101126287001c0ab728395ef46d9f042be771f9a29a5216b2faf2a748e51c5cd3766a2aa7a311935ea2b8fca2efc6c29d04894c7eea45a71bc38a655ea9be736119feab61d59fd31a22b4c08244e143af5d5bee7678134ec6e5c6f360a40132a9bd941303538421d9d2"}, {0xe8, 0x112, 0x40, "dfdfa5c08633e3e6168f89aba8f7a2892db9bd952bd4defa03c4218c42874acff3186c36ed23bcda2e14a4fc41a77cd76ed332c70c160a5209953c8aabed6264a663274df3e19eadb89cb2b1f948c7a9f73f49f2480aefa0feea9490a058b50121aa14677c96b7da7e46e813e6b43726c7c490fb184879fa6d27a0ce3d6916693d25ca2b85d892fca1d89abfc832fec7dd158bdf94722c9fc0bbb0378e9bacf99e3192cd2f26f3f9c78c48a32a0a4cb9c815ae803849fafb3e609f69075bcbeb73a2eea28bf2949f397364a07ae7c3d61e1569d0aa54"}, {0x90, 0x10c, 0x3, "a3834fc9d4e1421f7c97bef89eeb242ca7cb2703ddce292b707385cadfda69ff01226aadf3c0f3ae569f91df675a8870f236a7f1add3344e8b4d9a83f9f314d65ed48ef2f47861289c05a778bf23cf28d5af84d29c5a5d380a12fb63644926c13f08ecf880256a91eeb1a72634a46435e88775fd1ea544a5654e1b7572"}, {0x28, 0x118, 0x8, "21b9be22a7e51d119f71037e2674fc50b22a9a2cda352c"}, {0x88, 0x108, 0x100, "094bbb29b35e2be090a252615ca3b0f06eb3ff68f75e5bbd9da65c7d050ae979a8c9cc54ab690a646c7171eaec0d4d77372c965d43b8fd657ca51038d7121b820ae7d98a0cdeb1baf9c364d01091c155d4450752e7f324e90b1d8045d7ce4ab1bbf1c1903dc7cb14ec3a520cb7d5cc827e8c2b549a30"}, {0x40, 0x109, 0xfff, "bf0f55cb127090820b2250f4442e6ca9fce33519c3fb8d63212e15ba76372ae59b641b215e6d07d5300699"}, {0x50, 0x11, 0x8a9, "fad5b952a6a916274bd643c85b45de18de0f164dc8ce73e8fd148309f56eba58e43435cd500e46bdffa0a65382b0617f417e6239aefb456c76d9357d"}, {0xb8, 0x10a, 0x40, "b1a4ff73c49f0c8154df62678aa8636caf618cdaac1fc22e4f0afe0e55a938355cf7a84150a4c88c465b67999b8ad25ecbeeffc0d187fa234bf031d421332b6f535e21d3b316adf59f7e5f78e159eb205117b0d60936938bbf06a8ab508988d20de56772d3b85b37bc41018805d84c68eb5fc2d094fb3be03319990078f68dca45f36a48b1c3decc477d6a9e655e8a7d1633b1446d9e6325214495b594bf16307f1af89fe96d4f45"}], 0x400}, 0x8080) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x184) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e24, @private=0xa010102}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x32}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x14c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x15, 0x80, [@tim={0x5, 0x8, {0x2, 0x6c, 0xe0, "5c45115e22"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ibss={0x6, 0x2, 0x8001}]}, @NL80211_ATTR_IE={0x11f, 0x2a, [@perr={0x84, 0x108, {0x2, 0x10, [{{0x0, 0x1}, @device_b, 0x67, @value, 0x31}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value=@device_b, 0x37}, {{}, @device_b, 0xfffff139, @void, 0x16}, {{}, @device_a, 0x19e7, @void, 0x39}, {{}, @device_a, 0x7, @void, 0x1b}, {{}, @broadcast, 0x8, @void, 0xa}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x33}, {{}, @device_b, 0x91ff, @void, 0xa}, {{0x0, 0x1}, @device_a, 0xffff3970, @value}, {{}, @device_a, 0x8, @void, 0x40}, {{}, @device_a, 0x7, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x24}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x33}, {{0x0, 0x1}, @device_b, 0xa49c, @value=@device_b, 0x42}, {{0x0, 0x1}, @device_a, 0x680000, @value, 0x100}, {{0x0, 0x1}, @device_a, 0xfffffff5, @value=@broadcast, 0xc}]}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xf7}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 1m26.181276297s ago: executing program 1 (id=1158): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) writev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000140)='\x00', 0x1}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001"], 0x80}}, 0x0) 1m10.002595769s ago: executing program 33 (id=1158): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) writev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000140)='\x00', 0x1}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001"], 0x80}}, 0x0) 55.68153101s ago: executing program 5 (id=1299): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000d40)={0x14, 0x0, 0x0}, &(0x7f0000000fc0)={0x44, &(0x7f0000000d80)={0x20, 0x11, 0x33, "e115de8018fcb6677086b0d257d7a468c64b151b2719c3f129afeb87a14d2a01a9bde82c69da60c4a9e47efd3ae94c7fbda746"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000e80)={0x20, 0x80, 0x1c, {0x5, 0x10, 0xffffff2e, 0xc, 0x2, 0x2, 0x2, 0x8, 0xad, 0x4, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000c40)={0xc, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x80000) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000200)) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)={0x20, 0x11, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x3, 0x2, {0x2, 0x2e}}, 0x0}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x20, 0x7, 0x73, "4942ec32bc9e75499927ec305f90072308869951fc43ed7f9967592ff004a07e140eb40b89af3bd0cfa86da044a5f61e43690fa74dca815655a3e0f988143ca83376c81f239d61bb7be8ffc832fb4c7688fbf0a542ecab577dd64b8f70fa558ac638a14214894426ac68162757d8e5821ff635"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 53.309113876s ago: executing program 5 (id=1309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}]}, 0x88}}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)) shutdown(r8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r8, &(0x7f00000000c0)={0x20002000}) epoll_wait(r6, &(0x7f0000000180)=[{}, {}], 0x2, 0x0) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d00000000240002800800024000000003080001400000000c080004400000000405000300010000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x87, 0x40002) 52.007279947s ago: executing program 5 (id=1311): write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) prlimit64(0x0, 0xc, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000002c0)={0x10000008}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 51.563653597s ago: executing program 5 (id=1315): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @private=0xac1414bb}}}}, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000005c0)=0x1, 0x4) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000001c0)=ANY=[]) r3 = accept(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000000)=0x80) signalfd4(r3, &(0x7f0000000180)={[0x3]}, 0x8, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 48.197329038s ago: executing program 5 (id=1326): write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, 0x8) prlimit64(0x0, 0xc, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000002c0)={0x10000008}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 45.243755906s ago: executing program 5 (id=1330): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000300)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) 28.799766974s ago: executing program 34 (id=1330): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000300)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) 11.028726564s ago: executing program 6 (id=1533): sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x6, 0x0, 0x0, @tick=0x1, {}, {}, @addr={0xc6, 0xf8}}], 0x1c) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x6, {0x9}, {}, @quote={{0x2}, 0x5}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4001}, {}, {0xef}, @ext={0x0, 0x0}}, {0x7, 0x0, 0x0, 0x0, @time, {0x0, 0x9}, {}, @control={0x0, 0x6}}, {0x0, 0x0, 0x1b, 0x0, @time={0x1, 0x9}, {}, {}, @control}, {0x10, 0x8, 0x0, 0xfc, @time={0x7, 0x7}, {0x0, 0x8}, {}, @control={0xce, 0x4, 0x966}}], 0x8c) iopl(0x3) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r2 = syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = getpid() prlimit64(r5, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xbf9, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x46, 0x56, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2a}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3, 0x0}, 0x8) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x18, '\x00', r8, @fallback=0x24, r1, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r1, 0x0, &(0x7f00000005c0)=[r1, r1, r10, r1], 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x18, 0x3d, 0x107, 0x70bd2b, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x25dfdbfd, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x4004084) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) 9.182431959s ago: executing program 6 (id=1540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x60, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003020000102505a10300000102030109024e000101b80700000000b94824fe05240009000d240f01a32cb2622b080000450000800008241c070008030005241506000905820200020007e9a1acd0cb88d00fa2f800"/100], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000057000045be"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 6.478621495s ago: executing program 6 (id=1554): unshare(0x62020600) syz_clone(0x660c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1a, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0xbc}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x0, 'ip6gre0\x00', 0x1}, 0x18) unshare(0x62020600) (async) syz_clone(0x660c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1a, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0xbc}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x0, 'ip6gre0\x00', 0x1}, 0x18) (async) 5.841180586s ago: executing program 6 (id=1564): rt_sigaction(0x1e, &(0x7f0000000080)={&(0x7f0000000000)="f690c0000000c4c159d939650fd47d000f1ca49b0b000000c4a3850c13002e3e65263ef3f0f79100000000c441b5f6c847ddc0c4e1d571e5d8c4c13d5759b0", 0x8000004, &(0x7f0000000040)="d0f8660f38f5213e410fd91ec482abf6c365f3f2410f318f4878c24594003e676447d3b100000000f0806cc9f1d8c402e1a7607ac4c3f57d057ae7000087", {[0x6]}}, &(0x7f0000000140)={&(0x7f00000000c0)="c4819d65cfc44201b623c442653fdef3420f7e43000f381c7200660f3a422e2e47e90e000000c42195ee13f347af642666de043d00008000", 0x0, &(0x7f0000000100)="c4815915580cc4217dfe145c4057c401a158fac441795af4e108c481e9d30448660f14b2feefffff400f74a1f7ffffff660fd68fdf3b0000"}, 0x8, &(0x7f0000000180)) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=0xffff0001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x8, 0xb9, 0x5, {{0x3e, 0x4, 0x3, 0x32, 0xf8, 0x65, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0xe3, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}, {@empty, 0x6}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}]}, @timestamp_addr={0x44, 0x4c, 0x15, 0x1, 0xf, [{@rand_addr=0x64010100, 0x5}, {@empty, 0xa1}, {@multicast2, 0x10001}, {@multicast1, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@broadcast, 0xb9d5}, {@multicast2, 0x2b8}, {@local, 0xff}]}, @timestamp={0x44, 0x18, 0x28, 0x0, 0x9, [0x4, 0x1, 0x2, 0x5, 0xbe2]}, @timestamp_prespec={0x44, 0x24, 0x75, 0x3, 0x8, [{@empty, 0x5ba}, {@private=0xa010100, 0x1684}, {@multicast2, 0x200}, {@multicast1}]}, @noop, @generic={0x7, 0xa, "6bd7ee9810b32633"}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x1, 0x0, 0x6, 0xa, 0x0, 0x80, 0x10}], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x1, '\x00', r0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x5, 0x8001, 0x100}, 0x10, r2, r3, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x8010, r3, 0x2be32000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000900)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r5 = getpgid(0xffffffffffffffff) sched_setscheduler(r5, 0x1, &(0x7f0000000940)=0x7) r6 = syz_open_dev$sndpcmp(&(0x7f0000000980), 0x4, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f00000009c0)) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x800, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f0000005000)=[{0x2, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/200, 0xc8}], &(0x7f0000001bc0)=[0xffffffffffffffff, 0x100000000, 0x2477, 0x1]}, {0x2, 0xfa2d58f4dfe0b78b, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)=""/155, 0x9b}, {&(0x7f0000001cc0)=""/248, 0xf8}], &(0x7f0000001e00)=[0x7a, 0x1]}, {0x6, 0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001e40)=""/132, 0x84}, {&(0x7f0000001f00)=""/199, 0xc7}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/71, 0x47}, {&(0x7f0000003080)=""/187, 0xbb}, {&(0x7f0000003140)=""/96, 0x60}], &(0x7f0000003240)=[0x3, 0xe30, 0x0, 0x4, 0x2c2, 0x5]}, {0x0, 0x1, 0x0, &(0x7f0000003280), &(0x7f00000032c0)=[0x8, 0x2, 0x8, 0x100000000, 0x1ff]}, {0x3, 0x1, 0x0, &(0x7f0000003580)=[{&(0x7f0000003300)=""/172, 0xac}, {&(0x7f00000033c0)=""/156, 0x9c}, {&(0x7f0000003480)=""/244, 0xf4}], &(0x7f00000035c0)=[0xfe, 0x816a, 0x0, 0xfffffffffffffff7, 0x5, 0x7fffffffffffffff, 0x6, 0x0, 0x5]}, {0x3, 0x1, 0x0, &(0x7f0000003740)=[{&(0x7f0000003640)=""/59, 0x3b}, {&(0x7f0000003680)=""/96, 0x60}, {&(0x7f0000003700)=""/8, 0x8}], &(0x7f0000003780)=[0x4, 0xdb9b]}, {0xa, 0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f00000037c0)=""/48, 0x30}, {&(0x7f0000003800)=""/131, 0x83}, {&(0x7f00000038c0)=""/111, 0x6f}, {&(0x7f0000003940)=""/53, 0x35}, {&(0x7f0000003980)=""/255, 0xff}, {&(0x7f0000003a80)=""/71, 0x47}, {&(0x7f0000003b00)=""/56, 0x38}, {&(0x7f0000003b40)=""/61, 0x3d}, {&(0x7f0000003b80)=""/187, 0xbb}, {&(0x7f0000003c40)=""/145, 0x91}], &(0x7f0000003dc0)=[0x8, 0x1, 0x529d, 0x200, 0x10001, 0xfffffffffffffffe]}, {0x3, 0x1, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003e00)=""/145, 0x91}, {&(0x7f0000003ec0)=""/185, 0xb9}, {&(0x7f0000003f80)=""/4096, 0x1000}], &(0x7f0000004fc0)=[0x7]}], 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000051c0)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005180)={&(0x7f0000005140)=@deltclass={0x34, 0x29, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff1}, {0xd, 0xffff}, {0x2, 0xfffc}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xcca9d024ffd5e039) syz_genetlink_get_family_id$devlink(&(0x7f0000005200), r7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000052c0)={'ip6tnl0\x00', &(0x7f0000005240)={'syztnl2\x00', r0, 0x29, 0x9, 0x7, 0xe00, 0x41, @private0, @loopback, 0x7, 0x8007, 0x6, 0xfffffe00}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005300)=r2, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000005340)=@base={0x16, 0x10001, 0xc015, 0x4, 0x3000, r7, 0x527, '\x00', r8, r9, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r11, 0x40309439, &(0x7f00000053c0)={0x1, 0x1, 0x2}) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000005440)={0x800, 0x9, {r5}, {0x0}, 0x7}) sendmsg$nl_generic(r7, &(0x7f0000005680)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005640)={&(0x7f0000005480)={0x188, 0x27, 0x8, 0x70bd2b, 0x25dfdbfc, {0x18}, [@nested={0x161, 0x142, 0x0, 0x1, [@generic="a05f290972e28c749150c14cc5042d297434f58141f057353e9e33e2da7604f7377261a323a0031072d3ae817888f059190e529fee68", @nested={0x4, 0x6b}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @generic="91916ecfa9b5b2af697ebc6bac949b2d02b899846fe2ee69a71c8aa2195898d2aa9cab18edb457941045049d5cf67debf421005985564229b43577bcb01ecbecf5315c41af379e5a8eab04dcd32f1c005339537f03512540eb61567f7ce8e34f6be46c05ec1808fd4493c835c5104a089a249f245dda95da983bdc6c9f84f518d0dc699bdbaf403e04e1a6cf522162f37fb980e241d0bf9b13e1a1af1f980b096f080f3f0e0861467d2ce40d01150fc75361652e97877179c8733d12c01582d612bf9bd6a6636ce3a312", @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="607af013fc79b55a0736288bbd1de4786a02dfe836a55bd17315ebe31e287914fc5ab62cf6475f7a02", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x96}, @nested={0x4, 0xcc}]}, @typed={0x8, 0xae, 0x0, 0x0, @uid=r12}, @typed={0x8, 0xf2, 0x0, 0x0, @pid=r5}]}, 0x188}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) getpid() ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$bt_sco(r7, &(0x7f00000056c0)={0x1f, @none}, 0x8) bind$netlink(r7, &(0x7f0000005700)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005740)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005b00)={0x11, 0x4, &(0x7f0000005780)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x3, 0x6, 0x9, 0x7, 0x0, 0x1}, @exit], &(0x7f00000057c0)='GPL\x00', 0x80, 0xfa, &(0x7f0000005800)=""/250, 0x41000, 0x10, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000005900)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000005940)={0x1, 0x1, 0x1, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000005a00)=[0xffffffffffffffff, r7, r10, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000005a40)=[{0x4, 0x1, 0x2, 0xa}, {0x0, 0x5, 0x0, 0xa}, {0x1, 0x3, 0x2, 0x6}, {0x3, 0x1, 0x10, 0x9}, {0x4, 0x1, 0xc, 0xb}, {0x0, 0x1, 0x4, 0xa}, {0x5, 0x4, 0x9, 0x7}, {0x4, 0x1, 0x10, 0x5}, {0x5, 0x5, 0x0, 0x6}, {0x4, 0x1, 0x6, 0x8}], 0x10, 0xfffffffb, @void, @value}, 0x94) 5.745710249s ago: executing program 6 (id=1565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000000280)=0x8, 0x4) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r6 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) setresuid(0xee00, 0xee01, 0x0) r9 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x20000000}}], 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r8], 0x4c}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "9cd81247cb785fee619c1bbeb97654bb91142fdc419aaa9dc044d25510aa8ae48870dc3d02b4fadca7d2461a5e0458eb0aab687d44cf5eeb3eea08d0b1831795c5d88b4033c9a0d514cfae0f569a801d7484012b467ef3201e8903bd16263418733aafef5763f5a282526bab591d2f9b70e5fe6a5da2c514293f00bcaec501ac9bcac629642b186913"}}, 0x0, 0x0}, 0x0) 3.268658574s ago: executing program 6 (id=1584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/44) (async) setfsgid(0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.623908072s ago: executing program 3 (id=1590): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x2400c080) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') 2.321267905s ago: executing program 3 (id=1597): setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000004c0)={{0x0}, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x10045, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r0}}]}) ioperm(0x9, 0xa875, 0x10000005) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20180900"], 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x66000080) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_AUXV(0x4, 0xc, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 2.074158043s ago: executing program 0 (id=1599): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x638, &(0x7f0000000000)={0x0, 0xf1ef, 0x0, 0x0, 0x38d}, &(0x7f0000000280), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x638, &(0x7f0000000000)={0x0, 0xf1ef, 0x0, 0x0, 0x38d}, &(0x7f0000000280), &(0x7f00000001c0)) syz_io_uring_setup(0x120d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x100, 0x3, 0x13d}, &(0x7f0000000980)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0075bf000000fbff000000100003006269746d61700300000000000000040000"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0075bf000000fbff000000100003006269746d61700300000000000000040000"], 0x5c}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_clone(0x2001100, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1.89241581s ago: executing program 0 (id=1600): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000010) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) close(0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1, 0x3c, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 1.715963909s ago: executing program 0 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000006800010043000000000000800000000000000000240002"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x100440c0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472520e59fe3c563ee0467469ade2617716da50e5297c8b596e911c", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x1000000, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c802}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x28}]}}}]}, 0x3c}}, 0x4800) (async) io_uring_enter(r7, 0x1e76, 0x0, 0x6, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5d6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.529612395s ago: executing program 0 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.468450068s ago: executing program 7 (id=1606): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000240)={0x4, 0x72, 0x140000}, 0x20) sendmsg$kcm(r3, 0x0, 0x881) sendmsg$sock(r1, 0x0, 0x20000005) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 1.461773957s ago: executing program 0 (id=1607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow/file0\x00', 0x2, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x2}, 0xfffffffffffffd0a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socket(0x22, 0x2, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18802, 0x43037}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x40}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r4}, 0x10) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x1) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000000c0)=""/10, &(0x7f0000002180)=0xa) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x890b, &(0x7f0000000000)=@buf) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@my=0x1, 0x8}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000001c0)) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000340)=""/140) r10 = pidfd_getfd(r0, r0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@fd={0x3, 0x3, 0x4, 0x8, 0x7, {0x77359400}, {0x3, 0xc, 0x6, 0xcb, 0xc, 0x4f, "9e7232c5"}, 0x8, 0x4, {}, 0x3, 0x0, r10}) 1.398779224s ago: executing program 7 (id=1608): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x44) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x47, 0x80, 0x4370, 0x2, {{0x33, 0x4, 0x3, 0x30, 0xcc, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@ssrr={0x89, 0xf, 0x32, [@loopback, @local, @remote]}, @cipso={0x86, 0x51, 0x1, [{0x6, 0x3, "8e"}, {0x1, 0x11, "f96e0f3c3c0c73e5a29654e951b590"}, {0x2, 0xb, "51ab759647ee1b99e6"}, {0x1, 0xf, "ee3559ec88b75b6c4667be92c3"}, {0x1, 0x3, 'E'}, {0x0, 0xc, "905131a96bf963f83489"}, {0x6, 0xe, "463eb3240b82444d8c985a9c"}]}, @cipso={0x86, 0x56, 0x3, [{0x5, 0x7, "2bd52915ec"}, {0x7, 0xf, "3657f5ed4a24abb21c0534fd4b"}, {0x2, 0xf, "009b023f7b2d95dc887260262f"}, {0x2, 0xf, "5928ee3f16c6a8d747f7bdbdc7"}, {0x2, 0x4, "a019"}, {0x1, 0x7, "5a5596ec39"}, {0x5, 0xe, "fc9ad38ce64ef43cfca6a74a"}, {0x0, 0x3, 'O'}]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={0xffffffffffffffff}, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x10280, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x6, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000200)='GPL\x00', 0x7, 0xfb, &(0x7f0000000240)=""/251, 0x41000, 0x44, '\x00', r4, @sk_lookup=0x24, r5, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x100000, 0x3}, 0x10, r6, r7, 0x0, &(0x7f00000009c0)=[r8, r9, r10], 0x0, 0x10, 0x2, @void, @value}, 0x94) readv(r8, &(0x7f0000000d00)=[{&(0x7f0000000ac0)=""/23, 0x17}, {&(0x7f0000000b00)=""/5, 0x5}, {&(0x7f0000000b40)=""/178, 0xb2}, {&(0x7f0000000c00)=""/173, 0xad}, {&(0x7f0000000cc0)=""/37, 0x25}], 0x5) write$binfmt_script(r3, &(0x7f0000000d80)={'#! ', './file0', [{0x20, ','}, {}, {0x20, '\x00'}, {}, {0x20, 'ip_vti0\x00'}, {0x20, 'ip_vti0\x00'}]}, 0x23) recvmmsg(r10, &(0x7f0000007a80)=[{{&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/95, 0x5f}, {&(0x7f0000000ec0)=""/171, 0xab}], 0x2, &(0x7f0000000fc0)=""/108, 0x6c}, 0x5}, {{&(0x7f0000001040)=@sco, 0x80, &(0x7f0000002300)=[{&(0x7f00000010c0)=""/233, 0xe9}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/72, 0x48}, {&(0x7f0000002240)=""/186, 0xba}], 0x4, &(0x7f0000002340)=""/122, 0x7a}, 0xfffffffc}, {{&(0x7f00000023c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002440), 0x0, &(0x7f0000002480)=""/14, 0xe}, 0x8000}, {{&(0x7f00000024c0)=@can, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002540)=""/81, 0x51}], 0x1, &(0x7f0000002600)=""/126, 0x7e}, 0x6}, {{&(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002700)=""/118, 0x76}, {&(0x7f0000002780)=""/203, 0xcb}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/248, 0xf8}, {&(0x7f0000003980)=""/60, 0x3c}, {&(0x7f00000039c0)=""/72, 0x48}, {&(0x7f0000003a40)=""/134, 0x86}, {&(0x7f0000003b00)=""/41, 0x29}, {&(0x7f0000003b40)=""/6, 0x6}], 0x9, &(0x7f0000003c40)=""/133, 0x85}, 0x1000}, {{&(0x7f0000003d00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000003d80)=""/248, 0xf8}, {&(0x7f0000003e80)=""/72, 0x48}, {&(0x7f0000003f00)=""/250, 0xfa}, {&(0x7f0000004000)=""/212, 0xd4}, {&(0x7f0000004100)=""/98, 0x62}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)}, {&(0x7f00000051c0)=""/217, 0xd9}, {&(0x7f00000052c0)=""/120, 0x78}], 0x9, &(0x7f0000005400)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006480)=""/208, 0xd0}, {&(0x7f0000006580)=""/37, 0x25}], 0x2, &(0x7f0000006600)=""/166, 0xa6}, 0x80000000}, {{&(0x7f00000066c0)=@nfc, 0x80, &(0x7f00000079c0)=[{&(0x7f0000006740)=""/182, 0xb6}, {&(0x7f0000006800)=""/168, 0xa8}, {&(0x7f00000068c0)=""/50, 0x32}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000007900)=""/130, 0x82}], 0x5, &(0x7f0000007a40)=""/40, 0x28}, 0x10}], 0x8, 0x2, 0x0) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000007c80)) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000007cc0)={0x0, 0x1}, &(0x7f0000007d00)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f0000007d40)={r13, @in6={{0xa, 0x4e22, 0x6, @empty, 0x1}}}, 0x84) r14 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r14, 0x8010aa01, &(0x7f0000007e00)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000007e40)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000007e80)={'team_slave_0\x00', 0x4000}) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000007ec0)={0x3, 0x1c, 0x9, 0x2, 0xf, "bb878689bb692fd4a8643897d53c2f0cf47b5a", 0x1, 0xfffffff7}) getpid() shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) memfd_create(&(0x7f0000007f00)=',:[\x17\x00', 0x7) 1.276406928s ago: executing program 7 (id=1609): r0 = socket$inet6(0xa, 0x4, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$FUSE(r2, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) connect$unix(r2, &(0x7f0000002100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000002180)) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000021c0)={"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"}) (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x14, r8, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040010) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000002700)='wg2\x00', 0x4) (async) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000002740)) (async) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000002780)) (async) unshare(0x28000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004d80)={0x0, 0x0, 0x0}, &(0x7f0000004dc0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000051c0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000052c0)=0xe8) syz_fuse_handle_req(r2, &(0x7f00000027c0)="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", 0x2000, &(0x7f0000005440)={&(0x7f00000047c0)={0x50, 0x0, 0xdea, {0x7, 0x29, 0x3, 0x2000000c, 0xb, 0x4, 0xc73, 0x8, 0x0, 0x0, 0x10, 0x3}}, &(0x7f0000004840)={0x18, 0x0, 0x7f, {0xac9c}}, &(0x7f0000004880)={0x18, 0x0, 0x8, {0xef4a}}, &(0x7f00000048c0)={0x18, 0xfffffffffffffffe, 0x7ff}, &(0x7f0000004900)={0x18, 0x0, 0x7}, &(0x7f0000004940)={0x28, 0x0, 0x6, {{0x81, 0x0, 0x0, r5}}}, &(0x7f0000004980)={0x60, 0x0, 0x8, {{0x4, 0x6, 0x7fffffffffffffff, 0x4, 0x6, 0x5, 0xe72, 0x8}}}, &(0x7f0000004a00)={0x18, 0x0, 0x3, {0x80000001}}, &(0x7f0000004a40)={0x12, 0x0, 0x0, {'y\x00'}}, &(0x7f0000004a80)={0x20, 0x0, 0xc, {0x0, 0xf}}, &(0x7f0000004ac0)={0x78, 0x0, 0x7, {0x10, 0x0, 0x0, {0x5, 0x3, 0x0, 0x8, 0x2a29b4ba, 0x4, 0x6, 0x5, 0x3, 0xc000, 0x1, r3, r4, 0x4, 0x3}}}, &(0x7f0000004b40)={0x90, 0xffffffffffffffda, 0x7, {0x2, 0x3, 0x9, 0x9a1, 0x8, 0xdc0, {0x1, 0xf, 0xffffffffffffffff, 0x6, 0x10000, 0x7, 0x5, 0x0, 0xfffffffe, 0x6000, 0x0, r3, r4, 0xbd4}}}, &(0x7f0000004c00)={0x148, 0xfffffffffffffffe, 0x1a1, [{0x6, 0x9, 0x1, 0x9, '#'}, {0x1, 0xd3, 0xa, 0xd, '/dev/vcsa\x00'}, {0x6, 0x6, 0x17, 0x10000, 'trusted.overlay.origin\x00'}, {0x2, 0x2, 0xf, 0x4, '*^\'&::-\xa5\x01+\',$+:'}, {0x6}, {0x6, 0x5, 0x3, 0x6b3d, '}(*'}, {0x4, 0x7, 0x8, 0x0, 'nl80211\x00'}, {0x6, 0x6, 0x3, 0x3, '\xc6@*'}, {0x3, 0xc000000000, 0x4, 0x5, '[-\xe6}'}]}, &(0x7f0000004e00)={0x290, 0xfffffffffffffff5, 0x4, [{{0x6, 0x3, 0x5, 0x4, 0x8, 0x46, {0x6, 0xfffffffffffffffe, 0x7, 0x0, 0x4, 0x14d25604, 0x2, 0xdbe, 0x489, 0x8000, 0x1, r3, r4, 0x7, 0x5f9c}}, {0x6, 0x1fe0000000, 0x4, 0x5, 'wg2\x00'}}, {{0x4, 0x2, 0x200, 0x237b, 0x5, 0x18f4, {0x5, 0x0, 0x4, 0xfae, 0x9, 0x7, 0x10000, 0x2, 0x0, 0x2000, 0x8, r3, r4, 0x9, 0x1}}, {0x4, 0x9, 0x2, 0x979, 'y\x00'}}, {{0x5, 0x3, 0x7, 0x800, 0x2, 0x1, {0x3, 0x100, 0xe, 0xd825, 0x0, 0x1, 0xfffffffa, 0x9000000, 0x1, 0xc000, 0x6, r3, r9, 0x1, 0xfffffff8}}, {0x0, 0xd, 0x4, 0x0, 'wg2\x00'}}, {{0x6, 0x0, 0x380000000000, 0x9, 0xffffff80, 0x2, {0x6, 0x59b6, 0x6, 0x9, 0x2, 0x100000001, 0x0, 0x4, 0x4, 0x1000, 0x1ff, r3, r4, 0x1, 0x80000000}}, {0x5, 0xa, 0x4, 0x9, 'wg2\x00'}}]}, &(0x7f00000050c0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x3, 0x2, 0x10001, 0x6, {0x5, 0x8000000000000000, 0x200, 0x6, 0x86, 0xfffffffffffffffb, 0x0, 0x1000, 0x200, 0x8000, 0x1433, r3, r4, 0x3, 0xfffff001}}, {0x0, 0x2}}}, &(0x7f0000005180)={0x20, 0x0, 0xffffffffffffffff, {0x5, 0x4, 0x8, 0x19b5}}, &(0x7f0000005300)={0x130, 0xffffffffffffffda, 0x8000000000000001, {0x9, 0x8, 0x0, '\x00', {0x100, 0xa, 0x55fc, 0x55, r11, r4, 0xa000, '\x00', 0x3, 0x9, 0x164, 0x16, {0x40, 0x6ce03bde}, {0x8, 0x4}, {0x8000000000000000, 0x6}, {0x10001, 0x8}, 0x8001, 0x9, 0x7, 0x40}}}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005540), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r12, &(0x7f0000005700)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000056c0)={&(0x7f0000005580)={0x104, r13, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xcc}, @ETHTOOL_A_EEE_MODES_OURS={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x41, 0x5, "ad50ebddc89cd1b54a5c3db5f0bdeb22da0f29083aa48e5a6a6d46023916f5492ba0b9e02c4332831b3d510b05fd8d773e7d9cd333328ee0eb57b7eb7e"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x104}}, 0x80) r14 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$SO_TIMESTAMP(r14, 0x1, 0x40, &(0x7f0000005740), &(0x7f0000005780)=0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000058c0)=[{&(0x7f00000057c0)=""/85, 0x55}, {&(0x7f0000005840)=""/107, 0x6b}], 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 1.252510387s ago: executing program 7 (id=1610): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200500, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0xd, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x24010}, 0x4008000) r2 = io_uring_setup(0x46e0, &(0x7f0000000540)={0x0, 0x9466, 0x2, 0x1, 0x40002}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', 0x0, r1, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) fadvise64(r0, 0x1, 0x1, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x2, 0x0}, 0x8) r11 = syz_open_dev$vcsn(&(0x7f0000000640), 0x2, 0x248000) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc02) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$SG_IO(r13, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x2, 0x5f, &(0x7f0000000480)=""/95}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x1d, &(0x7f00000007c0)=ANY=[@ANYBLOB="9500000000000000852000000200000018200000", @ANYRES32=r1, @ANYBLOB="00000000cd0d00001800000004000000000000000000000000001000000000007b8af8ff00000000b7080000000200007b8af0ff000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000d88a2fdddff13f450f075895adc300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000182b0000", @ANYRES32=r4, @ANYBLOB="0000000008000000d71600010800000072b0feff0000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000010000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0xbb, &(0x7f0000000400)=""/187, 0x40f00, 0x0, '\x00', r8, @sk_lookup, r9, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xc, 0x7, 0x3}, 0x10, r10, r1, 0x3, &(0x7f0000000680)=[r11, r1, r1, r13, r1, r1, r1], &(0x7f00000006c0)=[{0x2, 0x1, 0xc, 0xa}, {0x5, 0x5, 0x10, 0x1}, {0x4, 0x4, 0x2, 0x7}], 0x10, 0xd, @void, @value}, 0x94) 864.388472ms ago: executing program 0 (id=1612): connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x183001, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x3d) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r0, 0x601, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xc) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) syz_usb_connect(0x2, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0) 861.501373ms ago: executing program 3 (id=1613): write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000002c0)={0x10000008}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 860.333395ms ago: executing program 3 (id=1614): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)=ANY=[@ANYBLOB="122300004107f540f30c75939e1a000000010902120501000000000904000000bee4f900"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8, 0x7811, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @private=0xa010100}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000400000000000000003dd60000000e00000095e8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x197, 0x0, 0x4000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, r5, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r8 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) flock(r2, 0xa) ioctl$VT_RESIZEX(r4, 0x560d, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080)=0x6, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/13, 0xd) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) r11 = syz_open_dev$amidi(&(0x7f00000003c0), 0x54, 0x2000) sendmmsg$unix(r5, &(0x7f0000000580)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000680)="24e0896c94b79c561629fe0e58d6b1f87717f789bd9599e4bf610474dbe1bf5f51211dfe7d8124df75f07394faab9c43986c175d0801ef66b85598617e23a21125b6c2c81b3db304f2fa9b9791d3817c7b4904bc5fff4026cce17fde377d914f99612b6876a6c4c90b4800d2c72f2bceb660d4c71bbfef67f8fc27820ddad889f4eccd3242502f7cc6dc13ca2078f57ba5163d7771d394c7efeacb55803b6295d85d22ebd27b1ccc4ceb6811ed8084fd0657bca5461fb25ab5f65604c50d230479ef203d3296132ce9e8222263436642d0a2", 0xd2}, {&(0x7f0000000a00)="2405eefce1383cc8933318b4026ff943cce4da2c3e2bf34453f10a83d4b56a6cf6462abb6c0bc5a7343c5a4ee0a4f022761e18680d5f46d381758575d4be075bff94aa6e0da56d5b86f926351865371c1a255f803ae5fd78061d17c01d466cc224eea508f222e95b0264be9acd2bfd7999dcab5897a0f8ac2b1f049cd09f3110bf3cd7ae5655d35b145ebb9f9042809b8590dd48855741ec3e9c1deab05b8ea9e06cccfa6830769bd8a41e21f191f0c920842435", 0xb4}, {&(0x7f0000000ac0)="6d2a2991618c9d8f788e207328cd8c37536a97d9ae9e08a7ae478d962458f74ffb31276cc4c86af7e6e0cf27d1ad621ac46af7fe35a304e3420b5d24bd9b08ec9017030786b1a6feea8c59c76832ee8148dbd61ff6530f4c64f841c1bb98dcdaac6a2ae1003a4e0d7834e29462906927866b325360de86d127e93231a8d34a59ceb2dc6b4a72ab17e8bf61e0740a1cd410791e4aa036f4a47644b4bb17857ff4ae", 0xa1}, {&(0x7f0000000b80)="9aa821a9ec2f729810566ae4130dfd2e8fb5f396734e5d87e406bee8b668fa17c47e4b4f206cde9a0546d8806c0efd43e4253c33e9ac165300ad65ada90c0cd5d3961aff1634694f3f4cfa3223ac9eee3e08aed910cdbfe2bd6dfc2a21381b3c8a394f99f2b8863c7acdd24ac40f3c4f472354b9cc2c92136dc4651d0ad5e61322b25b67a7ee6e5a77a4372fcc8d81c0cdf031e19daaaada70d17f294af038ad5e0a6b1fa332725521e41e15c769a0f7f454e3e84f1a", 0xb6}, {&(0x7f0000000c40)="7cfd0ff93d577b3634ca811ff8c031ac86ee5c150eff023e2326208895002f7fcba156a80b6838aa1d83ccf0d944e727fed81066f2b6565b6bafddaefbeb4bc8972d7f1876bbefec6245a8c87b32b09c4fc24888e2f28bb80aa26475d10a9fd63c49af3704178002451f5f8cba7919f3efcb651df3c248f8686e6ec53f8447a8658cac02e1937317a32d98337e578461a61bc034a33342ee38ce37193b94ea89244a73", 0xa3}], 0x5, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r3, r5, r4, 0xffffffffffffffff, r10, r7, r7, r7, r11]}}], 0x58, 0x50}}], 0x1, 0x24000844) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8b}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dstopts_2292={{0x1f8, 0x29, 0x4, {0x73, 0x3b, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x93}, @calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x0, [0x0]}}, @generic={0x6c, 0x1b3, "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"}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x400}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x45}}], 0x228}, 0x8000) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="4fb8d897b0c1464cd043ab07af2389491fe332f9f16937d5ba025d680d83a6b1ec092ff00dd4fa0e530b056076b2b37d7679389cac269dc53e7263e611968b51f6e38237b6deac59c2b43c49055e257892b8b3836d8955431cbccc9cfaa26fa297ade8854b9d7ff116af87632afb9326df61565bb21bbc7d3cea7d18de4e090ba82ef024ca73f89debc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 858.617665ms ago: executing program 7 (id=1615): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0xa, 0x4, "4a20c13f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/69, 0x45}], 0x1}, 0x1000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000080)={0x18, r6}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000840)={0x0, 0x14, 0x4, "1321cc1c"}, 0x0, 0x0, 0x0, 0x0}) 564.605371ms ago: executing program 4 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 560.774414ms ago: executing program 4 (id=1618): write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES32], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000002c0)={0x10000008}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 482.119014ms ago: executing program 4 (id=1619): unshare(0x62040200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000380)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) bind$pptp(r1, &(0x7f0000000400)={0x18, 0x2, {0x3, @local}}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev2(r2, 0x0, 0x0, 0x800be6b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) 352.590803ms ago: executing program 3 (id=1620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009504000000000000007339ad9b7422ea80000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0xfffffffc, 0x0, 0x0, 'queue0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x324) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000004c0)={'syzkaller0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x60}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x34, 0x0, 0x101, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x25, 0xa, @void}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000440)='\\}#][\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@fallback=r5, r0, 0x8, 0x28, r0, @void, @void, @void, @value=r6, r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000200000004001f00d0460180", @ANYRES32], 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 177.05814ms ago: executing program 3 (id=1621): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000240)={0x4, 0x72, 0x140000}, 0x20) write$6lowpan_control(r4, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x881) sendmsg$sock(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000005) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 91.077063ms ago: executing program 4 (id=1622): openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x4, 0xf, 0x1, 0x8, 0x61, @local, @private0={0xfc, 0x0, '\x00', 0x3}, 0x40, 0x7800, 0x5, 0xfffffff9}}) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname(r4, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) r6 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da001338030000000900000004000000550f00006c33bbc7fa6b3723baa8387517928bf32cb26ac7153cd8da92ab89d8c807b138740b81a6efccdc23ab69423b4152306d5e3979722cbf4999b223c34b6391244e1316e682b3e04a6ee9511b066110ef698f530b8f1e25e79ca206322145f3a7d10531dcb73d8555317b72e49609b6b36425932a32efc425b439bce75bd25f3cd2cae3248482dbe1b1cf7b088489bbe7a49e6f35c42c3fadca356da8ade404b565b75a3aaf752b9876d3391e337accff7a7a83bb053d1dc580e9e18f9c344aee1c2163756875f3238697dd414c1af310abc9d48af752b35e18e44c"], 0x1f2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001440)={'syztnl2\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f00000004c0)=ANY=[@ANYBLOB="ee17aebc29f0daf82614000030ea032500a4"], 0xb, 0x1) 16.494157ms ago: executing program 4 (id=1623): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000400)={0x1f, 0xfffc, @any, 0xfffd}, 0xe) listen(r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0x28, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdb) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) (async) socket$pptp(0x18, 0x1, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) (async, rerun: 32) sendmmsg$alg(r2, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="82c855974167c145356a90d46c4f127c4dd9b13bdce3603bf3d1b64c18092326de41784f5111b3db44b7650f75f5ffc4eb8cdc880beb3770c7b4ce3a9f1cdc0b355ae7d58a2a85a9cb2728a790eaec257d8441e778a444ef297654b1fc8843118a0c8e9b9cf5ce0094d9c846291b1ff351045a7a6d62d26a69d6e4ea855ca41b4faeedd98a86b73902c4f7fc72794f63b5cdfc64f0908c3a3761d0", 0x9b}, {&(0x7f0000000040)="cdcc8825ee22770d465c6275eafdc4a799fca22fd1902900", 0x18}, {&(0x7f00000000c0)="96c0f4af01983ef517e9", 0xa}], 0x3, &(0x7f00000003c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xc8, 0x117, 0x2, 0xb1, "5c0e70b6e829ec3592576632213963fdef3d0c7fb6da4859a978d55347d195fc513527180bc39243fbf74e712ef409d9e07de2ee2e171a4409ba2f96e7a9e185c41bc35e3bd0a14a5b95e233fc542a36c7f229aa6df3b3d520881d0b397ee8b3c0913bd5d65135e0780dc8b0707d864e5c1163dcbe978cb3344584175fc57b1308823832f7fe5a114b24557a49693105a761ecc97fc67d1558f0a524b9704e5a68d2bfb9804fc26fe124dd6482704709d9"}], 0xf8, 0x4000000}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)="1c127f67fa1dc0717d7924a1968baf0ce08421079f2d9fbabcf7a12682c0a940ea42ec24f248f43384e1fa9514c59855a59577a18e332c44093102b956621640b1bd202156f35a8b5051c574891f106d64a1f6a3baea030cf9f0ab55902d4fcf562ac7f10b7cb6f8453958bc3c235585e4c0b30ec302f3274e30393681bddebb1075ba371a1a317ee5f9e657a170e02ee8d141b91d108307e142e9a3c0895bccb89697152f348534fb06b75b73a0a788d3beb3dcd64c608ee0bc894680215727f5eafdeb8a4d72523dea3a2f39472a2099281b135570437d68628e2f7d9b37d1c8221b6ce28ac227bd517d", 0xeb}, {&(0x7f00000002c0)="13cb02fae89eac79859afe38b5d1e4d724a24f0e4dd015c49b9b36856ad80a1b36e22076fa55f124a26a3da4a1cb328177d48965c6097f43728fe3324c52230a03bacbf7d087c0e817f5c85eaa40be30e48ba7a9f0f20ef10697aee016ed3eb30731", 0x62}, {&(0x7f00000005c0)="faacdcaa938d1449c1e6026f7323329e5b944b763d445bc0bca6a9fa1c577b18e96919c2125aba245680e4bd512713914438c431d531e4f12ee583561db0275fc5774753af753b4345817de1382af1839dc78dc76b31cd787cfb26bb7c061b9386523bb43b0e446061d349f3ee5968ba0511fe646c5173ff853dce93851bffc3dd696c3ca069572e43ea68dd12c97baddf2e18ce7f4e09adeac460ce3326f358e25f0b352f1a70269d53", 0xaa}, {&(0x7f0000000680)="49eaada92fe74f5bec34192edfad879420d65ca9e178a05932c2389f1e8f3296a89b8a02d72a579a6898b5edf087fbc03eba6a6d6a6b0df2556148a443c82ebd2a1a52395a80a297448acd8c64", 0x4d}, {&(0x7f0000000700)="fceeb3c9563960d6334c4b1547169e234310c7a5176c4d270db1b6df4c960f50f845393d8934053235e681427d4feae55e43a00b315d4c47f45450381c193962e79fb4207865093a07349d4891fbc407dad149b5b8d2d2a4013ab0cc6592eb46da21943d87cb", 0x66}, {&(0x7f0000000780)="dd2309a94bf512a6cd0d9e030933f97567009c8428ced7af0d777e070425b29d8baa81421c8aa3fbd537def89aea229950aed0b4cb97c5e30a34caf0b120afc238ad6d731f2d87cabe098817e43f3136d2cc993efbd4410bfdc684", 0x5b}], 0x6, &(0x7f00000009c0)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xb0, 0x117, 0x2, 0x99, "df731ba8bffcf7c733882859c4e35a274cf82c93ca43d22c7507579431b713b9feb2df1ba1d0f95cb164893fe57549bfc88ef1d4965c9e2556307df9bf993e65b9cab9d78bccae7de860c36b98b5bf4eb981fbc3e8658139a44c8009b5dc2fcb60f4485215a59f940f6901a5e00bd791c3117efcb71b1d22dcfb982d546785cbf59163655fb84afc97cfd4050e79787c2889fe08df1b1b99c9"}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x188, 0x40010}, {0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="a8932f9c33a25d455cc4cb204e7596339fe231e92daac603d8825afdc6a317fab769e2bbef7c42fb2c5334f4343572b0dcdac35b79476ba4ddf7419af6c9a9e18c93575b80b83b3c86582d5cae3b69707fc174a5de1c65bce9e5023b08d5e9283b5eeb1d60bbd1f2a1402f4b0758953d43e56213a25b23413ce321543f23829c6e6f5c84aa531f2db9258eed194aad267d6d7b3e34d02f6825e197e096a0722bf9acfe68a1cfbea1e8fc71552f04663369f39abb", 0xb4}, {&(0x7f0000000340)="2ae262df8a73116e29492dde24fe53b2b6065d8e313dc59d5d16189c89c6912ecbe8d3040d0fe204d2da9abaa461", 0x2e}], 0x2, &(0x7f0000000b80)=[@iv={0x60, 0x117, 0x2, 0x4c, "74e18b35d74b8bc89f150c140f5380f8f04b9b0eaafac238dddee24ba430c7f378782fa1445ef489414201affc4865f7c496b57533b8c8b109983b21440bdda80c9a524e993dd3f385b6c5b4"}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @iv={0x30, 0x117, 0x2, 0x18, "f15d2f761754acc1de253ec1c4536b985e93800702ae7a95"}], 0xd8, 0x20004840}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="03b4588be15036ebb5", 0x9}], 0x1, &(0x7f0000000d00)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @op={0x18}], 0x60, 0x4000000}], 0x4, 0x24040800) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000200000004001f00d04601"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) (rerun: 32) 2.369223ms ago: executing program 4 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r4, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='mm_vmscan_lru_isolate\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xfffffffbffffffc0, 0x1, 0x4}, 0x0, &(0x7f0000000480)={0x3ff, 0x0, 0x4, 0x9, 0x1, 0x0, 0x7f7fffff}, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c) r6 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) unshare(0x22020600) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x6, 0x6, "15fded", 0x7, 0x5, "ae6db0cbbf7c84d72692c322a7653ab9dde660913bb8bd3dc8723ddba31f166cd42a51ad59258d2f4f44cebc5e724022ac8f483a844db63e64649406fe4c4c62b4601dbf5c7cdadbe46c7f164b0d0135f371a60052ff02cf6bee2062e8a39ae4fe3b9d51e08067af50687d44313d5f46470590d37b6de77372881254104eb66ab7f64fdaaac44aa9e02150029e67b9f6818a630668fcce5eb4353da939d8d9ad45073a7cd8a25803e3ac86e7514250060e8df89b1310540c3c774c54f87918dd2962827912cbb7e99e3fb446d8849c563c05015cd2a279d363bacb57cfe30e354dbffafa12aa140f9e08dfe53a5e93e4"}, {@any, 0x1, 0xfb, "3cf6ae", 0x7f, 0x1, "ec2cee15e0f5a8966438dedaf0b389434b50db3dd5cb1b5b09f2dbd7fe894d4cb85679c85bf03d57f0b89369d242aceda3d714b033e4329ff810836156ac63169cd07dfa5741e0edd5f4093af698bfe360b26413ae3dce8e2405e2efa207aab6d91a9825e54a46071f4e93c1f95e70bec3b4bf604b1590210951878523128817a6b2123de5b9489eca4094b9a6b94d7e7329d3b5d96e97b8c84fdde1b604bb2bf8a8e7f080b93d79c1de6ee0eb8e0c7fa4dd7832ac3267f67eb9e3f5f2889ea5076311863cd39edae30af451289a26448de3d5f68c4708dfc950add7bdb8f08a45a682dc1e1adc86acd8cd731be7a930"}]}}}, 0x200) mq_timedsend(r6, 0x0, 0x0, 0x4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "820b0000060200", "40962ea69c2736a5844cc2eaa5df9b2d", '\x00', "bb10000000000001"}, 0x28) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r7, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x7c000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 0s ago: executing program 7 (id=1625): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d733459a7a2800018008000100000000001c00038006000300a0aa800006000100000000000800020002000000050003"], 0x64}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000080)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r2) (async) memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x2) (async) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d733459a7a2800018008000100000000001c00038006000300a0aa800006000100000000000800020002000000050003"], 0x64}}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (async) kernel console output (not intermixed with test programs): .979" path="socket:[25381]" dev="sockfs" ino=25381 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 242.436688][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 242.453956][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.479182][ T5913] usb 2-1: config 0 descriptor?? [ 242.495693][ T5913] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 242.503606][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 242.511991][ T5913] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 242.521881][ T5913] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 242.531013][ T5913] usb 2-1: media controller created [ 242.536317][ T5913] dvb-usb: bulk message failed: -22 (5/0) [ 242.542449][ T5913] dvb-usb: MAC address reading failed. [ 242.549308][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.561272][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 242.567518][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 242.573375][ T5913] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 242.582903][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 242.595019][ T5913] dvb-usb: schedule remote query interval to 100 msecs. [ 242.602777][ T5913] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 242.621051][ T30] audit: type=1326 audit(1743026070.079:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.4.983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe68578d169 code=0x0 [ 242.680320][ T9527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.705283][ T9511] tipc: Enabled bearer , priority 10 [ 242.713652][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 242.719593][ T5913] dvb-usb: error while querying for an remote control event. [ 242.729040][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.738691][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.751491][ T5913] usb 2-1: USB disconnect, device number 51 [ 242.762622][ T5913] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 242.878274][ T9529] bond_slave_0: entered allmulticast mode [ 242.905516][ T30] audit: type=1400 audit(1743026070.341:5511): avc: denied { map } for pid=9530 comm="syz.5.985" path="socket:[25829]" dev="sockfs" ino=25829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.939794][ T9534] lo speed is unknown, defaulting to 1000 [ 243.190066][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.986'. [ 243.199408][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.986'. [ 243.209201][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.986'. [ 243.218607][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.986'. [ 243.412205][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 243.437414][ T9546] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.446701][ T9546] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.455542][ T9546] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.464380][ T9546] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.499593][ T9546] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.508582][ T9546] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.517477][ T9546] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.526386][ T9546] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.629119][ T9554] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.638071][ T9554] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.647114][ T9554] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.656085][ T9554] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.668922][ T9554] vxlan0: entered promiscuous mode [ 243.678813][ T9554] vxlan0: entered allmulticast mode [ 244.540376][ T30] audit: type=1400 audit(1743026071.865:5512): avc: denied { setattr } for pid=9575 comm="syz.5.997" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.938395][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.999'. [ 245.002345][ T30] audit: type=1400 audit(1743026072.305:5513): avc: denied { accept } for pid=9587 comm="syz.5.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.021827][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.057490][ T9589] netlink: 40 bytes leftover after parsing attributes in process `syz.5.999'. [ 245.240980][ T30] audit: type=1400 audit(1743026072.529:5514): avc: denied { validate_trans } for pid=9590 comm="syz.3.1000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 245.312410][ T30] audit: type=1400 audit(1743026072.594:5515): avc: denied { mount } for pid=9592 comm="syz.3.1001" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 245.339455][ T30] audit: type=1400 audit(1743026072.613:5516): avc: denied { connect } for pid=9592 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.360280][ T30] audit: type=1400 audit(1743026072.623:5517): avc: denied { shutdown } for pid=9592 comm="syz.3.1001" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.495997][ T30] audit: type=1400 audit(1743026072.763:5518): avc: denied { create } for pid=9595 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 245.833156][ T52] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 246.004273][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 246.010527][ T52] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 246.018890][ T52] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.028651][ T52] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.038426][ T52] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.048421][ T52] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.061448][ T52] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.070490][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.111211][ T5872] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 246.282356][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 246.288622][ T5872] usb 6-1: config 162 has an invalid interface number: 253 but max is 0 [ 246.295034][ T52] usb 2-1: usb_control_msg returned -32 [ 246.298226][ T5872] usb 6-1: config 162 has no interface number 0 [ 246.302731][ T52] usbtmc 2-1:16.0: can't read capabilities [ 246.309590][ T5872] usb 6-1: config 162 interface 253 has no altsetting 0 [ 246.324031][ T5872] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 246.334119][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.342234][ T5872] usb 6-1: Product: syz [ 246.347506][ T5872] usb 6-1: Manufacturer: syz [ 246.352115][ T5872] usb 6-1: SerialNumber: syz [ 246.577196][ T5872] go7007 6-1:162.253: probe with driver go7007 failed with error -12 [ 246.588621][ T5872] usb 6-1: USB disconnect, device number 10 [ 246.671769][ T9605] 9pnet_fd: Insufficient options for proto=fd [ 246.697433][ T10] usb 2-1: USB disconnect, device number 52 [ 246.730609][ T9609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.003494][ T5872] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 247.011466][ T5872] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 247.027900][ T5872] hid-generic 0000:0003:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz1 [ 247.148600][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 247.444277][ T9631] lo speed is unknown, defaulting to 1000 [ 247.704703][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 247.713950][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.724313][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.737858][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.748727][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 247.759515][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.774343][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.784826][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.793842][ T10] usb 2-1: Manufacturer: syz [ 247.799821][ T10] usb 2-1: config 0 descriptor?? [ 248.485366][ T10] rc_core: IR keymap rc-hauppauge not found [ 248.492272][ T10] Registered IR keymap rc-empty [ 248.497574][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.528092][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.563389][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 248.575524][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 248.588760][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.598609][ C0] mceusb 2-1:0.0: long-range (0xf1) receiver active [ 248.624305][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.635080][ T5913] kernel write not supported for file /uinput (pid: 5913 comm: kworker/1:6) [ 248.646171][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.689459][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.710580][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.815572][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 248.832174][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 248.832226][ T30] audit: type=1400 audit(1743026075.886:5520): avc: denied { listen } for pid=9646 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.896433][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 249.010442][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 249.018734][ T30] audit: type=1400 audit(1743026075.970:5521): avc: denied { shutdown } for pid=9646 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.052105][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 249.073649][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 249.107465][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 249.116797][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xf1 active) [ 249.139587][ T10] usb 2-1: USB disconnect, device number 53 [ 249.207922][ T9660] sctp: [Deprecated]: syz.3.1017 (pid 9660) Use of int in maxseg socket option. [ 249.207922][ T9660] Use struct sctp_assoc_value instead [ 249.224027][ T9661] sctp: [Deprecated]: syz.3.1017 (pid 9661) Use of int in maxseg socket option. [ 249.224027][ T9661] Use struct sctp_assoc_value instead [ 249.356619][ T9667] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 249.408781][ T9666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 249.421434][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 249.434537][ T9666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 249.444334][ T9666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 250.100249][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 250.292594][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 250.300993][ T10] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 250.324631][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.343535][ T10] usb 2-1: Product: syz [ 250.513240][ T9692] tmpfs: Unknown parameter 'usrquota_datagram_iovec' [ 250.838989][ T10] usb 2-1: Manufacturer: syz [ 250.850254][ T10] usb 2-1: SerialNumber: syz [ 250.861881][ T10] usb 2-1: config 0 descriptor?? [ 251.208062][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 251.839326][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1036'. [ 251.848778][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1036'. [ 251.857756][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1036'. [ 251.866748][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1036'. [ 252.666792][ T5871] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 252.922986][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.925226][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 252.947993][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.986635][ T5871] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.032205][ T5871] usb 4-1: config 0 has no interface number 0 [ 253.038548][ T10] gspca_sunplus: reg_w_riv err -71 [ 253.072217][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 253.126489][ T5871] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 253.147053][ T10] usb 2-1: USB disconnect, device number 54 [ 253.157313][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.171509][ T5871] usb 4-1: Product: syz [ 253.175710][ T5871] usb 4-1: Manufacturer: syz [ 253.180368][ T5871] usb 4-1: SerialNumber: syz [ 253.186151][ T5871] usb 4-1: config 0 descriptor?? [ 253.196362][ T5871] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 253.247199][ T9755] syz.0.1047 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 253.259292][ T30] audit: type=1400 audit(1743026080.029:5522): avc: denied { execute } for pid=9753 comm="syz.0.1047" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 253.349189][ T30] audit: type=1400 audit(1743026080.103:5523): avc: denied { connect } for pid=9753 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.369279][ T30] audit: type=1400 audit(1743026080.113:5524): avc: denied { write } for pid=9753 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.981087][ T5871] gspca_spca1528: reg_w err -71 [ 254.005913][ T5871] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 254.032197][ T5871] usb 4-1: USB disconnect, device number 40 [ 254.077395][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1051'. [ 254.086532][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 254.776445][ T9793] blktrace: Concurrent blktraces are not allowed on sg0 [ 255.860024][ T9806] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 256.507074][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 256.581533][ T30] audit: type=1400 audit(1743026083.133:5525): avc: denied { getopt } for pid=9824 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.623809][ T30] audit: type=1400 audit(1743026083.133:5526): avc: denied { setattr } for pid=9824 comm="syz.3.1067" name="PACKET" dev="sockfs" ino=27018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.679770][ T30] audit: type=1400 audit(1743026083.227:5527): avc: denied { accept } for pid=9826 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 256.730938][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 256.737637][ T10] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 256.745866][ T10] usb 6-1: config 0 has no interface number 0 [ 256.752146][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.763340][ T10] usb 6-1: config 0 interface 85 has no altsetting 0 [ 256.775027][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 256.838921][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.846871][ T9831] lo speed is unknown, defaulting to 1000 [ 256.846994][ T10] usb 6-1: Product: syz [ 256.857097][ T10] usb 6-1: Manufacturer: syz [ 256.861785][ T10] usb 6-1: SerialNumber: syz [ 256.868898][ T10] usb 6-1: config 0 descriptor?? [ 256.911217][ T30] audit: type=1400 audit(1743026083.423:5528): avc: denied { execute } for pid=9832 comm="syz.1.1069" path="/proc/631/task/633/smaps" dev="proc" ino=27298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 256.997780][ T5832] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 257.190372][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 257.199782][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.221948][ T5832] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.233507][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.243024][ T5832] usb 4-1: config 0 descriptor?? [ 257.466240][ T5832] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 257.593901][ T10] appletouch 6-1:0.85: Geyser mode initialized. [ 257.601131][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input32 [ 257.767911][ T5872] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 257.811475][ T10] usb 4-1: USB disconnect, device number 41 [ 257.860664][ T5832] usb 6-1: USB disconnect, device number 11 [ 257.873358][ T5832] appletouch 6-1:0.85: input: appletouch disconnected [ 257.928505][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 257.965544][ T9857] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 258.017313][ T9857] lo speed is unknown, defaulting to 1000 [ 258.178698][ T5872] usb 2-1: config 0 interface 0 altsetting 96 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.191126][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.199870][ T5872] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 258.209149][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.218737][ T5872] usb 2-1: config 0 descriptor?? [ 258.330004][ T9861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.448988][ T30] audit: type=1400 audit(1743026084.872:5529): avc: denied { listen } for pid=9865 comm="syz.5.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 258.468742][ T30] audit: type=1400 audit(1743026084.872:5530): avc: denied { accept } for pid=9865 comm="syz.5.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 258.508360][ T30] audit: type=1400 audit(1743026084.938:5531): avc: denied { setopt } for pid=9865 comm="syz.5.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 258.537988][ T30] audit: type=1400 audit(1743026084.957:5532): avc: denied { ioctl } for pid=9865 comm="syz.5.1075" path="socket:[27470]" dev="sockfs" ino=27470 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 258.685856][ T5872] wacom 0003:056A:0044.000F: Unknown device_type for 'HID 056a:0044'. Assuming pen. [ 258.696291][ T5872] wacom 0003:056A:0044.000F: hidraw0: USB HID v0.05 Device [HID 056a:0044] on usb-dummy_hcd.1-1/input0 [ 258.708518][ T5872] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0044.000F/input/input33 [ 259.526408][ T9879] __nla_validate_parse: 2 callbacks suppressed [ 259.526419][ T9879] netlink: 95 bytes leftover after parsing attributes in process `syz.3.1079'. [ 260.690100][ T9887] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1081'. [ 260.749186][ T30] audit: type=1400 audit(1743026087.023:5533): avc: denied { mount } for pid=9890 comm="syz.5.1083" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 260.752919][ T9891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 260.814877][ T30] audit: type=1400 audit(1743026087.089:5534): avc: denied { unmount } for pid=8569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 260.826409][ T5872] usb 2-1: USB disconnect, device number 55 [ 260.888589][ T9898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.900565][ T9898] tipc: Started in network mode [ 260.907402][ T9898] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 260.920257][ T9898] tipc: Enabled bearer , priority 10 [ 260.997426][ T5832] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 261.182077][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 261.193692][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 261.205161][ T5832] usb 4-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 261.223203][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.252676][ T5832] usb 4-1: config 0 descriptor?? [ 261.352687][ T5872] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 261.508357][ T5832] usbhid 4-1:0.0: can't add hid device: -71 [ 261.518392][ T5872] usb 2-1: device descriptor read/64, error -71 [ 261.536913][ T9920] Cannot find add_set index 1026 as target [ 261.543099][ T5832] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 261.559652][ T5832] usb 4-1: USB disconnect, device number 42 [ 261.711097][ T9927] 9pnet_virtio: no channels available for device 127.0.0.1 [ 261.799484][ T5872] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 261.949060][ T5872] usb 2-1: device descriptor read/64, error -71 [ 262.067113][ T5872] usb usb2-port1: attempt power cycle [ 262.111587][ T24] tipc: Node number set to 4269801491 [ 262.227095][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1098'. [ 262.241754][ T30] audit: type=1326 audit(1743026088.426:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.3.1098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f971f38d169 code=0x0 [ 262.430366][ T5872] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 262.451729][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 262.452103][ T5872] usb 2-1: device descriptor read/8, error -71 [ 262.614511][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.625612][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.642783][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 262.652066][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.661371][ T24] usb 6-1: config 0 descriptor?? [ 262.719572][ T5872] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 262.753396][ T5872] usb 2-1: device descriptor read/8, error -71 [ 262.868893][ T5872] usb usb2-port1: unable to enumerate USB device [ 262.875743][ T9953] autofs: Unknown parameter '$' [ 263.149463][ T9955] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1104'. [ 263.186749][ T9957] tmpfs: Unknown parameter '' [ 263.342629][ T24] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 263.351858][ T24] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 263.360144][ T24] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 263.484534][ T24] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 263.492221][ T24] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 263.503019][ T24] usb 6-1: USB disconnect, device number 12 [ 263.556076][ T30] audit: type=1400 audit(1743026089.660:5536): avc: denied { read } for pid=9968 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.864793][ T9970] netlink: 'syz.5.1107': attribute type 2 has an invalid length. [ 264.075143][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.083834][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.121598][ T9975] openvswitch: netlink: Tunnel attr 329 out of range max 16 [ 264.386505][ T9987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'. [ 264.395651][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1112'. [ 264.404710][ T9987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'. [ 264.413939][ T9987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'. [ 265.004864][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1118'. [ 265.014316][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1118'. [ 265.023548][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1118'. [ 265.033568][T10011] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1118'. [ 265.234247][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.366217][T10015] openvswitch: netlink: Missing valid actions attribute. [ 265.373343][T10015] openvswitch: netlink: Actions may not be safe on all matching packets [ 265.673464][T10010] deleting an unspecified loop device is not supported. [ 265.680870][ T30] audit: type=1400 audit(1743026091.633:5537): avc: denied { read } for pid=10009 comm="syz.3.1119" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 265.707754][T10026] dccp_invalid_packet: pskb_may_pull failed [ 265.756119][ T30] audit: type=1400 audit(1743026091.633:5538): avc: denied { open } for pid=10009 comm="syz.3.1119" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 265.829524][ T30] audit: type=1400 audit(1743026091.633:5539): avc: denied { ioctl } for pid=10009 comm="syz.3.1119" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 266.771049][T10087] netlink: 'syz.5.1142': attribute type 4 has an invalid length. [ 266.838207][T10093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.875679][T10095] dvmrp1: entered allmulticast mode [ 266.886029][ T30] audit: type=1400 audit(1743026092.765:5540): avc: denied { read } for pid=10092 comm="syz.0.1144" path="socket:[27858]" dev="sockfs" ino=27858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.919078][ T30] audit: type=1400 audit(1743026092.793:5541): avc: denied { bind } for pid=10092 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.083915][T10101] lo speed is unknown, defaulting to 1000 [ 268.215658][ T24] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 268.339959][ T30] audit: type=1400 audit(1743026094.130:5542): avc: denied { append } for pid=10140 comm="syz.1.1158" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 268.363527][T10141] random: crng reseeded on system resumption [ 268.377612][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.401538][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 268.414394][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 268.430116][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 268.445053][ T24] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 268.471651][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 268.562799][ T24] usb 4-1: Product: syz [ 268.895607][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1159'. [ 268.905137][ T24] usb 4-1: Manufacturer: syz [ 268.905158][ T24] usb 4-1: SerialNumber: syz [ 268.917210][ T24] usb 4-1: config 0 descriptor?? [ 268.922427][ T30] audit: type=1400 audit(1743026094.644:5543): avc: denied { bind } for pid=10144 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 268.950802][T10122] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 269.076038][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 269.086140][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 269.571746][ T24] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 269.592881][ T24] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 269.601953][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 269.613574][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 269.683923][T10154] netlink: 'syz.5.1160': attribute type 4 has an invalid length. [ 269.691824][T10154] netlink: 'syz.5.1160': attribute type 2 has an invalid length. [ 269.968139][ T24] usb 4-1: USB disconnect, device number 43 [ 270.016149][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 270.055403][ T30] audit: type=1400 audit(1743026095.729:5544): avc: denied { execmod } for pid=10159 comm="syz.3.1161" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 270.081687][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.123012][ T30] audit: type=1400 audit(1743026095.776:5545): avc: denied { getopt } for pid=10162 comm="syz.4.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.183203][ T30] audit: type=1400 audit(1743026095.850:5546): avc: denied { ioctl } for pid=10174 comm="syz.4.1166" path="socket:[28005]" dev="sockfs" ino=28005 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 271.402616][ T973] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 271.598150][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 271.609362][ T973] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 271.620980][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.646490][ T973] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.655715][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.664139][ T973] usb 4-1: Product: syz [ 271.668519][ T973] usb 4-1: Manufacturer: syz [ 271.677593][ T973] usb 4-1: SerialNumber: syz [ 271.951264][ T973] usb 4-1: config 0 descriptor?? [ 271.967035][ T973] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.977727][ T973] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 272.412704][ T973] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 272.419571][ T973] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 272.427937][ T973] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 272.435596][ T973] em28xx 4-1:0.0: No AC97 audio processor [ 272.570809][ T5832] usb 4-1: USB disconnect, device number 44 [ 272.577034][ T5832] em28xx 4-1:0.0: Disconnecting em28xx [ 272.591245][ T5832] em28xx 4-1:0.0: Freeing device [ 272.885348][T10212] xt_hashlimit: size too large, truncated to 1048576 [ 273.128964][ T30] audit: type=1400 audit(1743026098.188:5547): avc: denied { write } for pid=10205 comm="syz.5.1174" path="socket:[28033]" dev="sockfs" ino=28033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 274.066923][ T5832] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 274.576320][ T30] audit: type=1400 audit(1743026099.834:5548): avc: denied { mounton } for pid=10223 comm="syz.5.1179" path="/82/file0" dev="gadgetfs" ino=6823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 274.624396][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.655523][ T5832] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 274.725174][ T30] audit: type=1400 audit(1743026100.096:5549): avc: denied { unmount } for pid=8569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 274.758108][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.805496][ T5832] usb 4-1: config 0 descriptor?? [ 274.934952][T10239] __nla_validate_parse: 1 callbacks suppressed [ 274.934984][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'. [ 275.284551][ T973] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 275.382096][ T5832] glorious 0003:22D4:1503.0011: item fetching failed at offset 0/3 [ 275.393036][ T5832] glorious 0003:22D4:1503.0011: probe with driver glorious failed with error -22 [ 275.445004][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 275.451594][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 275.465155][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.475115][ T973] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 275.488970][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 275.501584][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 275.518244][ T973] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 275.518271][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.518288][ T973] usb 6-1: Product: syz [ 275.518301][ T973] usb 6-1: Manufacturer: syz [ 275.518313][ T973] usb 6-1: SerialNumber: syz [ 275.519577][ T973] usb 6-1: config 0 descriptor?? [ 275.520835][T10238] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 275.570949][ T973] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 275.774741][ T5832] usb 4-1: USB disconnect, device number 45 [ 275.922357][T10238] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 275.942794][ T973] usb 6-1: USB disconnect, device number 13 [ 276.086541][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'. [ 276.095614][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1186'. [ 276.104842][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'. [ 276.113985][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'. [ 276.531766][T10271] program syz.5.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.760331][ T52] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 276.855724][ T30] audit: type=1400 audit(1743026102.088:5550): avc: denied { connect } for pid=10273 comm="syz.5.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.933879][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.945017][ T52] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 276.961649][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.983112][ T30] audit: type=1400 audit(1743026102.209:5551): avc: denied { write } for pid=10273 comm="syz.5.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 277.005898][ T52] usb 4-1: config 0 descriptor?? [ 277.215690][T10292] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1196'. [ 277.962656][T10298] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1197'. [ 277.972103][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1197'. [ 277.981386][T10298] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1197'. [ 277.991030][T10298] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1197'. [ 277.996922][ T52] usbhid 4-1:0.0: can't add hid device: -71 [ 278.029334][ T52] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 278.063034][ T52] usb 4-1: USB disconnect, device number 46 [ 278.157365][T10301] netlink: 'syz.3.1198': attribute type 21 has an invalid length. [ 278.835037][ T52] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 278.995390][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 279.002707][ T52] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.010774][ T52] usb 4-1: config 0 has no interface number 0 [ 279.019492][ T52] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 279.028622][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.036620][ T52] usb 4-1: Product: syz [ 279.040870][ T52] usb 4-1: Manufacturer: syz [ 279.045455][ T52] usb 4-1: SerialNumber: syz [ 279.051140][ T52] usb 4-1: config 0 descriptor?? [ 279.057542][ T52] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 279.556950][ T30] audit: type=1400 audit(1743026104.612:5552): avc: denied { mount } for pid=10324 comm="syz.5.1206" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 279.579819][ T30] audit: type=1400 audit(1743026104.612:5553): avc: denied { mounton } for pid=10324 comm="syz.5.1206" path="/91/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 279.615398][ T30] audit: type=1400 audit(1743026104.668:5554): avc: denied { unmount } for pid=8569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 279.918169][ T52] gspca_spca1528: reg_w err -71 [ 279.936464][ T52] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 279.945852][ T52] usb 4-1: USB disconnect, device number 47 [ 280.049067][T10338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.068256][T10338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10338 comm=syz.4.1210 [ 280.513540][T10347] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10347 comm=syz.0.1214 [ 280.749317][ T52] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 282.033069][ T52] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 282.056024][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.064181][ T52] usb 4-1: Product: syz [ 282.069916][ T52] usb 4-1: Manufacturer: syz [ 282.074603][ T52] usb 4-1: SerialNumber: syz [ 282.113347][ T52] usb 4-1: config 0 descriptor?? [ 282.800857][ T52] usb 4-1: Firmware: major: 26, minor: 224, hardware type: UNKNOWN (27) [ 283.015350][ T52] usb 4-1: Firmware: build [ 283.044506][ T30] audit: type=1400 audit(1743026107.876:5555): avc: denied { execute } for pid=10370 comm="syz.5.1221" dev="9p" ino=367324844607799298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.066973][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.234397][ T52] usb 4-1: failed to fetch extended address, random address set [ 283.242235][ T52] usb 4-1: atusb_probe: initialization failed, error = -524 [ 283.250199][ T52] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 283.259885][ T52] usb 4-1: USB disconnect, device number 48 [ 283.470188][T10376] __nla_validate_parse: 2 callbacks suppressed [ 283.470215][T10376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'. [ 283.486603][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 283.495782][T10376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'. [ 283.505098][T10376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'. [ 283.926259][T10379] ubi31: attaching mtd0 [ 284.161448][T10379] ubi31: scanning is finished [ 284.166263][T10379] ubi31: empty MTD device detected [ 284.478800][T10379] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 284.488066][T10379] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 284.523099][T10379] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 284.533228][T10379] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 284.544170][T10379] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 284.553290][T10379] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 284.564177][T10379] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 582295922 [ 284.575833][T10379] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 284.589115][T10385] ubi31: background thread "ubi_bgt31d" started, PID 10385 [ 284.733865][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.745411][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.754620][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.764171][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.771756][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.779079][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.794020][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.801385][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.814069][ T30] audit: type=1400 audit(1743026109.540:5556): avc: denied { bind } for pid=10395 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.838363][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.846076][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.853462][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.860795][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.918193][T10393] lo speed is unknown, defaulting to 1000 [ 285.107243][T10393] chnl_net:caif_netlink_parms(): no params data found [ 285.184901][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.200272][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.217560][T10393] bridge_slave_0: entered allmulticast mode [ 285.237301][T10393] bridge_slave_0: entered promiscuous mode [ 285.261699][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.269683][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.277264][T10393] bridge_slave_1: entered allmulticast mode [ 285.284258][T10393] bridge_slave_1: entered promiscuous mode [ 285.305058][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.321751][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.351643][T10393] team0: Port device team_slave_0 added [ 285.363616][ T973] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 285.385525][T10393] team0: Port device team_slave_1 added [ 285.426997][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.440545][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.467212][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.478995][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.485934][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.512085][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.543733][T10393] hsr_slave_0: entered promiscuous mode [ 285.549917][T10393] hsr_slave_1: entered promiscuous mode [ 285.556248][T10393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.564107][T10393] Cannot create hsr debugfs directory [ 285.569833][ T973] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 285.584940][ T973] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 285.596427][ T973] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 285.605734][ T973] usb 6-1: config 150 has no interface number 0 [ 285.612059][ T973] usb 6-1: config 150 interface 204 has no altsetting 0 [ 285.713832][T10393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 285.731849][ T973] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 285.741114][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.749259][ T973] usb 6-1: Product: syz [ 285.753431][ T973] usb 6-1: Manufacturer: syz [ 285.758148][ T973] usb 6-1: SerialNumber: syz [ 285.761425][T10393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 285.773891][T10393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 285.782338][T10393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 285.801232][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.808397][T10393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.815726][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.822815][T10393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.213295][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.223884][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.242846][ T973] usb 6-1: USB disconnect, device number 14 [ 286.260935][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.283112][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.292454][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.299585][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.311958][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.319028][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.065633][ T5831] Bluetooth: hci5: command tx timeout [ 287.086389][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.445636][T10393] veth0_vlan: entered promiscuous mode [ 287.458492][T10393] veth1_vlan: entered promiscuous mode [ 287.480136][ T30] audit: type=1326 audit(1743026112.028:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.0.1239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d8178d169 code=0x0 [ 287.484772][T10393] veth0_macvtap: entered promiscuous mode [ 287.513302][T10393] veth1_macvtap: entered promiscuous mode [ 287.524048][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.538046][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.548324][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.560977][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.570936][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.581563][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.593135][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.605953][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.616788][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.626770][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.638529][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.648707][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.659434][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.672668][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.682409][T10393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.691523][T10393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.700446][T10393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.709224][T10393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.832151][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.840947][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.304366][ T5831] Bluetooth: hci5: command tx timeout [ 289.332759][T10470] tmpfs: Bad value for 'mpol' [ 289.338329][T10462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.354494][T10462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.404462][T10472] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 290.074144][T10490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1246'. [ 290.084244][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1246'. [ 290.094285][T10490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1246'. [ 290.103800][T10490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1246'. [ 290.509785][T10498] ubi: mtd0 is already attached to ubi31 [ 290.902834][T10506] lo speed is unknown, defaulting to 1000 [ 291.282889][ T5872] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 291.500386][ T5831] Bluetooth: hci5: command tx timeout [ 291.572237][ T5872] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 291.590752][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.623761][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 291.651672][ T30] audit: type=1400 audit(1743026115.927:5558): avc: denied { setopt } for pid=10516 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.651999][ T5872] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 291.694310][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.706886][ T5872] usb 4-1: config 0 descriptor?? [ 291.727689][T10522] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 291.938672][ T30] audit: type=1400 audit(1743026116.198:5559): avc: denied { ioctl } for pid=10529 comm="syz.6.1260" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 291.965331][T10530] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1260'. [ 291.976796][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.992571][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.048627][ T5872] usbhid 4-1:0.0: can't add hid device: -71 [ 292.059034][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.072143][ T5872] usb 4-1: USB disconnect, device number 49 [ 292.147700][T10538] tipc: Started in network mode [ 292.152801][T10538] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 292.162876][T10538] tipc: Enabled bearer , priority 10 [ 292.350457][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1267'. [ 292.360648][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1267'. [ 292.373976][T10550] fuse: Unknown parameter '0x00000000000000030xffffffffffffffff' [ 292.401385][T10550] Process accounting resumed [ 292.425029][T10553] overlayfs: failed to clone upperpath [ 292.448645][ T5872] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 292.552624][ T30] audit: type=1400 audit(1743026116.769:5560): avc: denied { shutdown } for pid=10554 comm="syz.0.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 292.622498][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.637266][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 292.648564][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 292.664836][ T5872] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.674233][ T5872] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.682324][ T5872] usb 4-1: Manufacturer: syz [ 292.689170][ T5872] usb 4-1: config 0 descriptor?? [ 292.972491][ T5913] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 293.132939][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 293.139751][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.150843][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.160686][ T5913] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 293.171602][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.181438][ T5913] usb 6-1: config 0 descriptor?? [ 293.359213][ T52] tipc: Node number set to 4269801491 [ 293.541016][ T30] audit: type=1804 audit(1743026117.685:5561): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1273" name="file0" dev="tmpfs" ino=1813 res=1 errno=0 [ 293.623574][ T5913] playstation 0003:054C:05C4.0012: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 293.725261][ T5831] Bluetooth: hci5: command tx timeout [ 294.208982][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1276'. [ 294.253682][T10574] could not allocate digest TFM handle vmac(blowfish-generic) [ 294.269897][ T5913] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 163: -32 [ 294.280403][ T5913] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 firmware info: -32 [ 294.290035][ T5913] playstation 0003:054C:05C4.0012: Failed to get firmware info from DualShock4 [ 294.300665][ T5913] playstation 0003:054C:05C4.0012: HW/FW version data in sysfs will be invalid. [ 294.319215][ T5913] input: HID 054c:05c4 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0012/input/input37 [ 294.343859][ T5913] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0012/input/input38 [ 294.358334][ T5913] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0012/input/input39 [ 294.379858][T10584] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1277'. [ 294.389012][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'. [ 294.419478][ T5913] playstation 0003:054C:05C4.0012: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 294.549075][ T5872] usb 6-1: USB disconnect, device number 15 [ 295.226167][T10600] xt_policy: neither incoming nor outgoing policy selected [ 295.502369][ T5913] usb 4-1: USB disconnect, device number 50 [ 295.653908][ T30] audit: type=1400 audit(1743026119.667:5562): avc: denied { map } for pid=10603 comm="syz.3.1284" path="/236/file0" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 295.678197][T10606] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 295.685990][T10606] __nla_validate_parse: 2 callbacks suppressed [ 295.686004][T10606] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1284'. [ 295.747027][T10607] overlayfs: failed to resolve './file1': -2 [ 295.827802][ T5872] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 295.993409][ T5872] usb 7-1: config 232 has an invalid interface number: 13 but max is 2 [ 296.004740][ T5872] usb 7-1: config 232 has an invalid descriptor of length 0, skipping remainder of the config [ 296.015234][ T5872] usb 7-1: config 232 has 1 interface, different from the descriptor's value: 3 [ 296.028134][ T5872] usb 7-1: config 232 has no interface number 0 [ 296.036258][ T5872] usb 7-1: config 232 interface 13 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 296.049788][ T5872] usb 7-1: config 232 interface 13 has no altsetting 0 [ 296.060099][ T5872] usb 7-1: New USB device found, idVendor=04e6, idProduct=0002, bcdDevice= 1.00 [ 296.073585][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.082338][ T5872] usb 7-1: Product: syz [ 296.086893][ T5872] usb 7-1: Manufacturer: syz [ 296.091501][ T5872] usb 7-1: SerialNumber: syz [ 296.314803][ T5872] usb-storage 7-1:232.13: USB Mass Storage device detected [ 296.335245][ T5872] usb-storage 7-1:232.13: Quirks match for vid 04e6 pid 0002: 4 [ 296.353572][ T5872] usb 7-1: USB disconnect, device number 2 [ 296.373359][ T973] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 296.535976][ T30] audit: type=1400 audit(1743026120.500:5563): avc: denied { ioctl } for pid=10614 comm="syz.3.1287" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 296.570449][ T973] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 296.581216][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.589925][ T973] usb 6-1: Product: syz [ 296.594313][ T973] usb 6-1: Manufacturer: syz [ 296.599070][ T973] usb 6-1: SerialNumber: syz [ 296.605223][ T973] usb 6-1: config 0 descriptor?? [ 296.899323][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.925024][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.962118][T10609] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 296.986889][T10609] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 297.042813][T10609] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.058185][T10609] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 297.117720][ T24] usb 6-1: USB disconnect, device number 16 [ 297.122278][T10627] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1289'. [ 297.132828][T10627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1289'. [ 297.143855][T10627] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1289'. [ 297.154079][T10627] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1289'. [ 297.467152][ T30] audit: type=1400 audit(1743026121.369:5564): avc: denied { map } for pid=10629 comm="syz.4.1291" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 297.887223][ T30] audit: type=1400 audit(1743026121.753:5565): avc: denied { write } for pid=10635 comm="syz.5.1293" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 297.927069][T10636] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 297.936779][T10636] netlink: 'syz.5.1293': attribute type 4 has an invalid length. [ 298.010542][T10636] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1293'. [ 298.127253][ T5909] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 298.154677][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1293'. [ 298.214634][ T30] audit: type=1400 audit(1743026121.790:5566): avc: denied { ioctl } for pid=10635 comm="syz.5.1293" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 298.410794][ T5909] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 298.522198][T10141] Unrecognized hibernate image header format! [ 298.539680][ T5909] usb 5-1: USB disconnect, device number 48 [ 298.557133][T10141] PM: hibernation: Image mismatch: architecture specific data [ 298.784042][ T30] audit: type=1400 audit(1743026122.594:5567): avc: denied { setopt } for pid=10652 comm="syz.4.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.107340][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1300'. [ 299.117060][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1300'. [ 299.127986][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1300'. [ 299.218540][ T5832] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 299.297660][T10460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.385739][T10460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.411027][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 299.421716][ T5832] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 299.431188][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.441972][ T5832] usb 6-1: Product: syz [ 299.451786][ T5832] usb 6-1: Manufacturer: syz [ 299.460912][ T5832] usb 6-1: SerialNumber: syz [ 299.470981][ T5832] usb 6-1: config 0 descriptor?? [ 299.486763][ T5832] gspca_main: se401-2.14.0 probing 047d:5003 [ 299.567406][T10460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.873330][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.902291][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.046312][T10460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.177505][T10460] bridge_slave_1: left allmulticast mode [ 300.185326][T10460] bridge_slave_1: left promiscuous mode [ 300.191642][T10460] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.204292][T10460] bridge_slave_0: left allmulticast mode [ 300.210297][T10460] bridge_slave_0: left promiscuous mode [ 300.216695][T10460] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.284272][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.294084][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.305256][ T5832] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 300.312793][ T5832] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 300.321181][ T5872] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 300.330936][ T5832] usb 6-1: USB disconnect, device number 17 [ 300.941258][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 300.960085][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 300.977329][ T5872] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 300.986719][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.996611][ T5872] usb 5-1: Product: syz [ 300.996784][T10460] dvmrp1 (unregistering): left allmulticast mode [ 301.000944][ T5872] usb 5-1: Manufacturer: syz [ 301.012017][ T5872] usb 5-1: SerialNumber: syz [ 301.022005][ T5872] usb 5-1: config 0 descriptor?? [ 301.033194][T10673] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 301.047327][T10673] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 302.138103][T10673] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 302.245549][T10673] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 302.378853][T10460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.391992][T10460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.403796][T10460] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 302.415980][T10460] tipc: Resetting bearer [ 302.423109][T10460] bond0 (unregistering): Released all slaves [ 302.629856][ T5872] Error reading MAC address [ 302.853970][ T5872] usb 5-1: USB disconnect, device number 49 [ 302.885892][T10460] tipc: Disabling bearer [ 302.932848][T10460] tipc: Disabling bearer [ 302.945403][T10460] tipc: Left network mode [ 302.959815][T10713] __nla_validate_parse: 1 callbacks suppressed [ 302.959832][T10713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1314'. [ 302.981896][T10713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10713 comm=syz.3.1314 [ 303.059500][ T30] audit: type=1400 audit(1743026126.597:5568): avc: denied { write } for pid=10716 comm="syz.0.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.124399][T10719] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 303.132497][ T30] audit: type=1400 audit(1743026126.653:5569): avc: denied { accept } for pid=10718 comm="syz.6.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.137709][T10721] syz.3.1318: attempt to access beyond end of device [ 303.137709][T10721] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 303.178321][T10721] efs: cannot read volume header [ 303.230288][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.248703][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.330580][T10460] hsr_slave_0: left promiscuous mode [ 303.371827][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 303.371961][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.390630][T10460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.401264][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.408704][T10460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.527684][ T5913] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 303.528088][T10460] team_slave_0: left promiscuous mode [ 303.535563][ T973] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 303.541128][T10460] team_slave_1: left promiscuous mode [ 303.554658][T10460] veth1_macvtap: left promiscuous mode [ 303.567182][T10460] veth0_macvtap: left promiscuous mode [ 303.586909][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 303.769660][ T24] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.781857][T10460] veth1_vlan: left promiscuous mode [ 303.812946][T10460] veth0_vlan: left promiscuous mode [ 304.072916][ T5913] usb 4-1: device descriptor read/64, error -71 [ 304.638306][ T24] usb 6-1: config 179 has no interface number 0 [ 304.658874][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 304.670232][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 304.681781][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.693401][ T24] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 304.705030][ T24] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 304.718352][ T24] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 304.727434][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.769507][T10715] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.800092][ T5913] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 304.875497][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 304.898374][ T973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.912679][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.927059][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.939152][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.948842][ T973] usb 5-1: Product: syz [ 304.953793][ T973] usb 5-1: Manufacturer: syz [ 304.958469][ T973] usb 5-1: SerialNumber: syz [ 304.966507][ T973] usb 5-1: config 0 descriptor?? [ 304.973693][ T973] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.983836][ T973] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 305.046125][ T5913] usb 4-1: device descriptor read/64, error -71 [ 305.185263][ T5913] usb usb4-port1: attempt power cycle [ 305.334550][ T5832] usb 6-1: USB disconnect, device number 18 [ 305.334562][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.334591][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 305.357412][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.491034][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1325'. [ 305.901597][ T5913] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 305.950378][ T5913] usb 4-1: device descriptor read/8, error -71 [ 306.052591][ T973] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 306.069141][ T973] em28xx 5-1:0.0: Config register raw data: 0x2e [ 306.075995][ T973] em28xx 5-1:0.0: I2S Audio (1 sample rate(s)) [ 306.085976][ T973] em28xx 5-1:0.0: No AC97 audio processor [ 306.222568][ T5913] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 306.258730][ T5913] usb 4-1: device descriptor read/8, error -71 [ 306.384062][ T5913] usb usb4-port1: unable to enumerate USB device [ 307.325627][ T5913] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 307.497478][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 307.528483][ T5913] usb 4-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 307.537296][ T5913] usb 4-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 307.546547][ T5913] usb 4-1: config 63 has no interface number 0 [ 307.553184][ T5913] usb 4-1: config 63 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.563081][ T5913] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 307.572214][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.588639][ T5913] usb 4-1: probing VID:PID(2201:012C) [ 307.604873][ T5913] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 307.611288][ T5913] usb 4-1: vub300 ignoring EndPoint(0) 02 [ 307.617131][ T5913] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 307.634941][ T5913] vub300 4-1:63.19: probe with driver vub300 failed with error -22 [ 308.894578][T10460] team0 (unregistering): Port device team_slave_1 removed [ 308.923379][T10460] team0 (unregistering): Port device team_slave_0 removed [ 309.157664][ T5872] lo speed is unknown, defaulting to 1000 [ 309.216174][T10761] netlink: 9564 bytes leftover after parsing attributes in process `syz.3.1327'. [ 309.264077][T10761] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 309.286713][ T5872] usb 4-1: USB disconnect, device number 55 [ 309.314315][ T973] usb 5-1: USB disconnect, device number 50 [ 309.406593][T10772] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1330'. [ 309.416202][T10772] netlink: 'syz.5.1330': attribute type 6 has an invalid length. [ 309.425385][T10772] netlink: 'syz.5.1330': attribute type 5 has an invalid length. [ 309.451405][T10772] netlink: 'syz.5.1330': attribute type 4 has an invalid length. [ 309.535871][T10460] IPVS: stop unused estimator thread 0... [ 309.772937][ T973] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 309.892262][ T5832] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 309.976152][ T973] usb 5-1: Using ep0 maxpacket: 8 [ 309.983503][ T973] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 309.992681][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.001675][ T973] usb 5-1: config 0 descriptor?? [ 310.050836][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 310.061539][ T5832] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.070513][ T5832] usb 7-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 310.079722][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.092487][ T5832] usb 7-1: config 0 descriptor?? [ 310.352377][ T5832] usb 7-1: USB disconnect, device number 3 [ 310.367534][ T973] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 310.379801][ T973] asix 5-1:0.0: probe with driver asix failed with error -71 [ 310.401945][ T973] usb 5-1: USB disconnect, device number 51 [ 310.476885][T10789] tc_dump_action: action bad kind [ 310.757073][T10800] random: crng reseeded on system resumption [ 312.113474][T10841] veth3: entered promiscuous mode [ 312.318952][ T30] audit: type=1400 audit(1743026135.256:5570): avc: denied { getopt } for pid=10851 comm="syz.0.1350" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 312.344282][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1349'. [ 312.371510][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1349'. [ 312.380547][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1349'. [ 312.391088][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1349'. [ 312.728439][T10856] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 312.736291][T10856] team0: Device ipvlan2 is already an upper device of the team interface [ 312.889217][T10862] overlayfs: failed to resolve './file2': -2 [ 313.556299][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1360'. [ 314.284596][T10916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1364'. [ 314.296008][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1364'. [ 314.306244][T10916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1364'. [ 314.549577][T10923] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 314.558786][T10923] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 314.639734][ T5872] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 315.132247][ T5872] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.145234][ T5872] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.155433][ T5872] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 315.165773][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.173808][ T5872] usb 7-1: SerialNumber: syz [ 315.180976][ T5872] usb 7-1: 0:2 : does not exist [ 315.247997][T10931] __nla_validate_parse: 1 callbacks suppressed [ 315.248008][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 316.263882][ T30] audit: type=1400 audit(1743026138.940:5571): avc: denied { bind } for pid=10949 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.427355][ T5872] usb 7-1: USB disconnect, device number 4 [ 318.529977][T10983] tmpfs: Bad value for 'mpol' [ 318.596684][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1384'. [ 318.605654][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1384'. [ 318.614607][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1384'. [ 318.623853][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1384'. [ 318.717326][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 318.717357][T10996] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 318.833746][ T30] audit: type=1400 audit(1743026141.343:5572): avc: denied { create } for pid=10999 comm="syz.6.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 318.837090][T11001] sp0: Synchronizing with TNC [ 318.991349][ T5913] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 319.168154][ T5913] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 319.178678][ T5913] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 319.187754][ T5913] usb 5-1: config 1 has no interface number 1 [ 319.193843][ T5913] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 319.206891][ T5913] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 319.231004][ T5913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.240673][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.248783][ T5913] usb 5-1: Product: syz [ 319.252940][ T5913] usb 5-1: Manufacturer: syz [ 319.257545][ T5913] usb 5-1: SerialNumber: syz [ 319.265876][T10991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.495324][T10991] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1385'. [ 319.513747][ T5913] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 319.521682][ T5913] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 319.537622][ T5913] usb 5-1: USB disconnect, device number 52 [ 319.643493][ T5872] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 319.782445][ T5872] usb 7-1: device descriptor read/64, error -71 [ 320.040132][ T5872] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 320.178174][ T5872] usb 7-1: device descriptor read/64, error -71 [ 320.217979][T11034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1398'. [ 320.227331][T11034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1398'. [ 320.237099][T11034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1398'. [ 320.299540][ T5872] usb usb7-port1: attempt power cycle [ 320.566191][T11036] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 320.600744][T11042] __nla_validate_parse: 1 callbacks suppressed [ 320.600754][T11042] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1400'. [ 320.616242][T11041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1400'. [ 320.659416][ T5872] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 320.691863][ T5872] usb 7-1: device descriptor read/8, error -71 [ 320.748001][ T30] audit: type=1400 audit(1743026143.138:5573): avc: denied { accept } for pid=11052 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.771638][ T30] audit: type=1400 audit(1743026143.138:5574): avc: denied { setopt } for pid=11052 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.441205][ T5872] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 321.483060][ T5872] usb 7-1: device descriptor read/8, error -71 [ 321.497454][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1410'. [ 321.507589][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 321.518054][ T30] audit: type=1400 audit(1743026143.858:5575): avc: denied { ioctl } for pid=11070 comm="syz.4.1410" path="socket:[32995]" dev="sockfs" ino=32995 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 321.605866][ T5872] usb usb7-port1: unable to enumerate USB device [ 321.973360][ T30] audit: type=1400 audit(1743026144.279:5576): avc: denied { remount } for pid=11081 comm="syz.0.1414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 322.434642][ T5872] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 322.507533][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1417'. [ 322.605870][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 322.635908][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.649656][ T5872] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 322.659773][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.873528][ T5872] usb 4-1: config 0 descriptor?? [ 322.923332][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 322.933380][T11107] overlay: Unknown parameter '@' [ 322.976723][T11111] tmpfs: Bad value for 'mpol' [ 323.337935][ T5872] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 323.358249][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 323.372070][T11119] ip6tnl1: entered promiscuous mode [ 323.378824][T11119] ip6tnl1: entered allmulticast mode [ 323.878292][ T30] audit: type=1400 audit(1743026146.037:5577): avc: denied { ioctl } for pid=11125 comm="syz.4.1425" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 324.263306][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.330910][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.613152][ T30] audit: type=1400 audit(1743026146.711:5578): avc: denied { getopt } for pid=11135 comm="syz.4.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.681062][T11136] block nbd4: server does not support multiple connections per device. [ 324.789177][T11135] block nbd4: shutting down sockets [ 324.904664][T11141] net veth1_virt_wifi : renamed from virt_wifi0 [ 324.961723][ T5871] usb 4-1: USB disconnect, device number 56 [ 325.079677][T11151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.090428][ T30] audit: type=1400 audit(1743026147.197:5579): avc: denied { map } for pid=11150 comm="syz.3.1431" path="socket:[32604]" dev="sockfs" ino=32604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 325.113907][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.123680][ T30] audit: type=1400 audit(1743026147.197:5580): avc: denied { read } for pid=11150 comm="syz.3.1431" path="socket:[32604]" dev="sockfs" ino=32604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 325.211678][T11154] SELinux: failed to load policy [ 325.250342][T11159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.463869][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 325.621190][T11161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1434'. [ 325.630418][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1434'. [ 325.639400][T11161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1434'. [ 325.648493][ T24] usb 4-1: device descriptor read/64, error -71 [ 325.818067][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.829059][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.838963][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.847315][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.854882][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.863560][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.942403][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 325.948494][T11166] chnl_net:caif_netlink_parms(): no params data found [ 325.963705][ T973] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 326.014610][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.036921][T11166] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.056378][T11166] bridge_slave_0: entered allmulticast mode [ 326.074136][T11166] bridge_slave_0: entered promiscuous mode [ 326.082394][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.089626][T11166] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.096914][T11166] bridge_slave_1: entered allmulticast mode [ 326.103977][T11166] bridge_slave_1: entered promiscuous mode [ 326.104434][ T24] usb 4-1: device descriptor read/64, error -71 [ 326.126593][T11166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.138262][ T973] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 326.149671][T11166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.158995][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.171209][ T973] usb 7-1: Product: syz [ 326.178152][ T973] usb 7-1: Manufacturer: syz [ 326.208574][ T973] usb 7-1: SerialNumber: syz [ 326.222815][T11166] team0: Port device team_slave_0 added [ 326.235275][ T24] usb usb4-port1: attempt power cycle [ 326.249760][ T973] usb 7-1: config 0 descriptor?? [ 326.257744][T11166] team0: Port device team_slave_1 added [ 326.262553][ T973] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 009 [ 326.278872][T11166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.285920][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.311970][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.318438][T11166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.337529][T11166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.345228][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.371828][T11166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.659177][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 326.704121][ T30] audit: type=1400 audit(1743026148.693:5581): avc: denied { setopt } for pid=11163 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 326.741053][ T973] (null): failure setting delay to 10us [ 326.755361][ T24] usb 4-1: device descriptor read/8, error -71 [ 326.766721][ T973] i2c-tiny-usb 7-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 326.782692][ T973] usb 7-1: USB disconnect, device number 9 [ 326.811559][T11166] hsr_slave_0: entered promiscuous mode [ 326.823643][T11166] hsr_slave_1: entered promiscuous mode [ 326.830536][T11188] __nla_validate_parse: 1 callbacks suppressed [ 326.830546][T11188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1440'. [ 326.845771][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1440'. [ 326.854720][T11188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1440'. [ 326.863759][T11188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1440'. [ 326.904733][T11166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.912333][T11166] Cannot create hsr debugfs directory [ 326.986112][T11199] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 327.012064][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 327.034252][ T24] usb 4-1: device descriptor read/8, error -71 [ 327.122400][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 327.134300][T11166] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.144839][T11166] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 327.146165][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 327.163073][ T24] usb usb4-port1: unable to enumerate USB device [ 327.171265][T11166] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 327.179882][T11166] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.241380][T11166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.259834][T11166] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.271005][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.278127][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.291785][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.298886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.345684][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1447'. [ 327.513953][T11166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.719163][T11166] veth0_vlan: entered promiscuous mode [ 327.729605][T11166] veth1_vlan: entered promiscuous mode [ 328.027640][ T5837] Bluetooth: hci1: command tx timeout [ 328.044579][T11166] veth0_macvtap: entered promiscuous mode [ 328.052425][T11166] veth1_macvtap: entered promiscuous mode [ 328.062508][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.073297][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.083284][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.102455][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.112443][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.123367][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.137496][T11166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.176876][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.193361][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.205142][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.219240][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.229348][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.240424][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.251518][T11166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.267649][T11166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.308136][T11166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.332239][T11166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.351974][T11166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.540963][ T5832] page_pool_release_retry() stalled pool shutdown: id 33, 51 inflight 60 sec [ 328.585013][ T973] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 328.756316][ T973] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.766637][ T973] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.776924][ T973] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 328.786063][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 328.794333][ T973] usb 5-1: SerialNumber: syz [ 329.017767][ T973] usb 5-1: 0:2 : does not exist [ 329.026589][ T973] usb 5-1: USB disconnect, device number 53 [ 329.314300][T11243] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 329.320467][T11243] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 329.328132][T11243] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 329.336066][T11243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.342020][T11243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.350391][T11243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.382132][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.400992][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.425959][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.434962][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.987506][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 329.996589][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 330.005604][T11265] netlink: 'syz.4.1457': attribute type 15 has an invalid length. [ 330.210384][T11273] sctp: [Deprecated]: syz.7.1436 (pid 11273) Use of int in max_burst socket option. [ 330.210384][T11273] Use struct sctp_assoc_value instead [ 330.679804][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 330.813277][ T30] audit: type=1400 audit(1743026152.536:5582): avc: denied { bind } for pid=11323 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.845026][ T30] audit: type=1400 audit(1743026152.574:5583): avc: denied { listen } for pid=11323 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.939306][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.983380][T11331] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 331.221247][T11333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1464'. [ 331.330023][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.342203][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.421498][T11338] IPv6: Can't replace route, no match found [ 331.588770][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 331.590444][ T5837] Bluetooth: hci1: command 0x040f tx timeout [ 331.862594][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.988794][T11352] (syz.6.1468,11352,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 331.997979][T11352] (syz.6.1468,11352,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 332.105517][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.114231][T11350] atomic_op ffff88805be78198 conn xmit_atomic 0000000000000000 [ 332.217449][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.00 [ 332.246042][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.265998][ T24] usb 4-1: config 0 descriptor?? [ 332.333588][ T973] libceph: connect (1)[c::]:6789 error -101 [ 332.340490][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 332.371216][T11366] ceph: No mds server is up or the cluster is laggy [ 332.490031][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 332.497119][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 332.505946][ T24] usb 4-1: USB disconnect, device number 61 [ 332.520642][ T52] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 332.745734][ T52] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 332.756772][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.767803][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 332.781111][ T52] usb 5-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 332.790338][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.799180][ T52] usb 5-1: config 0 descriptor?? [ 332.904094][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 333.237859][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 333.250484][ T52] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 333.269637][ T52] usb 5-1: USB disconnect, device number 54 [ 334.068275][T11390] veth0_vlan: left promiscuous mode [ 334.076947][T11390] veth0_vlan: entered promiscuous mode [ 334.125150][ T5837] Bluetooth: hci1: command 0x040f tx timeout [ 334.737415][T11399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51914 sclass=netlink_route_socket pid=11399 comm=syz.3.1483 [ 334.752109][T11399] __nla_validate_parse: 3 callbacks suppressed [ 334.752119][T11399] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1483'. [ 334.957287][ T5832] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 335.097325][T11399] program syz.3.1483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.147802][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 335.182725][ T5832] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.199478][ T5832] usb 7-1: config 0 has no interface number 0 [ 335.211903][ T5832] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.254591][ T5832] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.266939][ T5832] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 335.288901][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.300319][T11411] kvm: MWAIT instruction emulated as NOP! [ 335.329315][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 335.360588][ T5832] usb 7-1: config 0 descriptor?? [ 335.361364][T11411] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 335.375345][T11411] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 336.033383][ T5832] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 336.062368][ T5832] prodikeys 0003:041E:2801.0014: unknown main item tag 0x0 [ 336.152448][ T5832] prodikeys 0003:041E:2801.0014: item fetching failed at offset 2/7 [ 336.161137][ T5832] prodikeys 0003:041E:2801.0014: hid parse failed [ 336.167897][ T5832] prodikeys 0003:041E:2801.0014: probe with driver prodikeys failed with error -22 [ 336.326237][ T5837] Bluetooth: hci1: command 0x040f tx timeout [ 336.333129][ T5832] usb 7-1: USB disconnect, device number 10 [ 336.353186][T11434] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 336.668450][ T5872] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 336.718740][ T30] audit: type=1400 audit(1743026158.063:5584): avc: denied { map } for pid=11441 comm="syz.0.1495" path="socket:[33527]" dev="sockfs" ino=33527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.744548][ T30] audit: type=1400 audit(1743026158.063:5585): avc: denied { accept } for pid=11441 comm="syz.0.1495" path="socket:[33527]" dev="sockfs" ino=33527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.831530][ T5872] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.841152][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.850005][ T5872] usb 4-1: config 0 descriptor?? [ 336.857505][ T5872] cp210x 4-1:0.0: cp210x converter detected [ 337.006355][ T30] audit: type=1400 audit(1743026158.334:5586): avc: denied { override_creds } for pid=11451 comm="syz.7.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 337.034800][T11452] can0: slcan on ptm0. [ 337.076978][ T5872] usb 4-1: cp210x converter now attached to ttyUSB0 [ 337.267487][ T52] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 337.290149][T11455] syz_tun: entered allmulticast mode [ 337.295984][ T30] audit: type=1400 audit(1743026158.605:5587): avc: denied { append } for pid=11436 comm="syz.3.1493" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 337.438894][ T52] usb 7-1: Using ep0 maxpacket: 8 [ 337.466746][ T52] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.480405][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.488832][ T52] usb 7-1: Product: syz [ 337.493929][ T52] usb 7-1: Manufacturer: syz [ 337.499641][ T52] usb 7-1: SerialNumber: syz [ 337.507043][ T52] usb 7-1: config 0 descriptor?? [ 337.734595][ T52] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 338.089356][ T30] audit: type=1326 audit(1743026159.344:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.0.1505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d8178d169 code=0x0 [ 338.334090][T11477] fuse: Bad value for 'fd' [ 338.353431][T11477] veth1: entered promiscuous mode [ 338.359502][T11477] batadv_slave_1: entered promiscuous mode [ 338.550594][ T5837] Bluetooth: hci1: command 0x040f tx timeout [ 339.039921][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 339.222293][T11476] batadv_slave_1: left promiscuous mode [ 339.228596][T11476] veth1: left promiscuous mode [ 339.572391][ T52] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 339.584498][ T52] usb 7-1: USB disconnect, device number 11 [ 339.639258][T11455] syz_tun: left allmulticast mode [ 339.651922][ T973] usb 4-1: USB disconnect, device number 62 [ 339.674106][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 339.687891][ T973] cp210x 4-1:0.0: device disconnected [ 339.765146][T11499] dlm: no locking on control device [ 340.186716][ T973] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 340.359235][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 340.371442][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.384104][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.396310][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.409404][ T30] audit: type=1400 audit(1743026161.513:5589): avc: denied { map } for pid=11500 comm="syz.4.1515" path="socket:[33627]" dev="sockfs" ino=33627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 340.432668][ T5832] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 340.452552][ T973] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 340.467624][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.477667][ T973] usb 4-1: config 0 descriptor?? [ 340.603846][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 340.619785][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.640320][ T5832] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.656055][ T5832] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 340.672925][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.685446][ T5832] usb 7-1: config 0 descriptor?? [ 340.698589][ T5832] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 340.775014][ T5837] Bluetooth: hci1: command 0x040f tx timeout [ 340.946255][ T973] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 341.042244][ T973] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input41 [ 341.130658][ T973] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 341.478381][ T973] usb 4-1: USB disconnect, device number 63 [ 342.229424][ T24] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 342.851084][ T24] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 342.861339][ T24] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 342.872660][ T24] usb 5-1: config 4 has no interface number 0 [ 342.878810][ T24] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.894690][ T24] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 342.903916][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.911956][ T24] usb 5-1: Product: syz [ 342.917661][ T24] usb 5-1: Manufacturer: syz [ 342.922308][ T24] usb 5-1: SerialNumber: syz [ 342.939398][T11558] 9pnet_fd: Insufficient options for proto=fd [ 343.367458][T11533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.375974][T11533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.384793][ T24] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 343.456127][ T973] usb 7-1: USB disconnect, device number 12 [ 343.541217][T11572] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 343.748197][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 343.758567][ T24] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 343.778909][ T24] usb 5-1: media controller created [ 343.786240][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.823066][ T30] audit: type=1804 audit(1743026164.692:5590): pid=11569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1532" name="/newroot/13/file0" dev="tmpfs" ino=85 res=1 errno=0 [ 343.827710][T11569] ref_ctr_offset mismatch. inode: 0x55 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 343.845380][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.866037][ T24] DVB: Unable to find symbol dib7000p_attach() [ 343.877641][ T24] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 343.883311][T11574] netlink: 'syz.7.1532': attribute type 1 has an invalid length. [ 343.908200][T11574] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1532'. [ 343.940680][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 343.948886][ T24] Registered IR keymap rc-empty [ 343.954582][ T24] dvb-usb: could not initialize remote control. [ 343.960813][ T24] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 343.968759][ T973] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 344.157990][ T973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.174272][ T973] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 344.176055][ T5832] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 344.222513][ T973] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 344.231677][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.250108][ T973] usb 7-1: config 0 descriptor?? [ 344.254878][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 344.346604][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 344.354157][ T5832] usb 4-1: config 150 has an invalid interface number: 131 but max is 1 [ 344.362787][ T5832] usb 4-1: config 150 contains an unexpected descriptor of type 0x2, skipping [ 344.378564][ T5832] usb 4-1: config 150 has an invalid interface number: 236 but max is 1 [ 344.397278][ T5832] usb 4-1: config 150 has no interface number 0 [ 344.417028][ T5832] usb 4-1: config 150 has no interface number 1 [ 344.423551][ T5832] usb 4-1: config 150 interface 131 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 344.435878][ T5832] usb 4-1: config 150 interface 131 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 344.446971][ T5832] usb 4-1: config 150 interface 131 altsetting 7 bulk endpoint 0x8 has invalid maxpacket 64 [ 344.457220][ T5832] usb 4-1: config 150 interface 131 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 344.471984][ T5832] usb 4-1: config 150 interface 131 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 344.484912][ T5832] usb 4-1: config 150 interface 131 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 344.525161][ T973] Bluetooth: Can't get state to change to load ram patch err [ 344.535057][ T5832] usb 4-1: config 150 interface 131 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 344.549888][ T5832] usb 4-1: config 150 interface 131 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 344.560223][ T973] Bluetooth: Loading patch file failed [ 344.564246][ T5832] usb 4-1: config 150 interface 131 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 344.579121][ T5832] usb 4-1: config 150 interface 131 has no altsetting 0 [ 344.592595][ T5832] usb 4-1: config 150 interface 236 has no altsetting 0 [ 344.600868][ T973] ath3k 7-1:0.0: probe with driver ath3k failed with error -71 [ 344.624195][ T5832] usb 4-1: New USB device found, idVendor=0499, idProduct=5003, bcdDevice=92.ff [ 344.654385][ T973] usb 7-1: USB disconnect, device number 13 [ 344.660401][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.660426][ T5832] usb 4-1: Product: syz [ 344.660440][ T5832] usb 4-1: Manufacturer: syz [ 344.698932][ T5832] usb 4-1: SerialNumber: syz [ 344.717993][T11578] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 344.740536][ T24] usb 5-1: USB disconnect, device number 55 [ 344.767530][ T24] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 345.227628][ T5832] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.262033][ T5832] snd-usb-audio 4-1:150.131: probe with driver snd-usb-audio failed with error -2 [ 345.291410][ T5832] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.304675][ T5832] snd-usb-audio 4-1:150.236: probe with driver snd-usb-audio failed with error -2 [ 345.444529][ T30] audit: type=1400 audit(1743026166.226:5591): avc: denied { ioctl } for pid=11577 comm="syz.3.1534" path="socket:[35843]" dev="sockfs" ino=35843 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 345.469190][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.622051][ T5832] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 345.847478][T11605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.280308][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.300358][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.311688][ T5832] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.314574][T11607] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1541'. [ 346.326787][ T5832] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.342487][T11607] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1541'. [ 346.342963][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.361399][ T5832] usb 7-1: config 0 descriptor?? [ 346.370473][T11607] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1541'. [ 346.379746][T11607] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1541'. [ 347.030117][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.053845][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.070337][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.078861][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.088151][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.095912][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.103400][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.111389][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.118978][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.143757][ T5832] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.154872][ T5832] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 347.167467][ T5832] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 347.209925][ T5832] usb 4-1: USB disconnect, device number 64 [ 347.377282][ T5870] usb 7-1: USB disconnect, device number 14 [ 347.473399][ T973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=973 comm=kworker/1:2 [ 347.493354][T11626] 9pnet: p9_errstr2errno: server reported unknown error  [ 347.577289][T11633] batadv0: entered promiscuous mode [ 347.583114][T11633] macvtap1: entered allmulticast mode [ 347.587014][ T5832] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 347.596107][T11633] batadv0: entered allmulticast mode [ 347.602233][T11633] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 347.812013][ T5832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.836582][ T5832] usb 4-1: config 107 has an invalid interface number: 180 but max is 1 [ 347.875761][ T5832] usb 4-1: config 107 has no interface number 1 [ 347.884270][ T5832] usb 4-1: config 107 interface 180 has no altsetting 0 [ 347.892557][ T5832] usb 4-1: config 107 interface 0 has no altsetting 0 [ 347.915675][ T5832] usb 4-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=f7.1d [ 347.939142][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.965220][ T5832] usb 4-1: Product: syz [ 347.969414][ T5832] usb 4-1: Manufacturer: syz [ 347.982594][ T5832] usb 4-1: SerialNumber: syz [ 347.993276][ T30] audit: type=1400 audit(1743026168.611:5592): avc: denied { lock } for pid=11643 comm="syz.0.1553" path="socket:[35216]" dev="sockfs" ino=35216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 348.094309][T11648] overlayfs: failed to clone upperpath [ 348.206340][T11653] overlayfs: failed to resolve './file0': -2 [ 348.251022][ T5832] usb 4-1: bad CDC descriptors [ 348.268232][ T5832] usb 4-1: USB disconnect, device number 65 [ 348.409143][T11660] ceph: No mds server is up or the cluster is laggy [ 348.639304][T11677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1562'. [ 348.695290][ T30] audit: type=1326 audit(1743026169.265:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.0.1562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d8178d169 code=0x0 [ 348.777201][T11677] macsec1: entered promiscuous mode [ 348.782422][T11677] macvlan1: entered promiscuous mode [ 348.809599][T11677] macvlan1: left promiscuous mode [ 348.857299][ T30] audit: type=1400 audit(1743026169.415:5594): avc: denied { relabelfrom } for pid=11684 comm="syz.6.1565" name="" dev="pipefs" ino=35999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 348.868207][T11687] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 348.912678][T11687] UDF-fs: Scanning with blocksize 512 failed [ 348.956945][T11687] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 348.964445][T11687] UDF-fs: Scanning with blocksize 1024 failed [ 348.977944][T11687] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 348.986196][T11687] UDF-fs: Scanning with blocksize 2048 failed [ 349.010286][T11687] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 349.018094][T11687] UDF-fs: Scanning with blocksize 4096 failed [ 349.025637][T11691] 9pnet_fd: Insufficient options for proto=fd [ 349.191291][ T30] audit: type=1400 audit(1743026169.705:5595): avc: denied { read } for pid=11678 comm="syz.4.1563" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 349.203614][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 349.277273][ T30] audit: type=1400 audit(1743026169.705:5596): avc: denied { open } for pid=11678 comm="syz.4.1563" path="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 349.971894][ T973] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 350.057979][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 350.076324][ T24] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 350.106533][ T24] usb 7-1: config 0 has no interface number 0 [ 350.125973][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 350.135190][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.144249][ T24] usb 7-1: Product: syz [ 350.148473][ T24] usb 7-1: Manufacturer: syz [ 350.153168][ T24] usb 7-1: SerialNumber: syz [ 350.170562][ T24] usb 7-1: config 0 descriptor?? [ 350.207988][ T973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.225894][ T973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.235287][ T973] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.262794][ T973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.272647][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.294402][ T973] usb 4-1: Product: syz [ 350.299132][ T973] usb 4-1: Manufacturer: syz [ 350.311477][ T973] usb 4-1: SerialNumber: syz [ 350.326029][T11711] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 350.372000][ T973] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 350.382053][T11713] sctp: [Deprecated]: syz.0.1572 (pid 11713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.382053][T11713] Use struct sctp_sack_info instead [ 350.389352][ T973] cdc_ncm 4-1:1.0: bind() failure [ 350.405445][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1573'. [ 350.420343][ T24] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 350.429141][ T30] audit: type=1400 audit(1743026170.883:5597): avc: denied { accept } for pid=11710 comm="syz.7.1573" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.431376][ T24] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 350.450236][T11713] netlink: 'syz.0.1572': attribute type 10 has an invalid length. [ 350.471940][T11713] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.479062][T11713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.486420][T11713] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.493461][T11713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.502076][T11713] : (slave bridge0): Enslaving as an active interface with an up link [ 350.578462][T11724] netlink: 'syz.7.1576': attribute type 8 has an invalid length. [ 350.641609][ T5832] usb 7-1: USB disconnect, device number 15 [ 350.717297][ T5870] usb 4-1: USB disconnect, device number 66 [ 350.725403][ T30] audit: type=1326 audit(1743026171.173:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11730 comm="syz.7.1578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f320778d169 code=0x0 [ 350.726812][ T5872] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 350.769785][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1581'. [ 350.779201][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1581'. [ 350.791319][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1581'. [ 350.912772][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 350.919523][ T5872] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.927871][ T5872] usb 5-1: config 0 has no interface number 0 [ 350.934239][ T5872] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.945431][ T5872] usb 5-1: config 0 interface 2 has no altsetting 0 [ 350.953978][ T5872] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 350.964162][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.973530][ T5872] usb 5-1: Product: syz [ 350.978039][ T5872] usb 5-1: Manufacturer: syz [ 350.982689][ T5872] usb 5-1: SerialNumber: syz [ 350.988525][ T5872] usb 5-1: config 0 descriptor?? [ 351.038171][T11747] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1583'. [ 351.213088][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.238450][ T5872] usb 5-1: USB disconnect, device number 56 [ 351.399628][ T30] audit: type=1400 audit(1743026171.799:5599): avc: denied { create } for pid=11752 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 351.458197][ T30] audit: type=1400 audit(1743026171.818:5600): avc: denied { sys_admin } for pid=11752 comm="syz.3.1585" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 351.613929][T11760] mkiss: ax0: crc mode is auto. [ 351.879080][T11770] team0: Device gtp0 is of different type [ 351.996918][T11777] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 351.996918][T11777] Ue[%#s' [ 352.100673][ T30] audit: type=1404 audit(1743026172.454:5601): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 352.227513][ T30] audit: type=1400 audit(1743026172.519:5602): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 352.357095][ T30] audit: type=1400 audit(1743026172.519:5603): avc: denied { read } for pid=11782 comm="syz.4.1595" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 352.381723][ T30] audit: type=1400 audit(1743026172.529:5604): avc: denied { read } for pid=11782 comm="syz.4.1595" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 353.225694][T11829] tty tty34: ldisc open failed (-12), clearing slot 33 [ 354.586812][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 354.586861][ T30] audit: type=1400 audit(1743026174.772:5810): avc: denied { create } for pid=11874 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 354.589330][T11879] [ 354.614950][T11879] ====================================================== [ 354.621957][T11879] WARNING: possible circular locking dependency detected [ 354.628975][T11879] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Not tainted [ 354.635724][T11879] ------------------------------------------------------ [ 354.642734][T11879] syz.7.1625/11879 is trying to acquire lock: [ 354.648795][T11879] ffff8880802e2c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 354.657043][T11879] [ 354.657043][T11879] but task is already holding lock: [ 354.664399][T11879] ffff88801c68a420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 354.672989][T11879] [ 354.672989][T11879] which lock already depends on the new lock. [ 354.672989][T11879] [ 354.683380][T11879] [ 354.683380][T11879] the existing dependency chain (in reverse order) is: [ 354.692369][T11879] [ 354.692369][T11879] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 354.699734][T11879] mnt_want_write+0x6f/0x450 [ 354.704833][T11879] ovl_create_object+0x12c/0x300 [ 354.710273][T11879] lookup_open.isra.0+0x11d0/0x1580 [ 354.715977][T11879] path_openat+0x905/0x2d40 [ 354.720980][T11879] do_filp_open+0x20b/0x470 [ 354.725979][T11879] do_sys_openat2+0x11b/0x1d0 [ 354.731160][T11879] __x64_sys_open+0x153/0x1e0 [ 354.736338][T11879] do_syscall_64+0xcd/0x260 [ 354.741355][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.747754][T11879] [ 354.747754][T11879] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 354.756427][T11879] down_read+0x9b/0x480 [ 354.761088][T11879] walk_component+0x345/0x5b0 [ 354.766282][T11879] path_lookupat+0x17e/0x780 [ 354.771376][T11879] filename_lookup+0x224/0x5f0 [ 354.776993][T11879] kern_path+0x35/0x50 [ 354.781558][T11879] lookup_bdev+0xd8/0x280 [ 354.786412][T11879] resume_store+0x1d6/0x460 [ 354.791420][T11879] kobj_attr_store+0x55/0x80 [ 354.796515][T11879] sysfs_kf_write+0x117/0x170 [ 354.801696][T11879] kernfs_fop_write_iter+0x349/0x510 [ 354.807486][T11879] vfs_write+0x5ba/0x1180 [ 354.812320][T11879] ksys_write+0x12a/0x240 [ 354.817156][T11879] do_syscall_64+0xcd/0x260 [ 354.822164][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.828573][T11879] [ 354.828573][T11879] -> #1 (&of->mutex){+.+.}-{4:4}: [ 354.835788][T11879] __mutex_lock+0x19a/0xb00 [ 354.840820][T11879] kernfs_fop_write_iter+0x287/0x510 [ 354.846643][T11879] iter_file_splice_write+0x91c/0x1150 [ 354.852637][T11879] do_splice+0x1475/0x1fc0 [ 354.857553][T11879] __do_splice+0x32a/0x360 [ 354.862467][T11879] __x64_sys_splice+0x187/0x250 [ 354.868370][T11879] do_syscall_64+0xcd/0x260 [ 354.873395][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.879793][T11879] [ 354.879793][T11879] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 354.887154][T11879] __lock_acquire+0x1173/0x1ba0 [ 354.892604][T11879] lock_acquire+0x179/0x350 [ 354.897609][T11879] __mutex_lock+0x19a/0xb00 [ 354.902615][T11879] pipe_lock+0x64/0x80 [ 354.907182][T11879] iter_file_splice_write+0x1ea/0x1150 [ 354.913147][T11879] do_splice+0x1475/0x1fc0 [ 354.918060][T11879] __do_splice+0x32a/0x360 [ 354.922974][T11879] __x64_sys_splice+0x187/0x250 [ 354.928321][T11879] do_syscall_64+0xcd/0x260 [ 354.933326][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.939716][T11879] [ 354.939716][T11879] other info that might help us debug this: [ 354.939716][T11879] [ 354.949918][T11879] Chain exists of: [ 354.949918][T11879] &pipe->mutex --> &ovl_i_mutex_dir_key[depth] --> sb_writers#6 [ 354.949918][T11879] [ 354.963455][T11879] Possible unsafe locking scenario: [ 354.963455][T11879] [ 354.970883][T11879] CPU0 CPU1 [ 354.976224][T11879] ---- ---- [ 354.981568][T11879] rlock(sb_writers#6); [ 354.985794][T11879] lock(&ovl_i_mutex_dir_key[depth]); [ 354.993751][T11879] lock(sb_writers#6); [ 355.000411][T11879] lock(&pipe->mutex); [ 355.004542][T11879] [ 355.004542][T11879] *** DEADLOCK *** [ 355.004542][T11879] [ 355.012662][T11879] 1 lock held by syz.7.1625/11879: [ 355.017745][T11879] #0: ffff88801c68a420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 355.026772][T11879] [ 355.026772][T11879] stack backtrace: [ 355.032638][T11879] CPU: 1 UID: 0 PID: 11879 Comm: syz.7.1625 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 355.032656][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.032664][T11879] Call Trace: [ 355.032669][T11879] [ 355.032675][T11879] dump_stack_lvl+0x116/0x1f0 [ 355.032692][T11879] print_circular_bug+0x275/0x350 [ 355.032710][T11879] check_noncircular+0x14c/0x170 [ 355.032728][T11879] __lock_acquire+0x1173/0x1ba0 [ 355.032747][T11879] lock_acquire+0x179/0x350 [ 355.032764][T11879] ? pipe_lock+0x64/0x80 [ 355.032776][T11879] ? __pfx___might_resched+0x10/0x10 [ 355.032793][T11879] __mutex_lock+0x19a/0xb00 [ 355.032808][T11879] ? pipe_lock+0x64/0x80 [ 355.032820][T11879] ? pipe_lock+0x64/0x80 [ 355.032831][T11879] ? __pfx___mutex_lock+0x10/0x10 [ 355.032847][T11879] ? rcu_is_watching+0x12/0xc0 [ 355.032860][T11879] ? trace_kmalloc+0x2b/0xd0 [ 355.032876][T11879] ? pipe_lock+0x64/0x80 [ 355.032887][T11879] pipe_lock+0x64/0x80 [ 355.032897][T11879] iter_file_splice_write+0x1ea/0x1150 [ 355.032918][T11879] ? page_ext_put+0x48/0xd0 [ 355.032929][T11879] ? page_table_check_set.part.0+0x3b8/0x550 [ 355.032945][T11879] ? file_has_perm+0x27d/0x350 [ 355.032961][T11879] ? __pfx_iter_file_splice_write+0x10/0x10 [ 355.032981][T11879] ? __lock_acquire+0xaa4/0x1ba0 [ 355.033003][T11879] ? __pfx_iter_file_splice_write+0x10/0x10 [ 355.033023][T11879] do_splice+0x1475/0x1fc0 [ 355.033034][T11879] ? __lock_acquire+0x5ca/0x1ba0 [ 355.033053][T11879] ? __pfx_do_splice+0x10/0x10 [ 355.033063][T11879] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 355.033081][T11879] ? find_held_lock+0x2b/0x80 [ 355.033094][T11879] __do_splice+0x32a/0x360 [ 355.033105][T11879] ? __pfx___do_splice+0x10/0x10 [ 355.033118][T11879] __x64_sys_splice+0x187/0x250 [ 355.033130][T11879] do_syscall_64+0xcd/0x260 [ 355.033145][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.033158][T11879] RIP: 0033:0x7f320778d169 [ 355.033169][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.033182][T11879] RSP: 002b:00007f32085cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 355.033194][T11879] RAX: ffffffffffffffda RBX: 00007f32079a6080 RCX: 00007f320778d169 [ 355.033202][T11879] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 355.033210][T11879] RBP: 00007f320780e2a0 R08: 000000000004ffe6 R09: 0000000000000000 [ 355.033217][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.033225][T11879] R13: 0000000000000001 R14: 00007f32079a6080 R15: 00007ffd361df648 [ 355.033236][T11879] [ 355.295413][ T30] audit: type=1400 audit(1743026175.436:5811): avc: denied { map_create } for pid=11874 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.314764][ T30] audit: type=1400 audit(1743026175.436:5812): avc: denied { prog_load } for pid=11874 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.333910][ T30] audit: type=1400 audit(1743026175.464:5813): avc: denied { read write } for pid=11166 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 355.360716][ T30] audit: type=1400 audit(1743026175.492:5814): avc: denied { write } for pid=11874 comm="syz.4.1624" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 355.384397][ T30] audit: type=1400 audit(1743026175.492:5815): avc: denied { read } for pid=11874 comm="syz.4.1624" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 355.414447][ T30] audit: type=1400 audit(1743026175.548:5816): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 355.476190][ T30] audit: type=1400 audit(1743026175.604:5817): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.743953][ T30] audit: type=1400 audit(1743026176.801:5818): avc: denied { read write } for pid=10393 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 Mar 26 21:56:18 [ 358.126603][ T30] audit: type=1400 audit(1743026178.082:5819): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon.err dhcpcd[11883]: ps_bpf_start_bpf: bpf_open: Invalid argument Mar 26 21:56:18 syzkaller daemon.err dhcpcd[11883]: ps_root_recvmsg: Invalid argument Mar 26 21:56:21 [ 361.339501][ T30] kauditd_printk_skb: 1 callbacks suppressed syzkaller daemon[ 361.339514][ T30] audit: type=1400 audit(1743026181.084:5821): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[1188[ 361.370334][ T30] audit: type=1400 audit(1743026181.084:5822): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 4]: ps_bpf_start_bpf: bpf_open: Invalid argument Mar 26 21:56:21 syzkaller daemon.err dhcpcd[11884]: ps_root_recvmsg: Invalid argument Mar 26 21:56:22 syzkaller daemon[ 363.216999][ T30] audit: type=1400 audit(1743026182.851:5823): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[1188[ 363.239923][ T30] audit: type=1400 audit(1743026182.851:5824): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 5]: ps_bpf_start_bpf: bpf_open: Invalid argument Mar 26 21:56:22 syzkaller daemon.err dhcpcd[11885]: ps_root_recvmsg: Invalid argument Mar 26 21:56:23 [ 363.467534][ T30] audit: type=1400 audit(1743026183.076:5825): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon.err dhcpcd[1188[ 363.491323][ T30] audit: type=1400 audit(1743026183.076:5826): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 6]: ps_bpf_start_bpf: bpf_open: Invalid argument Mar 26 21:56:23 syzkaller daemon.err dhcpcd[11886]: ps_root_recvmsg: Invalid argument