last executing test programs: 3m14.022121946s ago: executing program 0 (id=1174): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcmda12\x00', [0x8005, 0x4, 0x3, 0x1f, 0x23, 0xcc7, 0x8, 0x7, 0x0, 0xff, 0x0, 0x0, 0xa, 0x2, 0x20009, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x8d, 0x6beab93e, 0xf26, 0x6, 0x800b, 0x4, 0x5, 0x0, 0x4fa7f85b, 0x10000, 0x5149, 0x8]}) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f00000000c0)) (async) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) dup2(r1, r1) (async) r3 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) mq_getsetattr(r4, 0x0, 0x0) (async) mq_getsetattr(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x301c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x8f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbfb, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x24000000) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) 3m13.485427178s ago: executing program 0 (id=1178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0xa, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0x5c928f98}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0xa, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0x5c928f98}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_secret(0x0) (async) r2 = memfd_secret(0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@my=0x0, 0x8}, @my=0x0, 0x4, 0xc, 0x80, 0x401, 0x6, 0x80000001, 0x2}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc084) 3m13.347060496s ago: executing program 0 (id=1179): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x18) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf41000000653600648d0a00160002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0400000000e000e218d1ddf66ed538f2523250", 0x78, 0x44014, 0x0, 0x0) 3m13.308182169s ago: executing program 0 (id=1180): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x40000000}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r2, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) (async, rerun: 32) open$dir(&(0x7f0000000040)='./file0\x00', 0x40400, 0x44) open$dir(&(0x7f0000000140)='./file0\x00', 0x800, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket$inet6_sctp(0xa, 0x801, 0x84) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x6, &(0x7f0000000280)=[{0x9, 0x6, 0x6, 0x8}, {0x1, 0x6, 0x6, 0x1f9e}, {0x0, 0x4, 0x1, 0x1}, {0x8000, 0x9, 0x1, 0x2}, {0x200, 0x67, 0x0, 0x3}, {0x8000, 0x4, 0xf, 0x1000}]}) membarrier(0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m13.025304101s ago: executing program 0 (id=1181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000100)={0x1, {&(0x7f00000024c0)=""/199, 0xc7, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000002380)={0x1, {&(0x7f00000055c0)=""/4100, 0x1004, 0x0, 0x1, 0x4}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000001a80)={0x2, 0x0, {&(0x7f0000001940)=""/163, 0xa3, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x1}) socket(0x400000000010, 0x3, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000300)=0x5) listen(r3, 0x5) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) recvmmsg(r3, &(0x7f0000005440)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000003b80)=[{&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x3, &(0x7f00000011c0)=""/130, 0x82}, 0x4}, {{&(0x7f0000001280)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000004580)=[{&(0x7f0000001300)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/219, 0xdb}, {&(0x7f0000004400)=""/130, 0x82}], 0x4, &(0x7f0000004600)=""/66, 0x42}, 0x8}, {{&(0x7f0000002300)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004700)=""/160, 0xa0}, {&(0x7f0000002400)=""/190, 0xbe}, {&(0x7f0000004880)=""/64, 0x40}, {&(0x7f00000048c0)=""/143, 0x8f}, {&(0x7f0000004980)=""/135, 0x87}], 0x5, &(0x7f0000003cc0)=""/73, 0x49}, 0x1}, {{&(0x7f0000004b40)=@nfc_llcp, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004bc0)=""/85, 0x55}, {&(0x7f0000004c40)=""/155, 0x9b}], 0x2, &(0x7f0000004d40)=""/149, 0x95}, 0x5}, {{&(0x7f0000004e00)=@pppol2tpin6, 0x80, &(0x7f00000053c0)=[{&(0x7f0000004e80)=""/204, 0xcc}, {&(0x7f0000004f80)=""/71, 0x47}, {&(0x7f0000005000)=""/204, 0xcc}, {&(0x7f0000005100)=""/3, 0x3}, {&(0x7f0000005140)=""/245, 0xf5}, {&(0x7f0000005240)=""/119, 0x77}, {&(0x7f00000052c0)=""/208, 0xd0}], 0x7}, 0x2}], 0x5, 0x10100, &(0x7f0000005580)={0x77359400}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 3m12.73831576s ago: executing program 0 (id=1182): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000000, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010201e44120b8040202b7330102030109021b00020c6110070904ad04001000000d0904ad"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001080)={0x0, 0x0, "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", "f6c552f7182ce3e848490d9764662c8076c0f7e18cc4b4954f28da9f9266e56b94c07b3671bb5c05263e1ca37724b45b943344690bfc987041e53686661867022d0fb2ffe9f422c0a1ead72ebddefedd3f86534c1a476d835c6af0be6175ff7b5ac25a3296911f895f19fbb157b0666d56655ac8cf39470adb6ebdb73229a129f38a08b1e16865436784428c9aecb67583a2cd3472a599ed8a5dd58acc09790e42007768c8845e4fb0556fbf844f806bef61d09e38206d9dfa540a40c852b5871fd7a4adaed6980faa2c09840b9d105e81530f4f6d99c62fd2086b9428970239367616bd221d12f20c11d4bd98226f6572c01bf6a6050d7b8febf4130038ce664a6a91b18b971c85ce294e1ce8904c6ccfd1026dfa7e54da417a9c1ea5eb132fc2ce11e29be78e860d816aff40e137bb7c91428ee57c6b674808ef105dfdbf2994b9ce9db967fb305cfc323f8ddc1ee3336a3fff5b3869ccbca0b9d761372964b16c83ef2b5ca29325c8f9623e6d887a8be4cfaf9135a84eaa8d90f4b98144c18463aa50278b427d4967af0337e601ae819604ff258e2bdfa729d1484a12b147fbe31c9331533b4b3dcb37f795f7e6f288219048a58c739f1a7e664d80e24cf0857c522e26f016abec5a8d8f39244e792e46c2e525a830213f9d6b0ed3e659e8a802ef4af5a2264df1349a46155fe2033c4021cff9b1e02f0bb35c5825f1d3c7e25b08e2f492390f7f1d70020d799c877b1a21d0b83456c97c3acfe66eed107862947728c95a18ddfb706cac23ba5e258ecd680ef825a9d52c1fea597d4359497ff0ae9d4ff047ec4a1a3ce1cf017c219d5a82c1549c4c85d9d5087c5f321d14a88562582b3f20b116c9381d3e8eb89f24a84d0fb4e0f1f2bcff688cc824d91c3a061b406aee3ace8dc63008186dddd9f4c8cdb64cbffb836380ed161c9fe82fbe3395eef4484ecdca7e588e2649f0f1cd4e2f37da9fd698b62e8a986c947341b4e25326dac415d2b91630bdfee74fa255df4521676efaf11aa911bfb8db4d410337f8a34d8aeb97a6822906fb8a5cdc8b753761ef8e8fb1abc7bf67508f6d2404b4a9ea54580191847b72e1a8a55dc328b2fa4102613033648a5d3855c300bb5f1fc7d0a6514400f685bfdb837f4b92cc71e4e4c18f8aeae66705944325f4959ba48b8b2b0b18b5e601dd827ceda9cb0a9be754a35c6cd6d83f2d3d1a9d67c78c2e0b0d5971211bae28f1f10dac9eece5abf35cd67f1a612cb2e7dd0951be7b6e358be9f64266ff7326ffa86d00df55ae7c9501bcd65582d67dd78d05d7967192c365861e48f0578095bf7bf33a821b9afd33f1275d150a6d8356b9c650aea25d513e5a937d32fc61b090c906f40eff268392e45b8213c05f490ae93f42a8d40600306caca9ec4459caad48a6ba89cfd808371d32786a93c177ca7419acd158bfa70968b42adacd7ce2be555f3681f54594fd4e76c7f81b0febc9f3c3f495e23f7be02031180d1c8df11a975da33c2f022104ec78d673839d629392c2dc68f395bbbbd986e7dd7c1f81ad1af4262931d5bc74853c0c3a2469435902734fb48b26127ddbe6dc6cecf348413bb6b625e2e1adffc442af3a9d567d0e60de1d2501805cd3bcb7ee5d15d2985e0b9868764c48d744830fa018931e5d807decc6495f465c1ae4f104c29f9d135ea68e82f933cb1485ba226bcdc92d88121fad104f2ba1fc565f31470f2bd3a5a194487ff0d24bab61f23a856feffbc93c59eddf11490542c3fcd39651a1868f5223561c1c9d9cd3b67d2ca72d4fc546e0c9e78ee948036df72b66804535121905f1be099e9fa7efdfe3078bc391fc077b2be9d37836d899bbd7128c9ab13140a9c7db1397ebc2849c488f2c0a27c69eb1d272abe54067fac55277636e1a06c7688e1c1eb9f369cc1cab6816998844dee8fdaa614a2ee67fa6c9de3d9dbfa0db2401a8d012dd3d20547f3d1710d077518196feb6728502a87ea51686af3123155892df2ab0f1726541944c41d9447cd82da2308dfd12f1d4626f8e2855ff94fce0fd6a959153fa2db0be415eda9bdecb507944f64a8561d722df2b43867bf11f7a1fcc4cfc34d694592ddf4ba93bdebb83abe607fa5e08d6955835a184e216fb71aa59cd34bfc69a4380d32819281e5e1d58fbec8eae610259d4c51cffade485c1d3046aaa8346375f1e897b8bb3b968d3cc426cacfcf1e54a73613a8724418dd0811ff8d29eb96b7e175a264cf9fb3b29e80983e79debf3f149f27b7163f173e7578cfc7abd499f18f7cbe2f72f91d13c813bee76789a7235d1d643e4166b033347332c5790c3e3cd1d91d658adaa69cfe8f63eb352591e4185984a339ec291e8de3a3be675a60695f77c89094d93b7a81a6e471d45ad2e3fc77c29bdf9c52af321c85abfd3cf655a9f7cc84cbe42edfe534c1f20b8667708979bae4acee32007063069d82c33619b648e66e1dcf80080583df14d7d91a951101b3d607cd43dc71c135d5342354d5aa4f84e34a34096785d70a32c7b1be07f358496c8b73b7d04acdbf4205ac3e6bd7c3f92e62d36f7a46fe353954c809c96906699a75f585afd1b4b323ff8a852d884f9d02983ee7de6bd603141d7e07d6751aeabc7d3894d5f7f0525208470a2701ef120cb36aad23dcfe676447e2b41cb7f781017094897c2fb8bda8e1d687a563c5d99d4e01de72e1d1aac62302a7ebbe0a92b878aed5330aafb8e2976d7f667d0b2a271fa3c74645b8a1f7c4e6f6c590c5beba31015fc46c439283a8712cad9a7de16b201d8ae279d831388a552752e38dd1988ed9a67efa6245ffd5ed9baf745afab7ec12064b706bda2eedad5b206b1ea3e9805f251925f82ede2bfe2d23e9d51f581dd5401dff8a9116f441798bde8cc4e4dc8a02093e2f302f626a8cc9ec1935f31a7828bf648a2257a8231e5c5e8c0c60dd84cb01670bce0886be1d9c976dc10d4851bdc06e423459148ce3daa0d267eb33f7e5f27408b95f0077224fd3b7ac7d4e531a6a65a6b94d48287ca77353af1ceb0bb6ca5423a90fa8ab58b6054fa03c4d0711b63056837d77f03b2edb776e4bd156dee684e16ec4a1b9ba8961606f62483c5163c3a2ee32b1469c93f594c2306636e24cbf15704ddc6ed886424ee521b35e1527d82b3afa0d5fa479bb0eac22c1e050bf65bc9daa44b882092bf0e36c733566a4fe6e4d8b2567d1a408f90e34941530843f141a41795e16aa9833bf48c2bbd9a6c01a7a03390ee219abac70fee47074723a85268e53eaa713739b1190d90b69e74e00213bb5d9db164396fde2e14c7899226b27b51aee3cd4a544fa1a306d8cc095361095d1a1532eae5b33c8ca9c2e2f819417688c79528e1a35b5b22f3d6f7bd98e3b7100ce8f25a81d1427e0f623653814e8bee97684446b7c7211e04a760db8996cfdc7a264c1cc6eda2631c2b6f37ae38a72f7fd1db37e6879f68ab9354acc97f58c42b9803fa44c2cdc9add0249542604f679cb7d9e7317a175ab035abf4b1679b830807b807dc35065b64cda44d085d41cd08505083f849bfa24a05332911072b0acfca44003cea96c0b48787154b740d4f8a4ce4ebf33201dd86b5b863cd11bef287023a77046fdf05a227035fa529e227455ac8c978d07a11c7f52ee4a6bcdb0d37b4d9a915523a06a8f7a64499400072941794f613e5eea04e787e8f4fc9a1562660ea7f3493e7a796586b2c8c4144c940ec53d03cda3519e0aaa2daa22bb1bb9f605211aef1a923c2146adab09bd9ddb9d887b3ede102e9019b587ff6a6c90e207c2e2d067dd5f96bb5bdd1976a1e3bbd54f0c2f8d6c2277ef931535af4caeffebd7ce95d653adfe70bba94375e7060374f963e740c96b3fb54777f01d734d1ee662e0f222248c7161cdbee2e4262263893680d02e0f9d6cd8030a9b54034c0d0ba3e08fadd07d410386d823ffe5247a577615a07320f1986cbc4c1432ea022b8538c3e371638654bab81a9bbd2ee85e010665f66568a15e6f4a5861255cab8218cf678b43afd9816d2ec89ae80612796584799b84b1a6d5d12478d2971f256f0ae582486f62f30f456bc6fd1f3e1363791096dbb2920136430c46dd42c74d4b762870e974cc97c2128ce4b2c0a10f06611988bc3c7fe39da60894adcc456377b6a3dc123cc0f17b08b2d7f3172f878f1edc6837ca821dbd137be1133a1c83851f03fd57534636bea60f14b95d17c9185279f1f44b8872eb5dec95377ee6f7c4829a91810b78ba51631a8f8ce8dc5cb3a33ade5d643404c6f76f86584fe1fdc4c85b02ffba44316013cb8dfe15d70b392abf225909a46b36764e4370197c27de0a872a51cd5fcbceaaa61072293963dda923abdb84f71e89af79f33115655f78d991742946cb1efe28a42aee35422d3087210eec173dd479d4afcfd91d98b30f1da5983844e0ccef4e528930137c17da3d49a4b5688d3b5e5acba898190e6683872080edd9a2ec23b68906996b754b92f7f2cffdf125d90724f0c7408081848a43fbaaddefdcea63081a5228bdc37ea4f106050a6126d5d902f1b7d48d2c81fd8db6dfb16634fb7343d644a53786b0825a4c07bb0aa4e43168d3a9376478d1cf1d7394d10eedc49431fb87aee51cc2855d0dd97f912a18c416fb09e9f979be5486860b463ac3cab022c4890cfa339dc313c47a806beccc20f339013d4ab4d6f710e944f8acb792ebf22f91b9572f8f9cd76e7e7b2b288f711612a62de566485a308a25ddf0017870576e5ce75737c8e8bf5a61a238e437e6f1333f7ef1714f28e467a0accc848ed7f0bcc3cfbe32130a8523460b593689299b8a76cc1a2597ad02f13d2628eed1f606655755b6f15c6799ed26e6467af15b7e0eea2be6170764625f7e039dcaa74635fd9bbf5692faea0ecd972f9f86a2bb9780ece947e332799a734e747d64261b44c9fed71290900b0e24828253677b4e8f8aa3977c74c226bacb358c879276f6ce5d9679e8737f42d8963fc150f27b6a9cc6a953f4588479292910064092952186feee211980f8cd30fecdc5c85870ee3c13e7b3197dc8acd7012bcdd6929b622017e25e5503dd297102dd90811f92e0c8875700905ee4023778ef79e3d589f29b95af8f0a3229fb851ee79a0204d86fefedb69cc9450c9133b24a1be67a545bb27f315555fcba79e806b0ba4127caf526342ced4be6001d91af85036b250523dfbbfc9ff58df330c0bedcc21d3778816009967ccb166a25f91e166db1657929ff98ed2f7e13478e85614b954172348be605c6b9580992189fa6f5dc105c75e10e10b100555fbd7fc34f38a701a8b270d6fd5207d58924273b9f026c354f9b21c786241f0cb817ca297ac926a260a9abf7859e16fb6cfdc34e73741f9e3b658374feff572772fd757"}) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/58, 0x3a, 0x14100, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102020000402505a1a4400001020301090244000101030000090400010202060006052406000005240005000d240f0109000000ff0f6e8e03090581032000810700090582020004000308090b069a68bd4890a9941d86e7a04c0059025ef543a81d72e29f4d5449f97b7873ad0387dd25025c414f4b07ecd6106bb3bcb550d007675fac7e016655fa459067bea831f7873efad8d1db05d4b496451599cfcd42c0f9a6ab6c4d94ca6ab1f23d9a0a723484407af1d6711d0ed8173be8e2d76d22847d7868783daf3a258395eadf117967f566ff6ef206a81509637abb82ddc28aa24730a6b3526b7dc0a2504ecc7319f900"], &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x5, 0xfc, 0x9, 0x40, 0x94}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 2m57.457288424s ago: executing program 32 (id=1182): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000000, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010201e44120b8040202b7330102030109021b00020c6110070904ad04001000000d0904ad"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001080)={0x0, 0x0, "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", "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"}) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/58, 0x3a, 0x14100, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102020000402505a1a4400001020301090244000101030000090400010202060006052406000005240005000d240f0109000000ff0f6e8e03090581032000810700090582020004000308090b069a68bd4890a9941d86e7a04c0059025ef543a81d72e29f4d5449f97b7873ad0387dd25025c414f4b07ecd6106bb3bcb550d007675fac7e016655fa459067bea831f7873efad8d1db05d4b496451599cfcd42c0f9a6ab6c4d94ca6ab1f23d9a0a723484407af1d6711d0ed8173be8e2d76d22847d7868783daf3a258395eadf117967f566ff6ef206a81509637abb82ddc28aa24730a6b3526b7dc0a2504ecc7319f900"], &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x5, 0xfc, 0x9, 0x40, 0x94}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 2m34.773151709s ago: executing program 4 (id=1304): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x76}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x646}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x36, 0x1}, {0x1b, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newtclass={0x68, 0x28, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2}, {0xb, 0x4}, {0xd, 0x5}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe8}}, @TCA_RATE={0x6, 0x5, {0xd3, 0x4}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x26080}, 0x4000) syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000, 0x0) 2m33.710776905s ago: executing program 4 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x0, 0x80000102, 0x0) (async) recvmmsg(r2, &(0x7f0000000340), 0x0, 0x80000102, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r6 = msgget$private(0x0, 0x120) r7 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f00000002c0)={0x2600000000000000, 0xeeee8000, 0x4, 0x0, 0xff}) getresuid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000300)=0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000400)={{0x0, r7, r8, r12, 0xee01, 0x1, 0xa88c}, 0x0, 0x0, 0xc39, 0x9, 0xffffffffffffff4c, 0x9, 0x0, 0xebed, 0x2, 0x7, r4, r0}) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) 2m33.367149228s ago: executing program 4 (id=1310): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000100000000000006bb55a2a630b00c145", 0x14, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109642, 0x0) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xbf, 0x9, 0x40000000000, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000035000701fffffffffeffffff00000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000040)) 2m29.962838332s ago: executing program 4 (id=1320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfda0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300220200090581031e5acf084b1c34c5c9285bee5dd300"/65], 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300220200090581031e5acf084b1c34c5c9285bee5dd300"/65], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00220200100071a4ff6fe4c5c762b6e66325999e8d2b1991950be339794cf5e933314a5bcdfc6aedda64f2f77371fad3acfb33d1e65f68582b3e17112d63751535f372b6a33e7eb034395008b22d86339196a2bf14eb7902b3de4899f3abe4289b12401e38d6ac52391b2b5eec250b"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="00326ce961005e642732369d563eb2ec1dfc7a4e25c30b2c11fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="ff7200d10a9c0e60d4cb097abdf9573bcb800c85f11a81bfd2fce9ee4f46cefcd25716aede48a26dd4daa4bbbe91dd6aa3eca209ba353f262b542b8c73d5abf2e1abdf94436dbafcdd3ae5ffecbd4e64ec658b8a7bcb56d98b2932a72d4eb8f7dd2f52990553a35cca3038c07b74484e8c811641dfbe5204373b4bdcc7052fc83600", @ANYBLOB="100a0500231a0500300012800e00010069703665727370616e0000001c0002800600030030000000050016"], 0x50}, 0x1, 0x0, 0x0, 0x2004e904}, 0x4000800) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff8000/0x2000)=nil], &(0x7f0000000080)=[0x6], 0x0, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x14, &(0x7f0000000a00)=ANY=[@ANYRESHEX=0x0, @ANYRES8, @ANYBLOB="0000007ce4000000b708000000000000738af8ff00000000bfa200000000000007020200f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000480)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async) connect$packet(r6, &(0x7f0000000480)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r6, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x4010, r6, 0x9c399000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x4010, r6, 0x9c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m29.598887732s ago: executing program 4 (id=1323): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x9, 0x3, 0x6}}]}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x184}}, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) (async) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x9, 0x3, 0x6}}]}}]}, 0x44}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x184}}, 0x1) (async) 2m28.982561723s ago: executing program 4 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f020}) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendfile(r5, r1, &(0x7f00000000c0)=0x58, 0x5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m13.498418166s ago: executing program 33 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f020}) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendfile(r5, r1, &(0x7f00000000c0)=0x58, 0x5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m27.994824999s ago: executing program 2 (id=1569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r2, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x40) timer_create(0xa, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) getpgrp(0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x22, 0x3, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x100000000000f7) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, 0x0, 0x190da) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000880)=@base={0x14, 0x4, 0x8000, 0x58, 0x1000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1m26.948355235s ago: executing program 2 (id=1573): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010003704feffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="c30407001b14bf263000128008000100736974002400028008000300e000000208000200ac14141d06000800ac83d3244fbdbb10c50f8ddfb458d615000000060011004e21000008001f0007000000439211952d8eb6e3"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r7, 0x0) 1m23.150989179s ago: executing program 2 (id=1598): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, r5, 0x25, 0x5, @void}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\xb9=?N\x99-\xe0h]\x18M\x93\x89\xd5Z\x85\xbe\x9fI+-\xb8\xa1\xc4b\xc4\x85A\x9c0\xd3\xa1I\x96>eB\x18b\xb3#\xe9\xc4\x0f\xbf\xe9\x87\xd3O\x1e+\\9\xff\x02D$\xdc>\x12\xa1\xf0\xce\xd8o\v\xf9\xe1\xed\x05\xc3H^?/\xa5I\xa3\xe0') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x1, 0xc, 0x5, 0x401, 0x66, "9029ae779c789d090000130300000000aa9aa7", 0x2, 0x3}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000080), 0x0}, 0x20) 1m21.80287336s ago: executing program 2 (id=1599): memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000701) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r7, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x7ffffffe, 0x4) 1m21.326580716s ago: executing program 2 (id=1600): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x5c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffb}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0xa, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r6, &(0x7f0000000500)="1c1c189c08f2d8d1cfe8c223de130edffc0d72cb31116aafb3e45f32a013c1db215f308471aa7a8585352c929b2df47ba7c5ec56ebfc4b29fcc89e29a8290685113faa56cadffa4ec763609ff3ce52478d12605ca30c2654ee533e4a450f7be1e818584bdf16c2fc30d174f74147407d4249d70effcb7c4891c21318860062e1e5524fda9ad166452562d5893c5dd0aee2b95a781bd7a7c60d563baf1613784ee8b2e4ee87e064af4659bcd9b23949903ca9c29bd37302f4405da68bed1807d62c845393d3de9c86f00e051b8f00f84a0e930e4d54e71460e15738565c93", 0xde, 0x10, &(0x7f0000000140)={0x11, 0x18, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') read$FUSE(r12, &(0x7f0000001340)={0x2020}, 0x203d) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x28, r9, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40040) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000100000000000000000000008500000011000000b8d61929ea5e2f41ed282b86ad20148cdb030e80ca151302db72f7fbb1082b29b058064406a4113222ca0b2e0617395781122b1d843cb56f27fcd34d34ed7203a3463b7213fece32a315b7326b972adaee30f2f14cddf1927f25567b125943e510c28ca9068a004024000000000077e00ad5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES16, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r14, @ANYBLOB="8036b780d12001e9e55e3c450975b2a26d90d63a9f9430b399c6a601826e4e57322c7b36b5af733703383aaa038f3dbc2206b54cf850c193c331e444b3640a4d253859ddaa813b527c248fb0abae210f39bb97977e4e364c851961d23eb82a95d3893d1820bfe0cd534df966e82369cd6f20621c5c080922ce6132e2db4a393dd401003511f126cca53d203dc67650840a2f07678d1270fe5fcb39315d54e5074eaf882ef6a2c7ad71e8dba38891643090eae078caf40000", @ANYRES32=r13, @ANYRES32=r13], 0x50}, 0x1, 0x0, 0x0, 0xc04c}, 0x1) ppoll(&(0x7f00000000c0)=[{r15, 0x4000}, {r15, 0x1008}, {r15, 0x8400}, {r8, 0x14}], 0x4, &(0x7f0000000100), &(0x7f0000000180)={[0x1]}, 0x8) 1m21.016346316s ago: executing program 2 (id=1602): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap$snddsp_status(&(0x7f000095f000/0x4000)=nil, 0x1000, 0x200000b, 0x4000010, r2, 0x82000000) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) socket$packet(0x11, 0x3, 0x300) 1m5.901415381s ago: executing program 34 (id=1602): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap$snddsp_status(&(0x7f000095f000/0x4000)=nil, 0x1000, 0x200000b, 0x4000010, r2, 0x82000000) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) socket$packet(0x11, 0x3, 0x300) 1m3.854755575s ago: executing program 3 (id=1674): r0 = syz_io_uring_setup(0x4e51, &(0x7f0000000000)={0x0, 0xc9af, 0x2020, 0x1, 0x1ba}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000016c0)={0x8, 0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/165, 0xa5}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/176, 0xb0}, {&(0x7f0000001580)=""/95, 0x5f}], &(0x7f0000001680)=[0x4, 0x80, 0x1]}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='task\x00') connect$llc(r1, &(0x7f0000001740)={0x1a, 0x30d, 0x1c, 0x0, 0xe, 0x7, @multicast}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001780)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000017c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001800)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000001840)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000001880)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000018c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000001900)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000019c0)={&(0x7f0000001940)=[r2, r3, r4, r5, r6, r7, r8], &(0x7f0000001980)=[0xd2, 0x6], 0x7, 0x1}) r9 = syz_open_dev$vcsn(&(0x7f0000001a00), 0x8, 0xc00) ioctl$DRM_IOCTL_CONTROL(r9, 0x40086414, &(0x7f0000001a40)={0x0, 0x5}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000001a80)=0x10001) syz_usb_connect(0x3, 0x4b5, &(0x7f0000001ac0)={{0x12, 0x1, 0x200, 0x1c, 0x17, 0xf3, 0x20, 0x19d2, 0x49, 0xa1ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a3, 0x2, 0x4, 0x55, 0x70, 0x5, [{{0x9, 0x4, 0x55, 0x6, 0x5, 0xff, 0xff, 0xff, 0x1, [@generic={0x14, 0x11, "c9b620b4d3c1f2e585600e0fe064cdc231e6"}], [{{0x9, 0x5, 0xd, 0x10, 0x0, 0x4, 0x4, 0x81}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x2, 0x4, 0x5}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x2}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x5, 0x81, 0xe}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x3, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1}]}}]}}, {{0x9, 0x4, 0x46, 0x6, 0xc, 0xe, 0x1, 0x0, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0xb9, 0x1, {0x22, 0xcf6}}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0xf}, [@feature_unit={0xb, 0x24, 0x6, 0x3, 0x6, 0x2, [0x4, 0x9], 0x3}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x8, "0d5b59958ef3"}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x80, "35e5"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x3, "e2f4e3a72f"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x404, 0x6, 0x3, 0x7, 0x40, 0xf}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x5, "85d53a3f4f8a"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0xf6, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x8}, @generic={0xe6, 0xe, "2094638a729c3929332c0ef8a98fa2930e4de83b5c1741559927aa77496dafb7b90e950c74d3f2e22f05fe2940e7c851e8dabe97b05ca979cff71c2974ec05d4a2b71ec6cdde4227a36b5c7460df0b80f285456bf143bae6fe96534b9e6795b92fb5b665bb9e485482ebf53662561e2317c74b419f27de7480fdf5dcd621096e998713c1566b15d7b2e73b312d0dacab045c02f5bdcebbe21e78ea544168a17b4c7d99b106f76b93aae2add1834c9b6d8497264bc797768242ced17e09bb10b77c3e7fb5053aa01d2fc9ffab214cfcab0e68d59ed0ffabf4c64b042af1ab0287f64c56e2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x6, 0xe7, 0x3, [@generic={0x37, 0x31, "36b8a165384fcb79b7da14dac2e916ce1782cf6243edc7c510ecd50f87065ac1c9a3af8d2de81f51a133e386400cc5aad98cc4a160"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xc, 0x8, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbf, 0x1}]}}, {{0x9, 0x5, 0x8, 0x3, 0x410, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x5, 0xfc, 0x5}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0xe, 0xa}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x3, 0x0, 0x80}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x7, 0x7, 0xa8, [@generic={0x3, 0x2, "d3"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x77, 0x81, 0xd}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xf7, 0xc1, 0x1, [@generic={0x65, 0xe, "78590433c5473715acf513aea78c9bd4e86ec7aa50e2dc52a85318281ee00345615ed5a55b0a43457e1afc70459253f0084a0b5a86b6a5d955788cce931d1fa3c0e4ad038d45e523144d25d552d85dbd38312019236e3ac13400dc38f18c8f362e8ce8"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x24, 0x3, 0xff, [@generic={0xe0, 0x22, "869c469175da566e18420968ae000f540b68beb42e03a1acbba77e76190f2c835bd6155a2d5e7320eae614a1fed2632c1ea5db82f1ce791a821d0683f1d181fa5e9a3951d555060e1775f79c4b0017d7fc8dcff00c6faf36c98c04803ddd91c8a28cfde50081b56e0b78825ddb98395bab0223c054dd4700cb5f6e348ea03be8beca2bcbdd233e511c6cf27799eaa7a036724a77f2fb7012be0180ce1e403015384603e6d04886b8ec26e9a6d1c6818bca350735ce4f2319fd27d32efe1d60286e2123ebf5240795f22d788151ef58b888488bb98d61a146f0068aecf040"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x2}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x2, 0x7f, 0x6, [@generic={0x21, 0xf, "db9d480b738acbd81b31b68938e2dda08536ca6a6790b43088266d70d96c5c"}, @generic={0xdb, 0xb, "88492eb00c1917fe6411204c21f234c5f50fa9bd85ea376591b01dccca74ecae6d3dae0e287d42b878e285a257304e13687f0fda3499ff75538c001f94eb50743b66f39fe8060b8dd01e8efe73ee38cce3e3066a8c72a584cf2cf940a5ac750c5cd71fda1d12399183e33a6cc341551b86a328883eda90fefa4e6de3fc182dabce5fcad305cff0197206c748cd5bae1b4b59849651b68d2ea396fdd3dfbc43614c1d3fe049b1d928ed85544ce7e022f9260b8aa9c8e0a2098d459e641595cb0398b9cc724390a7a08045b337965eef6432a8dcf8a88e874746"}]}}]}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001f80)={0xa, 0x6, 0x310, 0x10, 0xe, 0x8, 0x20, 0x8}, 0x5d, &(0x7f0000001fc0)={0x5, 0xf, 0x5d, 0x3, [@generic={0x4a, 0x10, 0xb, "b67e606c8ef338ce3692b55d8fdaeb77ba3a353d2da410b9129053f519c0b4be78861c6b25864cdb9284535713a540f9c2411762b567517207533edaf7445a7a39160856f82d37"}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0x9, 0xe, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x8, 0x3}]}, 0x4, [{0xee, &(0x7f0000002040)=@string={0xee, 0x3, "c8779ce05dff05bbc49a1be550290699eac8a092e5432c368829d7a596916ee59dbdc42f6b5d6ff682f7dd0fbeceda04d3070ca0f8d10b359315a93f5b94c17d12bd9e3197d62c9bb2b2cb8b756abbcd888c68e5839834b030d71201d4b9be5ee45c756bad001514240c0c807158fb8b123d591ea8a92b649ad11478a9264e6e11fabc2538c0fc50913426d1311dae5ce3bf7cb8506d3b6d73d8fc3ea6e8c4ca59a23ae3bb517189bdd4c4d0b709c0320251f487563cd6137461f4dd4970ab6153f647ebdbd4c14b73afc8720811cc7c2d3691a027dd448db1450556fff29587404f593f12ec690879ef9125"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x100a}}, {0x1e, &(0x7f0000002180)=@string={0x1e, 0x3, "2ee6781719fc26bb2029e22257883d70fbe25f303fbf6ec0a0343db3"}}, {0x3f, &(0x7f00000021c0)=@string={0x3f, 0x3, "c7516a39734e9cf4d1b7ab83984fd09fdc0cf9039fd6371a5ba9199c4f467a822f137ac04a2b911c5aef8eb0c88010e6c59110f8ac3e91d9abbe8bfefc"}}]}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000022c0)={&(0x7f0000002280)='hrtimer_expire_entry\x00', 0xffffffffffffffff, 0x0, 0xb21}, 0x18) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x130, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000002300), {[{{@ip={@broadcast, @local, 0xff000000, 0xff000000, 'batadv0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x68ec625f372dfd8c, 0x0, 0x55}, 0x0, 0xc0, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, '\ny', 0x1}}, @common=@icmp={{0x28}, {0x8, "85d9", 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xf, 0x5, 0x2, 0x0, 0x0, "8bbd5af6e9fd378c9789a9fa44c339bd56759939a8d7a98a35e13947962fad0c3110ad085b27580120d967b6915a9f5081d59f474da553d536b45101ea392166"}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x347c1a787fcce453, 0xffffff00, 'vlan0\x00', 'veth0_macvtap\x00', {}, {}, 0xff}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@remote, @private=0xa010100, 0xff, 0xffffff00, 'batadv0\x00', 'syz_tun\x00', {}, {0xff}, 0x2f, 0x1, 0x64}, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "22d4"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x1d3d, 0x8, 0x0, 0x0, "c155bcce203fbf5b9a83233e2d57996ada2aafc4771bd42d05583cf37f77735d6b45b77301305f8766b6d60d3a2b5dbe7ed54775b3623002438f9c76b14133c6"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) preadv2(r9, &(0x7f0000003b40)=[{&(0x7f0000002780)=""/128, 0x80}, {&(0x7f0000002800)=""/225, 0xe1}, {&(0x7f0000002900)}, {&(0x7f0000002940)=""/240, 0xf0}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/244, 0xf4}], 0x6, 0xfffffff9, 0x100, 0xa) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000003bc0)={r4, r6, 0x9, 0x1}) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000003c00), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r11, 0xc01064c4, &(0x7f0000003c80)={&(0x7f0000003c40)=[r6, r4, r8, r7, r5, r8, r5, r4], 0x8}) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003cc0), 0x84000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r12, 0xc018937d, &(0x7f0000003d00)={{0x1, 0x1, 0x18, r10, {0x101}}, './file0\x00'}) r14 = syz_open_dev$sndctrl(&(0x7f0000003d40), 0x683c, 0x0) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000003d80)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r14, 0xc1105517, &(0x7f0000003e00)={{0x4, 0x5, 0x9, 0x10001, '\x00', 0x8f3}, 0x6, 0x20, 0x3, r15, 0x4, 0xdb, 'syz0\x00', &(0x7f0000003dc0)=['/dev/vcs#\x00', 'veth0_macvtap\x00', 'icmp\x00', 'batadv0\x00'], 0x25}) mq_open(&(0x7f0000003f40)=':\x8f}\'\x00', 0x40, 0x0, &(0x7f0000003f80)={0x10, 0x428000, 0x8, 0xf34}) 1m1.60798642s ago: executing program 3 (id=1682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x8d, 0x0, 0x7}]}) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x3c) close_range(r5, 0xffffffffffffffff, 0x0) 57.734040456s ago: executing program 3 (id=1688): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="078ae402d9cb0df169d19ed364e81686280e6cc73a4b7655de605bedfd740c08ff2245e9b9fe9f1ae893ee0a3e6380d79bb3bcafba91999f5f2b442c91422cf2e4520a76760a7df0651e9ddc2042ebc8015eefc10c0e37316467234b33453dbdcc966abaed72d94258108050365349da747bfad6a546ca21d091e7bf1d5772523a0cc1e0d8bb5a49332347d3b8257bc0d26b5d", 0x93}, {&(0x7f0000000200)="94b47c23b887ab4fed9dd91b6425c9b836774588da65063ae37191e13d3eb5c5f4cc2fe4b751a78ccd8f9d8649461edd98aa3df6c9755c5c62908956efd21c04fa7b7a0d20a10419f2e8a13a990ab3bbdcd88e944bf97107778e1b86b201fc1068086376814136eec2911c1518e2a35d82508b734ee0b4cc5421a6ee3fe34bafad3437f9259a299c410d3f3d424b58f4f5d046399a136dea1342a29a6bc1193749444172444aa854d4086995cac48b077c06e8b30c", 0xb5}, {&(0x7f00000002c0)="5efeda4a2cfd735f23beb79c87d648e46dc343e7f34f4b691b9d8375829ea9f50836b4532d075d216c", 0x29}, {&(0x7f0000000300)="d1f0ec0d055fb4e1f62cdc685e3e825a48cfafb11421d463111a905e54fbd5a1760d7bbd869dd4e38e9115d9825a53f0d8a8eac5715ff39a6850c308ea2567dd5bbf3c8ef4c8d4072a1fb77a491c29578fe700c87d9dad8fafcb47a0d5e3c8d9f8ea86aa1a5ccadaf6452ed96279bff42c48b1b7bbafe7b175b8ee5957395313124cada2f23ea21d00ff8a71cde04326de8151f17297b9bc3d30a64b17b403c9db06b83f89651117842a0bdb33f36d10d62eecfbedd06f0789477e362e1f8297c21cd78e7958a5fc990e343f243c5ec7483dbc50d00449cd8778a2df3c37fcdeef049c4abd6589bf4d05c981518c905570eb", 0xf2}], 0x4, &(0x7f0000001500)=[{0x90, 0x117, 0x2f5, "12b5fe0858f93de706fc3b545afefd10546ce4a0127191b1be7607be6ac787d912dba4f974dfd987240e4fb919727d9750668587fcc4a59aa04d0be6c1763b0bed27823df55e5456c39d4a4235e72d911286696843cfdecf66829c19ad1116ad3e731bb8aa6f708886a1e909060facb110026aedc728b518fac38edf9d787cd7"}, {0xb0, 0x0, 0x1000, "c22d7819869014841fe05cb5c47e3dfcc4fa78860e1f81101d03025b0d3ef554abcc3e37631acf13bc00eaa12e0557ae008eb1da48dee38f0b08123c035a0ebdb3ce9034244f1c94de57fe961f9d4887b3e0087e2b7fe2ed1a62af2ad52530c7aa4abfa3d1f16c6354c8a299b477b58986b6f09988006caad314fb08229093053398f2d06a26f8a1a2c3bb561f4f407dc79f48a66429754e35dc351db8"}], 0x140}}, {{&(0x7f0000001640)=@rc={0x1f, @any, 0x4}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000016c0)="4de747cd0656a149c67cbd2ac86fef13f104bceb8f5c4414e501f65d37902365b1782f635a3506d81a9f18e51d4a3afbba38c5c11f73f5e1c65e5394ef1bbb8900e6da9dbeaa7c1d286e969f3fd056bacbf27c1ee1cf7520669c09fe482f349b9a475b4a377a1eecb5a77b59e98b4a0014300d9b665353e1784f8bbc2fa0cdce4afbe321be2da4b6c5e27e779aeeb345197b917e16a22cd76392038eca4180c100955b9461d0c61a3dd6168ebeb2df568907ec7d8bae916259709d169ba957925575edda3391855177e35a567d7bd8f2ad74e86a23995ce5dc9476d1db", 0xdd}, {&(0x7f00000017c0)="793e51b0159cf6b4ca5fe37e9d9d3cd2f095438b9f440fdc05f7352ebf1bbd55d8fcf57179ce617c6688c0d7633e91a5a6ce39d45d5cc68c0825e753fb781e1daeb4c3b5e96fbfc5279bfffeb631cd0a6baeb484be5833172c8783", 0x5b}, {&(0x7f0000001840)="dbecb93140842ce6fbcff3a2034c08cef542ae0f3594b73127146d8ff31e9b0376f15a19fe62df570b800d8d1f46f3a6838b5e37919d801fa8b0ff3b10e39cb86a196797cc2748776a0020eb6a44669e105554ece4ed28cdda55c6c74c6b3fc2a4cb3fdc09711c8f1f046f02e8985a1618bf322666f8568f49dfa1ceeb9bae9f0f941b0744e8418527187078f2ae34", 0x8f}, {&(0x7f0000001900)="a0946b418600cfbdb592b36e127d657a21b3cb966bb14b372dbb7705dce4c4995fd44d0e64e42c2ad81a7b785df59cd3f18dddca3e804c8e0784d9224921cae72afe2dbc1bc48d054d57f4242b2ce12a5a1e84c25a144c5f1409919126107426403f47c9e98161902f4e93a1a17aec2329baee314b5da1d97c55fcd1eed4c5f8a5f3ae2ff6a4b138d2647c8390a8ac432af6dc3cea587aed902bb9bb8d8b1768f516058dbf246cf18203eb57d6170c35038e9b", 0xb3}, {&(0x7f00000019c0)="f7c24f18202e2dd7b425512c59eb9b3e58315f73805a602228113c2f89a397a4eb02c35d668b3c967c70bebcfaea4091af85a1780031c88eb1b2068d719e73757cfe861c27d427f89f24c529a3ab3c94679f67fc35214e016df6ae83b6296f2ab6949f33094e5cc6c37ef5b332e2399788aeca314a42465da6c52fba69afdf2afe6a01efa83a2b", 0x87}, {&(0x7f0000000440)="dade0a6979d0e2a6ffa59b75cba0b3205d18d9614da11604e9a8ae719f041f8f9e4288a75b", 0x25}], 0x6, &(0x7f0000001b00)=[{0xa8, 0xff, 0x0, "f05d65df362cef13cd313fde4ddcb96d468e765b39a6d0b183bbedab299ef59a6528fe582017c1933ce0c1224e531163ca3a98b1e58313777eb533aba8c61cb8cceefc7fea938d8202a288a42277e3b7125945069e234ad2d118be09c36e5691b185d2960d4cd362c088285565d62072c441d4bfb95992b77b028fb387d78abd1fda424c12bd12c0bef4d84c1910e9982b"}], 0xa8}}], 0x2, 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882000596aaaa02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 56.662807995s ago: executing program 3 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast}}}}}}, 0x0) listen(r1, 0x81) ppoll(&(0x7f0000000580)=[{r0, 0x132c}, {r1, 0x90a6629e4018e176}], 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x8) bind$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x200005, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x10000009, 0x3, 0x7, 0x7, 0xb, 0x4000060, 0x1001, 0xc}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048041}, 0x880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = socket$key(0xf, 0x3, 0x2) write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:mail_spool_t:s0', 0x20, 'unconfined', 0x20, 0x9, 0x20, './file0\x00'}, 0x4a) socket$igmp(0x2, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 56.466729839s ago: executing program 3 (id=1694): pipe(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="c918", 0x2) close(r0) tee(0xffffffffffffffff, r1, 0x3ff, 0x0) write$binfmt_script(r1, 0x0, 0xd9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x700, 0x6, 0x5, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x7d, 0x2f, 0x0, @remote, @private=0xa010102}}}}) r2 = socket$kcm(0x10, 0x400000002, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60d", 0x51}], 0x2}, 0x0) 54.867625046s ago: executing program 3 (id=1699): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdc01, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000004c0)={0x0, r0}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000500)) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 39.584481721s ago: executing program 35 (id=1699): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdc01, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000004c0)={0x0, r0}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000500)) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 28.630269504s ago: executing program 7 (id=1773): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r2, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) recvfrom$rose(r0, &(0x7f0000000040)=""/46, 0x2e, 0x2, 0x0, 0x0) socket(0x18, 0x4, 0x3) (async) socket(0x18, 0x4, 0x3) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000640)={0x28, 0x2, 0x0, {0x2, 0x4}}, 0x28) syz_usb_connect(0x0, 0x3f, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a4400001020301090244000101a78a0709040008030206000305240600000524000c000d240f0104000000080021ca0e0905810308000006080905820220000910f9090503021000050604"], &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x2, 0x2, 0x40, 0xff}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x7, 0x340a}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xf, 0x8, 0x5, 0x2}]}, 0x8, [{0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="2403b63f5f95000000645f840b6bbccabb8b0000d52e02ff81153f6567f107f6b5d82ba37e7311bf9015424bd864b296881d38d65c7378c131db019d25b44d1586fcc9"]}, {0xcf, &(0x7f0000000140)=ANY=[@ANYBLOB="cf03330cbdffff442b55a8da02a0aab70f3aa44d742a03bf39d89360aa548591a5de8ae5dcfa27b2bbe117934730159f3fab6f5484cf9177b364c13329549f5ede2bd94c98a563dcc0019360f72c453630897318bc6e66d35c102466719154ae4c980fef52b03e7fcf3c923d665b89d478f4579a38632bb1df2b84caf43c5caca591f88f9f9b5c47fd35d0d648549ff4cbe53896f4a6b5885a89a9a14f6be59dfd687730a5f866703964e07d2efb1b7d276383908235a225d2aa7bc3bdaa48ba38956e047f462ec07f463ee2d1e7ec"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc03}}, {0xf0, &(0x7f0000000280)=@string={0xf0, 0x3, "616710b4da3801a663e170f56defb89f007b95e89f54d87fddbef9764ed7ab9217577d1fd8f508731f1a0db3bced297c849f5cca3ce3a15348ddc475c309da1c9f68c34dbb7ffe4676c25d5459772a1bfc82d974e84579d45d79b8b93d2f8679ffed11552f4307dbec92527738b02a6c9fff7b83a9b91927b6f20b640f710c938f259dfd4d075365913e00daa6f3b985e23b8501e7a0c00336ee3d52464bdab9b43c048a95c2dc384e4f0d3adec511aedc782277ba364e57b12af240357c51a9fb57f5183894c65921a47809804cd60045302321944544fb99886ad8e54d424987f6df9490ce0e0f242a93716139"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0xa6, &(0x7f00000003c0)=@string={0xa6, 0x3, "0bcf5fc032761b24ea671e40a95caddbfb3a65e324d165220f974303dfe520fe50ca8504c726f1fc60fdb91753c13983ecdd22c9667ff2cd3844c2020e8325b0de4225e841ca4c7f37b5207e585d58945f84f3ecf9e4d7abd045e7bdc397f4d9d17907d661b23a68aad6e88e33355519fbe6ff9133e5c6d394a360d6c877bfe16bb78583f6c7c3b1ca55235dab59c3dfc62cb0b2839b1052c8fe305ef75cd9f7361d8bc0"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x402}}]}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x8, 0x4) 28.382924294s ago: executing program 7 (id=1776): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x3}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x5ab6, 0x0, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x13e8, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002e00000010100000002"], 0x14) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x100}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x40000e9) 28.240763685s ago: executing program 7 (id=1778): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xffffffffffffff2b, &(0x7f0000000580)=0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024200000d1ce00000000000001000004080000000000000002000100000000000000"], 0x0, 0x3e, 0x0, 0x2}, 0x28) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) (async) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1010040, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x30020880) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) 27.304242963s ago: executing program 7 (id=1783): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @rc={0x1f, @any, 0x4}, @qipcrtr={0x2a, 0x3, 0x4001}, @l2={0x1f, 0x8, @none, 0x3, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x5}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee896072000001ea89de600da2e5125960001400000000000000000000000000007000000000000000000000000000000000000000000000000000000e600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f408819e01177d3d458dd4992861ac00000000000000000000000000000000ffff", "90be8b1c551265406c7f306003d8a0f4bd0000007dcbd7d6c300"}}) 26.979267072s ago: executing program 7 (id=1785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x8d, 0x0, 0x7}]}) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x3c) close_range(r5, 0xffffffffffffffff, 0x0) 20.598136182s ago: executing program 7 (id=1806): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002280)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103", @ANYRESDEC], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x0, r1, 0xef) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = signalfd4(r2, &(0x7f00000002c0)={[0x7]}, 0x8, 0x80800) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r7, 0x9, 0x0) ptrace$ARCH_GET_FS(0x1e, r4, 0x0, 0x1003) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x16) sync() ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 17.827932601s ago: executing program 5 (id=1810): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x328}}, 0x84) 16.808031586s ago: executing program 5 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x3faf, &(0x7f0000000440)={0x0, 0x9cae, 0x40, 0x400005, 0xd8}, &(0x7f0000000100), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000004000)={[{0x0, 0x0, 0x3, 0xa00}]}, 0x1}, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r4, &(0x7f0000000940)=[{&(0x7f0000000980)="2a5d508126a63381a7efc3612ad022e48953a13bac20ca1b6539d4070c9fe5e3424b4a467c7e3bccf18cae5b1a1ac7ae3f6bbcbac2f0b57390d502ace054080d2da615eed4b020a59d75d4b6bbc5ee2ce5584fa5c1b1a6be0323e490a2252494fd29c84b4ca5e3ce57da2887fdeaf9bd74fd73121cf60abe6300873081bb7c43f7d7eaa957c1d062ded8d5cfee1b4bfe34c88c4778b0f3a67feb0180fac74637bee62487d7a59e06b540229e0bb8951621567e902526167e5698bca8299648bb32726874ef719c995f27ae5d5a0fd28ae5608c140ec1bcc3f52e6420d02cc26fe2f2b3e261d6eee7b3900e195a8d80981191de401ce130670a49dbb9ebd9713441566b84842d6dd6fa6a927e1018e71debefc7bfcc29092e74b03ff7e0a6387dc81073b5b77c3f08bae9b8845f0e9416647be1ba3e0ed79fb802ad2dfc836346aaaa1dd3c1ff67a09aa0e5e772317693685c5896d726f3004d84b0667ab4154ad69bce04bab582a19dd22fd978d8d8235eae6631ca0164c44cb2048e2e607a2d4ef75b3225163eda2227f626287f66058f81369234ae41062897ed1724221af598ab9875f78eff944f70695f4c11432d13fa0efa9c15eeaf0237f8293c1fd24eff2eff5e72ce4954137748075389a707d496445c61cf9d9a616982563182d0ef4e2b0a33cecc56434f4e232092a1790c1cde224064c9c4078e103e51229e3a2709adb311572f72b99380eb330d2f1c4127a3955540a731191bf006bd3bdd102bb1d75916293630a730f863b3a27fb255c4a5145c58d5804fde901faa314380291d04141363ae0e7614d69378c0c82453a6f1935f0c67c0b839257b4da4576ba1f0b9dd7e3c0aa79af011e6db369c989e9d77d77b2484d1e8da72d93b785dbb1a6ea9f5e2af06ce5550fb0d1ea8f50eb9980ab21e23db8acfb025d4d77a308d93aca4700a435454df7cfd4ea8dc134e004de8515a269e4d03b834010b8570a64156db455b9f80e345892bbef61335dc474c72411c547c8dac549ba7cac3cfcd9fdfbf3f9b1d31317c73363870727d8104b8db7383e3c273d52f51ce1de8d9d937f24165f9e602cf7948b1af4a0ab7b55c7e883dd9386eaec951502815ca56ea4eb38f1785c6dd409040c94d60cd0e67f58b3deb67d8e6fa25d6951933df65ee94477787763346bd33dfeca97938b2dc92bafb4531f4931518c0ef907e5232fc66aa1275188c793ebb22cba38b658b745691b879aaa845391c4b3008c7826f1a61af112d8ef7648c8cd193f6384a0d732095506333f187a58658fe2909a20b3cb964b5de731e8a7c246f960c4609f1c4f5ef043b47303655a1642d63c85cf25d259c1cec0b10a93febd6e70e7ae35d9305efbd0d105c044430f88eb9ed568d622b3ea7a567339357afd34bc1d04a2ad55c20155274495e385a13604d5c928d721ab050506b12e357c34698b01a2f2b06ed32003b020ed4b1d2b141daeb6adc06b48b7de6b0a781c3c2409a587b9e725dbfe5f7eb79546477a1f9c3207ee39dfdb6219670ba342f294974f9b6acd558710b736ab8ec3ff84e4b441e3ecb1773dae53f6e0d9c61674da899ac239ead6e7324094067b5c0bd935aab2889df6875b6262deacfa3e0d9ed6915aee4ab4634c4de07c46d856478b36b1df03d277ccb369125aa63c7e1fffdba5deb76e9d2c65fe3aaf815eadbdf42b549ebe3b19d7493b4afcd837752d8d146b34a089a65f591fb9c73971190e291195daf2387d89f7802aee5a0bc172b5a952b05ad61e36547fb36f1c6c942bd6208d5a7233b01d7be8201901f95c99d3eb45762082a70e18dbf0202aa770960e60ff748a4358bd56d5dc9775cdb82f21a3bfd7037ee2046245227cc9a3b2d342e185de8651b4b6c113c7e249309ab86e0ebd8323492fc64a2b5919419547da704599b42169e85af90644cd8649eee0f7296fcf3694883cccf586d7d47460a0f309ff9c1c1edf498bd27b321c62e92014ed424f88856edd06b41631952a789daffc4ff2fe2c31135c90c568f3aa1cb21ac9357c66975da585df18d6adc575af718bea9ed6ac81ccf2d0af51f10a2641a9b6581ed77483c12ca246d28782cbd8cf51c76bc118b097f57400cc9028f751d6e63ac53e86d944cbf0e5212189143bdb2b293550f4f6d1f1eabb11464e553bee2d29ee2ee2c2dc5cdae873cd84fcb1e3fa2e1bb2b651ccd0629dcee0ebb21484bbcf606c287931fdb5c1ad688b8dfc72212c9b65d8e7b837263facd33cece85e402631fb8af4620c83151d099dc68e3e0f44b268fc71f6e7e5306e2ff2b37d46a4bf14b5d46ca8c9cc26588db7373a0e124d7d6dfd3248a815ad6542eefc8cdd27139513c605f5257a21f9f9b1a920aa3489744776bf4eb878cd7d4d487d6b22473beb5dbb81c82403c760e7b7a99196df0b1959281e8b43e9d5f9b063dbfa8a0b16acd8b18378ff3374b5dd5d160f874468d0acde0bef338f80f3ccb5805abf60acb5a6758bfce5d5e047a4f670729888b53ea7b6539cbdde4b8b5d9fa9141770f9e0a3ee115cc03c9a3c6ff40c596742cbe81938ba0c07a7c7c0ab42a289c65f3ecea55905badc9a39d73009e9db262a86c198d9a270b218a42bb939fe4395c4e18761740f3c37ea954c196768c318dbaa9875bba8604a2cac27165627aa69838565450ffa8ad2e8055b159098b1ee462949681e91b37e9653ac1635e658ddbde940fc4ff1a49dca927708f5b24f6e62f599f6c87cc718ed6c7b2a846a072f57b7bccd774d097a11921f129512edb0cbfb6d5546167ace68d15dbad698a0cb06ae41bdd154eb80dab1ba6e1114def4799722cba80b0f4b7a658118b68d2afcc983f1661bbb029359c1261e35533046ff53aae1e788d88dab4ed3f1b1a89b3bddf52bd5f55bd96bc6b4e950d34f2a90021fc09d35ab143d6f9e9b468635a60fbf51a35cad09e6be4e7a5f43772b71db9dbaffe755f10b2eed56da00275bb0b160ffb558722e6e619749c5a4dd75c96ecf0a327c58560126e30bdb9a6e9356e042b9c98b3887f53b229079ac13181ba497af381b96dccafd70a6f646c7a51d6dbda68561e1508f794033cc27a422588a0a495f19d40828dacd7765a3f5ee009f84a4f124eb2a895a3e0a6608f112a816641a20a93f6e24eeba7fb211c61269927fd0b131b1fed046e4c15f04e200a6b308841c3ee02a0d012e3ff4995aadf1f6181eaaf8c1ad20896d646f42b1e7375f764ddb78256a637b60d71e6e8ba0858782dab16663bfbcec551c268bab434f7a36f74e43f480afb341c0755d2cddc925a6aee88210beaa47a2156be85c85bcfa78900e71589c4d664f323714c3d1dad2885361757352d6e11f24fbc080a9f43976af976bac0edc4cad22a7655de18d4a58afbe209db5163dc12f6bdf96b80a99bc2ad2f235448fad02e34bcc5e9cee6ad35644912151b9653757e6f02092db37e48f4f5f045202a81d6bfcf625e7b82d6b81bad319104013601980cd1cb906dc3a2d1aaccd4b74b5f65520cc20ab7c3b9bd95f3093ba411ce4159552aa77f0afcbb948dfc3757d769a90d784fb4ade54ac49706c3094b7c7939548fa4baa1c54fba205737588b61df5d89ee3bcc9069f17330b42b52ee4850d8fe9a38179614182e03ff77cee7e25cda2c6fd244c0e561888a52fa8d0018a74fc3e8671fbd232bcc96a809d2ffa24bd233e22758772868e69f61a2c6b3f973765507c680428da262335590e5be0722ff326ad792bd5c22ea2759cc7857aa2f196838aa478718f5a293cf3dba1e285cc5c75f2054cb7b9eb5f87800c2c02ce276226c2f7c0788c25c34daa822c8096bc01581e5bd1544c37a9d7b17d72b3a9e1d310ca6bff468737ae0e03291a47231f3ba3ff6063a95995f3a85324c28697567ff133e43c4003dac3f4f60d6eb7b1c3da5c5d07c7d5be56412b2a2052eebdba66c87bb743d4e8adfb535474696f854ef9493ee85c3990f9ecd6e0adfed2f4285be1900654df7aa937dc3aa0ea0d9f04cfa1afb5fb1be1224411e1e65d2562e71cb7b8fddaff16da24c79549a5e13fba7995993463f1ea4167c22c3dcda967991c75e009acd6f8c459e22b849fe6907e45c3dc2ced8babb4e799a908bb38359e468ec1f0c8961cb97cf67a2d7738cc6366f3a0587dae183e32bb5da285e984ab3844d287c2473059e9c0d01c499242006e76fa94d29300df9738b0fd691d9fcbb7d1e8b8400adaebcf0583c059bf60dc89487eabf939af26e5ce9bc84f5808528b0b4aa76afd558478f5ed97a47f998a924c4fd0c297136a1f651647c6c3ef09aada7", 0xbf2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0xd5b) 15.845553223s ago: executing program 5 (id=1817): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000180)=""/42) sendfile(r5, r4, 0x0, 0x7ffff000) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) 13.416013186s ago: executing program 5 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xb, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_htb={{0x57}, {0x7c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfff, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xc65}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffffff, 0xf}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb7, 0x7}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}]}}]}, 0xa8}}, 0x48880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000000c0), 0x5a, 0x4000800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294c"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f80000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x916) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 12.451448819s ago: executing program 5 (id=1823): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) (async, rerun: 32) fsopen(&(0x7f0000000040)='v7\x00', 0x1) (async, rerun: 32) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000008010000000000000700001085000000300000009500000000000000157c83b5457fb85373e5c8d002a7a2d64ea56cd2c9c0daf93624b2cb56b4c3bc084dc4d05e3716"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r0, 0x0, 0x3, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x31) (async, rerun: 32) r1 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') (rerun: 32) 10.818723527s ago: executing program 5 (id=1830): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c06, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x1e}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060002000d101000", 0x24) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x40, 0x700, 0xfffffffa, 0x0, {{0x12, 0x4, 0x2, 0x0, 0x48, 0x65, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@ssrr={0x89, 0x7, 0x52, [@empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x1c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x7663}]}, @lsrr={0x83, 0x13, 0x35, [@loopback, @loopback, @loopback, @loopback]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@gettaction={0xa8, 0x32, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xa8}}, 0x20004055) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x801009, 0x1, 0x0, 0x80, 'syz0\x00', 0x3}, 0x5, 0x200, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xd, 0x101, 0x8000, 0x42, r7, 0x9, '\x00', r3, r8, 0x5, 0x3, 0x2, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000003c0)={0x2fe2619e3185a097, 0x5, 0x2f, {0x2f, 0x21, "000059aa7aee04a3e3535408ae5d8e94c9217d94e71b23cef63ca0f46814e08df81c042e0c7aaa2d2afd12aa6b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.058242977s ago: executing program 8 (id=1839): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @rc={0x1f, @any, 0x4}, @qipcrtr={0x2a, 0x3, 0x4001}, @l2={0x1f, 0x8, @none, 0x3, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x5}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee896072000001ea89de600da2e5125960001400000000000000000000000000007000000000000000000000000000000000000000000000000000000e600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f408819e01177d3d458dd4992861ac000000000000000000000000000000000012", "90be8b1c551265406c7f306003d8a0f4bd0000007dcbd7d6c300"}}) 7.938815176s ago: executing program 8 (id=1840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400128009000100626f6e64000000000400028008003a00", @ANYBLOB='\b\x00('], 0x44}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) (async, rerun: 32) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x0) (rerun: 32) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002200)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x612}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xff, 0xffffffff], [0xff, 0xffffffff, 0xff, 0xffffff00], 'macsec0\x00', 'veth0_to_hsr\x00', {}, {}, 0x88, 0x85, 0xcd240cf1dd35047e, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x1e0}}, @common=@mh={{0x28}, {"2cae", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffff8, 0xfffff570}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) (rerun: 32) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='netfs_rreq_ref\x00', r9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) (async) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) 6.246897666s ago: executing program 6 (id=1846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) mount(&(0x7f0000000180)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) 6.210825547s ago: executing program 6 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) getpgid(r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x4006, 0x53, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6}) r7 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x593400) ioctl$BLKRAGET(r7, 0x1263, &(0x7f00000002c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x448}}, 0x0) sendmmsg$inet(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 5.443854732s ago: executing program 36 (id=1806): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002280)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103", @ANYRESDEC], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x0, r1, 0xef) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = signalfd4(r2, &(0x7f00000002c0)={[0x7]}, 0x8, 0x80800) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r7, 0x9, 0x0) ptrace$ARCH_GET_FS(0x1e, r4, 0x0, 0x1003) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x16) sync() ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5.239569601s ago: executing program 6 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES16=0xffffffffffffffff, @ANYRES16=r1], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080)="d6", 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) splice(r5, 0x0, r0, 0x0, 0x1e863c, 0x6) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) sendmsg$NFC_CMD_GET_SE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r9, 0x8, 0x70bd29, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x80c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x0, 0xc880) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(r12, 0x24, &(0x7f0000000180)={0x2, 0x3, 0x10000, 0x3}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) 4.590952377s ago: executing program 8 (id=1853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="351d3ba12ee2dd4efc076d44c7f15a998be34f4a08b92f6518cc968e40ba684d4036a63d1a8b3e08bacab7dcb044dc04b9268de6aa71a89462a2cb858de913d18ea0ca3ffebc0f14f60f2cd429c69a861edc981703154eeb10c35ec0741e38199a4b9a04f4b81e4722d60eb6528c58ad727485", 0x73}, {&(0x7f0000001300)="901f49421328bfd16c48543072f1358d32b89f073942e2c62bcb3517d0ca85591b57cdf5578a6e45206b9a6c6e15ddc9e04229f4da3db31dfe3f773717af51da871047ad01c2a642d0c472951f8b8d6ded53d047d3a889bef17685722dff70d46776884a3de705f5888517b5515aaaa950dd126e076ba9d7d1b84e4b293c25d83633aeb1352434b34472b4d5f8879aa4310c7138c45d505e1f6e5f0acad7fd8212866d3bb9f456f11253eb00bdb93bd4fe72d20f85bc4a5dc4063b2d720434c5a811dcfd7bdd4be64535fc9899820e92916a93ece231fca1b9ef2a100c54968fd19c2637746c7652961185cc4f6b273026df733d6d3265554a9e3f29f652df34b0f2b35c2f234f739b39e9788a7e4245dbe832892ac11c4df49d7bf543a33193b17bf91fedb7e9eab3d7c0444047dd447df43120ad16ea2fe97155268628536ac9522ff1b4196dfb645494dc484422ecac3f3d22204105882751e28c72498ed0edfefcce0595aab372930e481f1943812655e8586283d9d51300afb7c63e98e43fb3f07be5699b100f183373268f43a514207e927ac5922f3bac851d111f0cdacc9622e46fdb6e876d4d2ea52bb55fa9ffa19824721e12dd36a6376c1ebda713ca1c50551800f6b402ad545b95d082c2ebcc71002d2d457338b0a553cc84d27f5509d00000a419dc14ee0c66b23b3774decda3937c3b5dd1ec21f5d516572457963fac0acbadedcea38bd5e56710de1e3c6abd6a38df672c785560765f34efead93e8afe0eb8aa2f1e833d4635415f41a8a88a26f3167d8370d2b4595c435d2c308eb790e12134234884bcef2b7be172b1eb293ea707a5c6a8d7c919a45bbeb20cf681514bdf1371d07b82547da8d6c1898c053511e85cd67fa8abde13a4725ed8f34a40e2d0c8f940ad6d1dcca408782768a7cbb99886995086504a22776acab55ccd7f54200763f4ae42a5a89e8cfa2d9cddf68cf89a5ffef2bf5ba59c89c61f87ebd50b77139b624d5b88c7c966f8f0dc8b58c1c1d8c86c51f97d98bba9b8f69a7da62561e189e5ed869ddb6629038bc742945d5103394a73f9d63eafbd49fa4b095d87d22d7024d722b28e512c23c9684f32c7150bb2d5dfb948ea9bd5862f1968384883c6ad6175edf9f86ec781556d2b6d300b59631f49934a9bcbd131ddcfe0fe926a691495f69e04c48374840ba3cb24c346777ec288adb3420aaf916564475861f77b41ff91505398e6a19a9b3e7fab12672c070e4c70c5f7ae3b883c82acf3edfad20fad40eceb26f0e9f0530a14f756cdffb16b95d4f346200ed1cb57595ce52694ebeee463988f45631709f37fedc05aa92eb4d63bb4ee376f79f9296be38b36ac0cf30c3ade74e81daf1b08df4d58e44c279c120421c760aea5abe15870c15cd2e7e1a0c41f0ddb60bed9742cf86cb8901d356a0a98bce741f699aeabb170ccd970867819248c9e59bdeb926f7b7c9ab063165b44406f3664f73f19be6732bdca0d5f293a4f186d5ec153a11a95668df7ff5e07c8b97ecaed1d8a256d2c1149e76e522bb04585d23fafff81635d3aef3b55368acbb45ce9da0ac3b8ad97d2b1151b0a976e15c32028ecfc22cf7f38c923f3965f08af8887d17bd9263d8d63bd974b8a4c92a50757efe430c7a8a00a6b7e43e26299482f831d197e0a9bf5198bf148362885ff6e2792c0bcf49500638aed3dc3b7fe07f44ef7700d8b45cacdd3cc79aa372ab85cc4f8f806ff5f7dcce70c2cb59eeb4d83e747f6a26648c21e21de8dd5092fd1c6d0d9d50e53ad110948f6236e31eae79778a5161aa7f48119731b85cb780fb33649e26f9277a437aa0a2cd76346d3bec115657845d6677af2903613b072e40c09d62e55d3cb7180280b85375e59a7d20ac226545bd0473ff74716ddece4a4a320a7ce79e4cdbacb7e158232e14b02eff5431c3afb08deeb30685f602d583d5a06890ca37313ea74addd63eafac3df59b099a75805655a1803fe7685698359001d500926e805936d99bd20b7951e972d71d889cdb411c63a0b737f143980665ecba30829bd492f5f3c910ab3d1e4dbc8091eb8f724044df7f8dfccecce130b97ee96e893af8c365732fadbdbc61afc2267984c357ab3f24c779ff7ba6da189113e6cd79b00b75d9f8f1dd24923a9fc76f1d4a2a52d67af92389e34e408d1ca792cfb8faf099995b5dcc2a2d05b062dfeeaa6c2db99fe5b306e57171fe39e2448a7dfc481802523c05f3fb7d225b594ac6db77bda372c3c33dcfbf267d72378b4ae6b80ffc988c8b4f788644c48f67c618b629d68278f7f2a97578509aafb708e8d4e0007cc6a845a85e0cb76bb7299ad906a804cbc317a1d3277ebc3143512f8c60f5bfaf920fac0a5fafdd48c313dd7cb0b6d934c5531a5b6802b72e245641c00b188884e176e012a46c8b69f0535c247a6aecbe16be1011051ac144b3ff99fe9320ab519f48385c01cd2624cd6c2941ec011c2b9ec1a9a14ca45662858c0037a577d7dfd2353fcb7f6e2d91c07eab9955b8655a59cac762b80660972a9a96b9d84945e9ac368131d25dbf89c06d9bfc7246b9c3a4e646289a83b4c0786bf89c2e39fc9daf87b27187a84ccbdcfeba82fefd567e7c9e741e13dcc8cdb55865a7c468d8a2ee43e457cd21e6098c10b0f2c54819ba6bd0ae127130d30c458a9b3aa6ed130dfccc72934c32ee94f7eba31a3f3c746dd34e577ebbbf37ce9a07fa383bfbf54172eb1a328b8ae4a1cbb081cbaec63b7cb415ff208bcd7eab931d55e7f998452610620afba39b20dbee4355a601ceb83912c029e6989a6f50edc5f3b4b544921dfccdf8edf733ca6d82a98aa39918a101a740c878437a23ce6a6d7dfe427e7f9c74d59b3573581db84bf8632dc0324318ec45d5e6f370a1c5a8365b65d9d84449fd5fbe807353437ed4d71b289567cb963e7ba61f2e912aa0ba89dc755b0b71a2970a6975c6483016704a826220f191a7ccd45f3c70f35f16e47e12a15068ad61f4469775fb487ef35d8cb782f1eecbaf2de7776e4b1b72631633b380bbb038b343b73e6a3cae36836f156945a6d496a2f3bfd35814ce3128773c761106874486b01f544b6a28d18317d4cec5aff9af68053618e9e1b1f856d9570b6873aec2d4094f5577a6c091fe1359361c01c02ace2e030b80640425d082e72c2a96123b8ee1587887e34006268a78aefa6cca106525ae91205ca3651dbea235fb9948c83301535b182820c2e6e237da2eb52bb334ff9f2103483a76420e9dc86e3648b7248fcc587a538edaa229046ad5c0b6966af80d70b3ab44a7f76e6ec5be5940b96ade76d7b7dc54c5e81cd3cbc8866727106440bbb62a2cbac5a2808237ea08c163dd0c9fceaa9e951f8590177869b5c3073cbbb94f7c6bdf998df4369fdc37d867e5bf2949cbfa9532d0a22025d76583dd9999efc8fdf16eaeef67b1877f9362462ab6315b00619a1e1731cf650e6d05b115342d782832e696eb8d8c933e889c8dbbe99de60bd7bb84679a59c0a09d592eb4a751d6a879ccd778be93dcf914de179a90a657c352991dcc25f15b570a701edd48c724372b1e903e74a0daf6620b93504fd12cab314530de307dd4b1d4b57c58f073d6e596cc5604381fd3c6fa41d3970a9ad4ae690664855433ca2cee81c9f4b9b2e114c2efb8681cc9202a62c49328e0fb77f775b22a90f9025ed6fa4260bba6ef1b31f01330458ad21e46f603abe60f763f0e47d506be05ae426a2d11adb9b2e3933f4c644d45e105e150bdffc056eb4c3c92bfdab470a92cdbf797de06e38bce47eae6ab4fbcbd277b3149082ae8031fa6113e07eef971c9e289113b3f1a79e2a25e5f788e9c29d31fddabcefa07acaa28b0a736441393107e81fa37ba752357e8f18e3ad1b81b1b0580d940ace5e3119e74df0d3bfce1f43ab18fb7c1d76df8cb15f47b005a324707e2ab91302e3194315d18ae26750d3a50d495ca00d96929c2de93982e87d9a8f18374a8cecbae682aa77794dfbf3a441193e1c86fe6a28b0ed8c449994ba18ed9ec687d63227d3196311af96a31171725ea3ad7fa31ca11481b6c9370ccd6e4aba79f3d43b406cf073bf4e6f5682fb9874a0a3af33b1712be698489e3947663d48b2151a17a022d472219ee8d41b0b6d697f718e7cdd7aef7714ab749233667761ca102bc7dbb439aacb0ceb8238885ade258697c6b93b939d2cbf3ba6f7ba9b3eb4a75183bba489d40e37f0e1ea3924cd5a0a2fba5c0fc26849040b4384a22eca65a521d699e7d13d386b11b73d840e26b14b6ea46c5ac1f8fd38dec93be7973ce13d5e27808c9092cb002923219a74564e86cb6645ba9bc6433bf99b3f19068e9711385fa775f359a9a17ffc8d1aa498eeca35d761d751094645f1d8e43174d36720953009cfa4e5161e205cf3d0ce5e45c875aabf9a178b14fbb27dee1e20d87e5ce283a12f6bc8960ad61a13aaba6706d1b864427dda4ae085aeb3d87f380819bedd1fdc5ebb1277fe90f47d84090c31cfb565b2cf3420a01d256aa0ad0d1395c8a41d8c94fa66d2365584225953e705f01be536cc6859abfe11432f596dca3e6045f8be1c2c771a7c2b1b00dbe13e10cf82ecb2f5d87d9b520c4ff2484e2fac56109e6f1fd9ee66f44b16d55162a84846135a937d6680a7ed67dc8ab53723b734f9efd566bbd5d97c2876e6d90f2850952f06c6abb1768a53eaebc153984f123d264630e846a639a87c33cc4602263113b88b9525040b3d56bc01ae3e73b22df89894097bbe9ffa1a04c0f728dc8ccee33e0c109581042cc723c480634ef81758ca58c303afe916f7620251942c6a351f6a78153d5d540119f254b5a2c2f2b292bd724bc42752c42d80a2581a997625a0bc47488c4b485710924b0d6a22cf940702dc39cc3246cf37c036dc120bb1c0146bc0bea016b030094322f36d14ccdada2c5b51264027a71b55943fc8ce0e6dee93f669ea03c4c0b8b673823e2493532ae7230f8667f91c8426275b5fb2cda03bd3ed185e97ed99da867f7d4db32db8730eef0fcc28328d936fa065e5935daa4efbb32a6804e89514221f308118c4d0a218eaaa4f80bfad7b35d425e520f25942f78255f25090aa45ec01d6fb1167cb53ea517367623d774f0efa86bc6424fd9c9c05efca74bcd8d9e440a78f64beca2d0bbf99a0284c0556ea455ef5ba9c7ee2bf10135fc9f2241092a11c5822c37c6d7f11ee099706f58115806e5a3bb0bde8691f4a9cce6e97b50665d3cced0097bbd0c517ec726266776d861cdbc8689709b2c1765058474182b5af55fdea890ea2980cef2a69acba072457ccadd41a9e933e6fd92c7120ad56cf2e1377d1e7cc4a0d705425fd7ac351ad33f78b4a5563099099f243a6081642eec7d46973489644595f8113c56a23ee5ea9d9d034b91ed35944bc7725d4309ed79ffad2afd1bdef47b9d056e01e64c03022fa11bf2993538ecbdf83cd1b12b9ca271d7414cc486ae066a22ee0b685f65cc25338a359aedfae7dcfd9e70a2adf2b98afbde01c58f78b726caaa04e38004fca1ab6b7b553f933d16a4a17b2a0ef41ac98f645ccd9a529eff85906039ba0435fe81e7e54d634f81436f214d55cb283c4bee10c68a9557c729a093bc9899c75fd8db059bce4d5c7e15b99f19f298a3beeea6bd4e0c1626176c425396f3ea485064481671fa9781bae4a4d7e6bc6ad5bdafa8fa086ac5b068934017e354e2ef82748adeef687899256fda06d548b559cba9e1a5bde5d65e5c966248a763fd778cad9e01a335d0205", 0x1000}, {&(0x7f0000000280)="c3f57367105117ed9d0e934a2faa6bfc9fcdef86331668c8e01dbf51e6b0a4d31ba0d71a33b2601fa513537a769e51477cea9f39e12686cf42b5081c57f9c5391b79910c75d90f06655cccbdcebd4af70b749d997f907e431a8b6b53aab5da709335635b1f804c327a87576ce3de21ea0ac42ed5c36791b8e99f0fd1287ee249eab04987a1195bf9864aa8c0866c7b992f8c246aac098023", 0x98}, {&(0x7f0000000000)='F[k=', 0x4}], 0x4, &(0x7f0000000380)=[{0x100, 0x0, 0x3, "94618283e6f6f514cf9ae4a40753c3807274d68e185d7fd146a15e6645e38d288909b7e25374ecdc2eca3435405d6f167a5025037015eb5493cbf436ae86b1584eaa436f03d3ccf9dcb9966782f2e80f275c1abe6bcbf8f487cec7c46a29d6f50ef54269457efc98beddffeb073ba2d1b908d7dc1d4c23bfb4478e39b0ad68cdc13bd5a14edef1844e2b3dab74091ce41468e2f74f932c8e00b68ff917d8fa627bd90c8aa33f68f0b64faa43bf832f25018a346fcb3c13743979632e14d87ab20d7a0cba8ef8f5937e1a920c5b0edae637c361ee061c7ef9fce0dca6853209f038caadc2ff6fa7a549f551ff523529"}], 0x100}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.459906199s ago: executing program 8 (id=1854): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) unshare(0x400) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xb}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x13}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x1c}}, 0x4084) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x6, 0x5, 0x6, 0xe2, 0x9, 0x4d, 0x3, 0x10, 0x8b, 0xf, 0x8, 0x80, 0x3, 0xa2}, 0xe) poll(&(0x7f0000000600), 0x0, 0x9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xc, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x200000000000000e}, 0x50) r5 = socket$inet(0x2, 0x5, 0x3) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}}, 0x18) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x1cc, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @algo_comp={0x9b, 0x3, {{'deflate\x00'}, 0x298, "3c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c27"}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r8 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x1038c2) sendfile(r3, r8, &(0x7f0000000040)=0x7fffffffffffffff, 0x100000001) syz_usb_control_io(r1, 0x0, 0x0) 3.182955937s ago: executing program 1 (id=1856): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 3.127228276s ago: executing program 1 (id=1857): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'bridge_slave_1\x00'}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 2.970831292s ago: executing program 1 (id=1858): setfsgid(0xee01) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x6}, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, 0x0, 0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000006240)={0x2020}, 0x2020) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0xa}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102f, 0x5, 0x1, 0x3, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0x2, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x4003, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0xbc, 0x9, 0x1800000, 0x7, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2e, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x7, 0x5, 0x0, 0x5, 0x96, 0x9, 0x401, 0x2, 0x0, 0x680000000000, 0x8001, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff004, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) 2.585596167s ago: executing program 8 (id=1859): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) fstat(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, r6, &(0x7f00000002c0)) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x3, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0xfac) socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 2.16099511s ago: executing program 6 (id=1860): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c00028008000900000000004ce85e69e7898b322b4f5a90a9776db769f85a47b2f92de3867f109bc140ad63a765b7ecf083718bac8fd41a687fada09492c32dcb90b601"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x1, 0x5, 0x7, 0x8, 0x8, 0x20c, 0x0, [0x7a6, 0x4]}}) 2.039545583s ago: executing program 1 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000540), &(0x7f0000000700)=0x4) r5 = socket$kcm(0x2d, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xe) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) close(r5) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f00000001c0)="95cd4c20156c760e1fee4daf7d37fcc4864dc02ab95a4c6e3e015e762173b384c1d04d0e4bd90c621692c0ca78033c078873f99b2a281a14208f4e38aa36023463f9ff0971383ff3926535528d793ef072f84b102eca32f1579b20e28616ddb1381f1abdacea98f581be157f42ab0cdaa895523ff2d2d4a1be50689e0f4802cdb5e18813bc2e777dabdad77da2f66fc70603a86b082660921efe9b51616d2454b1b1a40eb3f04e1eb96475e233") 1.954757519s ago: executing program 6 (id=1862): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) bind$packet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb']}) r5 = getpid() syz_pidfd_open(r5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="060d00000000000007500000000112050000030000000000000004000000000000000d00000000000000800000000000000001040000000000000200004000000000070000000000000081000000000000000600000000000000c204000000000103000000c9100000000000000000000000000000000100"], 0x78) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/158, 0x9e}], 0x4, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0, 0x91) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.74675207s ago: executing program 1 (id=1863): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r3, r3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x2f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r7, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='ext4_insert_range\x00', r8, 0x0, 0xd1f}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) close(r4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r9, 0xffffffff) syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0x1f4}, &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) 743.956548ms ago: executing program 8 (id=1864): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_GET_REG(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getrusage(0x1, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r2, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r3, 0xd, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sched_setscheduler(0x0, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) (fail_nth: 4) 650.956878ms ago: executing program 6 (id=1865): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) 540.562203ms ago: executing program 1 (id=1866): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}], {0x14}}, 0x78}}, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) 0s ago: executing program 9 (id=1849): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000680)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x38, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x62, 0x4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x7fffffff}, 0x8) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)='2', 0x1}], 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) kernel console output (not intermixed with test programs): 8 [ 485.115024][T11596] usb 3-1: config 0 has an invalid interface number: 101 but max is 12 [ 485.124134][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 485.137093][T11596] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 485.150794][T11596] usb 3-1: config 0 has no interface number 0 [ 485.156966][T11596] usb 3-1: too many endpoints for config 0 interface 101 altsetting 115: 51, using maximum allowed: 30 [ 485.174563][T11596] usb 3-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 485.189508][T11596] usb 3-1: config 0 interface 101 has no altsetting 0 [ 485.198431][T11596] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 485.207508][T11596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.215799][T11596] usb 3-1: Product: syz [ 485.220464][T11596] usb 3-1: Manufacturer: syz [ 485.225076][T11596] usb 3-1: SerialNumber: syz [ 485.234559][T11596] usb 3-1: config 0 descriptor?? [ 485.344449][T12335] net_ratelimit: 10 callbacks suppressed [ 485.344464][T12335] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 485.363865][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 485.448723][T11596] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 485.730008][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 485.739396][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 485.767131][ T5891] usb 4-1: USB disconnect, device number 80 [ 485.789420][ T5891] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 485.805431][ T5877] usb 2-1: USB disconnect, device number 60 [ 486.054835][T11596] gspca_zc3xx: reg_w_i err -71 [ 486.549028][T12366] syz.3.1478 (12366) used greatest stack depth: 19320 bytes left [ 486.629781][ T30] audit: type=1400 audit(1766096676.306:1138): avc: denied { write } for pid=12369 comm="syz.5.1479" path="socket:[39685]" dev="sockfs" ino=39685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 486.767920][T11596] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 486.825276][T11596] gspca_zc3xx 3-1:0.101: probe with driver gspca_zc3xx failed with error -71 [ 486.863647][T11596] usb 3-1: USB disconnect, device number 62 [ 487.139181][T12375] pim6reg: entered allmulticast mode [ 487.434442][T12381] tipc: Started in network mode [ 487.477362][T12381] tipc: Node identity 7f000001, cluster identity 4711 [ 487.503885][T12381] tipc: Enabled bearer , priority 10 [ 487.542734][T12386] tipc: Enabled bearer , priority 10 [ 487.962301][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1487'. [ 488.102646][ T30] audit: type=1400 audit(1766096677.776:1139): avc: denied { map } for pid=12407 comm="syz.1.1489" path="socket:[40552]" dev="sockfs" ino=40552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 488.250772][ T30] audit: type=1400 audit(1766096677.876:1140): avc: denied { bind } for pid=12410 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 488.580524][T12418] netlink: 'syz.3.1492': attribute type 11 has an invalid length. [ 488.652080][T11596] tipc: Node number set to 2130706433 [ 489.058119][ T5891] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 489.332165][ T5891] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 489.353371][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.373147][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.383371][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 489.504775][ T5891] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 489.523396][T12444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=111 sclass=netlink_route_socket pid=12444 comm=syz.1.1498 [ 489.626470][ T5891] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 489.647499][T12447] fuse: Bad value for 'user_id' [ 489.652666][T12447] fuse: Bad value for 'user_id' [ 489.885217][ T5891] usb 7-1: Manufacturer: syz [ 489.956190][ T5891] usb 7-1: config 0 descriptor?? [ 490.008044][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1499'. [ 490.083900][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1499'. [ 490.094539][T12449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 490.111921][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'. [ 490.129714][T12449] block device autoloading is deprecated and will be removed. [ 490.446028][ T5891] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 491.086059][ T5891] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 492.099867][ T30] audit: type=1400 audit(1766096681.776:1141): avc: denied { listen } for pid=12476 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 492.539271][ T5891] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 492.709944][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.728511][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.757862][ T5891] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 492.767299][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.906686][ T5891] usb 2-1: config 0 descriptor?? [ 493.367361][ T6006] usb 7-1: USB disconnect, device number 6 [ 493.752669][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 493.837536][T12499] ptrace attach of ""[12500] was attempted by "./syz-executor exec"[12499] [ 493.850686][ T5891] playstation 0003:054C:0BA0.0021: invalid report_size 22287 [ 493.859946][ T5891] playstation 0003:054C:0BA0.0021: item 0 2 1 7 parsing failed [ 493.874472][T12499] openvswitch: netlink: Invalid VLAN frame [ 493.881471][ T5891] playstation 0003:054C:0BA0.0021: Parse failed [ 493.891351][ T5891] playstation 0003:054C:0BA0.0021: probe with driver playstation failed with error -22 [ 494.057856][ T5891] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 494.197853][ T5891] usb 7-1: device descriptor read/64, error -71 [ 494.437847][ T5891] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 494.537947][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 494.578026][ T5891] usb 7-1: device descriptor read/64, error -71 [ 494.662188][T12505] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 494.670980][T12505] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 494.679361][T12505] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 494.687407][T12505] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 494.688252][ T5891] usb usb7-port1: attempt power cycle [ 494.702225][T12505] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 494.704131][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 494.720796][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.729417][T12505] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 494.738897][ T10] usb 3-1: Product: syz [ 494.739872][ T30] audit: type=1326 audit(1766096684.416:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 494.743207][ T10] usb 3-1: Manufacturer: syz [ 494.773033][T12505] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 494.782234][ T10] usb 3-1: SerialNumber: syz [ 494.786937][T12505] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 494.810879][ T30] audit: type=1326 audit(1766096684.446:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 494.837399][ T30] audit: type=1326 audit(1766096684.446:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 494.841497][T12505] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 494.858687][ T10] usb 3-1: config 0 descriptor?? [ 494.880660][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 494.908220][T12505] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 494.927050][ T30] audit: type=1326 audit(1766096684.446:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 495.021157][ T30] audit: type=1326 audit(1766096684.446:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 495.045970][ T30] audit: type=1326 audit(1766096684.446:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 495.072065][ T5891] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 495.104927][T12511] : entered promiscuous mode [ 495.111500][ T30] audit: type=1326 audit(1766096684.446:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 495.136810][ T5891] usb 7-1: device descriptor read/8, error -71 [ 495.143169][ T30] audit: type=1326 audit(1766096684.446:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 495.170917][ T30] audit: type=1326 audit(1766096684.446:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 495.231691][ T30] audit: type=1326 audit(1766096684.446:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.3.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778bf8f749 code=0x7ffc0000 [ 495.295282][ T6006] usb 2-1: USB disconnect, device number 61 [ 495.387992][ T5891] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 495.412741][ T5891] usb 7-1: device descriptor read/8, error -71 [ 495.432240][T12519] netlink: 'syz.3.1518': attribute type 21 has an invalid length. [ 495.440750][T12519] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.583754][ T5891] usb usb7-port1: unable to enumerate USB device [ 496.119776][ T10] gspca_sunplus: reg_r err -110 [ 496.132567][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 496.188884][ T44] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 496.401717][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 496.514651][ T44] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 496.539950][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.541118][ T10] usb 3-1: USB disconnect, device number 63 [ 496.571693][ T44] usb 6-1: config 0 descriptor?? [ 496.637929][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 496.666703][ T44] as10x_usb: device has been detected [ 496.680130][ T44] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 496.716319][ T44] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 496.781658][ T44] as10x_usb: error during firmware upload part1 [ 496.820518][ T44] Registered device nBox DVB-T Dongle [ 497.042984][ T10] usb 6-1: USB disconnect, device number 16 [ 497.074566][ T10] Unregistered device nBox DVB-T Dongle [ 497.231348][ T10] as10x_usb: device has been disconnected [ 497.256161][T12544] lo speed is unknown, defaulting to 1000 [ 497.263363][T12544] lo speed is unknown, defaulting to 1000 [ 497.531070][T12557] loop2: detected capacity change from 0 to 7 [ 497.548753][T12557] loop2: [POWERTEC] p1 p2 p3 [ 497.560392][T12557] loop2: p2 start 524319 is beyond EOD, truncated [ 497.574065][T12557] loop2: p3 start 1932423285 is beyond EOD, truncated [ 497.643148][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 497.921264][T12564] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1529'. [ 498.002628][ T44] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 498.238605][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 498.481783][ T44] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 498.750498][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.829998][ T44] usb 6-1: Product: syz [ 498.834222][ T44] usb 6-1: Manufacturer: syz [ 498.891521][ T44] usb 6-1: SerialNumber: syz [ 498.938787][ T44] usb 6-1: config 0 descriptor?? [ 499.065171][T12576] trusted_key: encrypted_key: master key parameter 'TzÄ2%' is invalid [ 499.107828][ T6006] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 499.180115][ T44] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 499.269315][ T3103] block nbd0: Possible stuck request ffff888026158000: control (read@0,1024B). Runtime 270 seconds [ 499.280410][ T3103] block nbd0: Possible stuck request ffff888026158200: control (read@1024,1024B). Runtime 270 seconds [ 499.291904][ T3103] block nbd0: Possible stuck request ffff888026158400: control (read@2048,1024B). Runtime 270 seconds [ 499.319735][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.331928][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.342566][ T6006] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 499.355742][ T6006] usb 7-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 499.366111][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.377528][ T6006] usb 7-1: config 0 descriptor?? [ 499.649764][ T44] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 499.694844][ T44] usb 6-1: USB disconnect, device number 17 [ 499.988763][T12593] loop2: detected capacity change from 0 to 7 [ 499.997284][ T8401] loop2: [POWERTEC] p1 p2 p3 [ 500.007434][ T8401] loop2: p2 start 524319 is beyond EOD, truncated [ 500.023610][ T8401] loop2: p3 start 1932423285 is beyond EOD, truncated [ 500.066045][T12593] loop2: [POWERTEC] p1 p2 p3 [ 500.077954][T12593] loop2: p2 start 524319 is beyond EOD, truncated [ 500.127845][T12593] loop2: p3 start 1932423285 is beyond EOD, truncated [ 500.246656][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 500.749315][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 500.841419][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 500.927859][ T9781] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 501.047868][ T5891] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 501.197129][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.228599][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.267355][ T6006] usbhid 7-1:0.0: can't add hid device: -71 [ 501.275713][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.285967][ T6006] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 501.295384][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1544'. [ 501.305523][ T5891] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 501.317621][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.547333][ T3570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 502.278686][ T9781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.280176][ T5891] usb 4-1: config 0 descriptor?? [ 502.479363][ T6006] usb 7-1: USB disconnect, device number 11 [ 502.487524][ T9781] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.543548][ T9781] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 502.554879][ T9781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.591548][ T9781] usb 6-1: config 0 descriptor?? [ 502.702697][ T5891] greenasia 0003:0E8F:0012.0022: unknown main item tag 0x1 [ 502.713017][ T5891] greenasia 0003:0E8F:0012.0022: item fetching failed at offset 3/7 [ 502.722439][ T5891] greenasia 0003:0E8F:0012.0022: parse failed [ 502.728934][ T5891] greenasia 0003:0E8F:0012.0022: probe with driver greenasia failed with error -22 [ 502.803981][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.813868][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.823024][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.831743][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.840714][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.850139][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.860457][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.871305][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.881141][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.889877][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.898045][ T5891] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 502.905259][ T9781] stadia 0003:18D1:9400.0023: item fetching failed at offset 5/7 [ 502.922424][ T9781] stadia 0003:18D1:9400.0023: parse failed [ 502.928717][ T6006] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 502.936650][ T9781] stadia 0003:18D1:9400.0023: probe with driver stadia failed with error -22 [ 503.043413][T12601] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1539'. [ 503.053621][T12601] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0 [ 503.063128][ T10] usb 4-1: USB disconnect, device number 81 [ 503.072634][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.096709][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.106882][ T5891] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 503.115487][ T9781] usb 6-1: USB disconnect, device number 18 [ 503.116661][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.136524][ T6006] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 503.146072][ T5891] usb 2-1: config 0 descriptor?? [ 503.149133][ T6006] usb 7-1: config 0 has no interface number 0 [ 503.169118][ T6006] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 503.178524][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.186561][ T6006] usb 7-1: Product: syz [ 503.191291][ T6006] usb 7-1: Manufacturer: syz [ 503.195885][ T6006] usb 7-1: SerialNumber: syz [ 503.208761][ T6006] usb 7-1: config 0 descriptor?? [ 503.430476][ T6006] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.464901][ T6006] usb 7-1: USB disconnect, device number 12 [ 503.610482][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.629098][ T5891] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 503.636538][ T5891] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 504.123913][ T5891] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0024/input/input44 [ 504.188789][ T5891] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 504.267120][ T5891] usb 2-1: USB disconnect, device number 62 [ 504.305601][T12643] sctp: [Deprecated]: syz.3.1551 (pid 12643) Use of int in max_burst socket option. [ 504.305601][T12643] Use struct sctp_assoc_value instead [ 504.323485][T12638] fido_id[12638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 505.804596][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 505.823274][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 506.118980][ T9781] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 506.130648][T12656] ceph: No mds server is up or the cluster is laggy [ 506.321034][T12668] netlink: 'syz.5.1558': attribute type 9 has an invalid length. [ 506.352637][ T9781] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 506.380664][ T9781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.511613][ T9781] usb 4-1: Product: syz [ 506.588714][ T9781] usb 4-1: Manufacturer: syz [ 506.665666][ T9781] usb 4-1: SerialNumber: syz [ 506.937377][ T9781] usb 4-1: config 0 descriptor?? [ 507.077903][ T5934] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 507.398072][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 507.548939][ T5934] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.823014][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.007876][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 508.077982][ T5934] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 508.104897][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.152409][ T5934] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.180910][ T5934] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.193445][ T9781] usb 4-1: f81604_write: reg: 105 data: 56 failed: -EPROTO [ 508.218308][ T9781] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 508.230279][ T5934] usb 7-1: Manufacturer: syz [ 508.245635][ T9781] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 508.255982][ T5934] usb 7-1: config 0 descriptor?? [ 508.395885][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 508.395901][ T30] audit: type=1400 audit(1766096698.066:1162): avc: denied { getopt } for pid=12702 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 508.425001][T12704] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 508.429116][ T52] Bluetooth: hci4: unexpected event for opcode 0x080d [ 508.492160][ T30] audit: type=1400 audit(1766096698.166:1163): avc: denied { read write } for pid=9885 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.564097][T12708] netlink: 'syz.1.1565': attribute type 21 has an invalid length. [ 508.575639][ T30] audit: type=1400 audit(1766096698.166:1164): avc: denied { open } for pid=9885 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.655419][ T30] audit: type=1400 audit(1766096698.166:1165): avc: denied { ioctl } for pid=9885 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.961153][ T9781] usb 4-1: USB disconnect, device number 82 [ 509.114807][ T30] audit: type=1400 audit(1766096698.786:1166): avc: denied { checkpoint_restore } for pid=12714 comm="syz.3.1567" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 509.319412][T12718] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 509.331991][T12718] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 509.491993][ T30] audit: type=1400 audit(1766096699.006:1167): avc: denied { firmware_load } for pid=12714 comm="syz.3.1567" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 509.771339][ T30] audit: type=1400 audit(1766096699.446:1168): avc: denied { mount } for pid=12723 comm="syz.2.1569" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 509.869934][ T30] audit: type=1400 audit(1766096699.546:1169): avc: denied { bind } for pid=12723 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 509.967899][ T5934] rc_core: IR keymap rc-hauppauge not found [ 509.973843][ T5934] Registered IR keymap rc-empty [ 510.063093][ T30] audit: type=1400 audit(1766096699.546:1170): avc: denied { accept } for pid=12723 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 510.085432][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.118432][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.120744][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 510.149165][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 510.163321][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input45 [ 510.188018][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.223398][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.247950][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.267868][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.298356][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.347914][ T44] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 510.355608][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.392569][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.637208][ T30] audit: type=1400 audit(1766096700.306:1171): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 510.680023][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.689607][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.707877][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.716319][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.729721][ T44] usb 4-1: Product: syz [ 510.733949][ T44] usb 4-1: Manufacturer: syz [ 510.750300][ T44] usb 4-1: SerialNumber: syz [ 510.768270][ T5934] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.806324][ T5934] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 510.826393][ T5934] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 510.999301][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.020509][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.045605][ T5934] usb 7-1: USB disconnect, device number 13 [ 511.064035][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.102490][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.142195][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.172865][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.197436][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 511.206857][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 511.208664][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.265233][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.289262][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.332305][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.536903][ T44] cdc_ncm 4-1:1.0: bind() failure [ 511.575051][ T44] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 511.602740][ T44] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 511.637987][ T44] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 511.681344][ T44] usb 4-1: USB disconnect, device number 83 [ 511.805774][T12772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.840406][T12772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.915044][T12781] sp0: Synchronizing with TNC [ 512.028855][T12772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.053673][T12772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.176382][T12786] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:21 [ 512.460864][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 512.475371][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 512.485482][ T52] Bluetooth: hci4: hardware error 0x00 [ 512.593880][T12772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.606029][T12772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.710643][T12791] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 512.800928][T12793] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12793 comm=syz.6.1586 [ 512.802043][T12772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.892441][T12772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.972162][T12791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.995394][T12800] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 512.999477][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 513.019818][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 513.051527][T12800] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 513.112568][T12791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.161446][T12791] bond2: (slave bond0): making interface the new active one [ 513.199582][T12791] bond2: (slave bond0): Enslaving as an active interface with an up link [ 513.243712][ T6875] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.252072][ T6875] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.349115][ T34] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.371185][ T34] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.427440][ T6886] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.454725][ T6886] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.491240][ T6886] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.519105][ T6886] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.546444][T12813] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000 [ 513.561165][T12813] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20000 [ 513.569241][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 513.569257][ T30] audit: type=1400 audit(1766096703.246:1175): avc: denied { ioctl } for pid=12812 comm="syz.5.1590" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 513.833111][ T30] audit: type=1400 audit(1766096703.496:1176): avc: denied { ioctl } for pid=12809 comm="syz.1.1589" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 514.603953][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 514.730037][T12846] siw: device registration error -23 [ 515.614288][T12618] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 515.788763][T12618] usb 6-1: Using ep0 maxpacket: 16 [ 515.803342][T12618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.814925][T12618] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 515.923192][T12618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.944550][T12618] usb 6-1: config 0 descriptor?? [ 516.025987][ T30] audit: type=1400 audit(1766096705.696:1177): avc: denied { watch } for pid=12847 comm="syz.2.1599" path=2F6D656D66643A5217084B8558A31BC7701310A846B42E27198BE2D8F8A2317B2E3B3017110A8DFAA8051BDD2AF8F35F1AD14616884E23C2B11C05202864656C6574656429 dev="tmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 516.364214][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.403643][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.415675][T12618] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 516.556627][T12618] usb 6-1: USB disconnect, device number 19 [ 517.197876][T12618] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 517.409760][ T5942] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 517.530790][T12618] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 517.543048][T12618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.556560][T12618] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 517.680614][T12618] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 517.689808][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 517.717943][T12618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.726941][ T5942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.747445][ T5942] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.759378][T12618] usb 6-1: config 0 descriptor?? [ 517.791341][ T5942] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 517.817908][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.847591][ T5942] usb 7-1: config 0 descriptor?? [ 518.023443][T12618] usbhid 6-1:0.0: can't add hid device: -71 [ 518.032711][T12618] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 518.050232][T12618] usb 6-1: USB disconnect, device number 20 [ 518.169926][ T5942] usb 7-1: USB disconnect, device number 14 [ 518.866701][T12889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1608'. [ 518.967450][T12890] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1608'. [ 519.018241][T12618] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 519.179707][T12618] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 519.188908][T12618] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 519.225585][T12618] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 519.246848][T12618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 519.261978][T12618] usb 2-1: Product: syz [ 519.267326][T12618] usb 2-1: Manufacturer: syz [ 519.273099][T12618] usb 2-1: SerialNumber: syz [ 519.284413][T12618] usb 2-1: config 0 descriptor?? [ 519.334196][T12908] fuse: Bad value for 'fd' [ 519.965598][T12918] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 520.438438][T12920] 9pnet_fd: Insufficient options for proto=fd [ 520.560669][T12618] usb 2-1: Firmware version (0.0) predates our first public release. [ 520.589015][T12618] usb 2-1: Please update to version 0.2 or newer [ 520.679452][T12618] usb 2-1: USB disconnect, device number 63 [ 520.928828][ T5833] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 521.006410][T12951] 9p: Bad value for 'debug' [ 521.100224][ T5833] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 521.120474][ T5833] usb 4-1: config 0 has no interface number 0 [ 521.126629][ T5833] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 521.167618][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.203831][ T5833] usb 4-1: config 0 descriptor?? [ 521.224111][ T5833] ums-realtek 4-1:0.4: USB Mass Storage device detected [ 521.351706][T12961] syzkaller0: entered promiscuous mode [ 521.357212][T12961] syzkaller0: entered allmulticast mode [ 521.541268][T12936] bridge0: entered promiscuous mode [ 521.573836][T12936] macsec1: entered promiscuous mode [ 521.608925][T12618] usb 4-1: USB disconnect, device number 84 [ 521.686650][T12967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1624'. [ 522.333661][T12987] create_pit_timer: 1 callbacks suppressed [ 522.333687][T12987] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 522.382425][T12987] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 522.418662][T12987] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 523.028090][ T116] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 523.638077][ T116] usb 6-1: Using ep0 maxpacket: 8 [ 523.679198][ T116] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.742139][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 523.798190][ T116] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 523.816664][T13033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13033 comm=syz.1.1634 [ 523.829339][ T116] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 523.829415][ T116] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 523.829478][ T116] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.829618][ T116] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.829660][ T116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.896980][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 524.108477][ T116] usb 6-1: GET_CAPABILITIES returned 0 [ 524.118465][ T116] usbtmc 6-1:16.0: can't read capabilities [ 524.317052][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 524.339259][T13009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.367568][T13009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.387887][T13009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.434367][T13065] loop2: detected capacity change from 0 to 7 [ 524.434955][T13009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.441437][T13065] loop2: [POWERTEC] p1 p2 p3 [ 524.484937][T13065] loop2: p2 start 524319 is beyond EOD, truncated [ 524.485443][ T116] usb 6-1: USB disconnect, device number 21 [ 524.492391][T13065] loop2: p3 start 1932423285 is beyond EOD, truncated [ 524.634070][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 524.760919][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 524.999108][ T44] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 525.745982][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.814977][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.895666][ T44] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 525.920008][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.226713][ T44] usb 2-1: config 0 descriptor?? [ 526.561998][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 526.605227][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 526.680617][ T44] usb 2-1: USB disconnect, device number 64 [ 527.348227][ T30] audit: type=1400 audit(1766096716.956:1178): avc: denied { map } for pid=13109 comm="syz.5.1646" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 527.385640][ T30] audit: type=1400 audit(1766096716.966:1179): avc: denied { execute } for pid=13109 comm="syz.5.1646" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 527.526153][ T30] audit: type=1400 audit(1766096717.146:1180): avc: denied { bind } for pid=13116 comm="syz.1.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 527.994177][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1650'. [ 528.209631][ T30] audit: type=1800 audit(1766096717.886:1181): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1652" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 528.281412][T13134] loop2: detected capacity change from 0 to 7 [ 528.288654][T13134] loop2: [POWERTEC] p1 p2 p3 [ 528.295168][T13134] loop2: p2 start 524319 is beyond EOD, truncated [ 528.303645][T13134] loop2: p3 start 1932423285 is beyond EOD, truncated [ 528.328199][ T5833] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 528.392839][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 528.403509][T13136] netlink: 'syz.3.1654': attribute type 11 has an invalid length. [ 528.497826][ T5833] usb 7-1: Using ep0 maxpacket: 32 [ 528.509473][ T5833] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 528.528503][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.544412][ T5833] usb 7-1: config 0 descriptor?? [ 528.560573][ T5833] gspca_main: sq930x-2.14.0 probing 041e:403c [ 528.596821][T13138] tipc: Started in network mode [ 528.602718][T13138] tipc: Node identity ac14142f, cluster identity 4711 [ 528.610403][T13138] tipc: New replicast peer: 0.0.0.0 [ 528.633999][T13138] tipc: Enabled bearer , priority 10 [ 529.004060][ T30] audit: type=1400 audit(1766096718.676:1182): avc: denied { setopt } for pid=13137 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 529.036925][ T5833] gspca_sq930x: ucbus_write failed -71 [ 529.046226][ T5833] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 529.071873][ T5833] usb 7-1: USB disconnect, device number 15 [ 529.114753][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1658'. [ 529.115389][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1658'. [ 529.338750][ T3103] block nbd0: Possible stuck request ffff888026158000: control (read@0,1024B). Runtime 300 seconds [ 529.438679][ T3103] block nbd0: Possible stuck request ffff888026158200: control (read@1024,1024B). Runtime 300 seconds [ 529.450705][ T3103] block nbd0: Possible stuck request ffff888026158400: control (read@2048,1024B). Runtime 300 seconds [ 529.803567][T13157] netlink: 'syz.5.1661': attribute type 10 has an invalid length. [ 529.811735][T13157] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1661'. [ 529.824227][ T5833] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 529.831994][ T44] tipc: Node number set to 2886997039 [ 530.058039][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 530.064594][ T5833] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 530.097971][ T5833] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 530.108178][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.129107][ T5833] usb 2-1: config 0 descriptor?? [ 530.190920][ T5833] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 530.368238][T13177] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.377053][T13177] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 530.389328][T13177] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 531.190889][ T5172] bcm5974 2-1:0.0: could not read from device [ 531.261524][ T30] audit: type=1400 audit(1766096720.936:1183): avc: denied { audit_read } for pid=13173 comm="syz.6.1665" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.371920][ T5833] bcm5974 2-1:0.0: could not read from device [ 531.430277][ T5172] bcm5974 2-1:0.0: could not read from device [ 531.439555][T13176] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.477378][ T5833] input: failed to attach handler mousedev to device input48, error: -5 [ 531.511157][ T5172] bcm5974 2-1:0.0: could not read from device [ 531.527435][ T30] audit: type=1400 audit(1766096721.196:1184): avc: denied { getopt } for pid=13184 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 531.556213][ T5833] usb 2-1: USB disconnect, device number 65 [ 531.587984][T13176] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.616562][ T5172] bcm5974 2-1:0.0: could not read from device [ 532.738266][T13176] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.975316][T13176] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.240286][ T4759] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.257191][ T4189] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 533.287482][ T4759] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.315755][ T5822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 533.329272][ T5822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 533.338331][ T4759] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.346696][ T5822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 533.355228][ T4759] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.365813][ T5822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 533.376354][ T5822] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 533.957905][ T116] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 534.099191][T13207] lo speed is unknown, defaulting to 1000 [ 534.106183][T13207] lo speed is unknown, defaulting to 1000 [ 534.127883][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 534.207038][ T116] usb 4-1: config 4 has an invalid interface number: 85 but max is 1 [ 534.301232][T13237] overlayfs: missing 'lowerdir' [ 534.694306][ T116] usb 4-1: config 4 has an invalid interface number: 70 but max is 1 [ 534.708297][ T116] usb 4-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 534.718597][ T116] usb 4-1: config 4 has no interface number 0 [ 534.724689][ T116] usb 4-1: config 4 has no interface number 1 [ 534.730892][ T116] usb 4-1: config 4 interface 85 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 534.738926][ T30] audit: type=1400 audit(1766096724.416:1185): avc: denied { mount } for pid=13239 comm="syz.1.1677" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 534.740924][ T116] usb 4-1: config 4 interface 85 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 534.818983][ T116] usb 4-1: config 4 interface 85 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 534.858180][ T116] usb 4-1: config 4 interface 70 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 534.872875][ T30] audit: type=1400 audit(1766096724.556:1186): avc: denied { watch watch_reads } for pid=13239 comm="syz.1.1677" path="/176/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 534.924378][ T116] usb 4-1: config 4 interface 85 has no altsetting 0 [ 534.957907][ T116] usb 4-1: config 4 interface 70 has no altsetting 0 [ 534.986180][ T30] audit: type=1400 audit(1766096724.656:1187): avc: denied { unmount } for pid=13239 comm="syz.1.1677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 535.024522][ T116] usb 4-1: New USB device found, idVendor=19d2, idProduct=0049, bcdDevice=a1.ea [ 535.057801][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.088362][ T116] usb 4-1: Product: á¸ï°™ë¬¦â¤ â‹¢è¡—瀽ãŸë¼¿ì®ã’ ëŒ½ [ 535.095953][ T116] usb 4-1: Manufacturer: ည [ 535.106178][T13207] chnl_net:caif_netlink_parms(): no params data found [ 535.161588][ T116] usb 4-1: SerialNumber: 凇㥪乳럑莫侘é¿à³œÏ¹íšŸá¨·ê¥›é°™ä™è‰ºáŒ¯ìºâ­Šá²‘낎胈î˜é‡…ï ãº¬ëº«ïº‹ [ 535.332103][T13207] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.356006][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.373643][T13207] bridge_slave_0: entered allmulticast mode [ 535.395554][T13207] bridge_slave_0: entered promiscuous mode [ 535.426000][ T116] option 4-1:4.85: GSM modem (1-port) converter detected [ 535.442139][T13207] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.447576][ T116] uvcvideo 4-1:4.70: Found UVC 0.02 device á¸ï°™ë¬¦â¤ â‹¢è¡—瀽ãŸë¼¿ì®ã’ ëŒ½ (19d2:0049) [ 535.484933][ T116] uvcvideo 4-1:4.70: No valid video chain found. [ 535.502206][ T116] usb 4-1: USB disconnect, device number 85 [ 535.518042][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.536937][ T116] option 4-1:4.85: device disconnected [ 535.537626][T13207] bridge_slave_1: entered allmulticast mode [ 535.579539][ T5822] Bluetooth: hci7: command tx timeout [ 535.591613][T13207] bridge_slave_1: entered promiscuous mode [ 535.678762][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.735780][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.837308][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1681'. [ 535.875144][T13207] team0: Port device team_slave_0 added [ 535.896538][T13207] team0: Port device team_slave_1 added [ 535.995356][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.018392][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.137300][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.151344][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.167830][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.211411][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.274468][T13207] hsr_slave_0: entered promiscuous mode [ 536.281327][T13207] hsr_slave_1: entered promiscuous mode [ 536.287565][T13207] debugfs: 'hsr0' already exists in 'hsr' [ 536.293528][T13207] Cannot create hsr debugfs directory [ 536.297820][ T5833] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 536.439016][T13207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 536.450456][T13207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 536.463491][T13207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 536.476523][T13207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 536.487467][ T5833] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 536.504879][ T5833] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 536.524495][ T5833] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 536.546984][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.557026][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.700814][ T5833] usb 2-1: Product: 〈￵潤㲯㘿㱟₡竄孢꼣æŸã™à¿§î±¢ïˆ¸é¶°å‚²æœç—粦î¢í—⦕⾾鋎⻘傾น穪啓䶳뽸嚷ᘴu⠴弞୧ꎚࡑﮭ谔쪠묄뤰緱à¥à©¾ç½€ä‹³å¬šæ±£ìº¶íŠ‘䋵ﴷ੖ê«ì£–ç³ç» è§æŽ…ብ䉅 [ 536.798410][ T5833] usb 2-1: Manufacturer: 胗ꬄ两쾚ㇷ䑀න듻鷤㯜å£á£å‹¬çˆ²ì°‰âŽ–⇨챲퉯èŽäœŽæ„—찯궓⨂㸯뗛烀粟ܑ蘳ೌ漰䊨㼨挧â鳑㙿൶ç´ê©´ê˜Œà¾²îš§êš’ݜ뤦騤â†ä™Šæ­Ÿë¼‚뽖풬쨶셎谭ᶮ̘연嫄轊飔₎뭺淡ᚴ趻㵖鋛躺찎̓ओè¬æ¢¨ä“¦é‹Œì¦”ꑃ骎ռ빂冺骥휀䠠ê‡êº–⚔툞ï’î«ä®à·Œêœ¹ì¥ë‹‹ï“…际턩唰誑ጓ텘謻ټ [ 536.905641][ T5833] usb 2-1: SerialNumber: Я [ 536.962233][T13207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.013931][T13207] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.069913][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.077068][ T6152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.120793][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.128253][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.348009][T11596] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 537.380417][T13282] pimreg: entered allmulticast mode [ 537.509755][T13207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.527998][T11596] usb 7-1: Using ep0 maxpacket: 16 [ 537.539917][T11596] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 537.568950][T11596] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.583574][T11596] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 537.595555][T11596] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.607422][T11596] usb 7-1: config 0 descriptor?? [ 537.657913][ T5822] Bluetooth: hci7: command tx timeout [ 537.988192][T13207] veth0_vlan: entered promiscuous mode [ 538.020050][T13207] veth1_vlan: entered promiscuous mode [ 538.035913][T11596] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 538.117210][T13207] veth0_macvtap: entered promiscuous mode [ 538.163463][T13207] veth1_macvtap: entered promiscuous mode [ 538.221524][T13207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.304319][T13335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.515479][T13304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.532126][ T5942] usb 7-1: USB disconnect, device number 16 [ 538.537043][T13207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.585669][ T6886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.620964][ T6886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.656932][ T6886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.670819][ T6886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.793444][ T6875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.813074][ T6875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.833400][ T5833] cdc_ncm 2-1:1.0: bind() failure [ 538.844863][ T5833] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 538.861901][ T5833] cdc_ncm 2-1:1.1: bind() failure [ 538.867183][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.895182][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.904822][ T5833] usb 2-1: USB disconnect, device number 66 [ 538.907944][ T5934] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 539.117931][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 539.218951][ T5934] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 539.233713][ T5934] usb 6-1: config 0 has no interface number 0 [ 539.288616][ T5934] usb 6-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df [ 539.375685][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1669'. [ 539.414796][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.534867][ T5934] usb 6-1: Product: syz [ 539.603769][ T5934] usb 6-1: Manufacturer: syz [ 539.664327][ T5934] usb 6-1: SerialNumber: syz [ 539.699222][ T5934] usb 6-1: config 0 descriptor?? [ 539.757825][ T5822] Bluetooth: hci7: command tx timeout [ 540.559838][T13348] overlayfs: missing 'lowerdir' [ 540.658836][T13350] netlink: 'syz.3.1688': attribute type 9 has an invalid length. [ 540.666597][T13350] netlink: 'syz.3.1688': attribute type 11 has an invalid length. [ 540.676100][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.689806][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.699939][T13350] netlink: 'syz.3.1688': attribute type 12 has an invalid length. [ 540.768764][T13350] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1688'. [ 540.786793][ T5934] usb 6-1: USB disconnect, device number 22 [ 540.808874][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 541.076912][ T30] audit: type=1400 audit(1766096730.746:1188): avc: denied { create } for pid=13362 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 541.137933][ T30] audit: type=1400 audit(1766096730.746:1189): avc: denied { write } for pid=13362 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 541.178139][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 541.581978][ T5833] IPVS: starting estimator thread 0... [ 541.590728][ T30] audit: type=1400 audit(1766096731.266:1190): avc: denied { watch_mount } for pid=13352 comm="syz.1.1689" path="/180" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 541.738629][T13376] IPVS: using max 45 ests per chain, 108000 per kthread [ 541.817858][ T5822] Bluetooth: hci7: command tx timeout [ 541.875601][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.673336][ T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 542.683546][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.706292][ T24] usb 7-1: config 0 descriptor?? [ 542.886694][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 543.621216][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 543.630102][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 543.649338][ T24] usb 7-1: USB disconnect, device number 17 [ 544.219096][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 544.468346][T13407] overlayfs: missing 'lowerdir' [ 545.218351][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1707'. [ 545.245939][T13424] binder: 13423:13424 ioctl 4004e502 200000000280 returned -22 [ 545.649517][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1708'. [ 545.746764][T13432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=13432 comm=syz.6.1708 [ 546.216734][ T24] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 546.415185][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.475850][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.537444][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 546.599625][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.720010][ T24] usb 2-1: config 0 descriptor?? [ 546.809624][T13443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.819033][ T24] hub 2-1:0.0: USB hub found [ 546.844638][T13443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.997867][ T116] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 547.018740][ T24] hub 2-1:0.0: 2 ports detected [ 547.147824][ T116] usb 7-1: device descriptor read/64, error -71 [ 547.297844][T12618] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 547.398426][ T116] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 547.447940][T12618] usb 6-1: Using ep0 maxpacket: 8 [ 547.459972][T12618] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 547.467427][T12618] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 547.477868][ T24] usb 2-1: USB disconnect, device number 67 [ 547.499756][T12618] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 547.521203][T12618] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 547.532607][T12618] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 547.546554][T12618] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 547.557859][ T116] usb 7-1: device descriptor read/64, error -71 [ 547.558123][T12618] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 547.572086][T12618] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 547.583490][T12618] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 547.597364][T12618] usb 6-1: string descriptor 0 read error: -22 [ 547.603844][T12618] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 547.613087][T12618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.630509][T12618] adutux 6-1:168.0: interrupt endpoints not found [ 547.668324][ T116] usb usb7-port1: attempt power cycle [ 548.696054][ T116] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 548.749084][ T116] usb 7-1: device descriptor read/8, error -71 [ 549.008347][ T116] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 549.042896][ T116] usb 7-1: device descriptor read/8, error -71 [ 549.187811][T13461] overlayfs: missing 'workdir' [ 549.558389][ T116] usb usb7-port1: unable to enumerate USB device [ 549.846581][T13468] syz_tun: entered allmulticast mode [ 550.243864][ T24] usb 6-1: USB disconnect, device number 23 [ 550.299642][ T30] audit: type=1400 audit(1766096739.976:1191): avc: denied { getopt } for pid=13470 comm="syz.5.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 550.299925][ T5834] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 550.351749][ T30] audit: type=1400 audit(1766096740.016:1192): avc: denied { ioctl } for pid=13469 comm="syz.7.1718" path="socket:[45425]" dev="sockfs" ino=45425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 550.466351][T13464] syz_tun: left allmulticast mode [ 550.507920][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 550.549035][ T5834] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 550.559090][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1718'. [ 550.573618][ T5834] usb 2-1: config 0 has no interface number 0 [ 550.600796][ T5834] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 550.618083][T13471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.635766][ T5834] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 550.655662][ T5834] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 550.676219][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 550.695919][ T5834] usb 2-1: Product: syz [ 550.702006][ T5834] usb 2-1: SerialNumber: syz [ 550.722972][T13471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.728208][ T5834] usb 2-1: config 0 descriptor?? [ 550.749553][ T5834] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 550.783313][ T5834] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input49 [ 551.220964][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 552.345069][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.354909][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.362120][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.369265][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.376430][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.385411][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.393418][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.400436][ T116] usb 2-1: USB disconnect, device number 68 [ 552.406371][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 552.406385][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 552.505591][ T116] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 552.747990][ T44] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 552.928024][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 552.955282][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 552.979020][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 553.069645][ T44] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 553.080770][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.091028][ T44] usb 7-1: Product: syz [ 553.095818][ T44] usb 7-1: Manufacturer: syz [ 553.112598][ T44] usb 7-1: SerialNumber: syz [ 553.205710][ T44] usb 7-1: config 0 descriptor?? [ 553.282600][ T44] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 553.345100][ T44] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 553.775804][T13508] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 553.799530][ T44] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 553.854307][ T44] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 553.868912][ T44] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 553.875976][ T44] em28xx 7-1:0.0: No AC97 audio processor [ 553.928891][ T44] usb 7-1: USB disconnect, device number 22 [ 553.963074][ T44] em28xx 7-1:0.0: Disconnecting em28xx [ 553.984201][ T44] em28xx 7-1:0.0: Freeing device [ 554.045112][T13517] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 554.071886][T13517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1727'. [ 554.130047][T13517] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 554.137599][T13517] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 554.183459][T13517] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 554.561399][T13526] overlayfs: missing 'workdir' [ 555.387785][ T5834] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 555.547951][ T116] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 555.570996][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.597811][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.607607][ T5834] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 555.647895][ T5834] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.656992][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.680646][ T5834] usb 8-1: config 0 descriptor?? [ 555.717856][ T116] usb 7-1: Using ep0 maxpacket: 32 [ 555.728469][ T116] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 555.756192][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.780444][ T116] usb 7-1: config 0 descriptor?? [ 555.900440][T13532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.928722][T13541] tmpfs: Unknown parameter 'mpoult' [ 555.942113][T13532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.116613][ T116] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 556.127504][ T116] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 556.179104][ T116] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 556.186317][ T116] usb 7-1: media controller created [ 556.245239][ T116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.329718][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.338862][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.361064][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.383841][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.418365][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.429717][ T116] az6027: usb out operation failed. (-71) [ 556.443928][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.460979][ T116] az6027: usb out operation failed. (-71) [ 556.471541][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.479061][ T116] stb0899_attach: Driver disabled by Kconfig [ 556.491816][ T116] az6027: no front-end attached [ 556.491816][ T116] [ 556.508173][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.529686][ T116] az6027: usb out operation failed. (-71) [ 556.535583][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.550601][ T116] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 556.557888][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.574542][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.625422][ T116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input50 [ 556.648334][ T5834] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 556.664837][ T116] dvb-usb: schedule remote query interval to 400 msecs. [ 556.683566][ T116] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 556.693632][ T5834] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 556.713638][ T116] usb 7-1: USB disconnect, device number 23 [ 556.766142][ T5834] usb 8-1: USB disconnect, device number 2 [ 556.833583][T13551] fido_id[13551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 557.014058][T13555] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 557.023109][T13555] tipc: Enabled bearer , priority 10 [ 557.352401][ T116] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 557.453595][T13557] netlink: 'syz.6.1738': attribute type 4 has an invalid length. [ 557.735292][T13562] No such timeout policy "syz1" [ 558.095929][ T30] audit: type=1400 audit(1766096747.766:1193): avc: denied { execute } for pid=13568 comm="syz.6.1743" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 558.226952][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 558.238781][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 558.252050][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 558.259264][ T116] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 558.270533][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 558.278236][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 558.413112][ T116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.490613][ T116] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 558.528000][ T116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.546264][ T116] usb 6-1: config 0 descriptor?? [ 560.069494][ T3103] block nbd0: Possible stuck request ffff888026158000: control (read@0,1024B). Runtime 330 seconds [ 560.080509][ T3103] block nbd0: Possible stuck request ffff888026158200: control (read@1024,1024B). Runtime 330 seconds [ 560.080651][T13574] lo speed is unknown, defaulting to 1000 [ 560.092588][ T3103] block nbd0: Possible stuck request ffff888026158400: control (read@2048,1024B). Runtime 330 seconds [ 560.215730][T13574] lo speed is unknown, defaulting to 1000 [ 560.533281][ T52] Bluetooth: hci8: command tx timeout [ 560.836446][T13574] chnl_net:caif_netlink_parms(): no params data found [ 560.907899][ T5891] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 561.048107][ T5891] usb 7-1: device descriptor read/64, error -71 [ 561.203902][ T116] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 561.261347][ T116] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0028/input/input51 [ 561.305717][T13608] loop2: detected capacity change from 0 to 7 [ 561.312029][ T5891] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 561.328722][T13608] loop2: [POWERTEC] p1 p2 p3 [ 561.341324][T13608] loop2: p2 start 524319 is beyond EOD, truncated [ 561.370872][T13608] loop2: p3 start 1932423285 is beyond EOD, truncated [ 561.393394][ T116] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 561.478013][ T5891] usb 7-1: device descriptor read/64, error -71 [ 561.481222][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 561.563577][T13574] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.587871][ T30] audit: type=1400 audit(1766096751.256:1194): avc: granted { setsecparam } for pid=13613 comm="syz.7.1750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 561.597850][T13574] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.618111][ T5891] usb usb7-port1: attempt power cycle [ 561.647971][T13574] bridge_slave_0: entered allmulticast mode [ 561.661443][T13574] bridge_slave_0: entered promiscuous mode [ 561.679579][T13574] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.686779][T13574] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.698107][T13574] bridge_slave_1: entered allmulticast mode [ 561.705919][T13574] bridge_slave_1: entered promiscuous mode [ 561.753474][T13574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.767143][T13574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.815612][T13574] team0: Port device team_slave_0 added [ 561.828861][T13574] team0: Port device team_slave_1 added [ 561.838009][ T116] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 561.874747][T13574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.882075][T13574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.909863][T13574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.923398][T13574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.932430][T13574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.958714][T13574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.987804][ T5891] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 561.996656][ T116] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.008968][ T5891] usb 7-1: device descriptor read/8, error -71 [ 562.009078][ T116] usb 8-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 562.041344][ T116] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.056032][T13574] hsr_slave_0: entered promiscuous mode [ 562.066048][ T116] usb 8-1: config 0 descriptor?? [ 562.074999][T13574] hsr_slave_1: entered promiscuous mode [ 562.095062][T13574] debugfs: 'hsr0' already exists in 'hsr' [ 562.103338][T13574] Cannot create hsr debugfs directory [ 562.257879][ T5891] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 562.278367][ T5891] usb 7-1: device descriptor read/8, error -71 [ 562.323649][T13574] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 562.333712][T13574] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 562.344498][T13574] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 562.355104][T13574] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 562.388153][ T5891] usb usb7-port1: unable to enumerate USB device [ 562.493812][ T116] hid_mf 0003:0079:1846.0029: item fetching failed at offset 5/7 [ 562.520266][ T116] hid_mf 0003:0079:1846.0029: HID parse failed. [ 562.527074][T13574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.534718][ T116] hid_mf 0003:0079:1846.0029: probe with driver hid_mf failed with error -22 [ 562.582520][T13574] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.606925][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.614132][T10839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.625129][ T52] Bluetooth: hci8: command tx timeout [ 562.631950][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.700431][ T116] usb 6-1: USB disconnect, device number 24 [ 562.702258][ T5891] usb 8-1: USB disconnect, device number 3 [ 562.751451][T13626] input: syz0 as /devices/virtual/input/input52 [ 562.765123][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.772371][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.967015][T13633] tipc: Started in network mode [ 562.972797][T13633] tipc: Node identity 4, cluster identity 4711 [ 562.980024][T13633] tipc: Node number set to 4 [ 563.156175][T13574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.668237][ T5884] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 563.770064][T13574] veth0_vlan: entered promiscuous mode [ 563.815194][T13574] veth1_vlan: entered promiscuous mode [ 563.829812][ T5884] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.841556][ T5884] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 564.127457][ T5884] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.171887][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.190031][T13574] veth0_macvtap: entered promiscuous mode [ 564.197414][ T5884] usb 8-1: Product: syz [ 564.213842][ T5884] usb 8-1: Manufacturer: syz [ 564.220216][T13574] veth1_macvtap: entered promiscuous mode [ 564.226343][ T5884] usb 8-1: SerialNumber: syz [ 564.282141][T13574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.323149][T13574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.345735][ T6886] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.418143][ T6886] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.491307][ T5884] cdc_ncm 8-1:1.0: bind() failure [ 564.505321][ T6886] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.536837][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.554180][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.566261][ T5884] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 564.592945][ T6097] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.595705][ T5884] cdc_ncm 8-1:1.1: bind() failure [ 564.628287][ T6886] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.646513][ T5884] usb 8-1: USB disconnect, device number 4 [ 564.704557][ T52] Bluetooth: hci8: command tx timeout [ 564.765959][T13663] loop2: detected capacity change from 0 to 7 [ 564.772834][T13663] loop2: [POWERTEC] p1 p2 p3 [ 564.779115][T13663] loop2: p2 start 524319 is beyond EOD, truncated [ 564.785552][T13663] loop2: p3 start 1932423285 is beyond EOD, truncated [ 564.828070][ T6886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.836224][ T6886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.880736][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 565.132088][T13674] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1762'. [ 565.298356][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 565.858435][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 565.867195][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 565.892217][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.918791][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 565.941182][ T10] pvrusb2: ********** [ 565.950041][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 565.960547][ T10] pvrusb2: Important functionality might not be entirely working. [ 565.968704][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 565.981715][ T10] pvrusb2: ********** [ 566.017471][T13673] lo speed is unknown, defaulting to 1000 [ 566.046968][T13673] lo speed is unknown, defaulting to 1000 [ 566.116254][ T2332] pvrusb2: Invalid write control endpoint [ 566.290801][ T2332] pvrusb2: Invalid write control endpoint [ 566.307028][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 566.320582][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 566.349447][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 566.365196][ T2332] pvrusb2: Device being rendered inoperable [ 566.391043][T13669] pvrusb2: Attempted to execute control transfer when device not ok [ 566.424001][T13688] 9p: Bad value for 'rfdno' [ 566.501297][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 566.513682][T13686] syzkaller0: entered promiscuous mode [ 566.534111][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 566.565655][T13686] syzkaller0: entered allmulticast mode [ 566.577858][ T5884] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 566.584218][ T2332] pvrusb2: Attached sub-driver cx25840 [ 566.647961][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 566.671830][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 566.703785][T13686] tipc: Started in network mode [ 566.727850][T13686] tipc: Node identity 0a7a9910d3f4, cluster identity 4711 [ 566.735280][T13686] tipc: Enabled bearer , priority 0 [ 566.745028][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 566.760748][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.786683][ T52] Bluetooth: hci8: command tx timeout [ 566.869647][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.882962][ T30] audit: type=1400 audit(1766096756.566:1195): avc: denied { lock } for pid=13693 comm="syz.7.1768" path="socket:[46828]" dev="sockfs" ino=46828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 566.918295][ T5884] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 566.929544][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.930880][T13667] tipc: Resetting bearer [ 566.940504][ T5884] usb 2-1: config 0 descriptor?? [ 567.055963][T13667] tipc: Disabling bearer [ 567.094038][T13699] netlink: 236 bytes leftover after parsing attributes in process `syz.7.1769'. [ 567.129118][ T10] usb 9-1: USB disconnect, device number 2 [ 568.498069][ T5884] corsair 0003:1B1C:1B02.002A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 568.607085][ T5884] corsair 0003:1B1C:1B02.002A: Read invalid backlight brightness: bf. [ 568.659674][T13708] loop2: detected capacity change from 0 to 7 [ 568.744711][ T8712] loop2: [POWERTEC] p1 p2 p3 [ 568.764374][ T8712] loop2: p2 start 524319 is beyond EOD, truncated [ 568.796875][ T8712] loop2: p3 start 1932423285 is beyond EOD, truncated [ 568.829638][T13708] loop2: [POWERTEC] p1 p2 p3 [ 568.862137][T13708] loop2: p2 start 524319 is beyond EOD, truncated [ 568.888384][T13708] loop2: p3 start 1932423285 is beyond EOD, truncated [ 568.963760][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 569.038282][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 569.040014][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 569.177067][T13723] netlink: 'syz.6.1774': attribute type 29 has an invalid length. [ 569.219492][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 569.224164][T13730] sp0: Synchronizing with TNC [ 569.230658][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 569.241003][ T10] usb 9-1: config 0 has no interface number 0 [ 569.247528][ T10] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.295947][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 569.325302][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 569.352665][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 569.369495][T13736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.395188][ T30] audit: type=1400 audit(1766096759.046:1196): avc: denied { execute } for pid=13735 comm="syz.6.1777" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 569.839736][T12618] usb 2-1: USB disconnect, device number 69 [ 569.850981][ T10] usb 9-1: Product: syz [ 569.865148][ T10] usb 9-1: SerialNumber: syz [ 569.891142][ T10] usb 9-1: config 0 descriptor?? [ 569.900838][ T10] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 570.101766][T13710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.146521][T13710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.210088][T12618] usb 9-1: USB disconnect, device number 3 [ 570.366006][T13759] loop2: detected capacity change from 0 to 7 [ 570.386097][T13759] loop2: [POWERTEC] p1 p2 p3 [ 570.409350][T13759] loop2: p2 start 524319 is beyond EOD, truncated [ 570.442915][T13759] loop2: p3 start 1932423285 is beyond EOD, truncated [ 570.641760][ T8401] udevd[8401]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 571.092781][ T30] audit: type=1400 audit(1766096760.766:1197): avc: denied { mounton } for pid=13751 comm="syz.1.1779" path="/proc/703/task" dev="proc" ino=47225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 571.417811][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 572.709893][ T5834] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 572.871471][ T5834] usb 9-1: Using ep0 maxpacket: 16 [ 572.895014][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.941806][ T5834] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 572.958054][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.999615][ T5834] usb 9-1: config 0 descriptor?? [ 573.347924][ T5884] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 573.761743][ T5884] usb 2-1: device descriptor read/64, error -71 [ 573.770642][T13808] ceph: No mds server is up or the cluster is laggy [ 573.789905][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 573.796070][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 574.068069][ T5884] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 574.226287][ T5884] usb 2-1: device descriptor read/64, error -71 [ 574.376270][ T5884] usb usb2-port1: attempt power cycle [ 574.577856][T13829] lo speed is unknown, defaulting to 1000 [ 574.584456][T13829] lo speed is unknown, defaulting to 1000 [ 574.627125][ T5834] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 574.676637][ T30] audit: type=1400 audit(1766096764.346:1198): avc: denied { lock } for pid=13832 comm="syz.6.1798" path="socket:[47325]" dev="sockfs" ino=47325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 574.730209][ T5884] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 574.768334][ T5884] usb 2-1: device descriptor read/8, error -71 [ 575.018363][ T5884] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 575.052634][ T5884] usb 2-1: device descriptor read/8, error -71 [ 575.170144][ T5884] usb usb2-port1: unable to enumerate USB device [ 576.818200][T12618] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 576.887130][ T5942] usb 9-1: USB disconnect, device number 4 [ 577.009746][T12618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.059831][T12618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.097999][T12618] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 577.118815][T12618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.140913][T12618] usb 2-1: config 0 descriptor?? [ 577.765789][ T5834] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 577.947852][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 577.954885][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 578.013257][T12618] hid_parser_main: 28 callbacks suppressed [ 578.013279][T12618] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 578.029489][T12618] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 578.070206][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 578.087676][ T5834] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 578.096859][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.117994][ T5884] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 578.127216][ T5834] usb 8-1: config 0 descriptor?? [ 578.136038][ T5834] hub 8-1:0.0: USB hub found [ 578.212398][T12618] cp2112 0003:10C4:EA90.002C: Part Number: 0x82 Device Version: 0xFE [ 578.277908][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 578.284594][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 578.296243][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 578.308401][ T5942] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 578.309763][ T5884] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.326702][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.336573][ T5884] usb 7-1: Product: syz [ 578.343044][ T5884] usb 7-1: Manufacturer: syz [ 578.348165][ T5834] hub 8-1:0.0: 1 port detected [ 578.353148][ T5884] usb 7-1: SerialNumber: syz [ 578.359777][ T5884] usb 7-1: config 0 descriptor?? [ 578.367296][ T5884] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.376829][ T5884] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 578.448233][ T5942] usb 9-1: device descriptor read/64, error -71 [ 578.482944][T13890] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 578.654488][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.673537][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.727914][ T5942] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 578.946140][ T52] Bluetooth: hci7: ISO packet for unknown connection handle 0 [ 579.018554][ T5942] usb 9-1: device descriptor read/64, error -71 [ 579.484386][ T5942] usb usb9-port1: attempt power cycle [ 579.509081][ T5834] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 579.515867][ T5834] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 579.579980][T13890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.587286][ T5834] usbhid 8-1:0.0: can't add hid device: -32 [ 579.588833][T13890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.594688][ T5834] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 579.682786][T12618] cp2112 0003:10C4:EA90.002C: error reading lock byte: -71 [ 579.693091][T12618] usb 2-1: USB disconnect, device number 75 [ 579.726095][ T5884] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 579.734291][ T5884] em28xx 7-1:0.0: Config register raw data: 0x02 [ 579.847856][ T5942] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 579.878961][ T5942] usb 9-1: device descriptor read/8, error -71 [ 579.941981][ T5834] usb 7-1: USB disconnect, device number 28 [ 579.949604][ T5834] em28xx 7-1:0.0: Disconnecting em28xx [ 579.962104][ T5834] em28xx 7-1:0.0: Freeing device [ 580.117775][ T5942] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 580.148371][ T5942] usb 9-1: device descriptor read/8, error -71 [ 580.245339][T13900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1811'. [ 580.256039][T13900] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.269296][ T5942] usb usb9-port1: unable to enumerate USB device [ 580.574503][ T30] audit: type=1400 audit(1766096770.246:1199): avc: denied { audit_write } for pid=13903 comm="syz.1.1812" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 582.227828][ T5942] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 582.409092][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 582.549003][ T5942] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 582.569824][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.592108][ T5942] usb 6-1: config 0 descriptor?? [ 582.633317][ T5942] asix 6-1:0.0: probe with driver asix failed with error -22 [ 583.037863][ T5942] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 583.204784][ T5833] usb 6-1: USB disconnect, device number 25 [ 583.357950][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 583.365879][ T5942] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 583.384518][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.406038][ T5942] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 583.457850][ T5834] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 583.619539][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.650283][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 583.668806][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.700584][ T5834] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 583.717811][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.767947][ T5834] usb 2-1: Product: syz [ 583.797987][ T5834] usb 2-1: Manufacturer: syz [ 583.802658][ T5834] usb 2-1: SerialNumber: syz [ 583.829512][ T5834] usb 2-1: config 0 descriptor?? [ 584.009623][ T5922] usb 7-1: USB disconnect, device number 29 [ 584.110200][ T5834] usb 2-1: USB disconnect, device number 76 [ 584.200667][T13941] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1820'. [ 584.498497][T13943] Invalid option length (10937) for dns_resolver key [ 585.258183][ T5942] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 585.503918][ T5942] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.541566][ T5942] usb 7-1: config 0 has no interface number 0 [ 585.580107][ T5942] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 585.603643][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.705641][ T5942] usb 7-1: config 0 descriptor?? [ 585.715581][ T5942] usb 7-1: selecting invalid altsetting 1 [ 585.722776][ T5942] dvb_ttusb_budget: ttusb_init_controller: error [ 585.729261][ T5942] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 586.134494][ T30] audit: type=1400 audit(1766096775.656:1200): avc: denied { override_creds } for pid=13958 comm="syz.8.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 586.156371][ T5942] DVB: Unable to find symbol cx22700_attach() [ 586.244437][ T5942] DVB: Unable to find symbol tda10046_attach() [ 586.262667][ T5942] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 586.317216][T13971] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1825'. [ 586.371921][ T5942] usb 7-1: USB disconnect, device number 30 [ 586.383545][T13971] kernel profiling enabled (shift: 17) [ 586.588251][T13979] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 586.615322][T13985] loop2: detected capacity change from 0 to 7 [ 586.640898][T13979] bond3: entered promiscuous mode [ 586.646300][T13985] loop2: [POWERTEC] p1 p2 p3 [ 586.653624][T13979] bond3: entered allmulticast mode [ 586.661040][T13985] loop2: p2 start 524319 is beyond EOD, truncated [ 586.668411][T13979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.675123][T13985] loop2: p3 start 1932423285 is beyond EOD, truncated [ 586.690489][T13987] macvlan0: entered promiscuous mode [ 586.697907][T13987] macvlan0: entered allmulticast mode [ 586.780712][T13987] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 586.802656][ T30] audit: type=1400 audit(1766096776.476:1201): avc: denied { create } for pid=13992 comm="syz.6.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 586.838556][ T5922] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 586.862457][ T30] audit: type=1400 audit(1766096776.536:1202): avc: denied { write } for pid=13992 comm="syz.6.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 587.007813][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 587.197948][ T5922] usb 9-1: device not accepting address 9, error -71 [ 587.377803][ T10] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 587.557508][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.574175][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 587.593706][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 587.617309][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.659064][ T10] usb 7-1: config 0 descriptor?? [ 587.667571][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 587.689550][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 587.707593][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 587.725563][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 587.746924][ T10] usb 7-1: media controller created [ 587.761743][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.799342][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 587.805442][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 587.829593][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input53 [ 588.235424][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 588.243006][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 588.327185][T14012] can0: slcan on ttyS3. [ 588.342483][T14012] IPVS: set_ctl: invalid protocol: 58 172.30.1.7:20000 [ 588.400435][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 588.406212][ T10] dvb-usb: error while querying for an remote control event. [ 588.568161][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 588.574336][ T10] dvb-usb: error while querying for an remote control event. [ 588.582179][ T9] libceph: connect (1)[c::]:6789 error -101 [ 588.588312][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 588.748343][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 588.754120][ T9] dvb-usb: error while querying for an remote control event. [ 588.848307][ T9] libceph: connect (1)[c::]:6789 error -101 [ 588.854516][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 588.938182][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 588.949733][ T9] dvb-usb: error while querying for an remote control event. [ 589.131902][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 589.138296][ T10] dvb-usb: error while querying for an remote control event. [ 589.265904][T14020] FAULT_INJECTION: forcing a failure. [ 589.265904][T14020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.279914][T14020] CPU: 1 UID: 0 PID: 14020 Comm: syz.1.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.279943][T14020] Tainted: [L]=SOFTLOCKUP [ 589.279949][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.279959][T14020] Call Trace: [ 589.279965][T14020] [ 589.279972][T14020] dump_stack_lvl+0x16c/0x1f0 [ 589.279999][T14020] should_fail_ex+0x512/0x640 [ 589.280028][T14020] strncpy_from_user+0x3b/0x2e0 [ 589.280054][T14020] getname_flags.part.0+0x8f/0x550 [ 589.280072][T14020] ? __pfx_ksys_write+0x10/0x10 [ 589.280095][T14020] getname_flags+0x93/0xf0 [ 589.280116][T14020] __x64_sys_mknodat+0x9f/0xe0 [ 589.280141][T14020] do_syscall_64+0xcd/0xf80 [ 589.280164][T14020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.280182][T14020] RIP: 0033:0x7efceef8f749 [ 589.280197][T14020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.280213][T14020] RSP: 002b:00007efcefe49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 589.280231][T14020] RAX: ffffffffffffffda RBX: 00007efcef1e6180 RCX: 00007efceef8f749 [ 589.280242][T14020] RDX: 0000000000008000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 589.280253][T14020] RBP: 00007efcefe49090 R08: 0000000000000000 R09: 0000000000000000 [ 589.280264][T14020] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 589.280275][T14020] R13: 00007efcef1e6218 R14: 00007efcef1e6180 R15: 00007ffcc8decec8 [ 589.280300][T14020] [ 589.416287][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 589.445101][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 589.451422][T14014] ceph: No mds server is up or the cluster is laggy [ 589.451640][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 589.464663][ T89] dvb-usb: error while querying for an remote control event. [ 589.548760][T14022] loop2: detected capacity change from 0 to 7 [ 589.555697][T14022] loop2: [POWERTEC] p1 p2 p3 [ 589.561752][T14022] loop2: p2 start 524319 is beyond EOD, truncated [ 589.572879][T14022] loop2: p3 start 1932423285 is beyond EOD, truncated [ 589.659438][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 589.665246][ T89] dvb-usb: error while querying for an remote control event. [ 589.830259][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 589.836295][ T89] dvb-usb: error while querying for an remote control event. [ 589.999036][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 590.005193][ T89] dvb-usb: error while querying for an remote control event. [ 590.141280][ T3103] block nbd0: Possible stuck request ffff888026158000: control (read@0,1024B). Runtime 360 seconds [ 590.152448][ T3103] block nbd0: Possible stuck request ffff888026158200: control (read@1024,1024B). Runtime 360 seconds [ 590.164079][ T3103] block nbd0: Possible stuck request ffff888026158400: control (read@2048,1024B). Runtime 360 seconds [ 590.178040][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 590.193414][ T89] dvb-usb: error while querying for an remote control event. [ 590.270075][T14004] can0 (unregistered): slcan off ttyS3. [ 590.280535][ T6006] usb 7-1: USB disconnect, device number 31 [ 590.298098][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 590.343085][ T6006] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 590.534154][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 590.542100][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 590.561188][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1845'. [ 590.856516][T11452] libceph: connect (1)[c::]:6789 error -101 [ 590.867082][T11452] libceph: mon0 (1)[c::]:6789 connect error [ 591.251367][T14044] ceph: No mds server is up or the cluster is laggy [ 591.349648][T14049] ./cgroup: Can't lookup blockdev [ 591.385659][T14052] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 591.407504][T14052] CPU: 0 UID: 0 PID: 14052 Comm: syz.1.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.407528][T14052] Tainted: [L]=SOFTLOCKUP [ 591.407533][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.407544][T14052] Call Trace: [ 591.407550][T14052] [ 591.407556][T14052] dump_stack_lvl+0x16c/0x1f0 [ 591.407579][T14052] sysfs_warn_dup+0x7f/0xa0 [ 591.407597][T14052] sysfs_create_dir_ns+0x24b/0x2b0 [ 591.407613][T14052] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.407628][T14052] ? find_held_lock+0x2b/0x80 [ 591.407653][T14052] ? class_dir_child_ns_type+0xd/0x60 [ 591.407670][T14052] kobject_add_internal+0x2c4/0x9d0 [ 591.407693][T14052] kobject_add+0x16e/0x240 [ 591.407711][T14052] ? __pfx_kobject_add+0x10/0x10 [ 591.407729][T14052] ? get_device_parent+0x1c5/0x4e0 [ 591.407743][T14052] ? kobject_put+0xaf/0x6f0 [ 591.407762][T14052] ? device_add+0xc25/0x1980 [ 591.407779][T14052] device_add+0x288/0x1980 [ 591.407797][T14052] ? lockdep_init_map_type+0x5c/0x270 [ 591.407814][T14052] ? __pfx_device_add+0x10/0x10 [ 591.407828][T14052] ? lockdep_init_map_type+0x5c/0x270 [ 591.407848][T14052] ? __init_waitqueue_head+0xca/0x150 [ 591.407874][T14052] tty_register_device_attr+0x38e/0x7c0 [ 591.407893][T14052] ? __pfx_tty_register_device_attr+0x10/0x10 [ 591.407914][T14052] ? tty_port_init+0x156/0x1c0 [ 591.407933][T14052] gsm_activate_mux+0x157/0x2e0 [ 591.407951][T14052] gsmld_ioctl+0x8cb/0x1570 [ 591.407975][T14052] ? __pfx_gsmld_ioctl+0x10/0x10 [ 591.407996][T14052] ? __ldsem_down_read_nested+0xf3/0x8a0 [ 591.408018][T14052] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 591.408043][T14052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 591.408065][T14052] ? __pfx_gsmld_ioctl+0x10/0x10 [ 591.408082][T14052] tty_ioctl+0x700/0x1650 [ 591.408098][T14052] ? __pfx_tty_ioctl+0x10/0x10 [ 591.408113][T14052] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 591.408140][T14052] ? hook_file_ioctl_common+0x144/0x410 [ 591.408167][T14052] ? selinux_file_ioctl+0x180/0x270 [ 591.408183][T14052] ? selinux_file_ioctl+0xb4/0x270 [ 591.408223][T14052] ? __pfx_tty_ioctl+0x10/0x10 [ 591.408239][T14052] __x64_sys_ioctl+0x18e/0x210 [ 591.408258][T14052] do_syscall_64+0xcd/0xf80 [ 591.408279][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.408294][T14052] RIP: 0033:0x7efceef8f749 [ 591.408307][T14052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.408320][T14052] RSP: 002b:00007efcefe6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.408335][T14052] RAX: ffffffffffffffda RBX: 00007efcef1e6090 RCX: 00007efceef8f749 [ 591.408344][T14052] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000007 [ 591.408352][T14052] RBP: 00007efcef013f91 R08: 0000000000000000 R09: 0000000000000000 [ 591.408360][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.408368][T14052] R13: 00007efcef1e6128 R14: 00007efcef1e6090 R15: 00007ffcc8decec8 [ 591.408396][T14052] [ 591.794860][T14052] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 592.263743][ T24] usb 6-1: device descriptor read/64, error -110 [ 592.357151][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 592.367831][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 592.376673][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 592.388911][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 592.396612][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 592.507839][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 592.599631][T14060] lo speed is unknown, defaulting to 1000 [ 592.606858][T14060] lo speed is unknown, defaulting to 1000 [ 592.639851][ T24] usb 6-1: device descriptor read/64, error -32 [ 592.758241][T14070] FAULT_INJECTION: forcing a failure. [ 592.758241][T14070] name failslab, interval 1, probability 0, space 0, times 0 [ 592.770967][T14070] CPU: 0 UID: 0 PID: 14070 Comm: syz.1.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.770995][T14070] Tainted: [L]=SOFTLOCKUP [ 592.771002][T14070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.771012][T14070] Call Trace: [ 592.771020][T14070] [ 592.771028][T14070] dump_stack_lvl+0x16c/0x1f0 [ 592.771056][T14070] should_fail_ex+0x512/0x640 [ 592.771081][T14070] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 592.771102][T14070] should_failslab+0xc2/0x120 [ 592.771125][T14070] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 592.771143][T14070] ? __d_lookup+0x25c/0x4a0 [ 592.771163][T14070] ? __d_alloc+0x35/0xa80 [ 592.771182][T14070] ? __d_alloc+0x35/0xa80 [ 592.771195][T14070] __d_alloc+0x35/0xa80 [ 592.771213][T14070] d_alloc+0x4a/0x1e0 [ 592.771230][T14070] lookup_one_qstr_excl+0x175/0x250 [ 592.771248][T14070] ? mnt_want_write+0x161/0x450 [ 592.771271][T14070] filename_create+0x1cf/0x400 [ 592.771292][T14070] ? __pfx_filename_create+0x10/0x10 [ 592.771321][T14070] ? find_held_lock+0x2b/0x80 [ 592.771346][T14070] ? __might_fault+0xe3/0x190 [ 592.771367][T14070] do_mknodat+0x19c/0x6f0 [ 592.771392][T14070] ? __pfx_do_mknodat+0x10/0x10 [ 592.771415][T14070] ? getname_flags.part.0+0x1c5/0x550 [ 592.771440][T14070] __x64_sys_mknodat+0xaf/0xe0 [ 592.771465][T14070] do_syscall_64+0xcd/0xf80 [ 592.771489][T14070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.771506][T14070] RIP: 0033:0x7efceef8f749 [ 592.771520][T14070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.771536][T14070] RSP: 002b:00007efcefe49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 592.771553][T14070] RAX: ffffffffffffffda RBX: 00007efcef1e6180 RCX: 00007efceef8f749 [ 592.771564][T14070] RDX: 0000000000008000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 592.771573][T14070] RBP: 00007efcefe49090 R08: 0000000000000000 R09: 0000000000000000 [ 592.771583][T14070] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 592.771592][T14070] R13: 00007efcef1e6218 R14: 00007efcef1e6180 R15: 00007ffcc8decec8 [ 592.771617][T14070] [ 592.915513][ T6006] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 593.001863][ T24] usb usb6-port1: attempt power cycle [ 593.087911][T14060] chnl_net:caif_netlink_parms(): no params data found [ 593.189205][T14060] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.196456][T14060] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.203927][T14060] bridge_slave_0: entered allmulticast mode [ 593.210224][ T6006] usb 7-1: device descriptor read/64, error -71 [ 593.217619][T14060] bridge_slave_0: entered promiscuous mode [ 593.225774][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.233132][T14060] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.240524][T14060] bridge_slave_1: entered allmulticast mode [ 593.250690][T14060] bridge_slave_1: entered promiscuous mode [ 593.280228][T14060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.292847][T14060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.350916][T14060] team0: Port device team_slave_0 added [ 593.359442][T14060] team0: Port device team_slave_1 added [ 593.389914][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 593.401027][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 593.417228][T14060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.419022][ T24] usb 6-1: device descriptor read/8, error -32 [ 593.424659][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.464341][T14060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.480460][T14060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.487423][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.515465][T14060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.527843][ T6006] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 593.560107][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.573110][ T10] usb 9-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 593.593882][T14060] hsr_slave_0: entered promiscuous mode [ 593.599680][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.609222][T14060] hsr_slave_1: entered promiscuous mode [ 593.622450][ T10] usb 9-1: config 0 descriptor?? [ 593.630776][T14060] debugfs: 'hsr0' already exists in 'hsr' [ 593.636533][T14060] Cannot create hsr debugfs directory [ 593.738079][ T24] raw-gadget.5 gadget.5: failed to queue resume event [ 593.793655][T14084] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1855'. [ 593.803535][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 593.811411][ T6006] usb 7-1: device descriptor read/64, error -71 [ 593.838858][ C1] raw-gadget.5 gadget.5: ignoring, device is not running [ 593.901862][ T24] usb 6-1: device descriptor read/8, error -32 [ 593.939021][ T6006] usb usb7-port1: attempt power cycle [ 594.018370][ T24] raw-gadget.5 gadget.5: failed to queue suspend event [ 594.072146][ T24] usb usb6-port1: unable to enumerate USB device [ 594.283895][T14060] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 594.299623][ T6006] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 594.309615][T14060] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 594.320741][T14060] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 594.388113][ T6006] usb 7-1: device descriptor read/8, error -71 [ 594.419804][T14060] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 594.458636][ T5822] Bluetooth: hci9: command tx timeout [ 594.522129][T14060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.533868][T14098] netlink: 'syz.1.1857': attribute type 9 has an invalid length. [ 594.538884][T14060] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.555383][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.562644][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.590560][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.597919][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.628544][ T6006] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 594.647244][ T30] audit: type=1400 audit(1766096784.316:1203): avc: denied { search } for pid=14099 comm="syz.1.1858" name="/" dev="configfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 594.680485][ T6006] usb 7-1: device descriptor read/8, error -71 [ 594.724953][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 594.805588][ T6006] usb usb7-port1: unable to enumerate USB device [ 594.814846][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 594.816864][ T30] audit: type=1400 audit(1766096784.356:1204): avc: denied { search } for pid=14099 comm="syz.1.1858" name="/" dev="configfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 594.848849][ T10] usb 9-1: USB disconnect, device number 11 [ 594.913534][ T30] audit: type=1400 audit(1766096784.356:1205): avc: denied { read open } for pid=14099 comm="syz.1.1858" path="/" dev="configfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 595.024814][T14060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.620058][ T2911] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 595.636663][T14060] veth0_vlan: entered promiscuous mode [ 595.763082][ T30] audit: type=1400 audit(1766096785.426:1206): avc: denied { create } for pid=14123 comm="syz.1.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 595.899309][T14060] veth1_vlan: entered promiscuous mode [ 595.942866][T14060] veth0_macvtap: entered promiscuous mode [ 595.951325][T14060] veth1_macvtap: entered promiscuous mode [ 595.964027][T14060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.994677][T14060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.174358][ T4759] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.220474][ T30] audit: type=1326 audit(1766096785.876:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14121 comm="syz.6.1862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d6c98f749 code=0x0 [ 596.256183][ T4759] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.399637][ T4759] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.544409][ T52] Bluetooth: hci9: command tx timeout [ 596.554078][ T4759] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.790388][T10838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.814015][T10838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.924373][T10837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.946221][T10837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.047642][T14139] pimreg: entered allmulticast mode [ 597.056234][T14139] pimreg: left allmulticast mode [ 597.145092][T14141] FAULT_INJECTION: forcing a failure. [ 597.145092][T14141] name failslab, interval 1, probability 0, space 0, times 0 [ 597.159550][T14141] CPU: 1 UID: 0 PID: 14141 Comm: syz.8.1864 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.159582][T14141] Tainted: [L]=SOFTLOCKUP [ 597.159589][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.159599][T14141] Call Trace: [ 597.159605][T14141] [ 597.159612][T14141] dump_stack_lvl+0x16c/0x1f0 [ 597.159639][T14141] should_fail_ex+0x512/0x640 [ 597.159664][T14141] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 597.159686][T14141] should_failslab+0xc2/0x120 [ 597.159709][T14141] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 597.159727][T14141] ? find_held_lock+0x2b/0x80 [ 597.159752][T14141] ? __d_alloc+0x35/0xa80 [ 597.159773][T14141] ? __d_alloc+0x35/0xa80 [ 597.159785][T14141] __d_alloc+0x35/0xa80 [ 597.159803][T14141] d_alloc_parallel+0x111/0x1510 [ 597.159826][T14141] ? __schedule+0x114c/0x6150 [ 597.159845][T14141] ? find_held_lock+0x2b/0x80 [ 597.159875][T14141] ? __pfx_d_alloc_parallel+0x10/0x10 [ 597.159899][T14141] ? lockdep_init_map_type+0x5c/0x270 [ 597.159920][T14141] ? lockdep_init_map_type+0x5c/0x270 [ 597.159946][T14141] __lookup_slow+0x193/0x460 [ 597.159964][T14141] ? __pfx___lookup_slow+0x10/0x10 [ 597.159986][T14141] ? irq_entries_start+0xd0/0xcb0 [ 597.160011][T14141] ? irq_entries_start+0xd0/0xcb0 [ 597.160036][T14141] lookup_slow+0x50/0x70 [ 597.160054][T14141] lookup_one_unlocked+0xa0/0xd0 [ 597.160078][T14141] ovl_lookup_single+0x435/0x1330 [ 597.160105][T14141] ? __pfx_ovl_lookup_single+0x10/0x10 [ 597.160126][T14141] ? irqentry_exit+0x1dd/0x8c0 [ 597.160151][T14141] ovl_lookup_layer+0x3d4/0x480 [ 597.160176][T14141] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 597.160196][T14141] ? ovl_lookup_layers+0x2a1/0x2920 [ 597.160214][T14141] ? ovl_lookup_layers+0x2b7/0x2920 [ 597.160238][T14141] ovl_lookup_layers+0x341/0x2920 [ 597.160267][T14141] ? lock_acquire+0x179/0x330 [ 597.160285][T14141] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 597.160309][T14141] ? find_held_lock+0x2b/0x80 [ 597.160334][T14141] ? rcu_read_unlock+0x17/0x60 [ 597.160366][T14141] ovl_lookup+0x459/0x610 [ 597.160385][T14141] ? __pfx_ovl_lookup+0x10/0x10 [ 597.160404][T14141] ? rcu_is_watching+0x12/0xc0 [ 597.160426][T14141] ? do_raw_spin_lock+0x12c/0x2b0 [ 597.160455][T14141] ? do_raw_spin_unlock+0x172/0x230 [ 597.160478][T14141] ? _raw_spin_unlock+0x28/0x50 [ 597.160499][T14141] lookup_one_qstr_excl+0x1d1/0x250 [ 597.160516][T14141] ? mnt_want_write+0x161/0x450 [ 597.160544][T14141] filename_create+0x1cf/0x400 [ 597.160565][T14141] ? __pfx_filename_create+0x10/0x10 [ 597.160588][T14141] ? do_mknodat+0xc8/0x6f0 [ 597.160607][T14141] ? do_mknodat+0x186/0x6f0 [ 597.160630][T14141] do_mknodat+0x19c/0x6f0 [ 597.160655][T14141] ? __pfx_do_mknodat+0x10/0x10 [ 597.160677][T14141] ? getname_flags.part.0+0x1c5/0x550 [ 597.160701][T14141] __x64_sys_mknodat+0xaf/0xe0 [ 597.160726][T14141] do_syscall_64+0xcd/0xf80 [ 597.160750][T14141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.160766][T14141] RIP: 0033:0x7fa9a858f749 [ 597.160782][T14141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.160798][T14141] RSP: 002b:00007fa9a9463038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 597.160817][T14141] RAX: ffffffffffffffda RBX: 00007fa9a87e6180 RCX: 00007fa9a858f749 [ 597.160828][T14141] RDX: 0000000000008000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 597.160839][T14141] RBP: 00007fa9a9463090 R08: 0000000000000000 R09: 0000000000000000 [ 597.160849][T14141] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 597.160859][T14141] R13: 00007fa9a87e6218 R14: 00007fa9a87e6180 R15: 00007fffe6c26368 [ 597.160885][T14141] [ 597.565926][ T31] INFO: task syz.4.1325:11768 blocked for more than 143 seconds. [ 597.587622][ T31] Tainted: G L syzkaller #0 [ 597.602984][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.614371][ T31] task:syz.4.1325 state:D stack:26328 pid:11768 tgid:11767 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 597.643423][ T31] Call Trace: [ 597.649926][ T31] [ 597.677604][ T31] ? __schedule+0x10b9/0x6150 [ 597.729723][ T31] __schedule+0x1139/0x6150 [ 597.828078][ T6649] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 598.647920][ T52] Bluetooth: hci9: command tx timeout [ 598.663388][ T31] ? __pfx___schedule+0x10/0x10 [ 598.710992][ T31] ? find_held_lock+0x2b/0x80 [ 598.715732][ T31] ? schedule+0x2d7/0x3a0 [ 598.756304][ T31] schedule+0xe7/0x3a0 [ 598.761184][ T31] io_schedule+0xbf/0x130 [ 598.765531][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 598.771157][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 598.776646][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 598.784322][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 598.790432][ T31] ? __pfx___might_resched+0x10/0x10 [ 598.800037][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 598.805399][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 598.812792][ T31] ? __pfx_compaction_free+0x10/0x10 [ 598.818431][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 598.824170][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 598.834396][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 598.839972][ T31] ? __pfx_compaction_free+0x10/0x10 [ 598.845386][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 598.852084][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 598.861823][ T31] migrate_pages+0x1b0b/0x2350 [ 598.866701][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 598.878001][ T31] ? __pfx_compaction_free+0x10/0x10 [ 598.883352][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 598.917897][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 598.924266][ T31] ? __nr_to_section+0xa0/0xe0 [ 598.947814][ T31] ? pfn_to_online_page+0x16b/0x4a0 [ 598.953171][ T31] compact_zone+0x1e78/0x4540 [ 598.970057][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.975379][ T31] ? __pfx_debug_object_free+0x10/0x10 [ 598.999275][ T31] ? __pfx_compact_zone+0x10/0x10 [ 599.005575][ T31] ? __flush_work+0x938/0xcc0 [ 599.008791][T14147] syz.9.1849 (14147): drop_caches: 2 [ 599.010842][ T31] ? __flush_work+0x4d0/0xcc0 [ 599.038351][ T31] compact_node+0x1a3/0x2c0 [ 599.042902][ T31] ? __pfx_compact_node+0x10/0x10 [ 599.051906][ T6649] usb 2-1: device descriptor read/64, error -71 [ 599.057784][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 599.063628][ T31] sysctl_compaction_handler+0x141/0x210 [ 599.089218][ T31] proc_sys_call_handler+0x493/0x5b0 [ 599.094546][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 599.112178][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 599.117664][ T31] iter_file_splice_write+0xa24/0x12b0 [ 599.123377][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 599.129392][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 599.134793][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 599.140952][ T31] direct_splice_actor+0x192/0x6c0 [ 599.146087][ T31] splice_direct_to_actor+0x345/0xa30 [ 599.151475][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 599.157107][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 599.165261][ T31] do_splice_direct+0x174/0x240 [ 599.170202][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 599.175587][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 599.181693][ T31] ? rw_verify_area+0xcf/0x6c0 [ 599.186571][ T31] do_sendfile+0xb06/0xe50 [ 599.191127][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 599.196095][ T31] __x64_sys_sendfile64+0x154/0x220 [ 599.202806][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 599.209010][ T31] do_syscall_64+0xcd/0xf80 [ 599.213513][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.219465][ T31] RIP: 0033:0x7fbffab8f749 [ 599.223881][ T31] RSP: 002b:00007fbffb949038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 599.232404][ T31] RAX: ffffffffffffffda RBX: 00007fbffade5fa0 RCX: 00007fbffab8f749 [ 599.240489][ T31] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000008 [ 599.248518][ T31] RBP: 00007fbffac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.256485][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 599.264732][ T31] R13: 00007fbffade6038 R14: 00007fbffade5fa0 R15: 00007ffc11908338 [ 599.272995][ T31] [ 599.276162][ T31] [ 599.276162][ T31] Showing all locks held in the system: [ 599.297847][ T31] 3 locks held by kworker/0:0/9: [ 599.302856][ T31] 1 lock held by khungtaskd/31: [ 599.317836][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 599.338026][ T31] 2 locks held by getty/5573: [ 599.342741][ T31] #0: ffff8880364630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 599.367849][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 599.407862][ T31] 1 lock held by udevd/5830: [ 599.412576][ T31] #0: ffff8880260a0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 599.457827][ T31] 6 locks held by kworker/0:10/6649: [ 599.463170][ T31] 1 lock held by syz.4.1325/11768: [ 599.477880][ T31] #0: ffff8880501d2420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 599.502086][ T31] 2 locks held by kworker/0:13/12618: [ 599.507499][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 599.537816][ T31] #1: ffffc9000d7b7c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 599.547558][ T31] 6 locks held by syz.2.1602/12865: [ 599.567965][ T31] #0: ffff88802bb1e0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 599.577263][ T31] #1: ffff88803249e420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 599.607777][ T31] #2: ffff88807882ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 599.632804][ T31] #3: ffff888140e9a4b8 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 599.668914][ T31] #4: ffffffff8e28bde8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x560 [ 599.688340][ T31] #5: ffff8880260a0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 599.697641][ T31] 5 locks held by syz.3.1699/13395: [ 599.715789][ T6649] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 599.727921][ T31] #0: ffff88801e3215f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 599.737109][ T31] #1: ffff88803249e420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 599.798067][ T31] #2: ffff888057a2c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 599.822747][ T31] #3: ffff888140e9a4b8 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 599.847946][ T31] #4: ffffffff8e28bde8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 599.868651][ T31] 2 locks held by syz-executor/13574: [ 599.874067][ T31] #0: ffff888076aba0e0 (&type->s_umount_key#71){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 599.898108][ T31] #1: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 599.917787][ T31] 1 lock held by syz.7.1806/13892: [ 599.937748][ T31] #0: ffff8880260a0358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 599.947206][ T31] 4 locks held by syz.5.1830/13991: [ 599.952566][ T31] #0: ffff88803249e420 (sb_writers#8){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 599.962747][ T31] #1: ffff888032df1888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 599.972743][ T31] #2: ffff888140e99008 (kn->active#84){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 599.986145][ T31] #3: ffffffff8e28bde8 (system_transition_mutex){+.+.}-{4:4}, at: pm_test_store+0xeb/0x320 [ 599.996521][ T31] 1 lock held by syz.6.1865/14139: [ 600.001791][ T31] #0: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 600.011962][ T31] 1 lock held by syz.1.1866/14140: [ 600.017072][ T31] 4 locks held by syz.9.1849/14147: [ 600.024643][ T31] #0: ffff8880284f8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 600.034878][ T31] #1: ffff8880284f80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 600.044668][ T31] #2: ffffffff903be8c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 600.054830][ T31] #3: ffff88802af73338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 600.078537][ T31] [ 600.098170][ T31] ============================================= [ 600.098170][ T31] [ 600.106619][ T31] NMI backtrace for cpu 1 [ 600.106640][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 600.106662][ T31] Tainted: [L]=SOFTLOCKUP [ 600.106668][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.106678][ T31] Call Trace: [ 600.106686][ T31] [ 600.106694][ T31] dump_stack_lvl+0x116/0x1f0 [ 600.106719][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 600.106742][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 600.106760][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 600.106784][ T31] sys_info+0x133/0x180 [ 600.106804][ T31] watchdog+0xe66/0x1180 [ 600.106826][ T31] ? rcu_is_watching+0x12/0xc0 [ 600.106841][ T31] ? __pfx_watchdog+0x10/0x10 [ 600.106855][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 600.106875][ T31] ? __kthread_parkme+0x19e/0x250 [ 600.106891][ T31] ? __pfx_watchdog+0x10/0x10 [ 600.106906][ T31] kthread+0x3c5/0x780 [ 600.106924][ T31] ? __pfx_kthread+0x10/0x10 [ 600.106942][ T31] ? rcu_is_watching+0x12/0xc0 [ 600.106955][ T31] ? __pfx_kthread+0x10/0x10 [ 600.106973][ T31] ret_from_fork+0x983/0xb10 [ 600.106990][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 600.107007][ T31] ? __switch_to+0x7af/0x10d0 [ 600.107026][ T31] ? __pfx_kthread+0x10/0x10 [ 600.107044][ T31] ret_from_fork_asm+0x1a/0x30 [ 600.107078][ T31] [ 600.107084][ T31] Sending NMI from CPU 1 to CPUs 0: [ 600.254277][ C0] NMI backtrace for cpu 0 [ 600.254297][ C0] CPU: 0 UID: 0 PID: 14140 Comm: syz.1.1866 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.254318][ C0] Tainted: [L]=SOFTLOCKUP [ 600.254323][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.254330][ C0] RIP: 0010:lock_acquire+0x133/0x330 [ 600.254350][ C0] Code: 00 65 8b 05 27 eb 18 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 e7 a3 18 12 8b 90 2c 0b 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 48 c7 c7 86 e2 bb 8d e8 20 13 de 09 45 89 e0 89 e9 44 89 ea 65 [ 600.254367][ C0] RSP: 0018:ffffc900033975f8 EFLAGS: 00000246 [ 600.254378][ C0] RAX: ffff88807472c980 RBX: ffffffff8e3c9620 RCX: 0000000000000001 [ 600.254388][ C0] RDX: 0000000000000000 RSI: ffffffff816cb681 RDI: fffffbfff1c792c4 [ 600.254396][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 600.254404][ C0] R10: 0000000000000002 R11: 000000000001334a R12: 0000000000000000 [ 600.254412][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.254420][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 600.254433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.254449][ C0] CR2: 00005652cad7ead8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 600.254457][ C0] Call Trace: [ 600.254462][ C0] [ 600.254468][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 600.254487][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 600.254504][ C0] unwind_next_frame+0xd1/0x20b0 [ 600.254526][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 600.254541][ C0] ? __reset_page_owner+0x84/0x1a0 [ 600.254559][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 600.254573][ C0] arch_stack_walk+0x94/0x100 [ 600.254591][ C0] ? __reset_page_owner+0x84/0x1a0 [ 600.254607][ C0] stack_trace_save+0x8e/0xc0 [ 600.254620][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 600.254634][ C0] ? __lock_acquire+0x436/0x2890 [ 600.254648][ C0] ? __lock_acquire+0x436/0x2890 [ 600.254662][ C0] save_stack+0x160/0x1f0 [ 600.254675][ C0] ? __pfx_save_stack+0x10/0x10 [ 600.254692][ C0] ? page_ext_put+0x3e/0xd0 [ 600.254709][ C0] __reset_page_owner+0x84/0x1a0 [ 600.254724][ C0] __free_frozen_pages+0x7df/0x1170 [ 600.254744][ C0] ? ___free_pages+0xcd/0x220 [ 600.254761][ C0] vfree+0x1fd/0xb50 [ 600.254777][ C0] ? find_held_lock+0x2b/0x80 [ 600.254796][ C0] ? rcu_is_watching+0x12/0xc0 [ 600.254807][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 600.254824][ C0] ? __pfx_kcov_close+0x10/0x10 [ 600.254837][ C0] kcov_close+0x34/0x60 [ 600.254849][ C0] __fput+0x402/0xb70 [ 600.254861][ C0] ? cleanup_mnt+0x26b/0x450 [ 600.254878][ C0] task_work_run+0x150/0x240 [ 600.254894][ C0] ? __pfx_task_work_run+0x10/0x10 [ 600.254912][ C0] do_exit+0x87f/0x2bd0 [ 600.254927][ C0] ? __pfx_do_exit+0x10/0x10 [ 600.254940][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 600.254956][ C0] ? find_held_lock+0x2b/0x80 [ 600.254974][ C0] do_group_exit+0xd3/0x2a0 [ 600.254988][ C0] get_signal+0x2671/0x26d0 [ 600.255009][ C0] ? __pfx_get_signal+0x10/0x10 [ 600.255027][ C0] ? do_futex+0x122/0x350 [ 600.255045][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 600.255062][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 600.255077][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 600.255096][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 600.255115][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 600.255133][ C0] do_syscall_64+0x4ee/0xf80 [ 600.255149][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.255162][ C0] RIP: 0033:0x7efceef8f749 [ 600.255172][ C0] Code: Unable to access opcode bytes at 0x7efceef8f71f. [ 600.255178][ C0] RSP: 002b:00007ffcc8ded028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 600.255189][ C0] RAX: fffffffffffffdfc RBX: 0000000000091e0d RCX: 00007efceef8f749 [ 600.255198][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efcef1e5fac [ 600.255205][ C0] RBP: 0000000000000bea R08: 00007efcefe8c000 R09: 00000001c8ded31f [ 600.255213][ C0] R10: 00007ffcc8ded120 R11: 0000000000000246 R12: 00007efcef1e5fac [ 600.255221][ C0] R13: 00007ffcc8ded120 R14: 00000000000929f7 R15: 00007ffcc8ded140 [ 600.255235][ C0] [ 600.682944][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 600.689835][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 600.700517][ T31] Tainted: [L]=SOFTLOCKUP [ 600.704832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.714883][ T31] Call Trace: [ 600.718170][ T31] [ 600.721118][ T31] dump_stack_lvl+0x3d/0x1f0 [ 600.725833][ T31] vpanic+0x640/0x6f0 [ 600.729840][ T31] panic+0xca/0xd0 [ 600.733546][ T31] ? __pfx_panic+0x10/0x10 [ 600.737947][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 600.744358][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 600.750954][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 600.757125][ T31] ? watchdog+0xe83/0x1180 [ 600.761615][ T31] ? watchdog+0xe76/0x1180 [ 600.766207][ T31] watchdog+0xe94/0x1180 [ 600.770476][ T31] ? rcu_is_watching+0x12/0xc0 [ 600.775263][ T31] ? __pfx_watchdog+0x10/0x10 [ 600.779956][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 600.785157][ T31] ? __kthread_parkme+0x19e/0x250 [ 600.790258][ T31] ? __pfx_watchdog+0x10/0x10 [ 600.794916][ T31] kthread+0x3c5/0x780 [ 600.798978][ T31] ? __pfx_kthread+0x10/0x10 [ 600.803559][ T31] ? rcu_is_watching+0x12/0xc0 [ 600.808308][ T31] ? __pfx_kthread+0x10/0x10 [ 600.812880][ T31] ret_from_fork+0x983/0xb10 [ 600.817472][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 600.822590][ T31] ? __switch_to+0x7af/0x10d0 [ 600.827271][ T31] ? __pfx_kthread+0x10/0x10 [ 600.831859][ T31] ret_from_fork_asm+0x1a/0x30 [ 600.836618][ T31] [ 600.839868][ T31] Kernel Offset: disabled [ 600.844173][ T31] Rebooting in 86400 seconds..