last executing test programs: 20m27.995988701s ago: executing program 32 (id=159): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sco\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fd, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) fstat(r2, &(0x7f0000000240)) fanotify_mark(0xffffffffffffffff, 0x80, 0x8000038, r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) socket$can_j1939(0x1d, 0x2, 0x7) landlock_restrict_self(0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000900)='|w=') getsockname$inet(r1, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x400}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x100102e, 0x2, @thr={&(0x7f0000000340)="9408204b29324e9ddfcfab881a0d8b4e5cefa2e3762f67e0b7ac77998202f266801e224efcb7abdc440b642187d368e1370aba30c1c2d49da83f9645c8808b645fc5fe7c9a08205271f64d5e910b73fdf6ae9125f29ba72dcb5c37ee6a3af6714b00631f99f3660d6127a5de61a13675b97e039d55", &(0x7f00000003c0)="3a5b559dbbc993f66c03f0333f4e5dae6c2491ca32c75ec3364f648383786cd3cc12cee9c98002642daceda2782574cff439064ceadbc47ec96812362ffa9329f00778e3ff53b4e0d1b69302e42768c0f73da89400fc7387a767b69ce030488a5d522d7d45081c9c18e87a76d15b437e68ed11c92da82095feaeacb2414fe21eb5ed93e9ace3c23e77080601cb30df0bf81dd968edf0fd14d111c849d880eefecdac14b2993a082a78f6e87f5f1942728efe5bc76d18b9f22dce7e6907f8242da33093f96767079e9f8768c61145c50717f6c5c94f824a8ed50ec57cf13dc077b8b979"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12m5.838188621s ago: executing program 33 (id=2494): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0xffffffff}, @hyper, 0x0, 0x600000000000000, 0x5e}) 9m16.595779292s ago: executing program 6 (id=3108): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) pipe2(&(0x7f0000000280), 0x80880) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x10) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x9, @raw_data="6e55adcbe70f1db5ba093cee905866d4635a98c8db18041ffe7662e8ad3e9d519f3be3cbfda428246a80f914e9ba501089bc74ec6982c7128ef0086663b9ea6f5b28737690c3da98193e00dfff7877544f7601bc2ba68eacc77be7805096e03735a384751dd84607602ac7229faccbbfede39859ba23eb028e110cab8759f20dff5d711aa76450bf955d04166ff1a396b16391b347c186f715760a20f3fdab49663d1e40b540e847d9e28cbe28aac625d2c9bd0816392c48aa2c2da83d66f6e5bfbf057902db377f"}) 9m14.951922977s ago: executing program 6 (id=3112): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) timerfd_create(0x8, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 9m11.669990877s ago: executing program 6 (id=3131): socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x8501) 9m9.839919622s ago: executing program 6 (id=3135): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x68ab95f8f4830090, 0x120}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x20a7699, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x24008140) 9m9.430943852s ago: executing program 6 (id=3136): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000810087406d040e0a7594000000010902120001000000000904"], 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8300, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbd925010000000400ae80ae63ec1a516dd612c2c74693cab8dd085a3a9dbfbd5fb32d728bdaee1e063046616e5933aad2dcd0f3848e2a18d5fe21d7a3e6c5ca04db03f9598d1f0a308fece8157a516369b435d853dd0b149a31b011a1fdeae4d64fbe5286f41288fcaf383c03ae48c0682ebf8eabeb5c848f95ed5c055ea223d8e0e72d23e916a0413e7f2f8e72457e618ca77a65e3f86cc7e95bcd0912ce6b0331a1c672856b299d5ac57ea42e03e588bb7960fe5f8339b9fd296c7002fb6914e3641d6e5917e45ecc33096700"/230], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r6) syz_genetlink_get_family_id$devlink(0x0, r6) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000140)="4f571ffeb2a5c49fcb6a56c15e1c30af", 0x10}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000200000000000000070000040900010073797a30000000003c000000090a010400000000000000000700000a08000a40000000000900020073797a31000000000900010073797a3000000021300000000c0a01030000000000000000070000000900020073797a000400032631ce1e2de240d12ef77b375325e6801400000084000a00"/182], 0xb4}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x0, 0x102, 0x8, 'syz0\x00', 0x210002}) 9m7.715469077s ago: executing program 6 (id=3145): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1b, @none, 0xa, 0x2}, 0xe) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) (rerun: 64) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/154, 0x9a}], 0x5, &(0x7f00000004c0)=""/100, 0x64}, 0x67d}, {{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000800)=""/26, 0x1a}], 0x4, &(0x7f0000000880)=""/219, 0xdb}, 0x401}, {{&(0x7f0000000980)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x4}, 0x7fff}], 0x3, 0x10000, &(0x7f0000001dc0)={r2, r3+10000000}) (async) r5 = syz_open_dev$MSR(&(0x7f0000001e00), 0x8, 0x0) write(r5, &(0x7f0000001e40)="6e1aaf2ce5dee9181adbf13635612cea71421be8a51acbfe79e776381c9e8d145280f06d910cfc59b2832dae78758614a1098c5f2562862b7836b9bf8a0223ffc9b2fd318beff6583fa0a20dab79eeb3c40820d5acd39761b7f442d634ac5d13539cb3383842cabf6ba84a9f2cc2ce1e29bccecf87e2d3e140cb60ae59113234b0ae62480933e3753eb52b8e", 0x8c) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000001f40)) (async) r7 = syz_open_dev$hiddev(&(0x7f0000001f80), 0x8000000000000000, 0x800) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000001fc0)={0x1, 0x2, 0xe0, 0x81, 0x886, 0x1}) socket(0x28, 0x5, 0x8) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000002000)='@\xa9/\x00', 0x0, r1) (async, rerun: 32) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002080), 0x2001, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002040)={@cgroup=r6, r6, 0x24, 0x10, r4, @void, @value=r8}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) (async) r9 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000002100)={'fscrypt:', @desc1}, &(0x7f0000002140)={0x0, "c2667d738244a3fe0cca53cd9cb14be0cbb0f82d14b60629c331bdeebf5cd06388c1ab86eb6b7a158ba9cc07915b3f2ab5d85f8914592747bc7c131bc7908232", 0x37}, 0x48, 0xfffffffffffffff9) r10 = add_key(&(0x7f0000002240)='id_resolver\x00', &(0x7f0000002280)={'syz', 0x1}, &(0x7f00000022c0)="24ade024d91de84c68cb0c6635cfb0dd531a38ddd5583bdc168629b5bf08a5fbb4c9c333cce7fcf08ec361f97cab545e339dcd91e04e9a", 0x37, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r9, &(0x7f0000002200)=[{&(0x7f00000021c0)="3ab288ea3cb30ca92de8770a660bb8d63827f01320d6d3050c48b3c54994dd626bde9b94645cb51a66ec773d", 0x2c}], 0x1, r10) (async) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r6, 0x800c6f40, &(0x7f0000002300)={""/4, 0x4}) (async) ioctl$TCGETA(r6, 0x5405, &(0x7f0000002340)) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000002380)={0x0, 0x88, "7f8d29c34bc9c7ee3f6c8df029960afbfd2656dfd543b93b01f75f8a0cd3f20a983ce70c0f3876a2307a9ff251d1f31f0d3fea953beb921edf4398a7867bc39c12cdb66642d6b950502e1d2efc71c65b52ee5926ddc1b8d927563aab4566d3199ec6672e12790693eaa066390deec8bc3498e5bb3d7a29fb0593506092af45f7ee013efdd7622d1f"}, &(0x7f0000002440)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000024c0)={r11, 0x10, &(0x7f0000002480)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000002500)=0x10) r12 = openat$incfs(r6, &(0x7f0000002540)='.pending_reads\x00', 0x80, 0x61) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000025c0), r4) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000002780)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000002600)={0x118, r13, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x844}, 0x40000) (async, rerun: 64) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) fgetxattr(r14, &(0x7f00000027c0)=@known='user.syz\x00', &(0x7f0000002800)=""/41, 0x29) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000002840), 0x100, 0x0) 9m6.66765317s ago: executing program 34 (id=3145): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1b, @none, 0xa, 0x2}, 0xe) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) (rerun: 64) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/154, 0x9a}], 0x5, &(0x7f00000004c0)=""/100, 0x64}, 0x67d}, {{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000800)=""/26, 0x1a}], 0x4, &(0x7f0000000880)=""/219, 0xdb}, 0x401}, {{&(0x7f0000000980)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x4}, 0x7fff}], 0x3, 0x10000, &(0x7f0000001dc0)={r2, r3+10000000}) (async) r5 = syz_open_dev$MSR(&(0x7f0000001e00), 0x8, 0x0) write(r5, &(0x7f0000001e40)="6e1aaf2ce5dee9181adbf13635612cea71421be8a51acbfe79e776381c9e8d145280f06d910cfc59b2832dae78758614a1098c5f2562862b7836b9bf8a0223ffc9b2fd318beff6583fa0a20dab79eeb3c40820d5acd39761b7f442d634ac5d13539cb3383842cabf6ba84a9f2cc2ce1e29bccecf87e2d3e140cb60ae59113234b0ae62480933e3753eb52b8e", 0x8c) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000001f40)) (async) r7 = syz_open_dev$hiddev(&(0x7f0000001f80), 0x8000000000000000, 0x800) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000001fc0)={0x1, 0x2, 0xe0, 0x81, 0x886, 0x1}) socket(0x28, 0x5, 0x8) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000002000)='@\xa9/\x00', 0x0, r1) (async, rerun: 32) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002080), 0x2001, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002040)={@cgroup=r6, r6, 0x24, 0x10, r4, @void, @value=r8}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) (async) r9 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000002100)={'fscrypt:', @desc1}, &(0x7f0000002140)={0x0, "c2667d738244a3fe0cca53cd9cb14be0cbb0f82d14b60629c331bdeebf5cd06388c1ab86eb6b7a158ba9cc07915b3f2ab5d85f8914592747bc7c131bc7908232", 0x37}, 0x48, 0xfffffffffffffff9) r10 = add_key(&(0x7f0000002240)='id_resolver\x00', &(0x7f0000002280)={'syz', 0x1}, &(0x7f00000022c0)="24ade024d91de84c68cb0c6635cfb0dd531a38ddd5583bdc168629b5bf08a5fbb4c9c333cce7fcf08ec361f97cab545e339dcd91e04e9a", 0x37, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r9, &(0x7f0000002200)=[{&(0x7f00000021c0)="3ab288ea3cb30ca92de8770a660bb8d63827f01320d6d3050c48b3c54994dd626bde9b94645cb51a66ec773d", 0x2c}], 0x1, r10) (async) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r6, 0x800c6f40, &(0x7f0000002300)={""/4, 0x4}) (async) ioctl$TCGETA(r6, 0x5405, &(0x7f0000002340)) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000002380)={0x0, 0x88, "7f8d29c34bc9c7ee3f6c8df029960afbfd2656dfd543b93b01f75f8a0cd3f20a983ce70c0f3876a2307a9ff251d1f31f0d3fea953beb921edf4398a7867bc39c12cdb66642d6b950502e1d2efc71c65b52ee5926ddc1b8d927563aab4566d3199ec6672e12790693eaa066390deec8bc3498e5bb3d7a29fb0593506092af45f7ee013efdd7622d1f"}, &(0x7f0000002440)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000024c0)={r11, 0x10, &(0x7f0000002480)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000002500)=0x10) r12 = openat$incfs(r6, &(0x7f0000002540)='.pending_reads\x00', 0x80, 0x61) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000025c0), r4) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000002780)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000002600)={0x118, r13, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x844}, 0x40000) (async, rerun: 64) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) fgetxattr(r14, &(0x7f00000027c0)=@known='user.syz\x00', &(0x7f0000002800)=""/41, 0x29) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000002840), 0x100, 0x0) 8m42.703636463s ago: executing program 7 (id=3246): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x700}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb}], [{}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x700}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb}], [{}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010426bd7000ffdbdf2503000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x44000080) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010426bd7000ffdbdf2503000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x44000080) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf66}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0xd}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xbbaf}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000050) 8m42.451167194s ago: executing program 7 (id=3248): r0 = socket(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0x9, {"a2e339084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3263078b089b39333b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b3f300d316e0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02ccf156f3da001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a5031e54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58ceecce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ef9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766cf3817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b000000000000000000000000000000000000000000000000ac6b429961f8c30a00", 0x1000}}, 0x214) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(0x0, 0x9) fcntl$getown(r1, 0x9) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000dda91f7a0000000000001b000000000000008000000000000000"], 0x50) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x8012, r1, 0x0) 8m41.335762191s ago: executing program 7 (id=3249): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x80000, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0020001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x800, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) keyctl$search(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f00001e1000/0x1000)=nil, 0x1000, 0x2000002) timer_settime(r8, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r10 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffdfff, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r9}) io_uring_enter(r10, 0x44fd, 0x3, 0x1, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xffffffeffffffefd]}, 0x8) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 8m40.857670894s ago: executing program 3 (id=3253): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 8m39.309482416s ago: executing program 3 (id=3258): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0xf500}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 8m38.633068699s ago: executing program 3 (id=3262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xfdfdffff, 0xffff7fff}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f14b9a02dbd7000fddbdf250d004500"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) syz_usb_control_io(r2, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m38.177735574s ago: executing program 7 (id=3264): openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x68ab95f8f4830090, 0x120}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 8m38.016459602s ago: executing program 7 (id=3266): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x25dfdbfe, {0x25, 0x0, 0x2, 0x0, {0x4e24, 0x0, [0x0, 0x0, 0xfff], [0xb1b], 0x0, [0x0, 0x63]}, 0xf1000002, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x2}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @sdr={0x21335742, 0x200}}) 8m36.964181381s ago: executing program 7 (id=3270): openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x20000, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x1, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e000000100"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x10000000, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8m36.235192713s ago: executing program 35 (id=3270): openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x20000, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x1, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e000000100"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x10000000, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8m36.041339312s ago: executing program 5 (id=3273): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe3c, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2a400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x22000010) 8m35.771751745s ago: executing program 5 (id=3274): syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x4502) ioctl$I2C_FUNCS(r0, 0x705, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000180)=0xffffffff, 0x4) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40015b0b, &(0x7f0000000380)) sendmsg$nl_xfrm(r1, 0x0, 0x0) r4 = accept4(r1, &(0x7f0000000700)=@ax25={{0x3, @default}, [@bcast, @remote, @null, @remote, @rose, @rose, @default]}, &(0x7f0000000780)=0x80, 0x80000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000002050005000a000000050001000700000005000400000000000900020073797a310000000012000300686173683a6e65742c706f72740000000c0007800800064000000002"], 0x58}, 0x1, 0x0, 0x0, 0x4004090}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x80c, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0xc001) landlock_restrict_self(0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0x0, &(0x7f0000000200)={0x9e39, 0x101, 0x1, 0x4}) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000000010100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) syz_usb_connect$uac3(0x1, 0xe6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x0, 0x7, 0x9, 0xff, 0xc9}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x3}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00']}, {0x56, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x439}}, {0x4, &(0x7f0000000bc0)=@string={0x0, 0x3, "b543feeb8b1dae111355e7bbf93ae78664a26ff45e0fbfc2b54b074765be6c478c274968ca0c5cde4795b64dcdf7129c6ad66bc0980a7214c959bc2d1ff156f002c893309058ede5e5da5244e15879f5f33f68e4d73686f6ec69fac7ee4b0f3e5ffe72c6afd4ae026a17545131997c995c9c8c09e73d875e91aec1cc154256ae3b57c52f5abd02e3ad9ef004dd9bce655d6d6e1f62bdda418d525d0a"}}, {0x4b, &(0x7f0000000400)=ANY=[@ANYBLOB="4b0380d9cfc1e6aca80bc991e550b813d4579e7f48cb28358c22d979d38b5402efcb7807000000bf0446828afcffffffffffffffa5afc1576d7183"]}, {0x8c, &(0x7f0000000480)=@string={0x8c, 0x3, "d3f72ccb33d200d21ee25c450f7fd8dd0581302bf47ebeb3b4a4aec85919667f6e287290a74379bf8252c5744272a67e42ccf21ad5ae5a48945c1423a043c697afc0010734d08948ed88e74f45412485bd1741718d7ee606ce9556fd8d52da73b3a8c09e679e2907234ecedf0edc99e54450442ccdab1b0fd251cffb20efdf402449845de490560c1298"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2827}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x406}}, {0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="3403b93303424b07dd0007d4dca7b3af38d479751f93b2398b0aac425897f5574c1f3848dcdd61493027744981d6850854da6c58"]}]}) 8m35.38597404s ago: executing program 3 (id=3275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0xc0080c4) 8m32.811774241s ago: executing program 3 (id=3280): openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x68ab95f8f4830090, 0x120}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 8m32.729009877s ago: executing program 3 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00314d3d7f399ab6ab169b268075f0e6921b48ec06"]) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00314d3d7f399ab6ab169b268075f0e6921b48ec06"]) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 8m32.527118088s ago: executing program 5 (id=3282): r0 = socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x46, 0x0, 0x4}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000002"], 0x20201) socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r5, 0x0, 0x0, 0x1001ed) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005440)=@newtaction={0x35c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}, {0x344, 0x1, [@m_ct={0x138, 0x4, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "beb3ed967dedf11d4d190b84bedcf8a7"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}]}, {0xd7, 0x6, "3cf82dcb294a2aa336232744d395709c9e352919fe48921331b8eb6a89c598a57bdf91a3b9c4ebb7af265326ddec9b0cd8fd596b7fd5009b67b3e96eb5529e3ef9cf1d67409fc361bd56d85e43b1672f32ea34be74cae0463871973839cbf9ec78d7b861a19559602fd790f35db688143a81be73f1af310112deeb237639d26ed2655f0a19736864450a6a80e93d7b1225bb3110d293cf0f69f5a4a9021411b2853f6abeb27ce397aa099d4892d24a24c46b1117733a8c4e120e161d05bdf19cd38d9955fbe5af8762cfa0cc86857c9117e626"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x124, 0x2, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x64d90}, @TCA_MPLS_LABEL={0x8, 0x5, 0x89397}, @TCA_MPLS_LABEL={0x8, 0x5, 0x41ef7}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x1ad6, 0x6, 0x9, 0x7}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3e573}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x91, 0x6, "9cf61641917639e77042d78ab454ee083344260ecb7e6d247d8d443cb482a57bcaab6ad554b6e4a5fc331909747b1eedf5e2ec57d0b229df3b96c6482f91e53bd99f9b513c41c8bc1016f05bbab3504d3ebca5a273def5d1b12fc3942c042642b7733ea8c692bac3a121625dd9c04b206142c5d94632171c6e16d31751ca23da0612568642f57c631e8642d3ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_mirred={0xe4, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3, 0x7, 0x5e}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c, 0x1, 0x1, 0xfffffffd, 0x587}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0xffffffffffffffff, 0xffff, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x2, 0x2}, 0x1}}]}, {0x36, 0x6, "c6a10ec6481da4c42e39c6818dcd96f5b930db99d522e9f643f6a88250baabefec05595b8a1d969dffdf23fa3a4d1cac3b82"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x35c}}, 0x0) fallocate(r5, 0x3, 0xf00, 0x10000) socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000"], 0x10}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000480)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 8m31.060065075s ago: executing program 5 (id=3283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect$uac1(0x3, 0x83, &(0x7f0000014140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x2, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0x1b}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x1, 0x1, '*'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x4, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x9301d0bf38c131ca, 0x1, 0x8, 0x2, {0x7, 0x25, 0x1, 0x4, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0xc0, 0x0, {0x7, 0x25, 0x1, 0x8, 0x2, 0x6}}}}}}}}]}}, 0x0) syz_usb_connect$midi(0x3, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x2000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x40, 0x0, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0xde, [@midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x3, 0x6, [{0xfa, 0x14}, {0x7, 0x3a}, {0x1d, 0xfa}, {0xa, 0x6}, {0x7, 0xfc}, {0xaf, 0x1}], 0x2e}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x7c, 0x2, [{0x0, 0x67}, {0xd, 0x7}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x3, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x6, 0x1, [{0x6, 0x95}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0xff, 0x40}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x4, 0x2, [{0x7, 0x9}, {0xde, 0x8}], 0xd}]}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x4, 0xc9, 0x20, 0xfe}, 0x49, &(0x7f00000000c0)={0x5, 0xf, 0x49, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x8, 0xff00, 0x0, [0xc0, 0x30, 0xc0f0, 0xc0, 0xff6028, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c947b203f12568f7df6845dfb9d8a78e"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x8, 0xff00, 0xa}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "9d6b"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x28) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1387400, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000200)=0x8000, 0x4) 8m28.056187695s ago: executing program 5 (id=3289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRESOCT=r0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x10, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) read(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x100f08, &(0x7f0000000780)={0x0, 0x80003125, 0x2, 0x104004, 0xdb}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) 8m27.759379116s ago: executing program 5 (id=3292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r1, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x95a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffb}, 0x94) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@local, 0x9}, 0x6, 0x100, 0x800, 0x7}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 8m27.368374043s ago: executing program 36 (id=3292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r1, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x95a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffb}, 0x94) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@local, 0x9}, 0x6, 0x100, 0x800, 0x7}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 8m16.636028848s ago: executing program 37 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00314d3d7f399ab6ab169b268075f0e6921b48ec06"]) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00314d3d7f399ab6ab169b268075f0e6921b48ec06"]) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2m46.514025515s ago: executing program 4 (id=4393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000108000100ac1414"], 0x3c}}, 0x40) 2m46.256254717s ago: executing program 4 (id=4395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x68}}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008044}, 0x80) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r10, &(0x7f0000000040), 0x2) r11 = socket(0x2d, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0xc001, 0x0, 0x0) 2m43.491006136s ago: executing program 4 (id=4405): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x700, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xa01}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) 2m43.338492041s ago: executing program 4 (id=4407): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf251400000008000300", @ANYRES32=r5], 0x24}}, 0x20080800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x4, 0x0}, 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) fstat(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={r9, r10, r11}, 0xc) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r12) sendmsg$TIPC_NL_PUBL_GET(r12, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="410329bd70002da6a7260e"], 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_int(r8, 0x6, 0x1, &(0x7f0000000100)=0x40, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m43.028104788s ago: executing program 4 (id=4410): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r7 = socket$alg(0x26, 0x5, 0x0) getresuid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) getgroups(0x2, &(0x7f0000000d80)=[0xee00, 0xee00]) sendmsg$netlink(r5, &(0x7f0000000f00)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc, &(0x7f0000000ac0)=[{&(0x7f0000000600)={0x158, 0x36, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x9a, 0x0, 0x0, @pid=r2}, @nested={0xe3, 0x6f, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @fd=r4}, @generic="bd96c1316166229ae6bffa209a5b9a7f276aed4a8e3f034445ffae9d212401cb3fbb51a029e31e8214b29e23f49f1bcdbef02ac54ff94887b26bfdd5ee63dac44f99f299c716550fbdb8a2221c21d53763c8366ed147bbeb6b268edf8638332e0a9011af78500ad5ee5b73482028b52f0804f34bd1a3b71832c0ae026e29750c5b9fe24e40366dda5428e3e68e72c9f56ff328938ac77aae7b4332f67274cf8d08a4c578e5bffab8b3965b90b013112b03e50b8c624537623aacfa617d9b9c10c0e3254d421dd6", @nested={0x4, 0xee}, @nested={0x4, 0x27}, @typed={0x8, 0x81, 0x0, 0x0, @u32=0x9}]}, @typed={0x4, 0xbc}, @nested={0x57, 0x128, 0x0, 0x1, [@nested={0x4, 0x38}, @nested={0x4, 0x135}, @nested={0x4, 0x138}, @typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0xc9}, @nested={0x4, 0x141}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@rand_addr=0xee2}, @nested={0x4, 0x138}, @generic="f6421ab90fd8ca1edc9ae361499bf983d582eddd55b0ca2a01bb7ce17615c7"]}]}, 0x158}, {&(0x7f0000001240)={0x246c, 0x28, 0x800, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xc8, 0x0, 0x0, @fd}, @nested={0xb6, 0x12c, 0x0, 0x1, [@generic="450d5696eef3a13de20ad8e1f292c2655b9b0703b866573ed30d31697fdccb86563d9a61c0075cab56660b58a4344029b99b6c1188836e969752b142b247e3bec2954f4142e97ec6d125163c82c5014494d37ff403896c14ca3e86c07987c2911fa52578d102d00a43beb638f0610664483ce7629b92ba343b1e1b1f9f1d97ed676c75baaa6511ed9fd59307715b495ffc1ff84cbed6ca10200869b358607d8ada70d2c5245f491cc71cb4f3aabf87e3a4dd"]}, @nested={0x58, 0x129, 0x0, 0x1, [@typed={0x4, 0x75}, @nested={0x4, 0x59}, @generic="61992137f9246d3832cb16eb28b7d99a5c4eee52cebeaf55f107513005f81bca9b1d6ad02e3d06e8f81579f2aa143eaeb80ed5bd69a81af686486f6d1d1954cc6f5fbc19a3a0c9273b632050"]}, @generic="86784f54c05316b575e199077baf572a6f6d116dd68508717c3f41194b9e8c442d0fb2bacf4f9fafccd472b4b204859a29986c381223689554f6666d4dae3f394bc14f76096ba04c93227fdbf02116cc37843ead45a7e4f4690611fc8f412cbb0a596a820e4fabd770e9cd8bdef2cdd16b22ea4217b0e0992c636fcea021f0ad05fe0ed898e1d5709aea7a13500da330abdeac96169bfecd346da23b8d77b59878dde9b29a324de4d0fbfc6755ec91a2a31cdf84ec1622b9ff87dceaa111e745fb6ad3f2a843bb20a96b9cf2e1db56d83064689536cdb8e9aa35037e166e1f64c6a0863c28a2e1a4f617ab5158c1e06e5fecae41436c23b8c53a88", @generic="ec382f6c7a8033b2efe6556b4e95736e45b0577b3235529f12bdf2f44ee75f6723b5e3dee6f0c02687145c96c53c3bfee3999ac3fea55b0c32a988adc604", @generic="21a22d50d38f50f776c7bd764239d3047dd3ac8257d2b5c20657ecc6b31c1adab238480cc11cdb3e37a5abb858df4d03c20b4c9c5301d520d0eeac6b938c2387a1505f2673af2b7a1f20edddf790314095d37ecf11a9a2259427d2dadb1ab555", @nested={0x2107, 0x148, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x42}, @generic="22b2df3c672beb5817c08f323bc40bd7d59c165c7ac47f337133afb6c076218ab294d3c2645a5054b4a7", @nested={0x4, 0xde}, @typed={0x8, 0xb7, 0x0, 0x0, @pid}, @typed={0x1004, 0x6d, 0x0, 0x0, @binary="45cd1afacab418c617fd797f26cf8bf5220043abe86a38e7f0f4426273444a1f49b5e346244dbb76e7c504f66c9231d1bd066ba3a084eda460611e9711bdb039bd97389717c1cf15865b2aa5d06a8c5722f4d97c49efb8b7a6aecbfd30818d6556bbbfe6343f4023f9509b010036e87b77b5969d6f60410c44624b4a7e8755d48433f2662f96638e9280805e57d9f157259927141135a5c250b067691ef52b121ec9c651bf4355f754cf603919f2c8329d5aa49ca2871f85c590152679995c78245da6e4449cb02299cf5ece6d5fd378431b392c748726716e70030386a8ed976bbc6faf432d5199f17603d7d15f4b2d0b4e448eba5e3118b25803c5cc626ca60545af85bf9b1adba0de8059bd1fa689b5c501cce9b10a8315ac70e7c4d72707285853e3bda65d2c36d853a986292728053a7609ce39a9523b240102da062df5cf626278d54a0d9a6a65d836f8335fdd8a9027898e8e898c8bc994feaa4d3e38da7ac78e3e5046a57d5acae5d7e3bad67218d79b256ce5ebdc5230e905c2413517cbb66bbe3f4eee77d7ef6ed21fd8b4faf8e21ee14eb6516b8911b19fedac6f273643ca39a65c789d2ccb1cbffe0d3a8c5d1a1128dc2ca90414a3dc173a00fbbaeb1e2c6dc4fff7f21d41cb0f2a344d53daaba31b6fbe6202d6378abac57794077657fd374c5cc388caebc883ba1a2147227ce6d0cddfe66cb3db5d272613f23775a4e7de43275ad8eb3ffa7e27a74560d3679236595800985d639b32ca8fcf1a9d7e674aef8388a53edc3fa5f8da4d4009e3978b219455199f8a4e2e13ae3944f2133044cf40affe3f10f50f935d3161e8fe44ce7761b2618536bfae156da4aba48bf23ea655a08a0549bbcd354360391d25aff877383799c0bd3e292102048c555efbe8e0e3cdb1e0499c7b3693fe3c836e57f0abe4af4f966f012c8259954c3390fadfb0643dad962fe11c2b45cf6400b28cb9f25d03266829fb9e4d6464f54c444e50680026f99f15a31200b577b150898e8cafd144593d68bf5265feb9804541db3a7ffe51e382348f64ab1d9c2d2e8b6932dc0eac74f03409bdafcd38eb0d743b2a26c534b5cdecf450f058b04cdc11476ffdc8edebee11b994da9fcca206b8ac2ee67cf1d0f72cd0fb0643d3ea54c9f2ef7161f1f8a84163e89290460ab0b826c4ddba85cc1d775cad7941ba888881cd8e76e8f3070104dc577c3a6377116ebddfe9530190e2dff4de559f2269ac7075a348296a4cfaed0e92f43d6bb98d01e35655a36e0fed694367504a083e035e2d3591331ff1b2e324a2a92c63619efb44a1fd464e1428cd68348b60e32674bc1e88683cf0074294d92f5a631f492b8ff1dcff97db5df14d00df5823d67ccde769bb3554dd7929891b655435cd4368bc47cddb9e481c49ac3adf2b1af9b16264222af1d06adbf433d37d101b44d271f8c40f8f54abd83f0cf408cbe95a96051e9d1857d0ca4859aa042f50ec129c6b097f0b6ff5ba0a2cba21e3c827f2a74daad31ced497ec80782e696729a4a494151003e4b35e9bbe470c51e02b4d768869789f4a4c32739a77b9e82c06c782f2c705f11b6d0c1de47fc8203ffc19a36dfa3a41738e9eb5ff37d12bf6e24b9c0e814bb6426d0cea9293a92076c427e759c248c05eaabbd0d9a3b9856168a8efa5233a2fc7541315e02a8f3b7ffda8e4c60e3cabc03b0a8d44be87c7da1300b87b166fac5dd08c6f551fd610f72bb9d3d6fdb88691437319b1a307622e15cb02bdbc9d04a9e0306bec2c50552f9537150b2bfadf3b18aeedf8c4ad8bd38c0672c415c43d28e2e7e000ad650fec2df804585fdb1b66d927a13023bab416c2fdea6da546f05197dc96a5efcbc04e5c89d6325f9962fddb34ff873ec0d86e282a838e829e4521a3e2d00fd97e692b30fc879d4aa84dc4df8a9d9f0ed2e74eb3aa0e5ddc2c1b0b9d878f5259ccb8fdb71b8544173e05dd9a3bcaff000905ca3cc63a0ee8bd18b932ab9e38bc4791802410f0e8ada032cc518c977ea8d222497b34d2e2ec3e969bf6f77db84f7e81197d012177b1fc218e568483362deff6ff162529fba1dc3b30f05418ab43fc6d11cc499b8f8260a42ee4855c1e2608f564cde742a3e5331de0c82471e055e98c76ce99bb38908fe627ebdf4b9a1e668ae7e5db4104cf661aa39009f16acf47e631e1be7dbe960e4ab0f7e36c094e305aa62e228abd477dab14e49f06c61021a036542acac8e430fa55af6f6f3f37a621139b20b061f6dc771cd25d098a4aecb38a1db340b9c0a53d52384192234d014f7aef8e1397199ba1431f8d1e9e6e4f5f95d45d0a5047adb18808421d29f29cb1c7bed0d245dc17f4f5294aee86a12e459849673b14bc2a7bfd512f2c166725aecb24c8b505f8a184e61afd3ade8afab24d96e1cd3c6b8b78d2ce7a81e56237aa97e10003f87db3179e9a647902fe4e2fe308c9931435f35fb9cfb643508c6fe34f6d68482ccb38b3113bdf17efc7467fc99ca53114fca581b89ca90e1599db5ae51fbe4ede72c0573a3af1bf661959e68890daa14f316b3655be1d5eafe297120932aa39842e325c2b4d57487bdf6f37766001f98875de0efe980e50b9dd825fc5f156e87755f8eaea861b4b9b9f8cc5b64ab03bdc5cd6079fbbb055ce27c6b03f908087667e0dde204a18423f884cfd6d62e3d6737235027a7ac0cd325912562293cecabfa737ff4964aee80ce5b2eb1e41951331df3f15c02a28c22d47799c6db2dcf5cda2f15c2fd0312ef584d050dfb7ac55ffbe46766470b89c39a1624965f7954f99687687166a5dccebb21b2551b376542b368390b1ca5563790c04185cb932c88bd14ebc92556def0f981de007605e40e5ccfe05149dc35dc0b1f99feafe6f982d43833188b00a514d842af4d7f64125f0da945eadcece37ed5600490cbdbac6532b7cac26a9c6c8a2ac5fa8ee42de29cbf4c26140a099756e84d4c4056db2a5eebb83bed72309eea69359f92e6fbc8f89073c10c6b9d1a569f21a64bb918bc50b427779a7a9bd2b25061e08a1fe0e3f1d64c8cec603b621807fd2f32b8ffda12df11d59e7097186ed640958ba5d5e87bee0a18daea8d3de1fa306c6864f01f70a0e465be82d23a31d09fb03aa20f386c672e053846172546c06c44b305ddb437f9b5f8995e18f470a8901081dc301f587372a0e9f587777bf8873d2e42285bc20333b78b9fcb8ec04a7419c61b3f45774a65d3c0db18174562536d914d01554499751e41011d891d8bb744736dccbabf3a8cc660ff341ffb3852ec2d5d80a39a3b3e222f91247d1362b75f351c640defc468b266bdcfd1745028faf16568afae504a7e3ad2fb8893cb4f4ae60aa9ec792943d4c4b80211f8881ee4f18dcae8af2496e765bb87947ceb3e8a2f58632daf67678dd37b4f85d1dbc28174b4c27926d5fc0e40c2d4c3200efb759632d897616fbf01bf1e56a3b646fb3cf5a0135d5edb7cb8c03b9f47f7d9c68cd11368ade53d015d617a882f1dad3ba3a942aa85a04c441009dacb3a1ecb90431ae24344eb5b49dda0456bec1901cef339bec9db19cbf3663733e30746d727382247935c78b6f490ba2e2ced6238e33bf5f3eb9b1fa75f27d1c3ed0870926761680c1361512900db654c8ae12434b04da3ecc1c55147a2fe2c05dc03da1deba80764c2c2570274493fd4e75c0ed3a43d2bc949edcb04af31d8bd9cbfcaf62f2970f649770c7d309cc71607d794b2654df9cc042bc1b25c5c5fc55d17ea3a386b64559f2af5596a81c4529f0569ddf0ce550b04c85f66312af86fe8d9af96d65065a1965f3872fc10184a592bab6d5b3bcb715d36831aaaad73efbd400debe58d22f0690beed29c88245e56f6e619801146e9d0b8620db59bd7fc4d3a7f7e8ec5c28a269b5cecd83171443ce3421cfac3fb1abd5523fd31e84e375ed9c25a9759980fa744ca24e4cd51c571c50277448f9c126604fd5d1bb3128d685dbd02e81ddd052c57034eac986ee8e934c8dcd61b6745c04b5a06219a3a7e41fa89b544322ad40b1a38c3e88cf3b47c57fb615b19eb30bf85c68ab900e90a62a8a683ed6a596a0ec13830d86f0cf0d4e1211e63c077724c8e10819c719de4a024634bf6d8bac687c4654e78bd5b94e559503d2666c9e4f93a65347c9912e8cfb268213d25ebba18f48dc71998e7c7415c2ad891c7b5ce5144af83f136e314d2edf7fab74146755ed75fc7ee6f657601b5c92cd0d71becd8193084ba0244acf2d2e125a3b069a917801fca9a891727811e154100027a85034c7058fb19f346075cf23d9190f5d3b11ec5e3fef007a4db141fbe968cf9ab6c051f47dda509f10c699ec80315a305c04c42febb7c2e9abc850bf9a5925f878bcca3485eb573392307ff5920f1feaa8aaca7a4e3c1dfa56a5bfc57a87ef0f3b025e62c291fc0d7bcc22f229a7d617f8c383bbb1a732e15f7c5e089bee25e44062e689858a933faf845738980cccc8ad39db7115c02be27c5c55913999ac47c8bd80c084ca4c23797c0773be52dca8ba6503cda7ebc6efa44dd850c5f68ee34a7e3f83cf9f15584860b525a0201beff455dc2df1fb84deaeb66a05c47b10e4aa12089bc234e34c38decef0198342cba17ce739b057e55e4b15cafd1f4f8bb6e7276e651f492f8ff0131b5eb9266a410e43cbf6c6914634d71b3ca4e795d02530a3538709172e0c4e5e8ff054cb97c62b75ad8bcd0010360e7f2821fda4aff73bd2259f89a92787bd43b0499bf671c8523e7b97c79d0fab01d6623fa1c1b0bbb00aea9d88c31f93d7e2db593b0408d97377a4acafa7be4319cbe3974b23790c8838995566f2d019773b5c7c9a69ce88b9b0a7c1430c6921c2ec1214aa5e7128dd52ea4d9ab978000224e7a9e45c36ed096c49cf49440583f8f9322d354d15e8a106ddbf6da67c6d1a2ea607277b8d3fdf6df14d0ac05e22a65a82ab61a79740b8d55df5f51bd9ced0f4fb197340277960f076e01797fe21a1ddd291667611826f57c03ef34186725961a7decf7dfb2d362ff3e00e9dc5a395c2c0a46b34834f65594bfb0a34c28363b68ad8290bfd3602a69fc27dff7e8e17aae14cfdc67a5557ce8df92bf15aef632c81825cf43f316f3ddecf381b2bafa9aea7d049b39ec1fd1933fb4956d16020d0fa4b58b12efbdd9c692a8c993d5d5519eeb4c1fa9ecfa9d57c22770046cf09b3b863d89553c5014c68850d39dc7bd1d7eae6c5b052373573f52dbcaa3ffb5232e1b413ba3919d397dd2879b8a3ceb5b1ea5231c36b61ff57cf0c61455181402bfb6bc51b650eac34c28f56a097cbe9683731f55d6fdd92b5e776c7adf00db6fd932aa82e70348a945663c6110e562b368634a32f97f036f1b10bba63cb779da95190f4432edbf77325781aba212ac031b26dc55e5145ab75b3b37f23e60e145ae860c4872487a541874df68f036149cdbc5f5339e0a7480b3261f7514ba76cd6aafac030822bc23ef83e51114f96052e29a0c1d8bb2658dda2ee1867ab1bb2c4fd6106a4049d15c9000a9c8f9ba88b5d75e1d128d65f9f21236231aa958babd51a337059c0ca35576149329736453e31d5a618789c8f9736dbf23e34b199cf921176dd4778b465a10bbccacc5541d1c4728385d475e924be3565fb995c7bb1811b25663aaceee9a4047eb41f987b4d33c3368f3e17ed47459a397226ba0f0745e4c1abb3d6198e3a873a8330cfc2f9d9123d7919574d9764d1e12d3e11007b02d06a80ea0c915c80b10a4fbfe7b460cfc686ee1a2bdfe2c52"}, @generic="96648e9e9528e30a39cc2ce83dd468c6897064a085bc7dd5cf3377c59c05de46634e73f9f8ab35197befb59f9e572ed854f780170d1c2f173926deb7fe793a8f7ad0ce91eccf5f1564cbda17bee0b40de8369689589f369f651b41a3f5f12ff6f16359eedce5ed9063ef39161a028ad269d1207f9fabf1898c3409d3a8d76a961cfc422aa57b9fbbd7606041d59e46b3877726b3a6c1975dda9ac55139c2c8612cc0fcb34a4d043858de8b1ff38f6a1959045dd100", @typed={0x1004, 0x3d, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x88}]}, @typed={0x8, 0x10a, 0x0, 0x0, @pid=r2}, @nested={0x14, 0x11a, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @uid}, @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x35}}]}, @generic="b492789dafcc306a0af80a57966ba160897cb03cb66aadd2560722419e70f3de8f4eda9d4fd6a017fc2eba854a2c04c4cb4b8e17d6f5dd85a47fd12dacbf5f89fb1c55e6f01f5a918769c0ce8b3530d4d0b42703ad4cea1ded167e2abffa1915381b3c928b61057ce097e74fad6e188a250fd44bfc17ed6b4037b21c5c0cfecb32863fd5a33eea"]}, 0x246c}], 0x2, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [r7, r5]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r6, r1, r3, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, r8, r9}}}, @rights={{0x20, 0x1, 0x1, [r6, r6, r3, r7]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r5, r6, r3]}}], 0x140, 0x20000080}, 0x4804) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) 2m40.792675828s ago: executing program 4 (id=4413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0xfd17, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x80001ff, 0x0, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x20], [0x0, 0x1001000, 0x1, 0x1e3552a3], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={r7, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8, 0xffffffff], [0x0, 0x4e4f]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffe64}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) 2m24.687555178s ago: executing program 38 (id=4413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0xfd17, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x80001ff, 0x0, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x20], [0x0, 0x1001000, 0x1, 0x1e3552a3], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={r7, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8, 0xffffffff], [0x0, 0x4e4f]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffe64}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) 17.441967671s ago: executing program 1 (id=4880): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000700", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 16.757422734s ago: executing program 1 (id=4883): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x180) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"5856c122", 0x3, 0x8, 0x3, 0x1, 0x4, "bca4f7218104c03cc3eaded8d04c7e", '\x00', "0b101c33", "5767ffc2", ["35805993818c5cba2218cf2c", "da73773a2a7ae0de7e9691f5", "17d3338535a339ad3acaa4ef", "da5fa5cd20e53880c0c372c1"]}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x6, &(0x7f0000000300)={0x0, 0x2c, 0x1, @thr={&(0x7f0000000080)="2c33fa3aa7cc2b7b5fb0e53e910e6a8071f4c54fce27da58d061400b5e82fa049a458b38e8f7a56859fce14d447c286c67a82236964ff1b0", 0x0}}, &(0x7f0000000340)=0x0) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000004c0)={'team_slave_0\x00', {0x2, 0x0, @dev}}) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x53, 0x300) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xf, 0x4}) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) socketpair(0x5, 0x800, 0x1, &(0x7f0000000000)) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) readlinkat(r6, &(0x7f0000000440)='./file1\x00', &(0x7f0000000540)=""/31, 0x1f) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES16=r3], 0x26}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000240)={0x2000, r1}, 0x0) symlinkat(&(0x7f00000001c0)='./file1\x00', r2, &(0x7f0000000400)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 14.680628163s ago: executing program 1 (id=4887): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000801) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000010101000000000002001300240002800c00028005000100110000eedb8268f1cc7f518b3b5a0008000200000000000c001980080002009908000000000000"], 0x44}}, 0x0) shutdown(r0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 12.831442404s ago: executing program 0 (id=4889): sendmmsg(0xffffffffffffffff, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4009811) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0x3, 0x7ff, {{0x24, 0x4, 0x0, 0x3a, 0x90, 0x64, 0x0, 0x3, 0x29, 0x0, @loopback, @broadcast, {[@generic={0x44, 0xe, "d35704311bc990bbb25853a5"}, @timestamp_prespec={0x44, 0x14, 0xe, 0x3, 0x7, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}]}, @timestamp_prespec={0x44, 0x1c, 0x36, 0x3, 0xe, [{@rand_addr=0x64010102, 0x7fffffff}, {@loopback, 0x20}, {@private=0xa010102, 0x3bd0}]}, @generic={0x88, 0xa, "838cd44990248f01"}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0xb, [0x5, 0x8000]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xf0, 0x0, 0x9, [0x6, 0x4, 0x451, 0x5, 0x0, 0x8000, 0xd, 0xa87a]}]}}}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x35}, @multicast1, r0}, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000540)=0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$llc(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0xdbfc, 0x0) r5 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) syz_pidfd_open(r5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xffef}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x87, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0xffffffff, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0xfffffdfa, 0x800) setsockopt$llc_int(r9, 0x10c, 0x2, &(0x7f00000000c0)=0x401, 0x4) 12.752131719s ago: executing program 8 (id=4891): r0 = socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x46, 0x0, 0x4}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000002"], 0x20201) socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r5, 0x0, 0x0, 0x1001ed) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000005440)=@newtaction={0x364, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}, {0x34c, 0x1, [@m_ct={0x138, 0x4, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "beb3ed967dedf11d4d190b84bedcf8a7"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}]}, {0xd7, 0x6, "3cf82dcb294a2aa336232744d395709c9e352919fe48921331b8eb6a89c598a57bdf91a3b9c4ebb7af265326ddec9b0cd8fd596b7fd5009b67b3e96eb5529e3ef9cf1d67409fc361bd56d85e43b1672f32ea34be74cae0463871973839cbf9ec78d7b861a19559602fd790f35db688143a81be73f1af310112deeb237639d26ed2655f0a19736864450a6a80e93d7b1225bb3110d293cf0f69f5a4a9021411b2853f6abeb27ce397aa099d4892d24a24c46b1117733a8c4e120e161d05bdf19cd38d9955fbe5af8762cfa0cc86857c9117e626"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x11c, 0x2, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x64d90}, @TCA_MPLS_LABEL={0x8, 0x5, 0x41ef7}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x1ad6, 0x6, 0x9, 0x7}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3e573}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x91, 0x6, "9cf61641917639e77042d78ab454ee083344260ecb7e6d247d8d443cb482a57bcaab6ad554b6e4a5fc331909747b1eedf5e2ec57d0b229df3b96c6482f91e53bd99f9b513c41c8bc1016f05bbab3504d3ebca5a273def5d1b12fc3942c042642b7733ea8c692bac3a121625dd9c04b206142c5d94632171c6e16d31751ca23da0612568642f57c631e8642d3ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_mirred={0xf4, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3, 0x7, 0x5e}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c, 0x1, 0x1, 0xfffffffd, 0x587}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0xffffffffffffffff, 0xffff, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x2, 0x2}, 0x1}}]}, {0x46, 0x6, "c6a10ec6481da4c42e39c6818dcd96f5b930db99d522e9f643f6a88250baabefec05595b8a1d969dffdf23fa3a4d1cac3b82c5213dee550999ee506f397cef7c22ac"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x364}}, 0x0) fallocate(r5, 0x3, 0xf00, 0x10000) socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000"], 0x10}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000480)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 11.783509805s ago: executing program 0 (id=4894): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0x7, 0x2a082) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x2, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1004) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000180)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r4, @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000044000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac00030000000100000009000000", @ANYRESOCT=r3], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$TIOCMSET(r9, 0x5418, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') renameat2(r10, &(0x7f0000000100)='./file0\x00', r10, &(0x7f0000000140)='./file0\x00', 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="ffffff001000"}, 0xffffff7d, {0x2, 0x0, @broadcast}, 'veth0_to_team\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000a0000f3ffffffffff4a8c048f9694a89a4d1e0bffff6b04c666d04b2e79e0c4189b388fbdbf705ed2704b5defe2625349e7fd5a81bf7975e7", @ANYBLOB="d4705c2038df474f340fcd4df2bc26e8f5e53a9c50f7253e4448591f9bc351bbf6ef77e84e542faf234f4f6984f28ae8e6602794f92006142663e40fd7f2fb9ccf2ac9fee5c9e6341476aa5b8ef0c21d540380b567a2c8046f48bde6b0be95f4e0621f761c98abe8042be6d7d5d30675505930aa3a3620b39da4ca4cc2017216a0430700960c6dfca21efee2cf8b0f75782776", @ANYRESHEX, @ANYRES8, @ANYRES32=r7, @ANYRES64=r3], 0x98) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) 11.686065092s ago: executing program 8 (id=4895): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f00000000c0)={0x500000000000000, 0x0, 0x0, 0x1, 0xb, r0, 0x0, 0x0, 0x3, 0x0, 0x1, r2}]) 11.27680636s ago: executing program 1 (id=4896): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x100002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x2f2d, 0x1, 0x10001) timer_create(0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) 8.984404333s ago: executing program 1 (id=4898): fsopen(&(0x7f0000000280)='xfs\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f8c82, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0076303a00000000000000000000000000f2ff"}) r1 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r2, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES16=r0], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) socket(0x10, 0x4, 0x2) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x238, 0xea030000, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r5 = io_uring_setup(0x4b55, &(0x7f00000005c0)={0x0, 0xfc7f, 0x80, 0x2, 0x1ab}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000008c0)={0x1, 0x1, 0x0, &(0x7f0000000840)=[{0x0}], 0x0}, 0x20) 8.980907077s ago: executing program 0 (id=4900): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) close(0xffffffffffffffff) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000180)="2f95fca183f2f342c83faa9b0a0164c07e5fec5d72bae1f686a38995d8262c5b6cb8642b12d6b8f941f8cb5b60362a354ef15611815e3082bcf3e8f1a422b80d9d64915652c68c8cb44f9496a1628bc675ebc4028bb5ee913e5c71e90784d2315e94e2370c29a3a7df8a5b077f64fe0095e401b36217537ae2696727f4b5cd5f8352af196d868dc1baa9f08f74cafe986f6131691e1999a7cec0cf59ce342f5325371bbb72ab317f", 0xa8, 0xc, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000008b00)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket(0x1e, 0xa, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'tunl0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x5fffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102400, 0x19000) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000002440)=""/4100, 0x1004) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 8.875864658s ago: executing program 8 (id=4901): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 8.578995694s ago: executing program 9 (id=4905): socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) bind$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000040), 0x6f6, 0x640041) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f00000012"], 0x20) 6.632595563s ago: executing program 9 (id=4906): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0x100, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x114, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) lseek(r8, 0x3, 0x0) syz_io_uring_submit(r4, r5, 0x0) 6.132031136s ago: executing program 0 (id=4908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0xc0010) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6.060197077s ago: executing program 2 (id=4909): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x100002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x2f2d, 0x1, 0x10001) timer_create(0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) 5.384001067s ago: executing program 9 (id=4910): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x478, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0x0, 0x9}, {0x7, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xf}}, @TCA_FLOW_POLICE={0x43c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf7b, 0x3, 0xfffff879, 0x3e8, 0x2, 0x1, 0x425000, 0x5, 0x7ff, 0x9, 0x800, 0x1, 0x4, 0x6, 0xfffffffb, 0x8, 0x9, 0x100, 0x6, 0x7, 0xfffffffb, 0x7e, 0xe0, 0x80, 0x63, 0x2000000, 0x0, 0x1, 0x6, 0x7b10, 0xc08, 0x80, 0x2, 0x921, 0x2, 0x9, 0x8, 0x8, 0x7, 0x8000, 0x1, 0xffff, 0x8, 0xfffffff2, 0x4, 0x4, 0xfffffff8, 0x1, 0x7fff, 0x8, 0x779, 0x2, 0x7, 0x3, 0x80000001, 0x1, 0x90, 0x3, 0x10001, 0xffffffea, 0x100, 0x4, 0x100, 0xf, 0x8, 0x3, 0x40, 0xa, 0x7, 0xdf6b, 0x9, 0x40, 0x8, 0x7f, 0x5, 0xd, 0xfffffff3, 0x8, 0x6, 0xffff5aac, 0x0, 0x2, 0x9, 0x8, 0x7, 0x38d6, 0xa, 0x2, 0x81, 0x9d7, 0x5, 0x5, 0x5, 0xfffffff7, 0x7, 0xff, 0x0, 0x8e4, 0xb45, 0x5e, 0xa, 0x7fff, 0x9, 0x2, 0xc2, 0x10, 0x6, 0x6, 0x7fffffff, 0xee, 0x2, 0x1, 0x8, 0x3, 0xfffffff6, 0x3, 0x4, 0x8, 0x6, 0x3, 0x7, 0x5, 0x8, 0x8, 0x266f, 0x8001, 0x2, 0xff, 0x8, 0x7, 0x7, 0x3, 0x5, 0x401, 0x7, 0xe1, 0x8, 0x7, 0xc, 0x6, 0xebc, 0x4, 0xb, 0x83e, 0x8, 0x7ff, 0x1, 0xffffffff, 0x5, 0x8, 0x80, 0x1, 0x9, 0x7bd9, 0x4, 0x7926, 0x8, 0x2, 0x2, 0x251657a0, 0xfff, 0x7a, 0x4, 0x6, 0xc, 0x1, 0x7, 0x40, 0xfffff800, 0x4, 0x80000001, 0x1, 0x4, 0x2, 0xd7, 0x5, 0x9, 0x0, 0x80000000, 0x1, 0x7fff, 0x6, 0x1800000, 0x4, 0xfffffff9, 0xbb, 0x1, 0xe, 0x7f, 0x90, 0x101, 0x80000000, 0x0, 0xc, 0x0, 0x5, 0x81, 0x800, 0x7, 0x8, 0x31, 0xfffffffb, 0x1, 0x7ff, 0x5, 0x9, 0x10000, 0x6, 0x5, 0x2, 0x80, 0x3ff, 0x9, 0x800, 0x0, 0xe89, 0x4, 0x907, 0x800, 0x3, 0xf1e, 0xb1d, 0xc, 0x7, 0x7fff, 0xdff1, 0x3, 0x7, 0x1000, 0x1, 0xe2d, 0x8001, 0x80000000, 0xa7, 0xf, 0x6, 0x0, 0x9, 0x4, 0x1, 0x16, 0x2, 0x1, 0x5, 0xfff, 0x9, 0xf, 0x100, 0x0, 0xfda, 0xd, 0x8, 0x0, 0x4ce0, 0xadf7, 0x80000001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20041090}, 0x40040) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 5.383529604s ago: executing program 2 (id=4911): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0x940, 0x27025}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x1a, 0x1, {0x7fff, 0x1ff}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048d4}, 0x40000) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/39, 0x27, 0x10120, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) faccessat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2, 0x1000) 5.298273682s ago: executing program 9 (id=4912): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendto(r2, 0x0, 0x2a0, 0x20000010, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r3, 0x0, 0x4d) 5.127107982s ago: executing program 0 (id=4913): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) tee(r0, r0, 0x6, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r5, 0x0, 0x33) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x26, 0x800, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$tipc(0x1e, 0x5, 0x0) 5.126822972s ago: executing program 9 (id=4914): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) tee(r0, r0, 0x6, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r5, 0x0, 0x33) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x26, 0x800, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$tipc(0x1e, 0x5, 0x0) 3.917255339s ago: executing program 1 (id=4915): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @win={{0x9, 0x75a, 0x7, 0xffff0000}, 0x0, 0x0, &(0x7f0000000580)={{0xfffffffa, 0x3, 0xfffffffc, 0x6}, &(0x7f0000000540)={{0x2, 0x7, 0x3, 0x4}, &(0x7f0000000440)={{0x6, 0x7, 0x67, 0xfffffff9}}}}, 0x327db043, &(0x7f00000005c0)="c2a1421ad0affa69dfb0a64c0b1f5089989d82072bb7e01c8897c045e2f4d991c1165d1c5a1df11c74ed80e1776a", 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4087, 0xff7}, {&(0x7f0000002700)=""/4073, 0xfe9}], 0x2}, 0x22020) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee01, &(0x7f0000000240)) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14022000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettaction={0xac, 0x32, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd7ad}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x44, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffff7f}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[], &(0x7f0000000640)={0x0, 0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="050f599f"]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) 3.88873115s ago: executing program 8 (id=4916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffc, 0x8, 0x1f, 0x184}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010129bd7000fddbdf2531000000050035000200000005003300030000000a0001007770616e300000000500340081000000050036"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x84) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2739}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x80c5) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x28402) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x5, 0x10000016) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000005c0)={&(0x7f0000000580)="84144a6f0986a7ea383677a0a58869a2ccef34e466a4b48af230921fd72b516fe334a0a067bfa8c87acf17", 0x2b}}, 0xa000) 3.685619484s ago: executing program 0 (id=4917): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000140)=0x1) write$UHID_INPUT(r1, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x20000) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x7fffffffffffffff, 0x9, 0x12}}) 3.472836113s ago: executing program 9 (id=4918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pimreg0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00004f0000/0x3000)=nil, 0x3000, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r3, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x802, 0xd, "5dee0000005940090000000f00"}) unshare(0xc020c00) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x24044000) unshare(0x22020600) socket$unix(0x1, 0x1, 0x0) sync_file_range(r2, 0x2, 0x56, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '.\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa, 0x8000000000000001, 0x2, 0x1, 0x38000000000000, 0x4, 0x6, 0x7fffffffffffffff}, &(0x7f0000000280)={0x2c286030, 0xac0, 0x3ff, 0x102, 0xff, 0x1, 0x9, 0x4}, &(0x7f00000002c0)={0x4, 0xfffffffffffffff9, 0x20, 0x96, 0x100, 0x0, 0x2, 0xba0}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xea]}, 0x8}) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYBLOB="f4653b0e1b9d06068c96eb4b53fe81b2b93296e305a85192f54f95917f3d44daa0ef027482724f0c21ab4fa3a111d8aa7df635f6ffae2afc471e6910ffa1fdc554cd697f4fd86d9d7c13008eef8a7a3725a42c8fa28b0c674c8cb387a4a7d075b216caad37fc3f0a0266498ccf64b62f86c9da60efc47b3671eeddf5c25a726eb3b188942ab1378c504e8a15b68a409e4dbc36878ab688fc899ce5f2a5b66e1a650541680805e15a4b3d1435a0602124bd58fd0249e5b711de2146fb59b4a7f35b0cf722d6c50ed811d636d82b1531ad8ddf83ac2d161b8a162dbddb93b1a8", @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 2.796059529s ago: executing program 2 (id=4919): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getresuid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 1.454737604s ago: executing program 2 (id=4920): landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x8001}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x90, 0x6, 0x3, 0x0, 0x15, 0x1, 0x1, 0x3, 0x4b, 0x7f, 0xff, 0x8, 0x1, 0x6, 0xd, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406810100000002000000b8c70000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) 782.634121ms ago: executing program 2 (id=4921): unshare(0x28000600) socket$inet6(0xa, 0x2, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x6, 0x1, 0x3, 0x5, 0x0, 0xa}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) 691.047066ms ago: executing program 8 (id=4922): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x100002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioperm(0x2f2d, 0x1, 0x10001) timer_create(0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) 3.06828ms ago: executing program 2 (id=4923): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0x301, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x1411, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000881}, 0x48040) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000003"], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=4924): sendto$packet(0xffffffffffffffff, &(0x7f0000000040)='6<', 0x2, 0x4000000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf00001}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000002c0)={0x5, 0x0, [{0x19a, 0x0, 0x9}, {0x40001c58, 0x0, 0x3ff}, {0xa5f, 0x0, 0x7}, {0x60b, 0x0, 0x3}, {0x7f7}]}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x5c}}, 0x4008800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000580)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0xca}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): number 33 [ 1137.025215][ T5864] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1137.075017][ T5864] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1137.116532][ T5864] keyspan 9-1:0.0: device disconnected [ 1137.663148][ T5864] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1137.825329][ T5864] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1138.136848][ T5864] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1138.166009][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.211630][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1138.314661][ T5864] usb 5-1: config 1 has no interface number 0 [ 1138.335518][ T5864] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1138.366434][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.509295][ T5864] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1138.728590][ T5864] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1138.755302][ T5864] snd_usb_pod 5-1:1.1: invalid control EP [ 1138.776677][ T5864] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1138.802700][ T5864] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1138.827300][ T5864] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1138.905600][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1139.033434][ T5864] usb 5-1: USB disconnect, device number 47 [ 1140.577442][T22341] netlink: 'syz.4.4258': attribute type 1 has an invalid length. [ 1140.585508][T22341] netlink: 'syz.4.4258': attribute type 1 has an invalid length. [ 1140.593521][T22341] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4258'. [ 1140.837659][T22343] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4255'. [ 1141.005987][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4257'. [ 1141.015595][T22340] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4257'. [ 1141.052780][T22340] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1141.149535][T22351] sctp: [Deprecated]: syz.1.4259 (pid 22351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1141.149535][T22351] Use struct sctp_sack_info instead [ 1141.195817][T22351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4259'. [ 1141.632928][T22368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.988456][T22373] netlink: 'syz.1.4266': attribute type 1 has an invalid length. [ 1142.888947][T22378] bond1: (slave gretap1): making interface the new active one [ 1142.980553][T22378] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1143.195906][ T29] audit: type=1400 audit(1772491423.025:1841): avc: denied { create } for pid=22386 comm="syz.8.4269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1143.935754][T22399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.769040][T22410] 9p: Bad value for 'rfdno' [ 1144.888100][T22411] FAULT_INJECTION: forcing a failure. [ 1144.888100][T22411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.113151][T22411] CPU: 1 UID: 0 PID: 22411 Comm: syz.8.4275 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.113179][T22411] Tainted: [L]=SOFTLOCKUP [ 1145.113185][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.113195][T22411] Call Trace: [ 1145.113201][T22411] [ 1145.113207][T22411] dump_stack_lvl+0x100/0x190 [ 1145.113239][T22411] should_fail_ex.cold+0x5/0xa [ 1145.113261][T22411] _copy_from_iter+0x43a/0x1690 [ 1145.113292][T22411] ? __pfx__copy_from_iter+0x10/0x10 [ 1145.113315][T22411] ? __pfx___alloc_skb+0x10/0x10 [ 1145.113350][T22411] netlink_sendmsg+0x808/0xda0 [ 1145.113374][T22411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.113402][T22411] ____sys_sendmsg+0xa54/0xc30 [ 1145.113425][T22411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1145.113455][T22411] ___sys_sendmsg+0x190/0x1e0 [ 1145.113478][T22411] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.113527][T22411] __sys_sendmsg+0x170/0x220 [ 1145.113544][T22411] ? __pfx___sys_sendmsg+0x10/0x10 [ 1145.113577][T22411] do_syscall_64+0x106/0xf80 [ 1145.113596][T22411] ? clear_bhb_loop+0x40/0x90 [ 1145.113619][T22411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.113635][T22411] RIP: 0033:0x7feb1df9c799 [ 1145.113650][T22411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.113666][T22411] RSP: 002b:00007feb1ee99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.113683][T22411] RAX: ffffffffffffffda RBX: 00007feb1e216090 RCX: 00007feb1df9c799 [ 1145.113694][T22411] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1145.113705][T22411] RBP: 00007feb1ee99090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.113715][T22411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.113726][T22411] R13: 00007feb1e216128 R14: 00007feb1e216090 R15: 00007ffe7bd497b8 [ 1145.113748][T22411] [ 1146.366949][T22423] fuse: Bad value for 'fd' [ 1147.134620][ T29] audit: type=1800 audit(1772491426.131:1842): pid=22427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.4279" name="/newroot/192/pids.events" dev="tmpfs" ino=1027 res=0 errno=0 [ 1147.263351][T18399] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 1147.292802][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1147.436161][T18399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.513537][T18399] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1147.529405][T18399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.541911][T18399] usb 2-1: config 0 descriptor?? [ 1147.550223][T18399] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1148.201378][T22451] fuse: Bad value for 'fd' [ 1148.599834][T22466] gfs2: error -5 reading superblock [ 1148.827777][T22468] blktrace: Concurrent blktraces are not allowed on loop16 [ 1148.994733][ T980] usb 2-1: USB disconnect, device number 76 [ 1149.788164][T22481] syz_tun: entered promiscuous mode [ 1149.857304][T22481] macsec1: entered promiscuous mode [ 1149.904164][T22481] macsec1: entered allmulticast mode [ 1149.909487][T22481] syz_tun: entered allmulticast mode [ 1150.213551][T22495] 8021q: VLANs not supported on ipvlan0 [ 1150.234527][T22495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.257661][ T29] audit: type=1400 audit(1772491430.565:1843): avc: denied { ioctl } for pid=22507 comm="syz.1.4304" path="socket:[81028]" dev="sockfs" ino=81028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1151.603121][ T29] audit: type=1400 audit(1772491430.649:1844): avc: denied { read } for pid=22507 comm="syz.1.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1151.654960][ T29] audit: type=1400 audit(1772491430.939:1845): avc: denied { map } for pid=22507 comm="syz.1.4304" path="socket:[81027]" dev="sockfs" ino=81027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1151.686074][ T29] audit: type=1400 audit(1772491430.939:1846): avc: denied { accept } for pid=22507 comm="syz.1.4304" path="socket:[81027]" dev="sockfs" ino=81027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1152.034605][ T29] audit: type=1400 audit(1772491431.294:1847): avc: denied { write } for pid=22518 comm="syz.4.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1152.638674][T22544] netlink: 'syz.4.4312': attribute type 1 has an invalid length. [ 1153.527040][T17592] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1153.548098][T17592] Bluetooth: hci0: command 0x0406 tx timeout [ 1155.496411][T22562] fuse: Bad value for 'fd' [ 1155.529838][ T29] audit: type=1400 audit(1772491434.568:1848): avc: denied { mount } for pid=22563 comm="syz.4.4321" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1155.594023][T22564] IPv6: NLM_F_CREATE should be specified when creating new route [ 1156.285421][T22576] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4324'. [ 1156.366008][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4324'. [ 1156.379256][T22577] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4324'. [ 1158.114275][ T5960] usb 9-1: new low-speed USB device number 34 using dummy_hcd [ 1158.360143][ T5960] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1158.381521][ T5960] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1158.479754][ T5960] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1158.545186][ T5960] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1158.569443][ T5960] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1158.623866][ T5960] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1158.683404][ T5960] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1158.690794][ T5960] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1158.740205][ T5960] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1159.044613][ T5960] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1159.072305][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.151342][ T5960] usb 9-1: can't set config #168, error -71 [ 1159.160694][ T5960] usb 9-1: USB disconnect, device number 34 [ 1159.739294][ T980] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1159.921698][ T980] usb 3-1: device descriptor read/64, error -71 [ 1159.974434][ T29] audit: type=1400 audit(1772491438.721:1849): avc: denied { execute } for pid=22588 comm="syz.9.4330" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=80724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1160.188259][ T980] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1160.348807][ T980] usb 3-1: device descriptor read/64, error -71 [ 1160.620537][ T29] audit: type=1400 audit(1772491439.329:1850): avc: denied { write } for pid=22607 comm="syz.8.4334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1160.655796][ T980] usb usb3-port1: attempt power cycle [ 1160.800400][T22610] netlink: 'syz.9.4335': attribute type 2 has an invalid length. [ 1160.825381][T22610] pimreg3: entered allmulticast mode [ 1161.075259][ T980] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1161.097933][ T980] usb 3-1: device descriptor read/8, error -71 [ 1161.233434][T22616] overlayfs: failed to clone upperpath [ 1162.946409][ T980] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1163.056023][ T980] usb 3-1: device descriptor read/8, error -71 [ 1163.221306][ T980] usb usb3-port1: unable to enumerate USB device [ 1163.506310][ T980] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1163.763682][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 1163.776971][T22634] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.798757][T22634] binder: 22633:22634 ioctl 4018620d 200000004a80 returned -16 [ 1163.909576][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1163.989705][ T980] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 90, changing to 7 [ 1164.145750][ T980] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 1164.187699][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.195735][ T980] usb 5-1: Product: ÐŽ [ 1164.227080][ T980] usb 5-1: Manufacturer: у [ 1164.267329][ T980] usb 5-1: SerialNumber: syz [ 1166.175037][ T24] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1166.300577][ T29] audit: type=1400 audit(1772491444.633:1851): avc: denied { getopt } for pid=22661 comm="syz.2.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1166.357423][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1166.366577][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.378707][T22664] openvswitch: netlink: IP tunnel dst address not specified [ 1166.395944][ T24] usb 2-1: Product: syz [ 1166.401248][T22664] netlink: 'syz.2.4350': attribute type 1 has an invalid length. [ 1166.429371][ T24] usb 2-1: Manufacturer: syz [ 1166.434103][ T24] usb 2-1: SerialNumber: syz [ 1166.459651][ T24] usb 2-1: config 0 descriptor?? [ 1166.515071][T22666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 1166.614275][T17585] block nbd0: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 330 seconds [ 1166.625254][T17585] block nbd0: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 330 seconds [ 1166.636343][T17585] block nbd0: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 330 seconds [ 1166.647995][T17585] block nbd0: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 330 seconds [ 1166.701020][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1166.848498][T18399] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1167.036784][T18399] usb 9-1: Using ep0 maxpacket: 16 [ 1167.048447][T18399] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1167.058990][T18399] usb 9-1: config 8 has an invalid interface number: 254 but max is 0 [ 1167.062155][ T980] usb 5-1: 1:1: invalid format type 0x1005 is detected, processed as PCM [ 1167.070646][T18399] usb 9-1: config 8 has no interface number 0 [ 1167.080277][ T980] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1167.085235][T18399] usb 9-1: config 8 interface 254 has no altsetting 0 [ 1167.108418][T18399] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 1167.117785][T18399] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.125794][T18399] usb 9-1: Product: syz [ 1167.147859][T18399] usb 9-1: Manufacturer: syz [ 1167.152715][T18399] usb 9-1: SerialNumber: syz [ 1167.434822][ T29] audit: type=1804 audit(1772491445.681:1852): pid=22672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4352" name="/newroot/309/file0" dev="tmpfs" ino=1665 res=1 errno=0 [ 1167.752519][ T29] audit: type=1400 audit(1772491445.690:1853): avc: denied { write } for pid=22669 comm="syz.4.4352" path="socket:[81950]" dev="sockfs" ino=81950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1167.779637][ T980] usb 5-1: USB disconnect, device number 48 [ 1167.802126][T18399] usb 9-1: USB disconnect, device number 35 [ 1167.813567][T22675] binder: 22674:22675 ioctl c0306201 2000000003c0 returned -14 [ 1167.859503][T16073] udevd[16073]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1168.226446][ T29] audit: type=1400 audit(1772491446.438:1854): avc: denied { shutdown } for pid=22687 comm="syz.4.4359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1168.254038][ T49] smc: removing ib device  [ 1168.499539][ T5806] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1168.538354][T22693] netlink: 13 bytes leftover after parsing attributes in process `syz.9.4358'. [ 1168.693799][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1168.770747][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1168.864856][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1168.914663][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1168.969318][ T5806] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1169.005432][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.025608][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1169.079130][ T5806] usb 3-1: config 0 descriptor?? [ 1169.255719][T18399] usb 2-1: USB disconnect, device number 77 [ 1169.936218][ T5806] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1170.495899][ T5806] usb 3-1: USB disconnect, device number 38 [ 1170.926642][ T29] audit: type=1400 audit(1772491448.964:1855): avc: denied { mounton } for pid=22726 comm="syz.9.4366" path="/233/file0" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1171.335788][T22741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.166577][ T29] audit: type=1326 audit(1772491450.124:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.191127][ T29] audit: type=1326 audit(1772491450.152:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.192998][ T29] audit: type=1326 audit(1772491450.152:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.227438][ T29] audit: type=1326 audit(1772491450.189:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.227488][ T29] audit: type=1326 audit(1772491450.189:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.264602][ T29] audit: type=1326 audit(1772491450.217:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.421386][ T29] audit: type=1326 audit(1772491450.358:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.431095][ T29] audit: type=1326 audit(1772491450.376:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1172.432926][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.559118][ T977] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1172.620049][T22778] tmpfs: Bad value for 'size' [ 1172.675471][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1172.720003][ T977] usb 9-1: Using ep0 maxpacket: 32 [ 1172.730299][ T977] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1172.756479][ T977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.774387][ T977] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1172.788886][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.800023][ T977] usb 9-1: config 0 descriptor?? [ 1172.808452][T22784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1172.849694][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1172.863732][ T24] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1172.880889][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.892107][ T24] usb 2-1: Product: syz [ 1172.896912][T22784] veth3: entered allmulticast mode [ 1172.926025][ T24] usb 2-1: Manufacturer: syz [ 1172.930677][ T24] usb 2-1: SerialNumber: syz [ 1172.971436][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1173.134749][ T5806] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1173.225184][ T29] audit: type=1326 audit(1772491451.115:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1173.253725][ T5960] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1173.305821][ T29] audit: type=1326 audit(1772491451.143:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22756 comm="syz.1.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de779c799 code=0x7ffc0000 [ 1173.974583][ T5806] usb 3-1: Using ep0 maxpacket: 32 [ 1173.987426][ T24] gspca_topro: reg_w err -110 [ 1173.998618][ T5806] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1174.004954][ T977] corsair-psu 0003:1B1C:1C09.0018: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 1174.032915][ T24] gspca_topro: Sensor soi763a [ 1174.038524][ T5806] usb 3-1: config 0 has no interface number 0 [ 1174.046537][T18399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.143138][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1174.158170][ T5806] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1174.214952][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 1174.344088][ T5806] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1174.409279][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.428068][ T5806] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1174.437238][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.449538][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.457564][ T5806] usb 3-1: Product: syz [ 1174.471000][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1174.495483][ T5806] usb 3-1: Manufacturer: syz [ 1174.506576][ T5806] usb 3-1: SerialNumber: syz [ 1174.513957][ T5960] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1174.535480][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.546700][ T5806] usb 3-1: config 0 descriptor?? [ 1174.557905][ T5960] usb 5-1: config 0 descriptor?? [ 1174.563643][ T24] usb 2-1: USB disconnect, device number 78 [ 1174.763118][ T977] corsair-psu 0003:1B1C:1C09.0018: unable to initialize device (-71) [ 1174.775217][T22788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.784814][T22788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.796061][ T977] corsair-psu 0003:1B1C:1C09.0018: probe with driver corsair-psu failed with error -71 [ 1174.835520][ T977] usb 9-1: USB disconnect, device number 36 [ 1174.844634][T22792] syzkaller0: entered promiscuous mode [ 1174.850742][T22792] syzkaller0: entered allmulticast mode [ 1174.860115][T22803] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4385'. [ 1175.166594][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.295068][ T5806] appletouch 3-1:0.85: Geyser mode initialized. [ 1175.314308][ T5806] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input28 [ 1175.486701][T22809] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4386'. [ 1175.498402][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.510614][T22788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.527502][T22809] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4386'. [ 1175.544783][T22788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.610889][ T5806] usb 3-1: USB disconnect, device number 39 [ 1175.649851][ T5960] usbhid 5-1:0.0: can't add hid device: -71 [ 1175.658434][ T5960] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1175.680140][ T5806] appletouch 3-1:0.85: input: appletouch disconnected [ 1175.693536][ T5960] usb 5-1: USB disconnect, device number 49 [ 1176.079655][T22819] trusted_key: encrypted_key: master key parameter 'defÌult' is invalid [ 1176.281387][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.402189][T22828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1176.435631][T22830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22830 comm=syz.1.4388 [ 1177.166644][T22839] tipc: Enabling of bearer rejected, failed to enable media [ 1177.699828][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.717876][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.868823][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 1177.868839][ T29] audit: type=1400 audit(1772491455.456:1917): avc: denied { write } for pid=22833 comm="syz.4.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1178.056706][T22854] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4398'. [ 1178.489903][T22860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22860 comm=syz.2.4397 [ 1178.806971][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.863181][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.964390][ T29] audit: type=1400 audit(1772491456.485:1918): avc: denied { append } for pid=22856 comm="syz.8.4401" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1179.198068][T22865] binder: 22864:22865 unknown command 0 [ 1179.269470][T22865] binder: 22864:22865 ioctl c0306201 200000004a40 returned -22 [ 1179.880520][ T5878] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1179.978733][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.026689][T22887] infiniband syz2: set down [ 1181.031206][T22887] infiniband syz2: added ipvlan0 [ 1181.421393][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.441428][ T5878] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1181.451287][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1181.485433][T22887] RDS/IB: syz2: added [ 1181.489486][T22887] smc: adding ib device syz2 with port count 1 [ 1181.496300][T22887] smc: ib device syz2 port 1 has no pnetid [ 1181.580217][ T5878] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1181.610140][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1182.094241][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.136733][ T5878] usb 3-1: Product: syz [ 1182.140925][ T5878] usb 3-1: Manufacturer: syz [ 1182.177089][ T5878] usb 3-1: SerialNumber: syz [ 1182.198995][ T5878] usb 3-1: config 0 descriptor?? [ 1182.228070][T22890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1182.231607][ T5878] usb 3-1: selecting invalid altsetting 0 [ 1182.491544][ T5960] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1182.525999][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.603645][ T5878] usb 3-1: USB disconnect, device number 40 [ 1182.660101][ T5960] usb 9-1: Using ep0 maxpacket: 16 [ 1182.676760][ T5960] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1182.747827][ T5960] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1182.767181][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.787056][ T5960] usb 9-1: Product: syz [ 1182.803587][ T5960] usb 9-1: Manufacturer: syz [ 1182.813840][ T5960] usb 9-1: SerialNumber: syz [ 1182.836533][ T5960] usb 9-1: config 0 descriptor?? [ 1182.868659][ T5960] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1183.648944][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.975611][T10790] usb 9-1: Failed to submit usb control message: -110 [ 1183.983432][T10790] usb 9-1: unable to send the bmi data to the device: -110 [ 1183.992483][T10790] usb 9-1: unable to get target info from device [ 1184.000101][T10790] usb 9-1: could not get target info (-110) [ 1184.011099][T10790] usb 9-1: could not probe fw (-110) [ 1184.041537][T22925] hub 8-0:1.0: USB hub found [ 1184.047643][T22925] hub 8-0:1.0: 1 port detected [ 1184.278300][T22933] netlink: 'syz.9.4422': attribute type 8 has an invalid length. [ 1184.748814][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.776684][ T977] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1184.823964][ T5960] usb 9-1: USB disconnect, device number 37 [ 1184.969114][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 1184.980405][ T977] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1184.989455][ T977] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1185.024672][ T977] usb 2-1: Product: syz [ 1185.028854][ T977] usb 2-1: Manufacturer: syz [ 1185.055247][ T977] usb 2-1: SerialNumber: syz [ 1185.062042][ T977] usb 2-1: config 0 descriptor?? [ 1186.117477][ T5960] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1186.139377][ T5878] usb 2-1: USB disconnect, device number 79 [ 1186.140821][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.166643][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.307184][ T5960] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1186.439022][ T5960] usb 9-1: not running at top speed; connect to a high speed hub [ 1186.472356][ T5960] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1186.495258][ T5960] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1186.517535][ T5960] usb 9-1: string descriptor 0 read error: -22 [ 1186.526581][ T5960] usb 9-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 1186.555451][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.581373][T22941] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1187.108109][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.117355][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.160716][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.167604][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.192809][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.209656][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.236015][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.244948][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.275400][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.286052][ T5960] acrux 0003:1A34:F705.0019: unknown main item tag 0x0 [ 1187.311165][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.396006][ T5960] acrux 0003:1A34:F705.0019: hidraw0: USB HID v0.07 Device [HID 1a34:f705] on usb-dummy_hcd.8-1/input0 [ 1187.438695][ T5960] acrux 0003:1A34:F705.0019: no inputs found [ 1187.444780][ T5960] acrux 0003:1A34:F705.0019: Failed to enable force feedback support, error: -19 [ 1187.545677][ T5960] usb 9-1: USB disconnect, device number 38 [ 1187.824144][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.847812][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4430'. [ 1187.932507][T22959] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4427'. [ 1187.975359][ T29] audit: type=1400 audit(1772491464.866:1919): avc: denied { watch_sb } for pid=22954 comm="syz.1.4427" path="/313/file0" dev="tmpfs" ino=1678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1188.040930][T22958] gretap1: entered promiscuous mode [ 1188.089084][T22958] batman_adv: batadv0: Adding interface: gretap1 [ 1188.188211][T22958] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.285045][T22958] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1188.393785][T22969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1188.444229][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.163993][T22984] syz.1.4437 (22984): drop_caches: 2 [ 1189.407134][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.558498][ T29] audit: type=1400 audit(1772491466.353:1920): avc: denied { watch_mount } for pid=22988 comm="syz.1.4438" path="/316" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1189.820516][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.873518][ T29] audit: type=1400 audit(1772491466.372:1921): avc: denied { relabelfrom } for pid=22988 comm="syz.1.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1189.900255][ T29] audit: type=1400 audit(1772491466.372:1922): avc: denied { relabelto } for pid=22988 comm="syz.1.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1190.603539][T23001] fuse: Bad value for 'fd' [ 1190.608303][ T29] audit: type=1400 audit(1772491467.373:1923): avc: denied { mounton } for pid=22999 comm="syz.2.4441" path="/205/file0" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1190.913503][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.265857][ T5960] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1191.458258][ T5960] usb 9-1: Using ep0 maxpacket: 16 [ 1191.473785][ T5960] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1191.493404][ T5960] usb 9-1: config 0 has no interface number 0 [ 1191.506309][ T5960] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1191.535532][ T5960] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1191.546271][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1191.554367][ T5960] usb 9-1: Product: syz [ 1191.559624][ T5960] usb 9-1: SerialNumber: syz [ 1191.576483][ T5960] usb 9-1: config 0 descriptor?? [ 1191.589563][ T5960] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1191.631112][ T29] audit: type=1400 audit(1772491468.336:1924): avc: denied { map } for pid=23012 comm="syz.2.4446" path="/proc/683/net/rpc" dev="proc" ino=4026533084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1192.766561][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.826686][T10210] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1192.830188][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.996965][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.219265][T23039] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1194.353909][ T29] audit: type=1400 audit(1772491470.880:1925): avc: denied { getopt } for pid=23044 comm="syz.9.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1195.121350][T23030] Bluetooth: hci6: command 0x1003 tx timeout [ 1195.128305][T17592] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1195.183580][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.214105][ T980] usb 9-1: USB disconnect, device number 39 [ 1195.316241][T23063] 9p: Bad value for 'rfdno' [ 1195.357664][T23063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4460'. [ 1196.472717][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1196.480745][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.488858][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.656006][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1196.777501][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1196.804646][ T24] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1196.835368][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.855845][ T24] usb 3-1: Product: syz [ 1196.863956][ T24] usb 3-1: Manufacturer: syz [ 1196.878454][ T24] usb 3-1: SerialNumber: syz [ 1196.892728][ T24] usb 3-1: config 0 descriptor?? [ 1196.924422][T23054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1196.931928][T23054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1197.028108][ T980] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1197.153745][T23054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1197.161067][T23054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1197.311637][ T980] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1197.321085][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.337261][ T980] usb 2-1: config 0 descriptor?? [ 1197.386390][ T24] Error reading MAC address [ 1197.408516][ T24] usb 3-1: USB disconnect, device number 41 [ 1197.510953][ T29] audit: type=1400 audit(1772491473.836:1926): avc: denied { read } for pid=23085 comm="syz.9.4469" path="socket:[82912]" dev="sockfs" ino=82912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1197.574033][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.585019][T10204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.594124][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.604837][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.616875][T23076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.625447][T23076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.755029][T16831] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1197.936756][T16831] usb 9-1: Using ep0 maxpacket: 16 [ 1197.943733][T16831] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1197.952233][T16831] usb 9-1: config 0 has no interface number 0 [ 1197.958664][T16831] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1197.971480][T16831] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1197.982464][T16831] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1197.990879][T16831] usb 9-1: Product: syz [ 1197.995239][T16831] usb 9-1: SerialNumber: syz [ 1198.003562][T16831] usb 9-1: config 0 descriptor?? [ 1198.015797][T16831] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1198.086890][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.399383][T23030] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1198.409622][T23030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1198.418974][T23030] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1198.426705][T23030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1198.436771][T23030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1198.463477][ T29] audit: type=1400 audit(1772491474.725:1927): avc: denied { mounton } for pid=23097 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1198.512535][T23101] siw: device registration error -23 [ 1198.968917][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.977187][T17585] block nbd0: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 360 seconds [ 1198.988714][T17585] block nbd0: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 360 seconds [ 1198.999827][T17585] block nbd0: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 360 seconds [ 1199.010899][T17585] block nbd0: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 360 seconds [ 1199.018073][ T29] audit: type=1400 audit(1772491475.127:1928): avc: denied { write } for pid=23092 comm="syz.9.4473" path="socket:[83263]" dev="sockfs" ino=83263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1199.046041][T23097] lo speed is unknown, defaulting to 1000 [ 1200.196429][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.204575][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.227750][ T5960] usb 2-1: USB disconnect, device number 80 [ 1201.165385][T17592] Bluetooth: hci6: command tx timeout [ 1201.217986][T23097] lo speed is unknown, defaulting to 1000 [ 1201.432629][ T5960] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1201.507161][T23116] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1201.702468][ T977] usb 9-1: USB disconnect, device number 40 [ 1202.453084][ T5806] net_ratelimit: 1 callbacks suppressed [ 1202.453101][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.485425][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4481'. [ 1202.683431][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 1202.703262][ T5960] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1202.732979][T23097] chnl_net:caif_netlink_parms(): no params data found [ 1202.739830][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1202.759313][ T5960] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1202.814927][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.835892][ T5960] usb 3-1: Product: syz [ 1202.836138][T23131] 9p: Bad value for 'wfdno' [ 1202.840078][ T5960] usb 3-1: Manufacturer: syz [ 1202.840095][ T5960] usb 3-1: SerialNumber: syz [ 1202.876323][ T5960] usb 3-1: config 0 descriptor?? [ 1202.956881][T23097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.964147][T23097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.971408][T23097] bridge_slave_0: entered allmulticast mode [ 1202.984520][T23139] netlink: 'syz.9.4486': attribute type 16 has an invalid length. [ 1203.004723][T23097] bridge_slave_0: entered promiscuous mode [ 1203.013116][T23139] netlink: 'syz.9.4486': attribute type 17 has an invalid length. [ 1203.013361][T23097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.028386][T23097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.035605][T23097] bridge_slave_1: entered allmulticast mode [ 1203.043646][T23097] bridge_slave_1: entered promiscuous mode [ 1203.389665][T17592] Bluetooth: hci6: command tx timeout [ 1203.442641][ T5960] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 1203.555619][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.582676][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.607715][T23097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.628026][T23097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.709740][ T5960] rc_core: IR keymap rc-imon-pad not found [ 1203.728141][ T5960] Registered IR keymap rc-empty [ 1203.834205][ T5960] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1203.844380][ T5960] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1203.874798][T23097] team0: Port device team_slave_0 added [ 1203.887554][T23097] team0: Port device team_slave_1 added [ 1204.417124][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1204.425239][ T5960] imon:send_packet: packet tx failed (-71) [ 1204.454441][T23097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.468683][ T5960] imon 3-1:0.0: remote input dev register failed [ 1204.476475][T23097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.503881][ T5960] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1204.514561][T23097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.533968][ T5960] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1204.540583][ T5960] imon:imon_probe: failed to initialize context! [ 1204.548241][T23097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.555471][ T5960] imon 3-1:0.0: unable to register, err -19 [ 1204.561375][T23097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.600873][T16831] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1204.611172][ T5960] usb 3-1: USB disconnect, device number 42 [ 1204.679812][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.692100][T23097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.834962][T23097] hsr_slave_0: entered promiscuous mode [ 1204.843064][T16831] usb 2-1: Using ep0 maxpacket: 16 [ 1204.844632][T23097] hsr_slave_1: entered promiscuous mode [ 1204.849955][T16831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1204.865658][T23097] debugfs: 'hsr0' already exists in 'hsr' [ 1204.874527][T23097] Cannot create hsr debugfs directory [ 1204.881405][T16831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1204.893519][T16831] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1204.904555][T16831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.920813][T16831] usb 2-1: Product: syz [ 1204.938430][T16831] usb 2-1: Manufacturer: syz [ 1204.947203][T16831] usb 2-1: SerialNumber: syz [ 1204.973577][T16831] usb 2-1: config 0 descriptor?? [ 1205.181398][T23164] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1205.623334][T17592] Bluetooth: hci6: command tx timeout [ 1206.069841][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.144486][T16831] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 1206.844244][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.867092][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1206.978729][T23179] xt_cgroup: path and classid specified [ 1207.002638][T16831] rc_core: IR keymap rc-imon-pad not found [ 1207.049456][T16831] Registered IR keymap rc-empty [ 1207.060939][T16831] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1207.130834][T16831] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1207.163542][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.197874][T16831] imon:send_packet: packet tx failed (-71) [ 1207.203749][ T29] audit: type=1400 audit(1772491482.900:1929): avc: denied { setopt } for pid=23182 comm="syz.9.4497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1207.248301][T16831] imon 2-1:0.0: remote input dev register failed [ 1207.254723][T16831] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1207.360928][T16831] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1207.390643][T16831] imon:imon_probe: failed to initialize context! [ 1207.412223][T16831] imon 2-1:0.0: unable to register, err -19 [ 1207.441022][T16831] usb 2-1: USB disconnect, device number 81 [ 1207.495280][T23191] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4498'. [ 1207.853710][T17592] Bluetooth: hci6: command tx timeout [ 1208.321720][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.360111][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.472030][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4500'. [ 1208.483301][T23197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4500'. [ 1208.600318][T23209] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 1208.610099][T23097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1208.654277][T23097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1208.782212][T23097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1208.825909][T23097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1209.418160][T23097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.494518][T16831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.676212][T23097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.731556][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.738700][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.779799][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.786897][T10797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.062481][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.387379][T23265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.555264][T23265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.575404][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.583508][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.712443][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4512'. [ 1210.780982][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4512'. [ 1211.112470][T23097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.222919][ T977] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1211.470919][T23286] overlay: ./file0 is not a directory [ 1212.451454][T10790] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.463919][T10790] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.496557][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4512'. [ 1212.508223][T10790] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.508787][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4512'. [ 1212.518984][T17592] Bluetooth: hci0: command 0x0406 tx timeout [ 1212.545265][T10790] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.690376][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 1212.702356][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1212.717801][T10790] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.737245][ T977] usb 2-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 1212.746772][ T29] audit: type=1400 audit(1772491488.092:1930): avc: denied { ioctl } for pid=23292 comm="syz.8.4516" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1212.755441][T23293] netlink: 'syz.8.4516': attribute type 11 has an invalid length. [ 1212.794557][T10790] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.806422][ T977] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 1212.819435][T10790] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.828141][T10790] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.840124][ T977] usb 2-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1212.880060][ T977] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1212.915425][ T977] usb 2-1: string descriptor 0 read error: -22 [ 1212.921802][ T977] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1212.957104][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.985330][T23097] veth0_vlan: entered promiscuous mode [ 1213.027955][ T977] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1213.041642][T23097] veth1_vlan: entered promiscuous mode [ 1213.070725][ T977] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1213.100086][ T977] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1213.142683][T23097] veth0_macvtap: entered promiscuous mode [ 1213.197555][ T29] audit: type=1400 audit(1772491488.503:1931): avc: denied { getopt } for pid=23292 comm="syz.8.4516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1213.266164][ T977] usb 2-1: media controller created [ 1213.291288][T23278] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 1213.315248][T23097] veth1_macvtap: entered promiscuous mode [ 1215.083145][T23097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.101434][T23097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.102880][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1215.120486][ T3564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.170213][ T3564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.240477][ T29] audit: type=1400 audit(1772491490.421:1932): avc: denied { map } for pid=23306 comm="syz.8.4519" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cron_log_t:s0" [ 1215.280152][ T977] zl10353_read_register: readreg error (reg=127, ret==0) [ 1215.288450][ T3564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.304512][T23313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=23313 comm=syz.1.4521 [ 1215.322966][ T3564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.361550][ T29] audit: type=1400 audit(1772491490.421:1933): avc: denied { execute } for pid=23306 comm="syz.8.4519" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cron_log_t:s0" [ 1215.396594][ T977] usb 2-1: USB disconnect, device number 82 [ 1215.553897][ T29] audit: type=1400 audit(1772491490.505:1934): avc: denied { append } for pid=23311 comm="syz.2.4520" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1215.622552][ T29] audit: type=1400 audit(1772491490.514:1935): avc: denied { setopt } for pid=23311 comm="syz.2.4520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1215.647439][ T504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.671974][ T504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.974783][T10790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.095836][ T29] audit: type=1400 audit(1772491491.216:1936): avc: denied { remount } for pid=23322 comm="syz.8.4523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1216.127371][T10790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.211376][T23331] netlink: 'syz.1.4524': attribute type 2 has an invalid length. [ 1216.584391][ T29] audit: type=1400 audit(1772491491.665:1937): avc: denied { mounton } for pid=23097 comm="syz-executor" path="/root/syzkaller.F65TqY/syz-tmp" dev="sda1" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1217.022120][ T29] audit: type=1400 audit(1772491491.787:1938): avc: denied { mounton } for pid=23097 comm="syz-executor" path="/root/syzkaller.F65TqY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1217.199628][ T29] audit: type=1400 audit(1772491491.787:1939): avc: denied { mounton } for pid=23097 comm="syz-executor" path="/root/syzkaller.F65TqY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=83929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1217.326080][ T977] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1218.031546][T23354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.067214][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 1218.076056][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.112800][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.143655][ T977] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1218.159601][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.175789][ T977] usb 2-1: Product: syz [ 1218.184483][ T977] usb 2-1: Manufacturer: syz [ 1218.194822][ T977] usb 2-1: SerialNumber: syz [ 1218.215922][ T977] usb 2-1: config 0 descriptor?? [ 1218.352467][T23361] fuse: Bad value for 'rootmode' [ 1218.439352][T23355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.616279][T23370] bridge0: port 3(hsr0) entered blocking state [ 1218.622598][T23370] bridge0: port 3(hsr0) entered disabled state [ 1218.629110][T23370] hsr0: entered allmulticast mode [ 1218.634174][T23370] hsr_slave_0: entered allmulticast mode [ 1218.639820][T23370] hsr_slave_1: entered allmulticast mode [ 1218.648316][T23370] hsr0: entered promiscuous mode [ 1218.657013][T23370] bridge0: port 3(hsr0) entered blocking state [ 1218.663244][T23370] bridge0: port 3(hsr0) entered forwarding state [ 1218.702465][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1218.702479][ T29] audit: type=1400 audit(1772491493.573:1942): avc: denied { ioctl } for pid=23334 comm="syz.1.4526" path="socket:[85004]" dev="sockfs" ino=85004 ioctlcmd=0x89f6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.560103][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1221.583691][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1221.865210][T23407] netlink: 'syz.9.4537': attribute type 7 has an invalid length. [ 1221.873038][T23407] netlink: 'syz.9.4537': attribute type 8 has an invalid length. [ 1222.286132][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1222.330772][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1222.484131][ T5960] usb 2-1: USB disconnect, device number 83 [ 1223.018884][T10790] Bluetooth: hci7: Frame reassembly failed (-84) [ 1223.644635][T23431] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.675251][T23431] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.116247][T23431] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.137935][T23431] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.228318][T23431] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.238907][T23431] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.974910][T23431] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.988473][T23431] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.200544][T23030] Bluetooth: hci7: command 0x1003 tx timeout [ 1225.262847][T17592] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1225.656089][T10790] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.679719][T10790] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.731379][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.766067][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.822089][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.858833][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.009440][ T3564] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.026690][ T3564] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.179130][ T29] audit: type=1400 audit(1772491500.645:1943): avc: denied { setopt } for pid=23472 comm="syz.2.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1226.288900][ T977] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1226.295879][T23474] : entered promiscuous mode [ 1226.599456][ T977] usb 9-1: Using ep0 maxpacket: 16 [ 1226.687618][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1226.699628][ T977] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1226.712286][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.728827][ T977] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1226.745148][ T977] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1226.756647][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.766472][ T977] usb 9-1: Product: syz [ 1226.772315][ T977] usb 9-1: Manufacturer: syz [ 1226.777017][ T977] usb 9-1: SerialNumber: syz [ 1226.783990][ T977] usb 9-1: config 0 descriptor?? [ 1226.810088][ T977] mcba_usb 9-1:0.0 can0: couldn't setup read URBs [ 1226.818947][ T977] mcba_usb 9-1:0.0 can0: couldn't start device: -90 [ 1227.019446][T23469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.044049][T23469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.112598][ T977] mcba_usb 9-1:0.0: probe with driver mcba_usb failed with error -90 [ 1227.401795][ T5960] usb 9-1: USB disconnect, device number 41 [ 1229.735604][ T5878] hid_parser_main: 4005 callbacks suppressed [ 1229.735617][ T5878] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1229.853256][ T977] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1230.329135][T23584] @ÿ: renamed from veth0_vlan (while UP) [ 1230.348345][T23586] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1230.379478][ T5878] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1230.400762][ T977] usb 2-1: config 0 has no interfaces? [ 1230.428234][ T977] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1230.468345][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1230.497164][ T977] usb 2-1: SerialNumber: syz [ 1230.513505][ T977] usb 2-1: config 0 descriptor?? [ 1231.936445][T17585] block nbd0: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 390 seconds [ 1231.971548][T17585] block nbd0: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 390 seconds [ 1231.982688][T17585] block nbd0: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 390 seconds [ 1231.994021][T17585] block nbd0: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 390 seconds [ 1232.208918][T23616] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1232.250432][ T29] audit: type=1400 audit(1772491506.323:1944): avc: denied { mount } for pid=23615 comm="syz.2.4570" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1233.284482][ T29] audit: type=1400 audit(1772491506.996:1945): avc: denied { connect } for pid=23630 comm="syz.8.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1233.361543][ T977] usb 2-1: USB disconnect, device number 84 [ 1234.483624][T23649] ALSA: mixer_oss: invalid OSS volume '' [ 1235.484126][T23681] sctp: [Deprecated]: syz.0.4583 (pid 23681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1235.484126][T23681] Use struct sctp_sack_info instead [ 1235.533476][T23681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1237.916140][T23729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1238.253056][ T5878] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1238.945171][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 1238.960736][ T5878] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1238.971918][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1239.144968][T23746] lo speed is unknown, defaulting to 1000 [ 1239.176971][ T5878] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1239.190094][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.199279][ T5878] usb 3-1: Product: syz [ 1239.203965][ T5878] usb 3-1: Manufacturer: syz [ 1239.209354][ T5878] usb 3-1: SerialNumber: syz [ 1239.286720][ T29] audit: type=1400 audit(1772491512.908:1946): avc: denied { getopt } for pid=23747 comm="syz.8.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1239.360810][ T5878] usb 3-1: config 0 descriptor?? [ 1239.461205][T23730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4590'. [ 1239.603552][ T5878] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 1239.743440][T23746] lo speed is unknown, defaulting to 1000 [ 1239.834302][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.982950][ T5878] rc_core: IR keymap rc-imon-pad not found [ 1240.088228][ T5878] Registered IR keymap rc-empty [ 1240.096665][T23763] netlink: 'syz.0.4596': attribute type 3 has an invalid length. [ 1240.123525][ T5878] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1240.160480][ T5878] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1241.294185][ T5878] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1241.307262][ T5878] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 1241.328465][ T5878] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:43> initialized [ 1241.465407][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1241.472901][ T5878] usb 3-1: USB disconnect, device number 43 [ 1241.768990][ T980] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1241.932064][ T980] usb 9-1: Using ep0 maxpacket: 16 [ 1241.956839][ T980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.015106][ T980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.054701][ T980] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1242.110158][ T980] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1242.210612][ T980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.782134][ T980] usb 9-1: config 0 descriptor?? [ 1242.846513][ T29] audit: type=1400 audit(1772491516.238:1947): avc: denied { remount } for pid=23802 comm="syz.9.4604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1243.042129][T23774] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 1243.058393][T23774] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 1243.179044][ T980] usbhid 9-1:0.0: can't add hid device: -71 [ 1243.186294][ T980] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1243.201458][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1243.220465][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1243.268770][ T980] usb 9-1: USB disconnect, device number 42 [ 1243.344634][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1243.356161][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1243.365674][T23528] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.377278][T23528] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.391289][T23528] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.402249][T23528] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.576372][ T29] audit: type=1400 audit(1772491516.921:1948): avc: denied { mounton } for pid=23814 comm="syz.0.4610" path=2F31362F66696C6530202864656C6574656429 dev="proc" ino=4026534341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 1243.723812][T23820] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1244.740458][T18399] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1245.074171][ T29] audit: type=1400 audit(1772491518.324:1949): avc: denied { unmount } for pid=23097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1245.108618][T18399] usb 2-1: Using ep0 maxpacket: 16 [ 1245.130693][T18399] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.154922][T18399] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1245.180909][T18399] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1245.190426][T18399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.198426][T18399] usb 2-1: Product: syz [ 1245.212076][T18399] usb 2-1: Manufacturer: syz [ 1245.216838][T18399] usb 2-1: SerialNumber: syz [ 1245.228122][T18399] usb 2-1: config 0 descriptor?? [ 1245.305886][T23831] hpfs: Bad magic ... probably not HPFS [ 1247.273341][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1247.289726][T18399] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 1247.318526][T18399] imon:send_packet: packet tx failed (-71) [ 1247.338070][T18399] imon 2-1:0.0: panel buttons/knobs setup failed [ 1247.434507][T18399] rc_core: IR keymap rc-imon-pad not found [ 1247.440363][T18399] Registered IR keymap rc-empty [ 1247.448113][T23848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5651 sclass=netlink_route_socket pid=23848 comm=syz.9.4620 [ 1247.477109][T18399] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1248.551009][T18399] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1249.188904][T23855] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1249.588711][T18399] imon:send_packet: packet tx failed (-71) [ 1249.615236][T18399] imon 2-1:0.0: remote input dev register failed [ 1249.625577][T18399] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1249.646596][T18399] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1249.840363][ T977] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1250.000430][T18399] imon:imon_probe: failed to initialize context! [ 1250.006802][T18399] imon 2-1:0.0: unable to register, err -19 [ 1250.115457][T18399] usb 2-1: USB disconnect, device number 85 [ 1250.118536][ T29] audit: type=1326 audit(1772491522.963:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.9.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1250.158749][T23868] netlink: 'syz.9.4624': attribute type 1 has an invalid length. [ 1250.313614][ T977] usb 9-1: Using ep0 maxpacket: 16 [ 1250.337427][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.355447][T23869] ªªªªªª: renamed from vlan0 (while UP) [ 1250.460472][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.470480][ T29] audit: type=1326 audit(1772491522.963:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.9.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1250.502513][ T977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1250.530591][ T977] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1250.545232][ T29] audit: type=1326 audit(1772491522.963:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.9.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1250.583051][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.726470][ T977] usb 9-1: config 0 descriptor?? [ 1250.880083][ T29] audit: type=1326 audit(1772491522.963:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.9.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1250.958647][ T29] audit: type=1326 audit(1772491522.963:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.9.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1251.211994][ T977] usbhid 9-1:0.0: can't add hid device: -71 [ 1251.218037][ T977] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1251.650408][ T29] audit: type=1326 audit(1772491522.963:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.9.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1251.677805][ T977] usb 9-1: USB disconnect, device number 43 [ 1252.205058][T23880] hpfs: Bad magic ... probably not HPFS [ 1252.988531][T23894] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4632'. [ 1253.388957][ T5878] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1253.396604][T18399] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1254.545703][T18399] usb 1-1: Using ep0 maxpacket: 16 [ 1254.555163][ T5878] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1254.566402][ T5878] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1254.578956][T18399] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1254.593228][T18399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1254.798261][ T5878] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.808197][ T5878] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1254.824529][ T5878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1254.831196][ T5878] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1254.840388][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.854730][T18399] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1254.864135][ T5878] usb 2-1: config 0 descriptor?? [ 1254.870927][T18399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.910612][T18399] usb 1-1: Product: syz [ 1254.918543][T18399] usb 1-1: Manufacturer: syz [ 1254.924317][T18399] usb 1-1: SerialNumber: syz [ 1254.954301][T18399] usb 1-1: config 0 descriptor?? [ 1255.202990][T18399] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 1255.416312][ T5878] ryos 0003:1E7D:3138.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 1255.457861][T23923] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1255.480074][T23923] netdevsim netdevsim8: Direct firmware load for / [ 1255.480074][T23923] failed with error -2 [ 1255.496978][T23923] netdevsim netdevsim8: Falling back to sysfs fallback for: / [ 1255.496978][T23923] [ 1255.627549][ T5878] usb 2-1: USB disconnect, device number 86 [ 1255.634254][T18399] rc_core: IR keymap rc-imon-pad not found [ 1255.640317][T18399] Registered IR keymap rc-empty [ 1255.651889][T18399] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1255.678518][ T977] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1255.679664][T18399] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1255.734540][T18399] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1255.757334][T18399] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 1255.778642][T18399] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:76> initialized [ 1255.881983][ T977] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1255.893332][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.937766][ T977] usb 3-1: config 0 descriptor?? [ 1255.990228][ T977] cp210x 3-1:0.0: cp210x converter detected [ 1256.142632][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1256.150249][T18399] usb 1-1: USB disconnect, device number 76 [ 1256.347571][T23936] hpfs: Bad magic ... probably not HPFS [ 1256.527020][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.545640][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.554000][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.561836][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.570722][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.583621][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.592144][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.600237][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.611315][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.619094][T18399] hid-generic 0000:FFFFFFFE:0007.001C: unknown main item tag 0x0 [ 1256.638080][T18399] hid-generic 0000:FFFFFFFE:0007.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1256.671869][T23940] netlink: 'syz.9.4644': attribute type 21 has an invalid length. [ 1256.679856][T23940] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4644'. [ 1256.790873][ T5878] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1256.938707][ T5878] usb 2-1: device descriptor read/64, error -71 [ 1257.291117][ T5878] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1257.472824][ T5878] usb 2-1: device descriptor read/64, error -71 [ 1257.744069][ T5878] usb usb2-port1: attempt power cycle [ 1257.794915][ T977] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1257.808312][ T977] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1257.831533][ T977] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1257.877579][ T977] usb 3-1: USB disconnect, device number 44 [ 1257.888250][ T977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1257.905424][ T977] cp210x 3-1:0.0: device disconnected [ 1258.125025][ T5878] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1258.158045][ T5878] usb 2-1: device descriptor read/8, error -71 [ 1258.536890][ T5878] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1258.567127][ T5878] usb 2-1: device descriptor read/8, error -71 [ 1258.681011][ T5878] usb usb2-port1: unable to enumerate USB device [ 1261.146352][T24001] hpfs: Bad magic ... probably not HPFS [ 1262.115425][T24024] tmpfs: Bad value for 'mpol' [ 1262.205903][ T29] audit: type=1400 audit(1772491534.338:1956): avc: denied { map } for pid=24022 comm="syz.1.4665" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1262.428937][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4669'. [ 1262.871894][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1263.031995][ T5878] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1263.042619][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1263.052760][ T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 1263.062732][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.071956][ T24] usb 2-1: Product: syz [ 1263.076480][ T24] usb 2-1: Manufacturer: syz [ 1263.081852][ T24] usb 2-1: SerialNumber: syz [ 1263.198544][T24060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input39 [ 1263.214257][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 1263.223004][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.244773][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.261674][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1263.275126][ T5878] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1263.284438][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.295004][ T5878] usb 3-1: config 0 descriptor?? [ 1263.322148][ T24] usb 2-1: unit 5 not found! [ 1263.357382][ T24] usb 2-1: can't set first interface for hiFace device. [ 1263.364569][ T24] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1263.416338][ T24] usb 2-1: can't set first interface for hiFace device. [ 1263.471639][ T24] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1263.504298][ T24] usb 2-1: USB disconnect, device number 91 [ 1263.523279][T24049] syzkaller0: entered promiscuous mode [ 1263.535953][T24049] syzkaller0: entered allmulticast mode [ 1263.555090][T21756] udevd[21756]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1263.599158][T16495] udevd[16495]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.628171][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 1263.634227][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1263.645994][ T5878] usb 3-1: USB disconnect, device number 45 [ 1264.202966][ T29] audit: type=1400 audit(1772491536.218:1957): avc: denied { read } for pid=24074 comm="syz.1.4684" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1264.230603][ T29] audit: type=1400 audit(1772491536.218:1958): avc: denied { open } for pid=24074 comm="syz.1.4684" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1264.398293][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1264.454288][T17585] block nbd0: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 420 seconds [ 1264.465430][T17585] block nbd0: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 420 seconds [ 1264.476856][T17585] block nbd0: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 420 seconds [ 1264.488204][T17585] block nbd0: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 420 seconds [ 1264.642473][T24091] trusted_key: encrypted_key: insufficient parameters specified [ 1264.654305][T24090] openvswitch: netlink: Multiple metadata blocks provided [ 1264.674600][T24091] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1264.809509][ T29] audit: type=1400 audit(1772491536.761:1959): avc: denied { bind } for pid=24093 comm="syz.9.4690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1264.874086][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4691'. [ 1265.032180][T24100] batman_adv: batadv0: Adding interface: dummy0 [ 1265.039804][T24100] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.118163][T24100] batman_adv: batadv0: Interface activated: dummy0 [ 1265.496969][T24114] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1265.544514][ T5878] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1265.737993][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 1265.756433][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.767543][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.777900][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1265.792463][ T5878] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1265.803521][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.826008][ T5878] usb 3-1: config 0 descriptor?? [ 1265.875758][ T793] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1265.985669][T24138] tc_dump_action: action bad kind [ 1266.559812][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 1266.626714][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.647576][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.663854][T24141] fuse: Unknown parameter '3' [ 1266.674594][ T793] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1266.686826][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.874981][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 1266.937153][ T793] usb 1-1: config 0 descriptor?? [ 1266.942273][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1266.993123][ T5878] usb 3-1: USB disconnect, device number 46 [ 1267.054677][ T29] audit: type=1400 audit(1772491538.884:1960): avc: denied { validate_trans } for pid=24151 comm="syz.8.4711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1267.462217][ T793] hid_parser_main: 76 callbacks suppressed [ 1267.462239][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.483423][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.511343][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.528557][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.607544][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.615517][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.625443][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.632679][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.640229][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.648511][ T793] logitech 0003:046D:C50C.001D: unknown main item tag 0x0 [ 1267.660492][ T793] logitech 0003:046D:C50C.001D: unknown global tag 0xc [ 1267.667497][ T793] logitech 0003:046D:C50C.001D: item 0 1 1 12 parsing failed [ 1267.675630][ T793] logitech 0003:046D:C50C.001D: parse failed [ 1267.681781][ T793] logitech 0003:046D:C50C.001D: probe with driver logitech failed with error -22 [ 1267.720906][ T793] usb 1-1: USB disconnect, device number 77 [ 1267.842458][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1267.915846][T24173] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4716'. [ 1267.925050][T24173] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4716'. [ 1267.936030][T24173] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1269.235559][T24183] binder: BINDER_SET_CONTEXT_MGR already set [ 1269.235575][T24183] binder: 24181:24183 ioctl 4018620d 200000004a80 returned -16 [ 1270.481995][T24198] netlink: 252 bytes leftover after parsing attributes in process `syz.8.4724'. [ 1270.611284][T24198] netem: unknown loss type 5 [ 1271.728824][T24215] CUSE: unknown device info "" [ 1271.734079][T24215] CUSE: unknown device info "" [ 1271.739014][T24215] CUSE: unknown device info "" [ 1271.744058][T24215] CUSE: unknown device info "" [ 1271.751111][T24215] CUSE: unknown device info "ÿ" [ 1271.756937][T24215] CUSE: unknown device info "" [ 1271.761858][T24215] CUSE: unknown device info "" [ 1271.767048][T24215] CUSE: unknown device info "ÿ" [ 1271.772625][T24215] CUSE: DEVNAME unspecified [ 1272.817059][ T5864] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1272.878330][ T24] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1273.007473][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 1273.014641][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.026307][ T29] audit: type=1400 audit(1772491544.459:1961): avc: denied { name_bind } for pid=24225 comm="syz.9.4735" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1273.059691][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1273.064918][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.085980][ T29] audit: type=1400 audit(1772491544.478:1962): avc: denied { name_connect } for pid=24225 comm="syz.9.4735" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1273.092366][ T24] usb 9-1: config 0 has an invalid interface number: 107 but max is 0 [ 1273.123874][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1273.155888][ T5864] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1273.164940][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.173523][ T24] usb 9-1: config 0 has no interface number 0 [ 1273.180482][ T24] usb 9-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 1273.193910][ T24] usb 9-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 1273.206481][ T5864] usb 2-1: config 0 descriptor?? [ 1273.227728][ T24] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1273.237547][ T24] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1273.248084][ T24] usb 9-1: Product: syz [ 1273.258913][ T24] usb 9-1: Manufacturer: syz [ 1273.264586][ T24] usb 9-1: SerialNumber: syz [ 1273.275623][ T24] usb 9-1: config 0 descriptor?? [ 1273.283680][T24213] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1273.293630][ T24] keyspan 9-1:0.107: Keyspan 4 port adapter converter detected [ 1273.302222][ T24] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 81 [ 1273.313434][ T24] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 1 [ 1273.323487][ T24] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1273.336872][ T24] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 2 [ 1273.347301][ T24] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1273.366569][ T24] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 4 [ 1273.378177][ T24] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1273.390420][ T24] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 6 [ 1273.405758][ T24] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1273.535270][T24213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.547539][ T5864] usbhid 2-1:0.0: can't add hid device: -71 [ 1273.553970][T24213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.561896][ T5864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1273.576454][ T24] usb 9-1: USB disconnect, device number 44 [ 1273.586564][ T24] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1273.599012][ T5864] usb 2-1: USB disconnect, device number 92 [ 1273.611534][ T24] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1273.624501][ T24] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1273.641622][ T24] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1273.656240][ T24] keyspan 9-1:0.107: device disconnected [ 1274.107094][T24248] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1274.116273][T24248] overlayfs: missing 'lowerdir' [ 1274.503197][ T5878] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1274.526607][T24259] FAULT_INJECTION: forcing a failure. [ 1274.526607][T24259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.539822][T24259] CPU: 0 UID: 0 PID: 24259 Comm: syz.2.4745 Tainted: G L syzkaller #0 PREEMPT(full) [ 1274.539853][T24259] Tainted: [L]=SOFTLOCKUP [ 1274.539860][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1274.539871][T24259] Call Trace: [ 1274.539878][T24259] [ 1274.539885][T24259] dump_stack_lvl+0x100/0x190 [ 1274.539920][T24259] should_fail_ex.cold+0x5/0xa [ 1274.539944][T24259] _copy_from_user+0x2e/0xd0 [ 1274.539972][T24259] copy_msghdr_from_user+0x9f/0x4f0 [ 1274.539999][T24259] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1274.540041][T24259] ___sys_sendmsg+0x106/0x1e0 [ 1274.540068][T24259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.540122][T24259] __sys_sendmsg+0x170/0x220 [ 1274.540142][T24259] ? __pfx___sys_sendmsg+0x10/0x10 [ 1274.540177][T24259] do_syscall_64+0x106/0xf80 [ 1274.540196][T24259] ? clear_bhb_loop+0x40/0x90 [ 1274.540218][T24259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.540237][T24259] RIP: 0033:0x7fecfcb9c799 [ 1274.540253][T24259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.540269][T24259] RSP: 002b:00007fecfdab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.540288][T24259] RAX: ffffffffffffffda RBX: 00007fecfce15fa0 RCX: 00007fecfcb9c799 [ 1274.540300][T24259] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1274.540311][T24259] RBP: 00007fecfdab6090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.540321][T24259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.540331][T24259] R13: 00007fecfce16038 R14: 00007fecfce15fa0 R15: 00007ffd4b9834d8 [ 1274.540356][T24259] [ 1274.899230][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 1274.906109][ T5878] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1274.916898][ T5878] usb 1-1: config 0 has no interface number 0 [ 1274.927351][ T5878] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1274.936890][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.365309][ T5878] usb 1-1: Product: syz [ 1275.369841][ T5878] usb 1-1: Manufacturer: syz [ 1275.374504][ T5878] usb 1-1: SerialNumber: syz [ 1275.381887][ T5878] usb 1-1: config 0 descriptor?? [ 1275.391974][ T5878] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1275.606220][ T5878] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1275.619754][ T5878] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1275.839409][ T29] audit: type=1326 audit(1772491547.097:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24278 comm="syz.8.4751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb1df9c799 code=0x0 [ 1276.090809][T24249] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1276.100139][T24249] VFS: Can't find a romfs filesystem on dev nullb0. [ 1276.100139][T24249] [ 1276.160141][ T5878] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1276.341795][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 1276.349680][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.360739][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.370862][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1276.383777][ T5878] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1276.393027][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.402774][ T5878] usb 3-1: config 0 descriptor?? [ 1276.687081][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 1276.693212][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1276.704026][ T5878] usb 3-1: USB disconnect, device number 47 [ 1276.799629][T24291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.079503][ T5878] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1277.252139][ T5878] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.262613][ T5878] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1277.273537][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1277.285126][ T5878] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1277.299769][ T5878] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1277.309111][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1277.317733][ T5878] usb 9-1: SerialNumber: syz [ 1277.333798][ T24] usb 1-1: USB disconnect, device number 78 [ 1277.345039][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1277.355955][T24293] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 1277.378033][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1277.392505][ T24] quatech2 1-1:0.51: device disconnected [ 1277.894725][T24308] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1279.321057][T24291] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1279.337910][ T793] usb 9-1: USB disconnect, device number 45 [ 1279.739371][T24311] ALSA: mixer_oss: invalid OSS volume '' [ 1282.048786][ T5878] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1282.159676][ T29] audit: type=1400 audit(1772491553.018:1964): avc: denied { lock } for pid=24334 comm="syz.0.4763" path="/dev/qrtr-tun" dev="devtmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1282.248742][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 1282.270384][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.287588][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.360954][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1282.374636][ T5878] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1282.383753][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.396163][ T5878] usb 2-1: config 0 descriptor?? [ 1282.500866][ T29] audit: type=1400 audit(1772491553.327:1965): avc: denied { remount } for pid=24342 comm="syz.0.4770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1282.738683][T24351] trusted_key: encrypted_key: master key parameter 'useŠ:syz' is invalid [ 1282.841331][T24341] delete_channel: no stack [ 1284.183272][ T5878] usbhid 2-1:0.0: can't add hid device: -71 [ 1284.196260][ T5878] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1284.232533][ T5878] usb 2-1: USB disconnect, device number 93 [ 1285.563352][T24370] ALSA: mixer_oss: invalid OSS volume '' [ 1286.724483][T24387] netlink: 'syz.8.4781': attribute type 1 has an invalid length. [ 1286.942941][T24387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1288.576949][T24409] syz.1.4788 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1288.638999][T24414] cgroup: none used incorrectly [ 1288.645180][ T29] audit: type=1400 audit(1772491559.079:1966): avc: denied { ioctl } for pid=24413 comm="syz.0.4779" path="socket:[89569]" dev="sockfs" ino=89569 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1288.671412][T24415] netlink: 'syz.0.4779': attribute type 1 has an invalid length. [ 1288.680322][T24415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4779'. [ 1288.690060][T24414] netlink: 'syz.0.4779': attribute type 1 has an invalid length. [ 1288.697885][T24414] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4779'. [ 1288.707962][T24415] x_tables: duplicate underflow at hook 1 [ 1288.740228][ T29] audit: type=1400 audit(1772491559.163:1967): avc: denied { accept } for pid=24410 comm="syz.9.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1288.766285][ T24] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1289.427665][ T5864] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1289.515016][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1289.521575][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.533356][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.544172][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1289.559897][ T24] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1289.570057][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.588010][ T24] usb 9-1: config 0 descriptor?? [ 1289.609522][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1289.618590][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.645576][ T5864] pwc: Logitech/Cisco VT Camera webcam detected. [ 1289.817947][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 1289.824352][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1289.849952][ T24] usb 9-1: USB disconnect, device number 46 [ 1289.904870][ T5864] pwc: Failed to set LED on/off time (-71) [ 1289.933134][ T5864] pwc: send_video_command error -71 [ 1289.949268][ T5864] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1289.967982][ T5864] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71 [ 1289.978350][ T977] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1290.020529][ T5864] usb 2-1: USB disconnect, device number 94 [ 1290.338259][ T977] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1290.352383][ T977] usb 3-1: not running at top speed; connect to a high speed hub [ 1290.376148][ T977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.420073][ T977] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1290.433381][ T977] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1291.551342][ T977] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1291.577654][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.590143][ T977] usb 3-1: Product: syz [ 1291.597250][ T977] usb 3-1: Manufacturer: syz [ 1291.601930][ T977] usb 3-1: SerialNumber: syz [ 1292.873722][ T977] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input40 [ 1293.102565][ T977] bcm5974 3-1:1.0: could not read from device [ 1293.135858][ T5164] bcm5974 3-1:1.0: could not read from device [ 1293.166609][ T977] input: failed to attach handler mousedev to device input40, error: -5 [ 1293.203889][ T5164] bcm5974 3-1:1.0: could not read from device [ 1293.379444][ T977] usb 3-1: USB disconnect, device number 48 [ 1294.162120][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4795'. [ 1294.184047][T24456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24456 comm=syz.0.4795 [ 1294.394639][ T29] audit: type=1400 audit(1772491564.411:1968): avc: denied { getopt } for pid=24450 comm="syz.1.4800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1294.518735][ T29] audit: type=1400 audit(1772491564.570:1969): avc: denied { read } for pid=24460 comm="syz.0.4802" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1294.578048][T24461] md: md2 stopped. [ 1294.641152][T24466] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 1295.001047][ T29] audit: type=1400 audit(1772491564.570:1970): avc: denied { open } for pid=24460 comm="syz.0.4802" path="/52/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1295.037896][ T29] audit: type=1400 audit(1772491564.570:1971): avc: denied { ioctl } for pid=24460 comm="syz.0.4802" path="/52/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1295.065507][ T29] audit: type=1400 audit(1772491564.701:1972): avc: denied { map } for pid=24462 comm="syz.8.4799" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1295.166951][T24464] md: superblock version 12389 not known [ 1295.186222][T24464] md: couldn't set array info. -22 [ 1295.192883][ T29] audit: type=1400 audit(1772491564.701:1973): avc: denied { execute } for pid=24462 comm="syz.8.4799" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1295.229792][T24472] overlayfs: failed to clone lowerpath [ 1296.359362][ T5960] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1296.537811][ T5960] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.553526][ T5960] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1296.576885][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1296.604968][ T5960] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1296.622709][T17585] block nbd0: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 450 seconds [ 1296.633976][T17585] block nbd0: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 450 seconds [ 1296.645060][T17585] block nbd0: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 450 seconds [ 1296.656219][T17585] block nbd0: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 450 seconds [ 1296.668795][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1296.775607][ T5960] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=71.94 [ 1296.797069][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.813563][ T5960] usb 1-1: config 0 descriptor?? [ 1296.833105][ T5960] ttusbir 1-1:0.0: cannot find expected altsetting [ 1297.396801][T17277] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1297.405126][ T977] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1297.552016][ T977] usb 2-1: device descriptor read/64, error -71 [ 1297.726414][T17277] usb 3-1: Using ep0 maxpacket: 16 [ 1297.739352][T17277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.762482][T17277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.783265][T17277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1297.951597][ T977] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1297.959948][T17277] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1297.969961][T17277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.981393][T17277] usb 3-1: config 0 descriptor?? [ 1298.441015][ T5878] usb 1-1: USB disconnect, device number 79 [ 1298.482483][ T977] usb 2-1: device descriptor read/64, error -71 [ 1298.504018][T17277] usbhid 3-1:0.0: can't add hid device: -71 [ 1298.510063][T17277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1298.529223][T17277] usb 3-1: USB disconnect, device number 49 [ 1298.601428][ T977] usb usb2-port1: attempt power cycle [ 1298.617490][T24499] could not allocate digest TFM handle poly1305-simd [ 1298.785716][T24499] bond1: entered promiscuous mode [ 1298.858672][T24502] macvlan2: entered promiscuous mode [ 1298.864117][T24502] macvlan2: entered allmulticast mode [ 1298.881786][T24502] bond1: (slave macvlan2): Opening slave failed [ 1299.017279][ T977] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1299.040019][ T977] usb 2-1: device descriptor read/8, error -71 [ 1299.306253][ T977] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1299.451159][ T977] usb 2-1: device descriptor read/8, error -71 [ 1299.697592][ T977] usb usb2-port1: unable to enumerate USB device [ 1300.527022][T24518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1300.536557][T24518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1300.557295][T24521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4816'. [ 1300.605365][T17592] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1303.560027][T16831] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1303.752632][T16831] usb 3-1: Using ep0 maxpacket: 16 [ 1303.877952][T16831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.054427][T24557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1304.069572][ T5864] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1304.986603][T16831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.000712][T16831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1305.013690][T16831] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1305.022762][T16831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.032343][T16831] usb 3-1: config 0 descriptor?? [ 1305.156698][ T5864] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1305.167762][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1305.185035][ T5864] usb 1-1: Product: syz [ 1305.189276][ T5864] usb 1-1: Manufacturer: syz [ 1305.197419][ T5864] usb 1-1: SerialNumber: syz [ 1305.207331][ T5864] usb 1-1: config 0 descriptor?? [ 1305.240171][T24563] binder: 24562:24563 ioctl c0306201 0 returned -14 [ 1305.362484][T24546] syzkaller0: entered promiscuous mode [ 1305.375365][T24546] syzkaller0: entered allmulticast mode [ 1305.472550][ T5864] usb 1-1: USB disconnect, device number 80 [ 1305.500634][T16831] usbhid 3-1:0.0: can't add hid device: -71 [ 1305.522403][T16831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1305.522543][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.549284][T16831] usb 3-1: USB disconnect, device number 50 [ 1307.401395][T24578] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4834'. [ 1308.585916][T24588] overlayfs: failed to clone lowerpath [ 1309.808595][ T29] audit: type=1400 audit(1772491578.816:1974): avc: denied { cmd } for pid=24601 comm="syz.0.4840" path="socket:[90875]" dev="sockfs" ino=90875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1310.060981][ T5864] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1310.231648][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 1310.247825][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.264446][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.322157][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1310.365870][ T5864] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1310.390753][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.430089][ T5864] usb 2-1: config 0 descriptor?? [ 1310.704323][T24607] syzkaller0: entered promiscuous mode [ 1310.714111][T24607] syzkaller0: entered allmulticast mode [ 1310.994606][ T5864] usbhid 2-1:0.0: can't add hid device: -71 [ 1311.007273][ T5864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1311.050662][ T5864] usb 2-1: USB disconnect, device number 99 [ 1311.525041][T17592] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1311.580059][ T29] audit: type=1326 audit(1772491580.537:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1312.826781][ T29] audit: type=1326 audit(1772491580.537:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1312.859286][ T29] audit: type=1326 audit(1772491580.537:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1312.914270][T16831] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1313.057724][ T29] audit: type=1326 audit(1772491580.537:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1313.083246][T24631] orangefs_mount: mount request failed with -4 [ 1313.206415][T16831] usb 3-1: Using ep0 maxpacket: 8 [ 1313.352992][T16831] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1313.366272][T16831] usb 3-1: config 127 has no interface number 1 [ 1313.388701][ T29] audit: type=1326 audit(1772491580.537:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1313.413286][ T29] audit: type=1326 audit(1772491580.537:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1313.439115][ T29] audit: type=1326 audit(1772491580.537:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1313.502240][T16831] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1313.546062][T16831] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1313.569069][T16831] usb 3-1: config 127 interface 0 has no altsetting 0 [ 1313.590976][T16831] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1313.607780][ T29] audit: type=1326 audit(1772491580.537:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1313.610904][T16831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.673309][T16831] usb 3-1: Product: syz [ 1313.677625][T16831] usb 3-1: Manufacturer: syz [ 1313.682235][T16831] usb 3-1: SerialNumber: syz [ 1313.749296][ T29] audit: type=1326 audit(1772491580.537:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24627 comm="syz.0.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fea9839c799 code=0x7ffc0000 [ 1313.861874][T16831] usb 3-1: can't set config #127, error -71 [ 1313.909910][T16831] usb 3-1: USB disconnect, device number 51 [ 1314.748900][T24663] kvm: pic: non byte write [ 1314.849306][ T977] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1315.032339][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1315.057988][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.134774][ T977] usb 3-1: config 0 descriptor?? [ 1320.500344][T24698] ALSA: mixer_oss: invalid OSS volume '' [ 1320.894690][T16831] usb 3-1: USB disconnect, device number 52 [ 1322.440162][T17592] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 1322.625579][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1322.990599][T24724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4870'. [ 1324.873232][T24733] ALSA: mixer_oss: invalid OSS volume '' [ 1325.574303][T24751] netlink: 'syz.1.4880': attribute type 1 has an invalid length. [ 1327.049749][T24760] ALSA: mixer_oss: invalid OSS volume '' [ 1327.100305][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1327.100321][ T29] audit: type=1400 audit(1772491595.045:2003): avc: denied { create } for pid=24768 comm="syz.1.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1328.674015][T24792] hpfs: Bad magic ... probably not HPFS [ 1328.700994][T24792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1329.010221][T17585] block nbd0: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 480 seconds [ 1329.039273][T17585] block nbd0: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 480 seconds [ 1329.050942][T17585] block nbd0: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 480 seconds [ 1329.062004][T17585] block nbd0: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 480 seconds [ 1329.887148][T24809] tmpfs: User quota block hardlimit too large. [ 1333.049167][T24847] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4894'. [ 1334.098677][T24856] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4899'. [ 1334.132572][T17592] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1334.139471][T17592] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1334.190991][T24865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24865 comm=syz.9.4902 [ 1334.349151][T16831] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1334.383792][T24872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1334.434048][T24872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1336.198444][T16831] usb 9-1: Using ep0 maxpacket: 16 [ 1336.205185][T16831] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.274604][T16831] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1336.308608][T16831] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1336.351731][T16831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.368025][T16831] usb 9-1: Product: syz [ 1336.376809][T16831] usb 9-1: Manufacturer: syz [ 1336.400422][T16831] usb 9-1: SerialNumber: syz [ 1336.448735][T16831] usb 9-1: config 0 descriptor?? [ 1336.716940][T16831] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1336.748189][T16831] imon 9-1:0.0: unable to initialize intf0, err -19 [ 1336.763752][T16831] imon:imon_probe: failed to initialize context! [ 1336.777211][T16831] imon 9-1:0.0: unable to register, err -19 [ 1337.518758][ T29] audit: type=1326 audit(1772491604.802:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1337.595955][ T29] audit: type=1326 audit(1772491604.820:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1337.648040][ T29] audit: type=1326 audit(1772491604.820:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1337.675144][ T29] audit: type=1326 audit(1772491604.820:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1337.791673][T24896] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1337.868226][ T29] audit: type=1326 audit(1772491604.830:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1337.897621][ T29] audit: type=1326 audit(1772491604.830:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1338.763226][T24897] ALSA: mixer_oss: invalid OSS volume '' [ 1338.938903][ T977] usb 9-1: USB disconnect, device number 47 [ 1338.972731][ T29] audit: type=1326 audit(1772491604.830:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1339.246039][ T29] audit: type=1326 audit(1772491604.830:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1339.330932][ T29] audit: type=1326 audit(1772491604.830:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1339.455717][ T29] audit: type=1326 audit(1772491604.830:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24888 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18739c799 code=0x7ffc0000 [ 1339.737375][ T5960] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1339.784683][T24922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4911'. [ 1340.199152][ T5960] usb 2-1: device descriptor read/64, error -71 [ 1340.222829][T24916] xt_socket: unknown flags 0x4 [ 1340.240412][T24916] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4918'. [ 1340.321370][T24927] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1341.490342][ T5960] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1341.661829][ T5960] usb 2-1: device descriptor read/64, error -71 [ 1341.678916][T24932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4920'. [ 1341.800767][ T5960] usb usb2-port1: attempt power cycle [ 1341.955465][T16495] udevd[16495]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1342.196142][ T5960] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1342.224922][ T5960] usb 2-1: device descriptor read/8, error -71 [ 1342.841177][ T30] INFO: task syz.4.4413:22902 blocked for more than 145 seconds. [ 1342.854800][ T30] Tainted: G L syzkaller #0 [ 1342.893757][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1343.008456][ T5960] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1343.046977][ T30] task:syz.4.4413 state:D stack:26824 pid:22902 tgid:22896 ppid:16087 task_flags:0x400140 flags:0x00080002 [ 1343.080921][ T30] Call Trace: [ 1343.084824][ T5960] usb 2-1: device descriptor read/8, error -71 [ 1343.097867][ T30] [ 1343.105838][ T30] __schedule+0xfee/0x6120 [ 1343.116089][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1343.129520][ T30] ? __pfx___schedule+0x10/0x10 [ 1343.142977][ T30] ? find_held_lock+0x2b/0x80 [ 1343.154605][ T30] ? schedule+0x2bf/0x390 [ 1343.163694][ T30] schedule+0xdd/0x390 [ 1343.173765][ T30] schedule_preempt_disabled+0x13/0x30 [ 1343.190202][ T30] __mutex_lock+0xc9a/0x1b90 [ 1343.213726][ T5960] usb usb2-port1: unable to enumerate USB device [ 1343.222107][ T30] ? sync_bdevs+0x153/0x480 [ 1343.227488][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1343.232661][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1343.239735][ T30] ? iput.part.0+0x1a0/0xf50 [ 1343.245541][ T30] ? sync_bdevs+0x153/0x480 [ 1343.253067][ T30] sync_bdevs+0x153/0x480 [ 1343.260633][ T30] ksys_sync+0xb0/0xf0 [ 1343.265799][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1343.270714][ T30] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1343.278475][ T30] ? do_syscall_64+0x95/0xf80 [ 1343.283339][ T30] __do_sys_sync+0xe/0x20 [ 1343.288047][ T30] do_syscall_64+0x106/0xf80 [ 1343.292693][ T30] ? clear_bhb_loop+0x40/0x90 [ 1343.302669][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.315359][ T30] RIP: 0033:0x7fa1ac19c799 [ 1343.326874][ T30] RSP: 002b:00007fa1acfb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1343.344678][ T30] RAX: ffffffffffffffda RBX: 00007fa1ac416180 RCX: 00007fa1ac19c799 [ 1343.360912][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1343.381076][ T30] RBP: 00007fa1ac416180 R08: 0000000000000000 R09: 0000000000000000 [ 1343.400691][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1343.409042][ T30] R13: 00007fa1ac416218 R14: 00007fa1ac416180 R15: 00007ffd2fd96dc8 [ 1343.418329][ T30] [ 1343.425471][ T30] [ 1343.425471][ T30] Showing all locks held in the system: [ 1343.434423][ T30] 1 lock held by khungtaskd/30: [ 1343.444036][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1343.454897][ T30] 2 locks held by getty/5571: [ 1343.459936][ T30] #0: ffff888039a110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1343.473425][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1343.483984][ T30] 1 lock held by udevd/16712: [ 1343.488749][ T30] #0: ffff888027df9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1343.505290][ T30] 1 lock held by syz-executor/18191: [ 1343.517216][ T30] 1 lock held by syz.4.4413/22902: [ 1343.527149][ T30] #0: ffff888027df9358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1343.549797][ T30] 1 lock held by syz.9.4918/24916: [ 1343.562637][ T30] #0: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1343.584612][ T30] 1 lock held by syz.0.4917/24938: [ 1343.598903][ T30] #0: ffff888027df9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1343.621106][ T30] [ 1343.625815][ T30] ============================================= [ 1343.625815][ T30] [ 1343.653483][ T30] NMI backtrace for cpu 0 [ 1343.653507][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.653531][ T30] Tainted: [L]=SOFTLOCKUP [ 1343.653538][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1343.653549][ T30] Call Trace: [ 1343.653555][ T30] [ 1343.653562][ T30] dump_stack_lvl+0x100/0x190 [ 1343.653595][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1343.653615][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1343.653644][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1343.653673][ T30] sys_info+0x141/0x190 [ 1343.653694][ T30] watchdog+0xd25/0x1050 [ 1343.653722][ T30] ? __pfx_watchdog+0x10/0x10 [ 1343.653745][ T30] ? __kthread_parkme+0x18c/0x230 [ 1343.653771][ T30] ? kthread+0x13a/0x450 [ 1343.653785][ T30] ? __pfx_watchdog+0x10/0x10 [ 1343.653805][ T30] kthread+0x370/0x450 [ 1343.653820][ T30] ? __pfx_kthread+0x10/0x10 [ 1343.653836][ T30] ret_from_fork+0x754/0xd80 [ 1343.653855][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1343.653876][ T30] ? __switch_to+0x7b4/0x1120 [ 1343.653896][ T30] ? __pfx_kthread+0x10/0x10 [ 1343.653913][ T30] ret_from_fork_asm+0x1a/0x30 [ 1343.653944][ T30] [ 1343.653952][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1343.779223][ C1] NMI backtrace for cpu 1 [ 1343.779240][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.779261][ C1] Tainted: [L]=SOFTLOCKUP [ 1343.779266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1343.779275][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1343.779295][ C1] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 9f 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1343.779308][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 1343.779321][ C1] RAX: 00000000060a63db RBX: ffff88801e6ba4c0 RCX: ffffffff8b8fec75 [ 1343.779331][ C1] RDX: 0000000000000000 RSI: ffffffff8de72ef9 RDI: ffffffff8c1af6a0 [ 1343.779340][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 1343.779349][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd7498 [ 1343.779357][ C1] R13: 0000000000000001 R14: ffffffff90d98410 R15: 0000000000000000 [ 1343.779367][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 1343.779381][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1343.779391][ C1] CR2: 00007fecfcde82f8 CR3: 000000002637e000 CR4: 00000000003526f0 [ 1343.779400][ C1] Call Trace: [ 1343.779406][ C1] [ 1343.779411][ C1] default_idle+0x9/0x10 [ 1343.779427][ C1] default_idle_call+0x6c/0xb0 [ 1343.779443][ C1] do_idle+0x35b/0x4b0 [ 1343.779461][ C1] ? __pfx_do_idle+0x10/0x10 [ 1343.779478][ C1] ? do_idle+0x2bb/0x4b0 [ 1343.779494][ C1] cpu_startup_entry+0x4f/0x60 [ 1343.779511][ C1] start_secondary+0x21d/0x2d0 [ 1343.779532][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1343.779553][ C1] common_startup_64+0x13e/0x148 [ 1343.779573][ C1] [ 1344.036473][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1344.043353][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.054049][ T30] Tainted: [L]=SOFTLOCKUP [ 1344.058359][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1344.068401][ T30] Call Trace: [ 1344.071656][ T30] [ 1344.074563][ T30] dump_stack_lvl+0x100/0x190 [ 1344.079222][ T30] vpanic+0x552/0x970 [ 1344.083196][ T30] ? __pfx_vpanic+0x10/0x10 [ 1344.087683][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1344.093816][ T30] panic+0xd1/0xe0 [ 1344.097523][ T30] ? __pfx_panic+0x10/0x10 [ 1344.101930][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1344.108098][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1344.114271][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1344.120433][ T30] ? watchdog.cold+0x198/0x1ca [ 1344.125194][ T30] ? watchdog+0xd35/0x1050 [ 1344.129595][ T30] watchdog.cold+0x1a9/0x1ca [ 1344.134162][ T30] ? __pfx_watchdog+0x10/0x10 [ 1344.138817][ T30] ? __kthread_parkme+0x18c/0x230 [ 1344.143818][ T30] ? kthread+0x13a/0x450 [ 1344.148031][ T30] ? __pfx_watchdog+0x10/0x10 [ 1344.152681][ T30] kthread+0x370/0x450 [ 1344.156721][ T30] ? __pfx_kthread+0x10/0x10 [ 1344.161283][ T30] ret_from_fork+0x754/0xd80 [ 1344.165858][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1344.170944][ T30] ? __switch_to+0x7b4/0x1120 [ 1344.175594][ T30] ? __pfx_kthread+0x10/0x10 [ 1344.180166][ T30] ret_from_fork_asm+0x1a/0x30 [ 1344.184919][ T30] [ 1344.188116][ T30] Kernel Offset: disabled [ 1344.192427][ T30] Rebooting in 86400 seconds..