last executing test programs: 23m20.067465802s ago: executing program 0 (id=973): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2503000000003100000016000000140001"], 0x5f}}, 0x0) 23m19.081119944s ago: executing program 0 (id=975): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(0x0, 0x0) 23m16.837576413s ago: executing program 0 (id=988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) shutdown(r0, 0x1) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0e000) 23m15.896156276s ago: executing program 0 (id=998): r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x515042, 0x1a8) pwrite64(r0, &(0x7f0000000880)='u', 0xf7d, 0x83) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0xc4) r1 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000244a0362afdc27b2fd51a33f40a65b2b1e756447cdb5532149e39329ee613bb4a2e6a25025c99d4056915ba2278dd88ccd88aefb3df98ea1336ba6218a652d937d7dc85b7dac21b81580d5a64f5fa14447e8db9703d6d63363941775403ab17"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x240009ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}], 0x2}, 0x44864) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 23m14.65251578s ago: executing program 0 (id=1003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 23m13.361653934s ago: executing program 0 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x84, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x8, 0x4, 0xf9, 0x8, 0x0, 0x19, 0x5, 0x2, 0x4, 0x3, 0x44, '\x00', 0x1, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m56.874265317s ago: executing program 32 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x84, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x8, 0x4, 0xf9, 0x8, 0x0, 0x19, 0x5, 0x2, 0x4, 0x3, 0x44, '\x00', 0x1, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m54.321569966s ago: executing program 4 (id=5571): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004840, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES64, @ANYRES32=r6], 0x79) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m53.380289163s ago: executing program 4 (id=5575): gettid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000140)="5bb112457806ce74be91a35f787d7f6280310f5d1ca778758fd690e263e13ecd15d0d2e4349d3a67045e771b7fc2", &(0x7f0000000300)="4f01513ec328c8d57610011a86b1ee4718bfc23c5a31c64cae3823b6b6638b4191984e91359bc7af7f92f177f8334cd33b456a6fb10e18728c14341a8ba6553af432434f3844ecb91ca43ca3e92110cd3daf349fd3b3bc68d46e02d9c1111a82163669a57c772f45ba2baf69eeca7980f0af3c643fb69d6ebc841aaaa98eebce473a61cc159f9c84325f244e5394866f99c9c86386c907c2cb4c403d523c0ba429e901"}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r2, &(0x7f0000000c80)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000"], 0x13) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 2m51.873640299s ago: executing program 4 (id=5576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) signalfd(r0, &(0x7f0000000040)={[0xd]}, 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x67, {0x67, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"b3472eb9cd42d2030000002000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$unix(0x1, 0x1, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) 2m49.773936748s ago: executing program 4 (id=5581): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000000)={0xc}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0x4782, 0x7) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000380)={0x0, 0x5, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x980929, 0xfffffffe, '\x00', @p_u8=&(0x7f0000000300)}}) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000001005400000001"], 0x14}}, 0x0) 2m49.337670529s ago: executing program 4 (id=5585): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003a0001032dbd7000fcffffff05000000ccd2b51c977f39c5551976be78fd46351ec2b174e47b8f4292b64d360dcc9ee3f5f0afbaabf093c319fa"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000)="b3384cbd80f070cf83792eeaf527f7e77b161569fac07f40c6f0ad3f548eba64b73972eef680825e6bd77816df2f628aae20957047cfa3eb0f5512c0f31bb1b0404ff549c0adf2e0b68786ed39524497dcf72c729ea08653c3bb6e11ce0c4db4f376e5b9169070664f48247bbb209a5f900ce8fbe15ccaeb7b39778ed3c868ee0976f9fc68ab1977ee65c8998910a3d8240f0b01749f0c2d5755ba01935147ea86f462328bb5e7df85a7a9f2e74dee9f5e44e95a303f0a634752427f778e62e733015b3b5b", &(0x7f0000000400)=""/4096}, 0x20) 2m48.654127725s ago: executing program 4 (id=5587): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f0000006680)) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) setrlimit(0x8, &(0x7f0000000280)={0x6, 0xffffffff}) mbind(&(0x7f0000952000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x2, 0x0, 0x5) socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0xee01, 0xee00, 0x0) 2m36.916013158s ago: executing program 5 (id=5616): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000002000000000300000085000000410000001800000002000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2m36.598138182s ago: executing program 5 (id=5617): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) gettid() prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="142000003a00290200000000f14dc9ebf3a94d7d7ed419d2e8bcdaffc08190568d5b76982f9665090bbd347f1259377caa08c5f767452fc8e78734773eeef77200e582b3fa83ca173a7e7e98151628578f7d44b269"], 0x14}, 0x1, 0x6000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r6 = socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) 2m33.528870505s ago: executing program 5 (id=5627): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x202440, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r11 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7ff, 0x10, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x3}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 2m32.519236034s ago: executing program 33 (id=5587): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f0000006680)) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) setrlimit(0x8, &(0x7f0000000280)={0x6, 0xffffffff}) mbind(&(0x7f0000952000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x2, 0x0, 0x5) socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0xee01, 0xee00, 0x0) 2m30.65222416s ago: executing program 5 (id=5633): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e09, 0xa, @empty, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004040b42a21d7214bf92494925608a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2760400"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xffffffffffffffe8, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x11}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL]}, {0xfffffffffffffe81, 0x4, "0af3c0a1c57b9f7a9735d65b3a02248d336109d62732de0b2a91d51612337a5a1ac5704895d3c99feae02549e60290c476d981b2e8da38ca066f115041c40a20d277315478a0d16eb5abfbb85fe16a2fa713d6c6b477ebafe6e5f09c3691d0b433f8dec1b3ec666d9b150a12392bb5f0e561032d8b507dc938306800"/135}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket(0x25, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 2m29.301980865s ago: executing program 5 (id=5635): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet(r1, &(0x7f00000002c0)='\f', 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x21) socket$alg(0x26, 0x5, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async) sendto$inet(r1, &(0x7f00000002c0)='\f', 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x21) (async) 2m29.15101477s ago: executing program 5 (id=5636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000005c0)={0x2, 0x0, [{0x26000, 0x8b, &(0x7f00000004c0)=""/139}, {0x54000, 0xe7, &(0x7f0000000640)=""/231}]}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) read$msr(r7, &(0x7f0000000180)=""/61, 0x3d) sendmsg$tipc(r7, &(0x7f0000000a40)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x4}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000740)="c988846a37bfc846f9d4bb7221e9e850ec8eed5a745cf097307e04992a749191cf9fa73b8598e218b7f9ac83ae2e69a74e88065c08736dc648c5a7e0a90274cd9d127f80e177da708286e2706d805b0fb52174a48aadc2b795a98366a1518747cacb9807fd84404ee187f16f4df732acf762b4b107062f3f23dd65e03bdad73f137d9335ff72c6ed37a2b4f9f7d931fd536b2de28bf0da09c0cac4d55eef428a1ade3eeafff201b0d11f3ad0b208ccc6c962a154c5c14dceb6c35f3f6bc90dc5584a9e30daae3aa3f82977b904ca", 0xce}, {&(0x7f00000003c0)="4958f3dfcf190ee7750494307455b1e188d12d89ace6c20b4eac4a531f5cb4ad45b42fe3096ae86969730825d755f931137426d4106332d0512c8b0d66b798e53f80448b53f8e557f6727b0751ad2031fc63f5f92afffb0f6f74fa01394126d456eb03b071c316ef70c127947b7bcde09af00aa80ff2988a9de2488afe66e7494ec167ad6399f97b9a94a1ee5b1a606fe5d7ea0a555d56b11e53828dcf55f584ba76ca5e7e26d2c8d935d92f653b0f6a8c12066c", 0xb4}, {&(0x7f0000000840)="a84d141994b7281506f92750bcec7eb29a04e2621984367225ae3e73425e4884bc01af297dde32653ec16595ce96cb110ad730b27b7108ab0f11550a8c054dfc0626a49d301258abcfd8c519575deeaee3aa75689be76e286f", 0x59}, {&(0x7f00000008c0)="a638fc2ae7c496770475db253e018c5ee9ec4f7a8f3043d6e0c35dcd991e5d5cf9dce205ce48c6988856a6bf7cc7d471e8c38b03232c233220c31a994fa57f0f08a0cd584a40a6bf42a77c96f1a6ffdff3005822", 0x54}, {&(0x7f0000000940)="37a21f07387c7e8c00f4922e61bbba36fade1d8cfc2f40fa6482e75b7e122c80e907b1cc3070ceb8f82676aa92cd360cb58bd7ab07ef5d3f4c47faed8ed5b6b87df61e6124952bf5fb624097ddcc755ce308980d8a9770e81b79d9c46e1e502dbd1b0884c528857a09c8975c00387d754fe27594eb949a53", 0x78}], 0x5, &(0x7f0000000580)="de2e4067507b0525fd30d6c9631a0ee4ad99fb477e", 0x15, 0x40}, 0x20000000) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0xa) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m12.8637305s ago: executing program 34 (id=5636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000005c0)={0x2, 0x0, [{0x26000, 0x8b, &(0x7f00000004c0)=""/139}, {0x54000, 0xe7, &(0x7f0000000640)=""/231}]}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) read$msr(r7, &(0x7f0000000180)=""/61, 0x3d) sendmsg$tipc(r7, &(0x7f0000000a40)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x4}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000740)="c988846a37bfc846f9d4bb7221e9e850ec8eed5a745cf097307e04992a749191cf9fa73b8598e218b7f9ac83ae2e69a74e88065c08736dc648c5a7e0a90274cd9d127f80e177da708286e2706d805b0fb52174a48aadc2b795a98366a1518747cacb9807fd84404ee187f16f4df732acf762b4b107062f3f23dd65e03bdad73f137d9335ff72c6ed37a2b4f9f7d931fd536b2de28bf0da09c0cac4d55eef428a1ade3eeafff201b0d11f3ad0b208ccc6c962a154c5c14dceb6c35f3f6bc90dc5584a9e30daae3aa3f82977b904ca", 0xce}, {&(0x7f00000003c0)="4958f3dfcf190ee7750494307455b1e188d12d89ace6c20b4eac4a531f5cb4ad45b42fe3096ae86969730825d755f931137426d4106332d0512c8b0d66b798e53f80448b53f8e557f6727b0751ad2031fc63f5f92afffb0f6f74fa01394126d456eb03b071c316ef70c127947b7bcde09af00aa80ff2988a9de2488afe66e7494ec167ad6399f97b9a94a1ee5b1a606fe5d7ea0a555d56b11e53828dcf55f584ba76ca5e7e26d2c8d935d92f653b0f6a8c12066c", 0xb4}, {&(0x7f0000000840)="a84d141994b7281506f92750bcec7eb29a04e2621984367225ae3e73425e4884bc01af297dde32653ec16595ce96cb110ad730b27b7108ab0f11550a8c054dfc0626a49d301258abcfd8c519575deeaee3aa75689be76e286f", 0x59}, {&(0x7f00000008c0)="a638fc2ae7c496770475db253e018c5ee9ec4f7a8f3043d6e0c35dcd991e5d5cf9dce205ce48c6988856a6bf7cc7d471e8c38b03232c233220c31a994fa57f0f08a0cd584a40a6bf42a77c96f1a6ffdff3005822", 0x54}, {&(0x7f0000000940)="37a21f07387c7e8c00f4922e61bbba36fade1d8cfc2f40fa6482e75b7e122c80e907b1cc3070ceb8f82676aa92cd360cb58bd7ab07ef5d3f4c47faed8ed5b6b87df61e6124952bf5fb624097ddcc755ce308980d8a9770e81b79d9c46e1e502dbd1b0884c528857a09c8975c00387d754fe27594eb949a53", 0x78}], 0x5, &(0x7f0000000580)="de2e4067507b0525fd30d6c9631a0ee4ad99fb477e", 0x15, 0x40}, 0x20000000) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0xa) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m8.712599147s ago: executing program 2 (id=5688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000", 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x100, 0x8, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffff, 0x40, 0x2, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2m7.713384008s ago: executing program 2 (id=5691): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000200)={0x1fd, 0x0, &(0x7f0000769000/0x1000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f00000001c0)={&(0x7f0000000340)=""/167, 0xa7}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x2000000, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbd8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0103260800180000000000000000"], 0x14}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x2, 0x48db, 0x1277, 0x80000001, 0x7}, &(0x7f0000000100)=0x98) keyctl$clear(0x3, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, &(0x7f0000000180)) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 2m6.113465238s ago: executing program 2 (id=5693): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000580)=""/174, 0xae) syz_usb_connect(0x3, 0xe8, 0x0, 0x0) 2m1.849668385s ago: executing program 2 (id=5708): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x7b, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0, 0x30}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0x8, {0x8, 0x23, "185d361aef81"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1m58.570059405s ago: executing program 2 (id=5716): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x643c, &(0x7f0000000080)={0x0, 0xc214, 0x10100, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000305, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m57.330672801s ago: executing program 2 (id=5718): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000300)="d76f5253bada22a863453fd5b269abc6942d0c23ae88f41a676698d1269ebd6f8ad889c35d60b4f5864c5425a5cf1e0f2f43e9fe5454c41f325113e2c2560661105e486fc0cab3f8f7800454a48e64fe2a5a71ebc781ab73a316dbe7c4a102dad22b778b99d062b6834376efc708bbc9971d1366497f2c6171d83421b2895c84214d62d2d21dbacdcd8fcd0ee2d3badc74462bd4b275e807ed453a6ca8652f", 0x9f}, {&(0x7f0000000b00)="96b8e66d7579603824c88019088f90f8451f60af4185b92d3a1c33b3b7fd8bfa6c25fb69349c3da2151d85bbf9b026005d4c05c49a92beb9d8b974510682a26f2b6024e46dce9c4f368bcfc75b4c2f6193a855fb422328db21af6d7186a28e07f8dc9a628774fef0985dbb4d1fc328ec557896642798dac68cc1ba9039887dd9c8f43beb42e412d826115037ddac8f3bc37d198c9c9a9f024a6d0888a80048b7aaeef629c5ad6a382289b401c6ba56a1236895335b37976fd9007b8eb9cf76a395329288712dfca71dead44ad65e95a0f8feae0e170767cceb56d1b3c83a242301e2bf2ff02caf7fa9f39472f44e048119b2e4103422372633dcf84ae12f12adaa61926dfc2d8b96a8fb21ebfb239712cff3eb46bc8797791c09aaea4dc5c1e837851352b6a2531f52591fee03db16550ca5e2ced8e7fa35e370e0c970bb296b12e43709afed314d7720daef537c04613cedc0d9ab71a97c31faf129becf4921d4b8eab995813ef0925d8ff8d8466821bc2befc35ff30c0915a3cd65351913a164803716653b09a55ae8514c39578dc76c3b1cc6d0cdbc79b83c4ac72a64d4322e0c0269904cc566dd3cb59d7579de91a1243ed27a5dec1355fed513a09d29a9f5de43b7dbbe7dd6448c6927544efc83c644ba87a3d8949579438991b960361e64555e63049d53bcf19025efc2f87d0d215537834f227dc2616c4a9bd405ac4cf1da7c98082ba33c7bd86b5d480c89849971e23de09f43677d6c9d24c6cd4f0f9e68c44efd3fca0e68e41165b4e4e2d44e81043fb3287a874004e37c7324287927dec29c9ba677c844c5439aa5e502543fc45920119d336cba20850a2958579b1a225a35520baace45b113f9b84fc78e4135682b3e4faf780cc51146f66441d447b79423609d9521279b5ec7155c1a70ee6a44d2a824f4e25ece3a58cfdcc6b82790208a946d1cf2058804a6145ac668db8407458db928e6164aae3c3f0381d76d3c87c546784d8471114cf5d7c9897f218c426b50b5840998ff1da2afd127c577022ffc6cb5b1baa6c97a663e499cf99b7de1fafda4a09e29fa19ceef0bb028fc177efc31b95b9f4c166e11552ba6cfb4860dd8cfa09a7c3cf667252cbfaf1fb62cf9536add47605152b774825b6e480e4c76db55650bb5643997daa0d907e3b70eb0f46b63a7247bd577d7ca77a5422c0ceff6bfd3cdaba53c1025cab892acb5d131564d9c34db68db0c812ec16b268f056917bce985c7d7ef9c61bf7a38fe1454881fcd916e01d22cb414210cb94e7a29866d0b5ad278920764ce833ec72c552674f3c0da716c0339be8dd4d33e02a5e769cbfc3ee94decf6b1c3755d7c9a21c53d9dc6cba9ba43a5428682a8253e035cffe7b9528263273f76820fea6beeff59a2a8a65a5bdef1e94c57f93c99930194c800ca282f69f7f191a5cb137bca059ee67247c20a7ddadf978e48ce9c514d3ae9f9591dcdb19e222a0eae7fd49caef83ee9964c77df09a51ebb732942756370b49d2cff72c1a3dbe371d5b97ad29e6db07b79a921fd458a295ad21de62939ef920017e9260991c6704cdc76c3961da8a4f822620f488310995931543c2c1d980e12f69003b24805ffd24e7dd1098e5353665687f8edace8545146a14f878018943b474819af06b5a827384a86e02c3cc622148223163ed6a20ab3859306f1af468590f3472c8d8943e8e62b6f5825001dbbd7a70d2eff00f06a123cecbdd089f07cec7543b68055eb39eac47d6cf698805f844f74a9fe85068cde295b5958432b4acc9b3dbaac2b411b33c0f5c024211f5d6ee61b35f1fc97a5ff927b564f0de3732b6fa920c8891bd792c9a5098dd5003071a7a23fc2eb1702d838fef628f1638f9f1a560fde2648cd8d9befba77936d2052ddba198a1e4122ba71b2164f8068ae1f1a474bf75f5819658346e340b8ebc3ba7389731fffd7c5788346781d2b807499bddf4b3fea35c618e073f35817ec79ef3ef15504ff79822ebcc6df55052fa9cb623c5c2744c2f42a4e850695310d009fee6d95847e8d739fde8db2ec1c3385f5e12dc8534ffc6cc2463149d822059322c5ceaf08990a71aa5151fe5e8e17daa55c6ee41e9c62afe44a3b001258a8be0e5b7715e235690c45a312f7967d068cb957c807b163548acaa556b080cc37eb253e0840f36bb915ee72c39aa88ded1c9c5734082ca3bf0d037b2c9c1b8daba93fd42aecc60b0f9e80b707a8668cbcba83f30aca7e396d26ec4326fd4fca990ae9fbf948f82a7e420a262ff04f409337488147b10b1cc40d36353cb8b436f2b0712a98222a8eeda0e702d4941e2ab145e1872428954a0e86444d20f4715c1417c1109ce8f15da6a9ef5b56d7640cb4187862ff9531e8704e3ba88f644d0680a852ec5f82e6519e95121177bff5273125e9c6f7fe5bf5cb69ea6375aa5b911555e80429b1d9eda92dc1ff724fe1e635fc24267717b5086c59ef7b5ae052b1f46d619d4a1bcd72eda95133d1bb19a794f006270a7ecb8b5da257cc843f345c9f1a0edd6d07de536d070f5eac475fc652c7df6c6a95c93753a0415ecae89bc649c4c3a98634091c0dd149f039fc260c09971f828bab42b144fa62fd24fe40e7eb4109f89d095085c54b50489d7f417b1565a527b5a6743a46b10200e753116e9e021e63b738ada2c2c49fb18c8bc597aa1d201a4a60ab4566806a8d0b62691e5a22ed84c6e713ad4ce6be434348e6d4ebb432171f7b0f392b3444de15ce6ad12c07f6327b8ab4730a2bbfeebedee4b5b49fc39a3757e13f6a041859f5b877e1ebeb98733917fd33bb43ed30db93d6dc05ae12c750689c0fb3c20e34f2ca66cd60253a167c7b162f8a9a16b55bb0e5815bc0d09efa725f8f6717f7d73a67ed27a733de74bd8ffd58fefc81e47f705c67e295fb3ca5c157dac0304d41a78469655a748dae1c722ed4a8fdf1935c2877b2a0ee21328ea4d06bccf11c85f04c54cfca17f397986de0abbe8a9e75f5ba7b4673a598d2ff4e6ca40f8ff0a6f81d4b78663aa3ae67a9112e503524c69b90e1ff8a3a59536ce3db6dafc53fcc4ea7187041e9f24a07106cbbe3e637723672ee25d9dd16f84e452080d4392ae44192137fdfd5af2b5f18a68d7b365b73cf640efe0975893de486a678804060fba67314d66525c95bbd62e6cfe05206eded13e22827cd73bc9bce610bb900900d254defebf3c6bfafb041c543b8a31d650b56d71be6d88739abad63877dc643a51aa8b6652aadad2f20e1c3fd257a296f96308f1e4c91fad6721985c8c2e85ff68fda0271bccb9a24ee7fae0008812fbf90896b9f617f9a04c5d17b9b2d97794b73aeda6c20028c6c4d5b17bd151d25ee400af4e8bfd13ffe1663f93e4e155722b42a171a61828206dadea2d9ab1eee9ded58e49e4046a70d4331e064ce9193eeaf36562ac44de4e08775ffe93ef9b579c975b42108616b7ef649c2b1b645e45c70775ada66e3d5b4019ecae5cb2481c863820e29e485fc65d1d453ec3f7e3643c7e1d3ac0028d940759229683c20f2ed876c0abff4853f14bc68a74c4f4ae0124f56323d4b14513aa3af7baef27843d4560b21db9f25dede2bbf7af177fd82333376280322dc0b03c35f206eb23db40283ff5e6a05ed48e58702202e023ed31e280d127a0ae40533ed6f4c400caf193b8965b60720cf92ea8d8b8e61c216b6228af757ccc49b95167fdb000536434dd4fc592f362cf0a087deacea7fd50cf560552e319c1c9e45fc8d13bbf83acffad6931191fab05cbf28c731b8620af95f962257bd3e12cdf4c38072058962bf25f01726e9f719e57f728557e1cbdb5b7ea6c61e447e39fbf803ebd7f5803b54bbda16ebbdcd80ffb5d5026d42da75bccb7ae6affa75638733640fe302a3226344d1d3a8e05de75a7b452351ffd92e7cec41959fdd4ca8e7d0462529248a3387bc16853e7c0b1a620ca080c32f4fe71d5d8467698a01b04f503ef7d24cf627d271519841743279ac19ef8a6ad8a1ae13395b7598d5c390ce4905476ed10180082bc1310a3639487ea1a0024f7b06419dbd3f897950a9cedf7f432b52ce4705e07bc17861123da54bd541c3e2627ecc79e8687db2be5ae4d920c168a1a910f9fe7c8c90e44c7e2d1674b71513db7de19ac68ab095824ec54a81ada87531c0e339b9f01f8ef61fbeadd1b995fb0d3221db0b989ff29209f9a652cdcd9c14f6e90049bfb1ba07044f78f90f66e5154396927770042e061e4f02058fb3a547eef9635ab8d2ca4d3abb0b957695ef47d035b552f4082ad2a4abcb3a02ba233a3ed3e4f6b5b649c1e6ad1465c78fe7dadad017e32d8ddf18e3eef0160d3e4aa9fb7469e5c10675926f86adb422124bbf8c755e1538326bee745a52ec8f81b3d214c1a100c0c88057ca49cfe3056eeeba214b601a7a186347814d99b844507dfd6d7f8471134bab54f0cfacbeab02a64445458713af37a165351ab04e98a1e45015bb817c6c67db1dc4472cbfa8c389cfab4ecd1da499a35f5762334a62276254e82cfad64fef669da31d58350e3837d7f4d79a5b43e7765abbba53c35095960143766eb007f1cf28bffa9a2d3079b71bea03df619fede35623a29575872222dd501291690b819528b77b0e2bccc16c0751e759f97c1090086007afce16e89a78aa905ba56a1af121ec8a2b3dbf599bef1599518bbcd3fbc7fbe2a618519e8468162e8bf1fa194bac98e2a4c6197b80251eb83fe4cb7101eaf6f7b911c30514eee1f0ba2fe9e013c9d5ced69710e1818d0191aee29560a6cc00b21a16082e9279eda90876a0b8946f62e35a3938087fcde58bdc09d87dd6ac053f1feab67d4f9d6b18b6d8abf0acd3dee134a0d9037985ff28f4ddf1043d9fad9390310616958b50b4798e4eafd0dca7d503d34cb2a2699585ea3a5fc940106b829d9b6161067fdcd4535bd4a5f9b4ff0690958733f814cebd5ed72ebab0290c991a5b96d122c715e87f6bf2833a61843a174c8b9bfe9fbeebd81b19a004e3ee02fcbcd342f22deb8aa149180a07afc60dd8686412f6cd99869bf3445dadfa1b92dcf80a5c6e92d916e3113c77dbff1773dcb57f37b4c8ffa8a6fbf528206afc9be73479bec26f1e8112f8b795be3ba5018d30a7b34de4249642ae3713b3b775a009d852331bbf60e5876399df218c791418e1a5f0086c4a058c36047fd1785e53f9687883b27b414f709d0f4d0f4532b3f442fc013cdb12c92eee0b17df202d30cec4228cd68e46a129b5a5715c08e97d76959ff4d0b6d6b0cff4a6b2f7512a418e4824c9af10e819f6fd850a1d30df1840489e08a54cc464e70293750a2fceb05529366b840dd04f39cb3e09d875703958c21e20a1ce16e206240595e291c4b7847a74edefe6ccb9c1280b803ea70146370bf50b1ae60485e6e4308f64c26a1ad129fdfa143a440836a3e514866df4b5c00c71c2775995b87782ff1fcefea2ace963d7a11404db9112b17d8b51d7e50bc7b4f5e5c51357777b8f09479e1f4354d0a319422cf7757f3cadc829359f42a0ddc932ee233158b271433794a61c6e1f2d697f2a591e9bd5f6864f4f2c695a021913e3f9a9d03481333b0e1037063debc5b84711f01dccccf917cf1ee0b4ef03c8dea5a31ad71ff483be154b3e5dba03937fc4326ebe60df276fad3b225a35857bc751a397959bc422cf7a5bb62370ff02f6c5eda511657a3c93f33f49e81103502e2cb0f08335c52c2bcf7ca98608006b5ed8b3abf1838f7154d4d5728a67c78bd12c1756846cb6f321f24c91", 0x1000}, {&(0x7f0000000600)="e2996cfb8af7bb58e1bb892a4364c9fbb0585df50ee2f7a3df655e963d93060f1156de948a8d421423690639815239baf974ffd540d3efb3ac2b52816e3fd9e2c89bf7e813b19ef8c1949910f7652c1cbd34b60f10c57e1073810a762350321e99e825a180fc473bc4adba1294be904ad4aca034f259c741d1ecaf6fb92905423792d1a568c7524779ead1cd4cdc07ca1c6c6b94f514b40e7a312b82d65555", 0x9f}, {&(0x7f00000003c0)="12c1627bbda6581d9d37d8b772d3e43970cd9fb8c4ec152bee7e", 0x1a}], 0x4, 0x336d, 0x9, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='block_plug\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000100), 0x0, 0x78ceb3f9934b0dc3) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000000)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xa70c450451fe18c8}, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0xfb, 0x86, 0x6, 0x10, "7547a5b148a7dfe1ebc07f5a8be3cf58", "ff4e0dd0bf73c06bf17f60cc4f123e17676959a40fea670e7436386335bdbb874484a962c0b44295f45d0ef45c33604e111e18e3e4e16a33bc31573f40f3f20661cd66241f03bb4f2318c91139bcd36fb25df8405ac243b4c178451187eb04eb539f8fbe47217b027582bfccc25fb4c704"}, 0x86, 0x2) 1m41.204658417s ago: executing program 35 (id=5718): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000300)="d76f5253bada22a863453fd5b269abc6942d0c23ae88f41a676698d1269ebd6f8ad889c35d60b4f5864c5425a5cf1e0f2f43e9fe5454c41f325113e2c2560661105e486fc0cab3f8f7800454a48e64fe2a5a71ebc781ab73a316dbe7c4a102dad22b778b99d062b6834376efc708bbc9971d1366497f2c6171d83421b2895c84214d62d2d21dbacdcd8fcd0ee2d3badc74462bd4b275e807ed453a6ca8652f", 0x9f}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000600)="e2996cfb8af7bb58e1bb892a4364c9fbb0585df50ee2f7a3df655e963d93060f1156de948a8d421423690639815239baf974ffd540d3efb3ac2b52816e3fd9e2c89bf7e813b19ef8c1949910f7652c1cbd34b60f10c57e1073810a762350321e99e825a180fc473bc4adba1294be904ad4aca034f259c741d1ecaf6fb92905423792d1a568c7524779ead1cd4cdc07ca1c6c6b94f514b40e7a312b82d65555", 0x9f}, {&(0x7f00000003c0)="12c1627bbda6581d9d37d8b772d3e43970cd9fb8c4ec152bee7e", 0x1a}], 0x4, 0x336d, 0x9, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='block_plug\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000100), 0x0, 0x78ceb3f9934b0dc3) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000000)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xa70c450451fe18c8}, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0xfb, 0x86, 0x6, 0x10, "7547a5b148a7dfe1ebc07f5a8be3cf58", "ff4e0dd0bf73c06bf17f60cc4f123e17676959a40fea670e7436386335bdbb874484a962c0b44295f45d0ef45c33604e111e18e3e4e16a33bc31573f40f3f20661cd66241f03bb4f2318c91139bcd36fb25df8405ac243b4c178451187eb04eb539f8fbe47217b027582bfccc25fb4c704"}, 0x86, 0x2) 20.430992228s ago: executing program 6 (id=6067): sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setpgid(0x0, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@none, 0x5, 0x4, "d82c36", 0xfff4, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0xd, 'v$L', 0xc, 0x91}, {@any, 0x80, 0xa, "e78bc5", 0x7, 0x9}]}}}, 0x2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCNXCL(r1, 0x540d) recvmmsg(r4, &(0x7f00000012c0)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f00000013c0)=""/201, 0xc9}, {&(0x7f0000000540)=""/67, 0x43}, {&(0x7f00000005c0)=""/192, 0xc0}], 0x4}, 0x2}, {{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/236, 0xec}, {&(0x7f0000000800)=""/17, 0x11}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000980)=""/129, 0x81}, {&(0x7f0000000a40)=""/237, 0xed}], 0x6}, 0x6}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/28, 0x1c}, {&(0x7f0000000c80)=""/95, 0x5f}, {&(0x7f0000000d00)=""/245, 0xf5}, {&(0x7f0000000e00)=""/218, 0xda}], 0x4, &(0x7f0000000f40)=""/144, 0x90}, 0x9}, {{&(0x7f0000001000)=@phonet, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001080)=""/80, 0x50}, {&(0x7f0000000840)=""/56, 0x38}, {&(0x7f0000001140)=""/25, 0x19}, {&(0x7f0000001180)=""/25, 0x19}], 0x4, &(0x7f0000001200)=""/169, 0xa9}}], 0x4, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r6, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x80000000}) ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000101800ef01"], 0x30}, 0x1, 0x11}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 19.173768744s ago: executing program 6 (id=6072): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000001c0)=0xc24, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0x5, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x670, 0x480, 0x2f8, 0xf0, 0xf0, 0x208, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0xffffffff, 0xff000000, 0xffffff00, 0xffffff], [0xff, 0xffffff, 0xff, 0xff000000], 'veth0_to_batadv\x00', 'team0\x00', {}, {}, 0x3b, 0x10, 0x5, 0x70}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}, 0xb, 0x18, 0xff}}}, {{@ipv6={@mcast2, @mcast2, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xff], 'hsr0\x00', 'team0\x00', {}, {}, 0x39b251a18936073b, 0xff, 0x4, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1b}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@multicast2, 0x13, 0x1c, 0xe1a}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x38, 0x9, 0xd88}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff], [0x28aa34293e735830, 0xffffff, 0xff000000, 0xffffff00], 'bond_slave_0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x8, 0x4, 0x11}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0xe, 0x8, 0x5, 0x1, @mcast2, @private0, @remote, [0xffffff00, 0xff, 0x2fc4a2018b02d922, 0xff], [0xffffff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0xff, 0xff], 0x10, 0x102}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff, 0xffffffff], 'pim6reg0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x73, 0x7, 0x4, 0x8}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x6b35, 0x0, 0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1d, 0x8, 0xf27}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'gretap0\x00', {0x2, 0x0, @loopback}}) 18.445441211s ago: executing program 8 (id=6079): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf10002000000a0c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r0, r1, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x5f, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x3a0}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="50400079df9d171a2bf80fbd0c41f7b2a5c550998136a86805e56b677583bb86338ed0117eb79deeed3ff1fcc1b676dadb28f532dd91dce8a75b121292ce3d984d2dc431a0590ade8fa6a088129d06742d0656d9703959c8067bcccdf5c3d336e6676e966b0a77b72e68a8da1432ef1feef55c76886a88e44fc792b12af9d82b9055dd5b24d1928ded7029ac980e706083c1aebef0ccf0ebfdb8aa85df52bd5a8bea770042ea04000000f81dd6fc10ae8f5ecc43c24079a907decc554b19369bc7e52b437a9d7bd1b1f8e029fb723187b8fd5ffc7dda739f9aa3052dc725ce90c0a068abbe026addaa10098bb08c4940f4c3523dd556457f46fd938602f8d6aea8de43a3420f9051b36a168a051ce2485dfefe516f5b17a0638f770cc8291735e38701ae66a5533f953244b956bad3c609fe101ebe414ac3189f15f862fcf900"/330], 0x4) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x3, 0x60000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000015c0)={0x95c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x940, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa, 0x0, "40f677d84a27"}, @NL80211_BAND_6GHZ={0x35, 0x3, "1e95da2b40d214d450d80bd1f72f7a114b2ab44d5a362fe138df2f1e0df942b800c9f826298cb79f849fddad64cdbabe9d"}, @NL80211_BAND_5GHZ={0x19, 0x1, "246fc18703aa0341d1b86209d908fc7598ddd58110"}, @NL80211_BAND_2GHZ={0x8da, 0x0, "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"}]}]}, 0x95c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 17.933345449s ago: executing program 6 (id=6080): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000580)=""/174, 0xae) syz_usb_connect(0x3, 0xe8, 0x0, 0x0) 17.56562339s ago: executing program 1 (id=6081): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000580)=""/174, 0xae) syz_usb_connect(0x3, 0xe8, 0x0, 0x0) 15.920150684s ago: executing program 8 (id=6084): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac02, 0xfac08, 0xfac01]}]]}, 0x44}}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) (async) r8 = socket(0x1d, 0x2, 0x6) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x9005, @none, 0x4, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x9, 0x0, 0x6c, 0x8, 0x7, 0xd7}, 0xc) (async) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r10, 0x3}, 0x18) (async) sendmmsg$inet(r8, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001500)='i', 0x1}, {&(0x7f0000000480)="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", 0xff9}, {&(0x7f00000000c0)="9e42b384eb4ce8fbc8aa198c81c5b15e805d0da4f93b613c0483c79324b90c9c3059acafb83ffeb90688fb74b5a7a0e14fae0b5a0c5c5bcc6dfa6c9961a3f8937a6bc64159d53999801d8c3dbe0af8356a7b05d4e9aa3d39362cdb68ae6be75f75c426b668f53d24dd9500593f739e61dbf9", 0x72}], 0x3}}], 0x2, 0x0) (async) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 15.329417665s ago: executing program 8 (id=6085): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf4000000) 14.353567111s ago: executing program 8 (id=6089): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x173) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x8, 0x2, 0x5, 0x6, 0x9, @multicast}, 0x10) io_submit(0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_newroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 12.580487096s ago: executing program 1 (id=6091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@gettaction={0xb8, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff800}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xb8}}, 0x40084) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x34, 0x68, 0x400, 0x100003, 0x77fffffd, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x7f}, {0x2, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001dc0)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r10, r11, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x1, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r10, r11, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$inet(r5, &(0x7f0000000480)={0x0, 0x1c, 0x0, 0xffffffe3}, 0x18800) 12.572339144s ago: executing program 8 (id=6092): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@wr_drn={0x68, 0x20, {0x1, 0xd449}}, @rdmsr={0x66, 0x18, {0x294}}, @in_dx={0x69, 0x20, {0x954d, 0x8}}, @nested_create_vm={0x12d, 0x18, 0x3}], 0x70}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r0, 0x2000008, 0x10, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000001fc0)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x2, @mcast1, 0x8}, 0x1c, &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) r5 = getuid() listen(0xffffffffffffffff, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) ioperm(0x0, 0x2, 0x7e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYRES16=r1], 0x48) sched_setscheduler(0x0, 0x2, 0x0) ptrace$getregs(0xe, 0x0, 0x101, &(0x7f0000000240)=""/43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0fff7bf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 12.569583632s ago: executing program 6 (id=6093): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) r4 = io_uring_setup(0x35a3, &(0x7f0000000300)={0x0, 0xcfd0, 0x800, 0x7, 0x22}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 11.47516539s ago: executing program 1 (id=6095): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) io_setup(0x0, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/37, 0x25}], 0x1) 10.77296992s ago: executing program 1 (id=6098): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000", 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x100, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffff, 0x40, 0x2, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 8.616203864s ago: executing program 3 (id=6100): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035", 0x47}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/23, 0x17}, 0xe}], 0x1, 0x40002080, 0x0) 8.615301602s ago: executing program 7 (id=6101): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) chdir(&(0x7f0000000540)='./cgroup\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140), 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open_tree(r1, &(0x7f0000000100)='./cgroup\x00', 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x403, 0x2, 0x3, {0x0, 0x0, 0x4, 0x0, 0x6350, 0x2880}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28}}}, @IFLA_LINK={0x8}]}, 0x60}}, 0x4800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x68040) mkdir(&(0x7f0000000080)='./cgroup\x00', 0x13) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{0xc2}, {0x5, 0xe}}}}, 0x8) 7.428632953s ago: executing program 7 (id=6102): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2a0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000fc0)='./file0/file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioperm(0x5, 0x9b3, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = socket(0x2b, 0x2, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 6.867102173s ago: executing program 1 (id=6103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_bond\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000070000000000000000", @ANYRES32=r2], 0x20}}, 0x0) 5.117984045s ago: executing program 6 (id=6104): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x643c, &(0x7f0000000080)={0x0, 0xc214, 0x10100, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000305, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.947136953s ago: executing program 3 (id=6105): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x149, 0x149, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x1}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x2}}, @union={0xc, 0x1, 0x0, 0x5, 0x1, 0x27ee6901, [{0x8, 0x4, 0x7}]}, @datasec={0x9, 0xa, 0x0, 0xf, 0x1, [{0x4, 0x4, 0x6}, {0x5, 0x72000, 0x8}, {0x2, 0x81, 0xab27}, {0x5, 0x7fffffff, 0x100}, {0x3, 0x1, 0x3}, {0x4, 0x4b, 0xcc}, {0x4, 0x4, 0x80000000}, {0x5, 0x8000, 0x7}, {0x4, 0xffffffff, 0x9}, {0x5, 0x9, 0x2}], '('}, @enum64={0x10, 0x8, 0x0, 0x13, 0x0, 0xa, [{0xb, 0xfffffff7, 0x6}, {0x8, 0x4b5, 0x80000001}, {0xf, 0x3, 0x372929bf}, {0x4, 0x524e, 0x101}, {0x8, 0x3, 0xe1}, {0xa, 0x511, 0x100}, {0xe, 0x20, 0x9}, {0xd, 0xc2, 0x2}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x7e, 0x6}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000180), 0x169, 0x0, 0x1, 0x4, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000380)={&(0x7f0000000200)=""/145, 0x91, 0x0, &(0x7f00000002c0)=""/192, 0xc0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd32, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x10000, 0xd4, &(0x7f0000000540)=""/212, 0x41100, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x1, 0x5, 0x852}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x5, 0x1, 0x2, 0x7}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}}, 0x0) futex(&(0x7f0000000c00)=0x2, 0xb, 0x2, &(0x7f0000000c40), &(0x7f0000000c80), 0x0) syz_open_dev$ndb(&(0x7f0000000cc0), 0x0, 0x103201) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x8, 0x60, 0x2b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1, 0x20, 0x985b, 0x80000000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000000e00)=@delqdisc={0x250, 0x25, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xf}, {0x3, 0x8}, {0x5, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffff1b0}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x9, 0x0, 0x0, 0x7096, 0x8, 0x1}}, {0x6, 0x2, [0x811]}}, {{0x1c, 0x1, {0x1, 0x5, 0x7f, 0x80000000, 0x2, 0x5, 0x6, 0xa}}, {0x18, 0x2, [0x7, 0x1, 0x3, 0xba0, 0x2, 0x0, 0x3, 0x9, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x7, 0x5, 0x4, 0x1, 0x9, 0x5, 0x3}}, {0xa, 0x2, [0x9, 0x3, 0xffb6]}}, {{0x1c, 0x1, {0x7, 0x9, 0x4, 0x400, 0x1, 0xd077, 0x8, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x1f, 0xf, 0x2, 0xb, 0x0, 0xfffffffa, 0x8, 0x5}}, {0xe, 0x2, [0x100, 0x5e, 0x80, 0x2400, 0x9c3f]}}, {{0x1c, 0x1, {0x80, 0x6, 0x8001, 0x5, 0x1, 0x6, 0x0, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x4}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0x4, 0x8a, 0x0, 0x8, 0x70, 0xa}}, {0x18, 0x2, [0x7, 0x5527, 0x9, 0x10, 0x3ff, 0x7fff, 0x1, 0x2, 0x7, 0x76e0]}}, {{0x1c, 0x1, {0xe8, 0xbd, 0xffff, 0x5, 0x0, 0x31, 0x6, 0x2}}, {0x8, 0x2, [0x81, 0x2]}}, {{0x1c, 0x1, {0x9, 0x9, 0x3, 0x61bd, 0x0, 0x7, 0x6, 0xa}}, {0x18, 0x2, [0x992f, 0x5, 0x1000, 0xfffa, 0x8, 0x10, 0x6, 0x6, 0xb8, 0x2]}}, {{0x1c, 0x1, {0x84, 0x40, 0x8, 0x2a20ef28, 0x1, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}, {{0x1c, 0x1, {0x7f, 0x4, 0xffff, 0x3, 0x2, 0x6, 0x4, 0x4}}, {0xc, 0x2, [0x2, 0x1, 0x6, 0x0]}}, {{0x1c, 0x1, {0x9, 0x72, 0x1, 0x0, 0x1, 0xb7, 0x401, 0x8}}, {0x14, 0x2, [0x0, 0x8574, 0x5, 0x2, 0x1, 0x7ff, 0x8001, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x57}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xdd9}]}, 0x250}, 0x1, 0x0, 0x0, 0x800}, 0x8805) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x7, 0x0, 0x8, 0x8, 0x800, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{0x1, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)='%+9llu \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001500)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1f, 0xc, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x40}, [@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001280)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x86, '\x00', r5, @fallback=0x1, r0, 0x8, &(0x7f00000012c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0x0, 0x8, 0x215}, 0x10, r3, 0xffffffffffffffff, 0x4, &(0x7f0000001540)=[0xffffffffffffffff, r8, r9, r10, r11, 0x1], &(0x7f0000001580)=[{0x3, 0x1, 0x0, 0x2}, {0x5, 0x9, 0x9, 0x6}, {0x4, 0x3, 0x2, 0x9}, {0x2, 0x1, 0xb, 0x8}], 0x10, 0x100}, 0x94) recvmmsg(r11, &(0x7f0000008b80)=[{{&(0x7f0000001680)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000001700)=""/142, 0x8e}, {&(0x7f00000017c0)=""/161, 0xa1}, {&(0x7f0000001880)=""/82, 0x52}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x5, &(0x7f0000003980)=""/40, 0x28}, 0x9}, {{&(0x7f00000039c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003a40), 0x0, &(0x7f0000003a80)=""/150, 0x96}, 0x3f8089db}, {{&(0x7f0000003b40)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003bc0)=""/116, 0x74}, {&(0x7f0000003c40)=""/117, 0x75}, {&(0x7f0000003cc0)=""/22, 0x16}], 0x3, &(0x7f0000003d40)=""/4096, 0x1000}, 0xd9}, {{&(0x7f0000004d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004dc0)=""/112, 0x70}, {&(0x7f0000004e40)=""/222, 0xde}, {&(0x7f0000004f40)=""/55, 0x37}, {&(0x7f0000004f80)=""/1, 0x1}, {&(0x7f0000004fc0)=""/231, 0xe7}, {&(0x7f00000050c0)=""/119, 0x77}, {&(0x7f0000005140)}, {&(0x7f0000005180)=""/170, 0xaa}], 0x8, &(0x7f00000052c0)=""/73, 0x49}, 0xfffffff9}, {{&(0x7f0000005340)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005640)=[{&(0x7f00000053c0)=""/95, 0x5f}, {&(0x7f0000005440)=""/79, 0x4f}, {&(0x7f00000054c0)}, {&(0x7f0000005500)=""/17, 0x11}, {&(0x7f0000005540)=""/61, 0x3d}, {&(0x7f0000005580)=""/144, 0x90}], 0x6, &(0x7f00000056c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000066c0)=@pptp, 0x80, &(0x7f0000007840)=[{&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/253, 0xfd}], 0x2}, 0x2}, {{&(0x7f0000007880)=@nl=@unspec, 0x80, &(0x7f0000008b00)=[{&(0x7f0000007900)=""/159, 0x9f}, {&(0x7f00000079c0)=""/14, 0xe}, {&(0x7f0000007a00)=""/84, 0x54}, {&(0x7f0000007a80)=""/4096, 0x1000}, {&(0x7f0000008a80)=""/42, 0x2a}, {&(0x7f0000008ac0)=""/53, 0x35}], 0x6}, 0x81}], 0x7, 0x80000040, &(0x7f0000008d40)={0x0, 0x989680}) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000008d80), 0x4aa203, 0x0) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000008f00)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000009040)={0x18, 0xc, &(0x7f0000008dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @generic={0x2a, 0x2, 0x5, 0x4, 0x3ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @generic={0x7, 0x2, 0xd, 0xa6e1, 0x4}]}, &(0x7f0000008e40)='GPL\x00', 0x5, 0x7d, &(0x7f0000008e80)=""/125, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xc, r14, 0x8, &(0x7f0000008f40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000008f80)={0x0, 0xf, 0x6, 0x4}, 0x10, r1, r12, 0x3, &(0x7f0000008fc0)=[0x1, r7, r9], &(0x7f0000009000)=[{0x3, 0x3, 0xf, 0xb}, {0x4, 0x4, 0x8, 0x3}, {0x1, 0x4, 0xf}], 0x10, 0x3}, 0x94) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000009100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r13, 0x3b85, &(0x7f0000009140)={0x28, 0x3, r15, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7}) ioctl$USBDEVFS_DISCSIGNAL(r11, 0x8010550e, &(0x7f0000009280)={0x3, &(0x7f0000009180)="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"}) ioctl$TIOCGPGRP(r13, 0x540f, &(0x7f00000092c0)=0x0) write$cgroup_pid(r11, &(0x7f0000009300)=r16, 0x12) close(r2) mknodat$loop(r13, &(0x7f0000009340)='./file0\x00', 0x800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000093c0)=0x7, 0x4) 4.838497806s ago: executing program 3 (id=6106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400000, 0x8d, 0x20}, 0x18) r2 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') execveat$binfmt(r1, r2, &(0x7f0000000180)={[&(0x7f0000000100)='syz_tun\x00']}, &(0x7f0000000300)={[&(0x7f00000002c0)='syzkaller\x00']}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x3f, 0x200, &(0x7f0000003c40)="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"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x11, '\x00', r4, 0x0, 0x0, 0x5}, 0x50) 4.790779791s ago: executing program 7 (id=6107): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xe0000000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x58}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x14}}}}}, 0x36) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.75425179s ago: executing program 3 (id=6108): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000980)={0x0, 0x0, r4, r5, 0x49, 0x0, 0x9, 0x8001, {0x1164, 0x3, 0x6, 0x1008, 0x9, 0x140, 0x320, 0x2, 0xf, 0x4, 0x4, 0x8, 0x23, 0x41000, "33b061ad65e1d185aa2f7d00"}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x3, @loopback, 0x7ff}], 0x2c) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xbd}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) sendto$inet6(r6, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/31, 0x1f}, 0xfffffff9}], 0x40000ae, 0x40, 0x0) 4.253428559s ago: executing program 7 (id=6109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6a00000000101100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20001090"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 4.152134111s ago: executing program 1 (id=6110): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f00000002c0)='R\bruSt\xe3\xd9(\x15M0\x00\x00\x00\x00\x00\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x10, 0x2, &(0x7f0000000200)="05fb"}, {0x1, 0x18, 0xa, &(0x7f0000000280)="68a6ca"}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0xff, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xffff8001, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x3f, 0x0}, {0x3, 0x0, 0xd09f, 0x0}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2c, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0xf804}, @TCA_RATE={0x0, 0x5, {0x3, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4044090) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 4.151270466s ago: executing program 7 (id=6111): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0xa, 0x0, @fd=r0, 0x3, 0x0, 0x7, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) socket$netlink(0x10, 0x3, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) eventfd2(0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x832f, 0xc000, 0x7, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x1002219, 0x7721, 0x52, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') 4.069908062s ago: executing program 3 (id=6112): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) setregid(0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) 3.306410365s ago: executing program 6 (id=6113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000", 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x100, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffff, 0x40, 0x2, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.737195376s ago: executing program 8 (id=6114): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) r4 = io_uring_setup(0x35a3, &(0x7f0000000300)={0x0, 0xcfd0, 0x800, 0x7, 0x22}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 360.262738ms ago: executing program 3 (id=6115): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035", 0x47}, {0x0}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/23, 0x17}, 0xe}], 0x1, 0x40002080, 0x0) 0s ago: executing program 7 (id=6116): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x14}}}}}, 0x36) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 9] Registered IR keymap rc-empty [ 1568.368581][T20669] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1568.509700][T20669] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input92 [ 1568.548892][T20669] dvb-usb: schedule remote query interval to 250 msecs. [ 1568.571602][T20669] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1568.732885][T20669] dvb-usb: TeVii S662 successfully initialized and connected. [ 1568.743039][T20669] usb 2-1: USB disconnect, device number 2 [ 1568.976253][T25953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5622'. [ 1569.337315][T20669] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1569.907669][T25959] ubi: mtd0 is already attached to ubi31 [ 1570.114334][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5628'. [ 1570.340861][T25970] netlink: 'syz.5.5627': attribute type 10 has an invalid length. [ 1570.392963][T25970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.446337][T25970] bond0: (slave team0): Enslaving as an active interface with an up link [ 1570.678749][ T5137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1570.734515][ T5137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1570.774806][ T5137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1570.865531][ T5137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1570.935905][ T5137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.259393][T25964] delete_channel: no stack [ 1572.277833][T25996] netlink: 'syz.2.5632': attribute type 4 has an invalid length. [ 1572.294317][T25996] netlink: 'syz.2.5632': attribute type 4 has an invalid length. [ 1572.309567][T25997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5633'. [ 1572.365729][T25997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5633'. [ 1572.517789][T25993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.533313][T25993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.567136][ T30] audit: type=1400 audit(525770.139:838): avc: denied { accept } for pid=25995 comm="syz.5.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1572.642188][T25993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.657714][T25993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.240545][T25978] chnl_net:caif_netlink_parms(): no params data found [ 1573.258043][ T5137] Bluetooth: hci5: command tx timeout [ 1573.715032][T25978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.764777][T25978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.902497][T25978] bridge_slave_0: entered allmulticast mode [ 1573.936773][T25978] bridge_slave_0: entered promiscuous mode [ 1574.629207][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1575.000980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1575.254663][T25978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.342929][T25978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.408863][T25978] bridge_slave_1: entered allmulticast mode [ 1575.428804][T25978] bridge_slave_1: entered promiscuous mode [ 1575.471523][ T5137] Bluetooth: hci5: command tx timeout [ 1575.601538][T25978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.634429][T25978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.773702][T25978] team0: Port device team_slave_0 added [ 1575.782621][T25978] team0: Port device team_slave_1 added [ 1575.847923][T25978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.348349][T25978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.774151][T25978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.938157][T25978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.945319][T25978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.981393][T25978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.004370][ T30] audit: type=1400 audit(525774.281:839): avc: denied { getopt } for pid=26050 comm="syz.1.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1577.533062][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1577.554874][T25978] hsr_slave_0: entered promiscuous mode [ 1577.570594][T25978] hsr_slave_1: entered promiscuous mode [ 1577.596534][T25978] debugfs: 'hsr0' already exists in 'hsr' [ 1577.612661][T25978] Cannot create hsr debugfs directory [ 1577.706871][ T5137] Bluetooth: hci5: command tx timeout [ 1577.967092][T26067] ubi: mtd0 is already attached to ubi31 [ 1578.629975][T26070] lo: entered allmulticast mode [ 1578.644130][T26070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1580.427409][ T5137] Bluetooth: hci5: command tx timeout [ 1580.471625][T25978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1580.507813][T25978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1580.543171][T25978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1580.586545][T25978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1580.822336][T25978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.866329][T25978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.883026][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.890131][ T9183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.924804][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.931904][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.097507][T16084] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1582.061408][T16084] usb 4-1: Using ep0 maxpacket: 32 [ 1582.069921][T16084] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.101009][T16084] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1582.121654][T25978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.124354][T16084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.158460][T16084] usb 4-1: config 0 descriptor?? [ 1582.167754][T16084] dvb-usb: found a 'TeVii S662' in warm state. [ 1582.173953][T16084] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1582.198986][T16084] dvb-usb: bulk message failed: -22 (2/0) [ 1582.210409][T16084] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1582.221927][T16084] dvbdev: DVB: registering new adapter (TeVii S662) [ 1582.228574][T16084] usb 4-1: media controller created [ 1582.234490][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1582.252637][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1582.263296][T16084] dw2102: i2c transfer failed. [ 1582.268105][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1582.284596][T16084] dw2102: i2c transfer failed. [ 1582.289434][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1582.306168][T16084] dw2102: i2c transfer failed. [ 1582.311413][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1582.328342][T16084] dw2102: i2c transfer failed. [ 1582.333148][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1582.359393][T16084] dw2102: i2c transfer failed. [ 1582.364190][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1582.369921][T16084] dw2102: i2c transfer failed. [ 1582.382948][T25978] veth0_vlan: entered promiscuous mode [ 1582.391945][T16084] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1582.396358][T25978] veth1_vlan: entered promiscuous mode [ 1582.406272][T16084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1582.410453][T26090] tipc: Enabling of bearer rejected, failed to enable media [ 1582.432814][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1582.441441][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1582.441533][ T44] usb 2-1: can't read configurations, error -61 [ 1582.458649][T25978] veth0_macvtap: entered promiscuous mode [ 1582.464478][T26090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1582.465682][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1582.485449][T25978] veth1_macvtap: entered promiscuous mode [ 1582.499971][T16084] dw2102: command 0x0e transfer failed. [ 1582.500284][T26090] netlink: 'syz.3.5649': attribute type 6 has an invalid length. [ 1582.505537][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1582.505555][T16084] dw2102: command 0x0e transfer failed. [ 1582.541688][T25978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.558529][T25978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.588410][ T9194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.597760][ T9194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.606910][ T9194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.627621][ T9194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.637549][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1582.725288][ T9194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.733800][ T9194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.759901][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.768181][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.822432][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1582.840902][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1582.846731][ T44] usb 2-1: can't read configurations, error -61 [ 1582.857523][T16084] dw2102: command 0x0e transfer failed. [ 1582.864928][ T44] usb usb2-port1: attempt power cycle [ 1582.873115][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1582.875622][T26122] netlink: 'syz.2.5653': attribute type 4 has an invalid length. [ 1582.883565][T16084] dw2102: command 0x0e transfer failed. [ 1582.892170][T16084] dvb-usb: bulk message failed: -22 (1/0) [ 1582.912425][T26122] netlink: 'syz.2.5653': attribute type 4 has an invalid length. [ 1583.033287][T16084] dw2102: command 0x51 transfer failed. [ 1583.039761][T16084] dvb-usb: bulk message failed: -22 (5/0) [ 1583.045819][T16084] dw2102: i2c probe for address 0x68 failed. [ 1583.051787][T16084] dvb-usb: bulk message failed: -22 (5/0) [ 1583.061019][T16084] dw2102: i2c probe for address 0x69 failed. [ 1583.073471][T16084] dvb-usb: bulk message failed: -22 (5/0) [ 1583.219519][T16084] dw2102: i2c probe for address 0x6a failed. [ 1583.252245][T16084] dw2102: probing for demodulator failed. Is the external power switched on? [ 1583.300930][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1584.342869][T16084] dvb-usb: no frontend was attached by 'TeVii S662' [ 1584.383782][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1584.426784][ T44] usb 2-1: can't read configurations, error -61 [ 1584.734064][T16084] rc_core: IR keymap rc-tt-1500 not found [ 1584.739808][T16084] Registered IR keymap rc-empty [ 1584.757020][T16084] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1584.766071][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1584.787594][T16084] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input93 [ 1585.915210][T16084] dvb-usb: schedule remote query interval to 250 msecs. [ 1585.922733][ T44] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1585.930296][ T44] usb 2-1: can't read configurations, error -71 [ 1585.965520][T16084] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1585.971702][T16084] dvb-usb: TeVii S662 successfully initialized and connected. [ 1585.985582][ T44] usb usb2-port1: unable to enumerate USB device [ 1586.028945][T16084] usb 4-1: USB disconnect, device number 58 [ 1586.089153][T16084] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1586.255994][T26147] netlink: 'syz.1.5659': attribute type 2 has an invalid length. [ 1586.426859][T26147] : entered promiscuous mode [ 1586.872246][T26158] mmap: syz.2.5663 (26158): VmData 37474304 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 1586.947986][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1586.956363][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1587.271783][T26166] cifs: Unknown parameter '#Rzë@¤–¼Ä‚NBŦx[‚ÉF—àG‰bX8YéQhræí ²ÃˆØEÚýã/®‚MñÜïÂE‹¨nMæ銇HþùëÔ€Põ3Þ²mâd¡l™oΰŠÙNQ×)Û 0þ 4õ s•ÁJ©ACç–ÌzâM©å€kÕÍ¢ñºòÄG¤˜øa;Sf2Çß·d?â켊?`:‘8•ÛñõMè¸ÕjÏ' [ 1587.291743][T26166] CIFS mount error: No usable UNC path provided in device string! [ 1587.291743][T26166] [ 1587.301950][T26166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1587.504307][T13326] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1587.771631][T13326] usb 4-1: Using ep0 maxpacket: 32 [ 1587.779745][T13326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.811555][T13326] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1587.841859][T13326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.870958][T13326] usb 4-1: config 0 descriptor?? [ 1587.901840][T13326] dvb-usb: found a 'TeVii S662' in warm state. [ 1588.004857][T13326] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1588.027516][T13326] dvb-usb: bulk message failed: -22 (2/0) [ 1588.050932][T13326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1588.318100][T13326] dvbdev: DVB: registering new adapter (TeVii S662) [ 1588.324735][T13326] usb 4-1: media controller created [ 1588.355173][T26165] tipc: Enabling of bearer rejected, failed to enable media [ 1588.368132][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1588.462388][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1588.520690][T26165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1588.559820][T13326] dw2102: i2c transfer failed. [ 1588.564766][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1588.570482][T13326] dw2102: i2c transfer failed. [ 1588.584534][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1588.590470][T13326] dw2102: i2c transfer failed. [ 1588.604631][T26165] netlink: 'syz.3.5665': attribute type 6 has an invalid length. [ 1588.621296][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1588.645220][T13326] dw2102: i2c transfer failed. [ 1588.664659][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1588.675983][ T30] audit: type=1400 audit(525785.191:840): avc: denied { setattr } for pid=26176 comm="syz.2.5668" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1588.732609][T13326] dw2102: i2c transfer failed. [ 1588.743585][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1588.755841][T13326] dw2102: i2c transfer failed. [ 1588.770834][T13326] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1588.802158][T13326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1588.940304][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1588.958927][T13326] dw2102: command 0x0e transfer failed. [ 1588.970913][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1588.982634][T13326] dw2102: command 0x0e transfer failed. [ 1589.024023][ T5922] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1589.941173][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1589.997176][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 1590.002379][T13326] dw2102: command 0x0e transfer failed. [ 1590.010285][ T5922] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1590.031178][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1590.036936][T13326] dw2102: command 0x0e transfer failed. [ 1590.059976][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1590.075830][T13326] dvb-usb: bulk message failed: -22 (1/0) [ 1590.156430][T13326] dw2102: command 0x51 transfer failed. [ 1590.169108][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1590.178545][T13326] dw2102: i2c probe for address 0x68 failed. [ 1590.178745][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1590.194778][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1590.201429][T13326] dw2102: i2c probe for address 0x69 failed. [ 1590.207636][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1590.213684][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.223874][T13326] dw2102: i2c probe for address 0x6a failed. [ 1590.230041][ T5922] usb 3-1: Product: syz [ 1590.248371][T13326] dw2102: probing for demodulator failed. Is the external power switched on? [ 1590.259104][ T5922] usb 3-1: Manufacturer: syz [ 1590.264560][ T5922] usb 3-1: SerialNumber: syz [ 1590.269585][T13326] dvb-usb: no frontend was attached by 'TeVii S662' [ 1591.054757][ T56] block nbd4: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 60 seconds [ 1591.066184][ T56] block nbd4: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 60 seconds [ 1591.078927][ T56] block nbd4: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 60 seconds [ 1591.090381][ T56] block nbd4: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 60 seconds [ 1591.192677][ T5922] usb 3-1: 0:2 : does not exist [ 1591.197687][ T5922] usb 3-1: unit 9 not found! [ 1591.222324][ T5922] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1591.252183][T26197] netlink: 'syz.3.5674': attribute type 3 has an invalid length. [ 1591.260523][T13326] rc_core: IR keymap rc-tt-1500 not found [ 1591.266254][T13326] Registered IR keymap rc-empty [ 1591.280605][ T5922] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1591.306869][T13326] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1591.323709][ T5922] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1591.338171][T13326] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input94 [ 1591.353926][ T5922] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1591.368966][ T5922] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1591.370315][T13698] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1591.380352][ T5922] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1591.387918][T13698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1591.400649][T13698] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1591.411170][T13698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1591.421363][T13698] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1591.421376][T13326] dvb-usb: schedule remote query interval to 250 msecs. [ 1591.421392][T13326] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1591.531708][ T5922] usb 3-1: USB disconnect, device number 121 [ 1591.585945][T13326] dvb-usb: TeVii S662 successfully initialized and connected. [ 1591.624454][T25196] udevd[25196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1591.678484][T13326] usb 4-1: USB disconnect, device number 59 [ 1592.085972][T13326] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1592.416665][T26200] chnl_net:caif_netlink_parms(): no params data found [ 1592.591165][T26200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.604552][T26200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.616828][ T6894] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1592.630667][T26200] bridge_slave_0: entered allmulticast mode [ 1592.637976][T26200] bridge_slave_0: entered promiscuous mode [ 1592.648639][T26200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.656061][T26200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.740756][T26200] bridge_slave_1: entered allmulticast mode [ 1592.750599][T26200] bridge_slave_1: entered promiscuous mode [ 1592.801133][ T30] audit: type=1400 audit(525789.043:841): avc: denied { read } for pid=26230 comm="syz.1.5681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1592.820397][ T6894] usb 3-1: Using ep0 maxpacket: 32 [ 1592.827787][ T6894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.835885][T26200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.843547][ T6894] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1592.857862][ T6894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.861558][T26200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.989278][ T6894] usb 3-1: config 0 descriptor?? [ 1593.002626][T26200] team0: Port device team_slave_0 added [ 1593.010810][ T6894] dvb-usb: found a 'TeVii S662' in warm state. [ 1593.017941][ T6894] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1593.024663][ T6894] dvb-usb: bulk message failed: -22 (2/0) [ 1593.027579][T26200] team0: Port device team_slave_1 added [ 1593.039731][T26236] 9p: Bad value for 'rfdno' [ 1593.057151][ T30] audit: type=1326 audit(525789.287:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26215 comm="syz.6.5679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb57f8f749 code=0x7fc00000 [ 1593.082735][ T6894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1593.107265][ T6894] dvbdev: DVB: registering new adapter (TeVii S662) [ 1593.116820][ T6894] usb 3-1: media controller created [ 1593.123892][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1593.133870][ T6894] dw2102: i2c transfer failed. [ 1593.139189][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1593.145281][ T6894] dw2102: i2c transfer failed. [ 1593.146007][T26200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.150115][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1593.163944][ T6894] dw2102: i2c transfer failed. [ 1593.168785][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1593.174918][ T6894] dw2102: i2c transfer failed. [ 1593.175221][T26200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.185261][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1593.208992][T26200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.224909][T26200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.229260][ T6894] dw2102: i2c transfer failed. [ 1593.232159][T26200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.241071][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1593.263742][T26200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.289503][T26224] tipc: Enabling of bearer rejected, failed to enable media [ 1593.299898][T26224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'. [ 1593.300530][ T6894] dw2102: i2c transfer failed. [ 1593.311184][T26224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5680'. [ 1593.328669][ T6894] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1593.336560][T26224] netlink: 'syz.2.5680': attribute type 6 has an invalid length. [ 1593.362664][ T6894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1593.384843][T26200] hsr_slave_0: entered promiscuous mode [ 1593.392347][T26200] hsr_slave_1: entered promiscuous mode [ 1593.406766][T26200] debugfs: 'hsr0' already exists in 'hsr' [ 1593.413085][T26200] Cannot create hsr debugfs directory [ 1593.415353][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1593.434399][ T6894] dw2102: command 0x0e transfer failed. [ 1593.445504][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1593.458258][ T6894] dw2102: command 0x0e transfer failed. [ 1593.699173][T13698] Bluetooth: hci6: command tx timeout [ 1593.731135][T26200] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1593.816627][T26200] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1593.830717][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1593.834331][T26200] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1593.838021][ T6894] dw2102: command 0x0e transfer failed. [ 1593.850088][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1593.855842][ T6894] dw2102: command 0x0e transfer failed. [ 1593.866782][ T6894] dvb-usb: bulk message failed: -22 (1/0) [ 1593.872716][ T6894] dw2102: command 0x51 transfer failed. [ 1593.873977][T26200] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1593.878320][ T6894] dvb-usb: bulk message failed: -22 (5/0) [ 1593.909837][ T6894] dw2102: i2c probe for address 0x68 failed. [ 1593.926055][ T6894] dvb-usb: bulk message failed: -22 (5/0) [ 1593.932272][ T6894] dw2102: i2c probe for address 0x69 failed. [ 1593.938515][ T6894] dvb-usb: bulk message failed: -22 (5/0) [ 1593.947188][ T6894] dw2102: i2c probe for address 0x6a failed. [ 1593.954973][ T6894] dw2102: probing for demodulator failed. Is the external power switched on? [ 1593.965828][ T6894] dvb-usb: no frontend was attached by 'TeVii S662' [ 1594.023695][T26200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1594.045470][ T6894] rc_core: IR keymap rc-tt-1500 not found [ 1594.049245][T26200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.052033][ T6894] Registered IR keymap rc-empty [ 1594.069278][ T6894] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1594.088612][ T6894] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input95 [ 1594.106503][ T9194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.113681][ T9194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.127649][ T6894] dvb-usb: schedule remote query interval to 250 msecs. [ 1594.148054][ T6894] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1594.154147][ T6894] dvb-usb: TeVii S662 successfully initialized and connected. [ 1594.158477][T13326] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1594.166847][ T6894] usb 3-1: USB disconnect, device number 122 [ 1594.185215][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.192417][ T9194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1594.200661][T16084] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1594.394115][T13326] usb 4-1: Using ep0 maxpacket: 32 [ 1594.407845][T13326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.419533][T13326] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1594.539574][T13326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.736698][T16084] usb 2-1: config 146 has an invalid descriptor of length 188, skipping remainder of the config [ 1594.773944][T13326] usb 4-1: config 0 descriptor?? [ 1594.775958][ T6894] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1594.791732][T13326] dvb-usb: found a 'TeVii S662' in warm state. [ 1594.794822][T16084] usb 2-1: config 146 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1594.799447][T13326] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1594.817801][T13326] dvb-usb: bulk message failed: -22 (2/0) [ 1594.844379][T13326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1594.852927][T16084] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1594.876180][T16084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.889474][T13326] dvbdev: DVB: registering new adapter (TeVii S662) [ 1594.911677][T13326] usb 4-1: media controller created [ 1594.917552][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1594.923368][T13326] dw2102: i2c transfer failed. [ 1594.929431][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1594.935291][T13326] dw2102: i2c transfer failed. [ 1594.940966][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1594.946799][T13326] dw2102: i2c transfer failed. [ 1594.954895][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1594.967957][T13326] dw2102: i2c transfer failed. [ 1594.982713][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1594.996376][T13326] dw2102: i2c transfer failed. [ 1595.011272][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1595.045938][T13326] dw2102: i2c transfer failed. [ 1595.053459][T26247] tipc: Started in network mode [ 1595.058898][T13326] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1595.065089][T26247] tipc: Node identity a28f1179fb3e, cluster identity 4711 [ 1595.082175][T26247] tipc: Enabled bearer , priority 0 [ 1595.095050][T13326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1595.181024][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5685'. [ 1595.188933][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1595.202634][T26247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5685'. [ 1595.214403][T13326] dw2102: command 0x0e transfer failed. [ 1595.226842][T26200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.233695][T26247] netlink: 'syz.3.5685': attribute type 6 has an invalid length. [ 1595.248319][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1595.254235][T13326] dw2102: command 0x0e transfer failed. [ 1595.255953][ T30] audit: type=1326 audit(525791.343:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26243 comm="syz.1.5684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55b438f749 code=0x0 [ 1595.285818][T26274] tipc: Disabling bearer [ 1595.371522][T26280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5691'. [ 1595.380707][T26280] netlink: 'syz.2.5691': attribute type 7 has an invalid length. [ 1595.388541][T26280] netlink: 'syz.2.5691': attribute type 8 has an invalid length. [ 1595.396298][T26280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5691'. [ 1595.922051][T13698] Bluetooth: hci6: command tx timeout [ 1596.299281][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1596.305041][T13326] dw2102: command 0x0e transfer failed. [ 1596.322074][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1596.339074][T13326] dw2102: command 0x0e transfer failed. [ 1596.777613][T13326] dvb-usb: bulk message failed: -22 (1/0) [ 1596.783372][T13326] dw2102: command 0x51 transfer failed. [ 1596.796198][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1596.813578][T13326] dw2102: i2c probe for address 0x68 failed. [ 1596.819600][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1596.841783][ T6894] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1596.841998][T13326] dw2102: i2c probe for address 0x69 failed. [ 1596.860944][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1596.873896][T13326] dw2102: i2c probe for address 0x6a failed. [ 1597.023606][ T6894] usb 7-1: Using ep0 maxpacket: 8 [ 1597.030656][T13326] dw2102: probing for demodulator failed. Is the external power switched on? [ 1597.046944][T13326] dvb-usb: no frontend was attached by 'TeVii S662' [ 1597.059474][ T6894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.102788][T26291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1597.111045][ T6894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.111073][ T6894] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1597.179636][ T6894] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1597.216458][T13326] rc_core: IR keymap rc-tt-1500 not found [ 1597.221764][ T6894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.222283][T13326] Registered IR keymap rc-empty [ 1597.257711][T13326] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1597.282014][ T6894] usb 7-1: config 0 descriptor?? [ 1597.295386][T13326] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input96 [ 1597.310786][T26200] veth0_vlan: entered promiscuous mode [ 1597.352791][T13326] dvb-usb: schedule remote query interval to 250 msecs. [ 1597.372473][T26200] veth1_vlan: entered promiscuous mode [ 1597.383585][T13326] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1597.397798][T13326] dvb-usb: TeVii S662 successfully initialized and connected. [ 1597.433474][T13326] usb 4-1: USB disconnect, device number 60 [ 1597.457879][T26200] veth0_macvtap: entered promiscuous mode [ 1597.503475][T26200] veth1_macvtap: entered promiscuous mode [ 1597.543297][T13326] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1597.568766][T26200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.591527][T26200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.617188][ T1327] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.639480][ T1327] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.661825][ T1327] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.682861][ T1327] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.756247][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1597.775081][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1597.792857][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1597.800778][ T6894] usbhid 7-1:0.0: can't add hid device: -32 [ 1597.807971][ T6894] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1597.846513][ T6894] usb 7-1: USB disconnect, device number 2 [ 1597.890141][T13326] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1597.930790][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.945760][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.970606][ T9195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.980037][ T9195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.071934][T13326] usb 4-1: Using ep0 maxpacket: 32 [ 1598.078793][T13326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.090655][T13326] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1598.100650][T13326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.115223][T13326] usb 4-1: config 0 descriptor?? [ 1598.128721][T13326] dvb-usb: found a 'TeVii S662' in warm state. [ 1598.143723][T13326] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1598.156555][T13326] dvb-usb: bulk message failed: -22 (2/0) [ 1598.157621][T13698] Bluetooth: hci6: command tx timeout [ 1598.170434][T26303] netlink: 'syz.7.5671': attribute type 4 has an invalid length. [ 1598.181542][T13326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1598.197356][T13326] dvbdev: DVB: registering new adapter (TeVii S662) [ 1598.207762][T13326] usb 4-1: media controller created [ 1598.213124][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1598.219059][T13326] dw2102: i2c transfer failed. [ 1598.224061][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1598.233838][T13326] dw2102: i2c transfer failed. [ 1598.243424][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1598.249207][T13326] dw2102: i2c transfer failed. [ 1598.254986][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1598.260755][T13326] dw2102: i2c transfer failed. [ 1598.268206][T26304] netlink: 'syz.7.5671': attribute type 4 has an invalid length. [ 1598.276019][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1598.276037][T13326] dw2102: i2c transfer failed. [ 1598.276067][T13326] dvb-usb: bulk message failed: -22 (6/0) [ 1598.294517][T13326] dw2102: i2c transfer failed. [ 1598.301636][T13326] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1598.314622][T13326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1598.354912][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1598.362276][T13326] dw2102: command 0x0e transfer failed. [ 1598.367878][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1598.377838][T13326] dw2102: command 0x0e transfer failed. [ 1598.443372][T26299] tipc: Enabled bearer , priority 0 [ 1598.461448][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1598.484312][T26299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1598.496315][T26299] netlink: 'syz.3.5695': attribute type 6 has an invalid length. [ 1598.513918][T26299] tipc: Disabling bearer [ 1598.715212][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1598.721216][T13326] dw2102: command 0x0e transfer failed. [ 1598.727679][T13326] dvb-usb: bulk message failed: -22 (3/0) [ 1598.733606][T13326] dw2102: command 0x0e transfer failed. [ 1598.741570][T13326] dvb-usb: bulk message failed: -22 (1/0) [ 1598.751309][T13326] dw2102: command 0x51 transfer failed. [ 1598.758206][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1598.764160][T13326] dw2102: i2c probe for address 0x68 failed. [ 1598.770707][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1598.776643][T13326] dw2102: i2c probe for address 0x69 failed. [ 1598.783204][T13326] dvb-usb: bulk message failed: -22 (5/0) [ 1598.789456][T13326] dw2102: i2c probe for address 0x6a failed. [ 1598.795547][T13326] dw2102: probing for demodulator failed. Is the external power switched on? [ 1598.807859][T13326] dvb-usb: no frontend was attached by 'TeVii S662' [ 1598.897340][T13326] rc_core: IR keymap rc-tt-1500 not found [ 1598.903479][T13326] Registered IR keymap rc-empty [ 1598.911522][T13326] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1598.933553][T13326] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input97 [ 1598.986529][T13326] dvb-usb: schedule remote query interval to 250 msecs. [ 1599.000331][T13326] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1599.017111][T13326] dvb-usb: TeVii S662 successfully initialized and connected. [ 1599.052881][T13326] usb 4-1: USB disconnect, device number 61 [ 1599.126052][T16084] usb 2-1: string descriptor 0 read error: -71 [ 1599.178011][T16084] usb 2-1: USB disconnect, device number 7 [ 1599.182261][T13326] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1599.296008][T26318] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5700'. [ 1599.311966][T26318] netlink: 'syz.3.5700': attribute type 6 has an invalid length. [ 1599.321921][T26318] netlink: 'syz.3.5700': attribute type 5 has an invalid length. [ 1599.330846][T26318] netlink: 'syz.3.5700': attribute type 4 has an invalid length. [ 1599.500361][T26322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5703'. [ 1599.805708][T26325] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5702'. [ 1599.944574][T16084] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1600.888456][T13698] Bluetooth: hci6: command tx timeout [ 1601.087852][T16084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1601.130859][T16084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1601.177509][T16084] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 1601.206010][T16084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.228184][T16084] usb 4-1: Product: syz [ 1601.232379][T16084] usb 4-1: Manufacturer: syz [ 1601.259544][T16084] usb 4-1: SerialNumber: syz [ 1601.282778][T16084] usb 4-1: config 0 descriptor?? [ 1601.295557][T26329] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1601.437756][T26329] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1601.464526][T16084] option 4-1:0.0: GSM modem (1-port) converter detected [ 1601.482541][T16084] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1601.642183][T26343] binder: 26338:26343 ioctl c0306201 200000000080 returned -11 [ 1601.954551][T19810] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1602.060547][T16084] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1602.148572][T19810] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1602.165480][T19810] usb 3-1: config 1 has no interface number 0 [ 1602.188789][T19810] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1602.287478][T16084] usb 8-1: Using ep0 maxpacket: 32 [ 1602.294865][T16084] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.306845][T16084] usb 8-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1602.316628][T16084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.319662][T19810] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1602.327309][T16084] usb 8-1: config 0 descriptor?? [ 1602.360567][T26345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1602.380873][T19810] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.427075][T19810] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1602.433837][T16084] dvb-usb: found a 'TeVii S662' in warm state. [ 1602.455829][T19810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.458557][T16084] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1602.504596][T19810] usb 3-1: Product: syz [ 1602.511388][T16084] dvb-usb: bulk message failed: -22 (2/0) [ 1602.511406][T19810] usb 3-1: Manufacturer: syz [ 1602.511440][T19810] usb 3-1: SerialNumber: syz [ 1602.814696][T16084] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1602.832696][T16084] dvbdev: DVB: registering new adapter (TeVii S662) [ 1602.839422][T26342] tipc: Started in network mode [ 1602.844972][T26342] tipc: Node identity 32093822ab, cluster identity 4711 [ 1602.847107][T26337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1602.852006][T16084] usb 8-1: media controller created [ 1602.887388][T26357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5710'. [ 1602.901977][T26342] tipc: Enabled bearer , priority 0 [ 1602.932034][T26357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5710'. [ 1602.933498][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1602.951177][T16084] dw2102: i2c transfer failed. [ 1602.957365][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1602.965051][T16084] dw2102: i2c transfer failed. [ 1602.976337][T26358] tipc: Disabling bearer [ 1602.988799][T26357] netlink: 'syz.7.5710': attribute type 6 has an invalid length. [ 1602.989652][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1603.025279][T16084] dw2102: i2c transfer failed. [ 1603.045056][T26360] netlink: 'syz.1.5713': attribute type 4 has an invalid length. [ 1603.054899][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1603.071650][T16084] dw2102: i2c transfer failed. [ 1603.080397][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1603.086215][T16084] dw2102: i2c transfer failed. [ 1603.091519][T16084] dvb-usb: bulk message failed: -22 (6/0) [ 1603.097323][T16084] dw2102: i2c transfer failed. [ 1603.102646][T16084] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1603.128484][T16084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1603.139315][T26363] netlink: 'syz.1.5713': attribute type 4 has an invalid length. [ 1603.153942][T26337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1603.205074][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1603.220258][T16084] dw2102: command 0x0e transfer failed. [ 1603.233411][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1603.245966][T16084] dw2102: command 0x0e transfer failed. [ 1603.366479][ T89] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1603.723801][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1603.729596][T16084] dw2102: command 0x0e transfer failed. [ 1603.942264][T26365] ceph: No mds server is up or the cluster is laggy [ 1603.994053][ T44] libceph: connect (1)[c::]:6789 error -101 [ 1604.032386][T16084] dvb-usb: bulk message failed: -22 (3/0) [ 1604.086581][ T89] usb 7-1: Using ep0 maxpacket: 8 [ 1604.096044][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 1604.110022][ T89] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1604.213917][T19810] usb 3-1: Incompatible driver and firmware versions [ 1604.269521][T19810] usb 3-1: USB disconnect, device number 123 [ 1604.275839][T16084] dw2102: command 0x0e transfer failed. [ 1604.296738][T16084] dvb-usb: bulk message failed: -22 (1/0) [ 1604.302511][T16084] dw2102: command 0x51 transfer failed. [ 1604.308237][ T89] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1604.329009][ T89] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.337257][T16084] dvb-usb: bulk message failed: -22 (5/0) [ 1604.347714][T16084] dw2102: i2c probe for address 0x68 failed. [ 1604.363614][ T89] usb 7-1: config 0 descriptor?? [ 1604.370021][T16084] dvb-usb: bulk message failed: -22 (5/0) [ 1604.470954][T16084] dw2102: i2c probe for address 0x69 failed. [ 1604.477070][T16084] dvb-usb: bulk message failed: -22 (5/0) [ 1604.503478][T16084] dw2102: i2c probe for address 0x6a failed. [ 1604.526344][T16084] dw2102: probing for demodulator failed. Is the external power switched on? [ 1605.153333][ T89] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1605.184551][T16084] dvb-usb: no frontend was attached by 'TeVii S662' [ 1605.559582][T26362] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1605.566125][T26362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1605.574255][T26362] vhci_hcd vhci_hcd.0: Device attached [ 1605.819683][T26362] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1606.008054][T16084] rc_core: IR keymap rc-tt-1500 not found [ 1606.015557][T16084] Registered IR keymap rc-empty [ 1606.047057][T16084] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1606.091851][T23098] usb 4-1: USB disconnect, device number 62 [ 1606.123039][T16084] input: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input98 [ 1606.156547][T23098] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1606.196051][ T89] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1606.206160][T16084] dvb-usb: schedule remote query interval to 250 msecs. [ 1606.219919][T23098] option 4-1:0.0: device disconnected [ 1606.232673][T16084] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1606.266645][T26381] vhci_hcd: connection reset by peer [ 1606.266920][ T9194] vhci_hcd vhci_hcd.6: stop threads [ 1606.266945][ T9194] vhci_hcd vhci_hcd.6: release socket [ 1606.268334][ T9194] vhci_hcd vhci_hcd.6: disconnect device [ 1606.274789][ T44] usb 7-1: USB disconnect, device number 3 [ 1606.291463][T16084] dvb-usb: TeVii S662 successfully initialized and connected. [ 1606.327397][T16084] usb 8-1: USB disconnect, device number 2 [ 1606.344864][T25196] udevd[25196]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1606.344966][T25196] udevd[25196]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1606.421903][T16084] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1606.703913][T26404] FAULT_INJECTION: forcing a failure. [ 1606.703913][T26404] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.716734][T26404] CPU: 0 UID: 60929 PID: 26404 Comm: syz.3.5719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1606.716762][T26404] Tainted: [L]=SOFTLOCKUP [ 1606.716769][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1606.716779][T26404] Call Trace: [ 1606.716786][T26404] [ 1606.716793][T26404] dump_stack_lvl+0x16c/0x1f0 [ 1606.716819][T26404] should_fail_ex+0x512/0x640 [ 1606.716845][T26404] ? fs_reclaim_acquire+0xae/0x150 [ 1606.716871][T26404] should_failslab+0xc2/0x120 [ 1606.716893][T26404] __kmalloc_noprof+0xeb/0x910 [ 1606.716920][T26404] ? tomoyo_encode2+0x100/0x3e0 [ 1606.716947][T26404] ? tomoyo_encode2+0x100/0x3e0 [ 1606.716969][T26404] tomoyo_encode2+0x100/0x3e0 [ 1606.716996][T26404] tomoyo_encode+0x29/0x50 [ 1606.717017][T26404] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1606.717048][T26404] tomoyo_path_number_perm+0x245/0x580 [ 1606.717067][T26404] ? tomoyo_path_number_perm+0x237/0x580 [ 1606.717088][T26404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1606.717109][T26404] ? __schedule+0x10b9/0x6150 [ 1606.717151][T26404] ? find_held_lock+0x2b/0x80 [ 1606.717175][T26404] ? hook_file_ioctl_common+0x144/0x410 [ 1606.717206][T26404] ? __fget_files+0x20e/0x3c0 [ 1606.717235][T26404] security_file_ioctl+0x9b/0x240 [ 1606.717259][T26404] __x64_sys_ioctl+0xb7/0x210 [ 1606.717280][T26404] do_syscall_64+0xcd/0xf80 [ 1606.717302][T26404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.717319][T26404] RIP: 0033:0x7fc8f798f749 [ 1606.717333][T26404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.717349][T26404] RSP: 002b:00007fc8f5bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1606.717366][T26404] RAX: ffffffffffffffda RBX: 00007fc8f7be6180 RCX: 00007fc8f798f749 [ 1606.717377][T26404] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000009 [ 1606.717387][T26404] RBP: 00007fc8f5bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.717397][T26404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.717407][T26404] R13: 00007fc8f7be6218 R14: 00007fc8f7be6180 R15: 00007ffd7af3f8a8 [ 1606.717432][T26404] [ 1606.930185][T26404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1607.922890][ T44] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1608.136579][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1608.145724][ T44] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1608.154980][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.165557][ T44] usb 7-1: Product: syz [ 1608.170839][ T44] usb 7-1: Manufacturer: syz [ 1608.175441][ T44] usb 7-1: SerialNumber: syz [ 1608.182682][ T44] usb 7-1: config 0 descriptor?? [ 1608.189241][ T44] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1608.290788][ T973] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1608.322561][T16084] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1608.468209][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 1608.474920][ T973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.486780][ T973] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1608.489512][T16084] usb 4-1: Using ep0 maxpacket: 16 [ 1608.496007][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.503203][T16084] usb 4-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 1608.519774][T16084] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1608.520478][ T973] usb 2-1: config 0 descriptor?? [ 1608.534375][T16084] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1608.547376][T16084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1608.552690][ T973] dvb-usb: found a 'TeVii S662' in warm state. [ 1608.555779][T16084] usb 4-1: SerialNumber: syz [ 1608.562179][ T973] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1608.572981][ T973] dvb-usb: bulk message failed: -22 (2/0) [ 1608.581077][ T973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1608.599571][ T973] dvbdev: DVB: registering new adapter (TeVii S662) [ 1608.609788][ T973] usb 2-1: media controller created [ 1608.615007][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 1608.621349][T15125] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1608.629049][ T973] dw2102: i2c transfer failed. [ 1608.633907][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 1608.640102][ T973] dw2102: i2c transfer failed. [ 1608.644895][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 1608.652922][ T973] dw2102: i2c transfer failed. [ 1608.657676][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 1608.663569][ T973] dw2102: i2c transfer failed. [ 1608.668337][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 1608.674172][ T973] dw2102: i2c transfer failed. [ 1608.678923][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 1608.684881][ T973] dw2102: i2c transfer failed. [ 1608.689628][ T973] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1608.701628][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1608.722218][ T973] dvb-usb: bulk message failed: -22 (3/0) [ 1608.728302][ T973] dw2102: command 0x0e transfer failed. [ 1608.733855][ T973] dvb-usb: bulk message failed: -22 (3/0) [ 1608.739813][ T973] dw2102: command 0x0e transfer failed. [ 1608.773980][T26418] tipc: Enabled bearer , priority 0 [ 1608.781603][T26418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5725'. [ 1608.790546][T26418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5725'. [ 1608.799491][T26418] netlink: 'syz.1.5725': attribute type 6 has an invalid length. [ 1608.804688][T16084] usb 4-1: USB disconnect, device number 63 [ 1608.807421][T15125] usb 8-1: Using ep0 maxpacket: 16 [ 1608.826409][T15125] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1608.835593][T26418] tipc: Disabling bearer [ 1608.843204][T15125] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1608.854376][T15125] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1608.865831][T15125] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1608.876675][T15125] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1608.887138][T15125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.895149][T15125] usb 8-1: Product: syz [ 1608.899416][T15125] usb 8-1: Manufacturer: syz [ 1608.904188][T15125] usb 8-1: SerialNumber: syz [ 1609.060106][T26412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.067149][ T973] dvb-usb: bulk message failed: -22 (3/0) [ 1609.068997][T26412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.074302][ T973] dw2102: command 0x0e transfer failed. [ 1609.087674][ T973] dvb-usb: bulk message failed: -22 (3/0) [ 1609.095797][ T973] dw2102: command 0x0e transfer failed. [ 1609.102313][ T973] dvb-usb: bulk message failed: -22 (1/0) [ 1609.108073][ T973] dw2102: command 0x51 transfer failed. [ 1609.113841][ T973] dvb-usb: bulk message failed: -22 (5/0) [ 1609.119574][ T973] dw2102: i2c probe for address 0x68 failed. [ 1609.131315][ T973] dvb-usb: bulk message failed: -22 (5/0) [ 1609.137659][ T973] dw2102: i2c probe for address 0x69 failed. [ 1609.145962][ T973] dvb-usb: bulk message failed: -22 (5/0) [ 1609.151874][ T973] dw2102: i2c probe for address 0x6a failed. [ 1609.158112][ T973] dw2102: probing for demodulator failed. Is the external power switched on? [ 1609.167149][ T973] dvb-usb: no frontend was attached by 'TeVii S662' [ 1609.174427][ T30] audit: type=1400 audit(525804.367:844): avc: denied { ioctl } for pid=26423 comm="syz.7.5728" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1609.204077][T15125] usb 8-1: 0:2 : does not exist [ 1609.227963][T15125] usb 8-1: USB disconnect, device number 3 [ 1609.258731][T25196] udevd[25196]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1609.277256][ T973] rc_core: IR keymap rc-tt-1500 not found [ 1609.283893][ T973] Registered IR keymap rc-empty [ 1609.289562][ T973] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1609.301834][ T973] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input99 [ 1609.336209][ T973] dvb-usb: schedule remote query interval to 250 msecs. [ 1609.343185][ T973] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1609.353390][ T973] dvb-usb: TeVii S662 successfully initialized and connected. [ 1609.366971][ T973] usb 2-1: USB disconnect, device number 8 [ 1609.402791][ T973] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1609.565533][ T44] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 1609.642527][ T44] usb 7-1: USB disconnect, device number 4 [ 1609.902418][T26435] netlink: 'syz.1.5730': attribute type 4 has an invalid length. [ 1609.968017][T26437] netlink: 'syz.1.5730': attribute type 4 has an invalid length. [ 1610.061944][T16998] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1610.086581][T26439] lo: entered allmulticast mode [ 1610.100533][T26439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1610.397876][T16998] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1610.501893][T16998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1610.527483][T16998] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1610.557249][T16998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.581931][T16998] usb 4-1: Product: syz [ 1610.597003][T16998] usb 4-1: Manufacturer: syz [ 1610.613439][T16998] usb 4-1: SerialNumber: syz [ 1610.636879][T16998] usb 4-1: config 0 descriptor?? [ 1610.652321][T16998] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1611.044779][T26456] tmpfs: Unknown parameter 'noà(ap×øõu$n‚¨×ß̧eL4àêúQÕ·#KLH ÍŸ7 [ 1611.044779][T26456] } Á–Û8hZ{íIÝx©“*¡@ô@£©²aµöªCCºï$[ø†°f [ 1611.044779][T26456] [ 1611.044779][T26456] b¾0hhR×fΨÖ+þ' [ 1611.421220][ T30] audit: type=1400 audit(525806.424:845): avc: denied { setopt } for pid=26459 comm="syz.1.5737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1611.563555][T26465] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5739'. [ 1611.667742][ T89] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1612.061972][ T6894] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1612.233075][ T6894] usb 8-1: Using ep0 maxpacket: 32 [ 1612.271613][ T6894] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.304780][ T6894] usb 8-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1612.327237][ T6894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.352370][ T6894] usb 8-1: config 0 descriptor?? [ 1612.375259][ T6894] dvb-usb: found a 'TeVii S662' in warm state. [ 1612.390020][ T6894] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1612.406494][ T6894] dvb-usb: bulk message failed: -22 (2/0) [ 1612.431273][ T6894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1612.469423][ T6894] dvbdev: DVB: registering new adapter (TeVii S662) [ 1612.485415][ T6894] usb 8-1: media controller created [ 1612.500644][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1612.515559][ T6894] dw2102: i2c transfer failed. [ 1612.539311][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1612.554148][ T6894] dw2102: i2c transfer failed. [ 1612.561390][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1612.573319][ T6894] dw2102: i2c transfer failed. [ 1612.584025][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1612.616208][ T6894] dw2102: i2c transfer failed. [ 1612.625975][T26470] tipc: Enabled bearer , priority 0 [ 1612.639277][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1612.651961][T26470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5741'. [ 1612.667692][ T6894] dw2102: i2c transfer failed. [ 1612.676407][ T6894] dvb-usb: bulk message failed: -22 (6/0) [ 1612.686036][T26470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5741'. [ 1612.703744][ T6894] dw2102: i2c transfer failed. [ 1612.712150][ T6894] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1612.722115][T26470] netlink: 'syz.7.5741': attribute type 6 has an invalid length. [ 1612.748598][T26476] tipc: Disabling bearer [ 1612.754533][ T6894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1612.959376][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1613.041201][ T6894] dw2102: command 0x0e transfer failed. [ 1613.065434][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1613.089218][ T6894] dw2102: command 0x0e transfer failed. [ 1613.207907][ T5922] usb 4-1: USB disconnect, device number 64 [ 1613.431596][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1613.443708][ T6894] dw2102: command 0x0e transfer failed. [ 1613.449292][ T6894] dvb-usb: bulk message failed: -22 (3/0) [ 1613.454969][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5750'. [ 1613.484487][ T6894] dw2102: command 0x0e transfer failed. [ 1613.497054][ T6894] dvb-usb: bulk message failed: -22 (1/0) [ 1613.513750][ T6894] dw2102: command 0x51 transfer failed. [ 1613.519894][ T6894] dvb-usb: bulk message failed: -22 (5/0) [ 1613.536750][ T6894] dw2102: i2c probe for address 0x68 failed. [ 1613.549616][T26497] fuse: Unknown parameter '' [ 1613.570480][ T6894] dvb-usb: bulk message failed: -22 (5/0) [ 1613.578030][ T6894] dw2102: i2c probe for address 0x69 failed. [ 1613.591397][ T6894] dvb-usb: bulk message failed: -22 (5/0) [ 1613.597145][ T6894] dw2102: i2c probe for address 0x6a failed. [ 1613.623973][ T6894] dw2102: probing for demodulator failed. Is the external power switched on? [ 1613.637895][ T6894] dvb-usb: no frontend was attached by 'TeVii S662' [ 1613.732166][T26495] syzkaller0: entered promiscuous mode [ 1613.737656][T26495] syzkaller0: entered allmulticast mode [ 1613.784110][ T5922] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1613.997994][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1614.034372][ T5922] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1614.065273][ T5922] usb 4-1: config 0 has no interface number 0 [ 1614.086067][ T5922] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1614.102888][ T5922] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1614.113839][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.122779][ T5922] usb 4-1: Product: syz [ 1614.127384][ T5922] usb 4-1: Manufacturer: syz [ 1614.137241][ T6894] rc_core: IR keymap rc-tt-1500 not found [ 1614.141882][ T5922] usb 4-1: SerialNumber: syz [ 1614.143601][ T6894] Registered IR keymap rc-empty [ 1614.158028][ T6894] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1614.168044][ T5922] usb 4-1: config 0 descriptor?? [ 1614.178901][ T6894] input: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input100 [ 1614.200639][T26489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1614.204052][ T6894] dvb-usb: schedule remote query interval to 250 msecs. [ 1614.238893][ T6894] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1614.257366][ T6894] dvb-usb: TeVii S662 successfully initialized and connected. [ 1614.296965][ T6894] usb 8-1: USB disconnect, device number 4 [ 1614.367289][ T6894] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1614.744600][T26514] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1616.134023][T26503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5751'. [ 1616.812322][ T5922] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1616.941346][ T5922] usb 4-1: USB disconnect, device number 65 [ 1617.503683][T26547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5762'. [ 1618.480935][T26551] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5763'. [ 1619.110492][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.117719][ C1] bridge0: topology change detected, propagating [ 1619.124354][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1619.131560][ C1] bridge0: topology change detected, propagating [ 1619.239291][T19810] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1619.252831][T26569] fuse: Bad value for 'fd' [ 1619.420740][T19810] usb 2-1: Using ep0 maxpacket: 8 [ 1619.524785][T19810] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1619.550651][T19810] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1619.570677][T19810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1619.580534][T19810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1619.642998][T19810] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.757520][T19810] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1619.811356][T19810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.384751][T26588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5775'. [ 1620.816471][T26592] input: syz0 as /devices/virtual/input/input102 [ 1620.819966][T26596] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 1621.048345][T26600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5778'. [ 1621.059983][ T6894] usb 2-1: USB disconnect, device number 9 [ 1621.321785][ T30] audit: type=1400 audit(525815.717:846): avc: denied { connect } for pid=26604 comm="syz.7.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1621.626539][ T89] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1621.797785][ T89] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1621.831533][ T89] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1621.857837][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.890182][ T89] usb 4-1: Product: syz [ 1621.909451][ T89] usb 4-1: Manufacturer: syz [ 1621.928545][ T89] usb 4-1: SerialNumber: syz [ 1622.066867][ T5137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1622.076464][ T5137] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1622.087319][ T5137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1622.096554][ T5137] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1622.481680][ T5137] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1622.709617][ T89] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1622.913446][ T89] usb 4-1: USB disconnect, device number 66 [ 1623.023252][T26622] chnl_net:caif_netlink_parms(): no params data found [ 1623.232977][ T56] block nbd4: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 90 seconds [ 1623.244168][ T56] block nbd4: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 90 seconds [ 1623.255147][ T56] block nbd4: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 90 seconds [ 1623.266202][ T56] block nbd4: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 90 seconds [ 1623.303866][ T89] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1623.442309][T15125] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1623.478063][T26622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.486024][T26622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.625830][T15125] usb 2-1: Using ep0 maxpacket: 32 [ 1623.946077][T26622] bridge_slave_0: entered allmulticast mode [ 1623.953913][T26622] bridge_slave_0: entered promiscuous mode [ 1623.963993][T26622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.982188][T26622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.991420][T15125] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.000999][T26622] bridge_slave_1: entered allmulticast mode [ 1624.006193][T15125] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.019166][T26622] bridge_slave_1: entered promiscuous mode [ 1624.020164][T15125] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1624.030499][ T89] usb 4-1: Using ep0 maxpacket: 8 [ 1624.034244][T15125] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1624.049064][T15125] usb 2-1: Product: syz [ 1624.053492][T15125] usb 2-1: Manufacturer: syz [ 1624.054795][ T89] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1624.080639][T15125] hub 2-1:4.0: USB hub found [ 1624.090807][ T89] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1624.107151][T26622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.120093][T26622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1624.140900][ T89] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1624.165443][ T89] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 256 [ 1624.191168][ T89] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.212410][ T89] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.233416][ T89] usb 4-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 1624.255192][ T89] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1624.272342][T26622] team0: Port device team_slave_0 added [ 1624.283093][T26622] team0: Port device team_slave_1 added [ 1624.301480][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.311745][T15125] hub 2-1:4.0: 2 ports detected [ 1624.368839][T26622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.377218][T26622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.433725][T26622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.471851][ T89] usb 4-1: usb_control_msg returned -71 [ 1624.500070][T26622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.508372][ T89] usbtmc 4-1:16.0: can't read capabilities [ 1624.515558][T26622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.542362][ T89] usbtmc 4-1:16.0: Failed to submit iin_urb [ 1624.542432][ T89] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 1624.547116][ T89] usb 4-1: USB disconnect, device number 67 [ 1624.590762][T26622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1624.683045][ T5137] Bluetooth: hci7: command tx timeout [ 1624.743649][ T30] audit: type=1400 audit(525818.915:847): avc: denied { read write } for pid=26662 comm="syz.3.5799" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1624.942567][T26668] ubi: mtd0 is already attached to ubi31 [ 1625.166241][ T30] audit: type=1400 audit(525818.943:848): avc: denied { open } for pid=26662 comm="syz.3.5799" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1625.223226][ T30] audit: type=1400 audit(525819.345:849): avc: denied { ioctl } for pid=26662 comm="syz.3.5799" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1625.701076][T26622] hsr_slave_0: entered promiscuous mode [ 1625.797758][T26622] hsr_slave_1: entered promiscuous mode [ 1625.907404][T26622] debugfs: 'hsr0' already exists in 'hsr' [ 1625.981049][T26622] Cannot create hsr debugfs directory [ 1626.214294][ T5137] Bluetooth: hci3: command 0x0406 tx timeout [ 1626.330915][T26675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1626.408014][T26677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1626.448884][T26676] binder: 26642:26676 ioctl c00c620f 200000000700 returned -22 [ 1626.735132][T15125] hub 2-1:4.0: activate --> -90 [ 1626.897981][T13698] Bluetooth: hci7: command tx timeout [ 1627.074329][T26687] netlink: 'syz.7.5804': attribute type 10 has an invalid length. [ 1627.290904][T15125] usb 2-1-port2: cannot warm reset (err = -71) [ 1627.319729][T26687] team0: Device ipvlan1 failed to register rx_handler [ 1627.356284][ T973] usb 2-1: USB disconnect, device number 10 [ 1627.363143][T15125] usb 2-1-port2: cannot warm reset (err = -71) [ 1627.369141][T26622] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1627.379892][T15125] usb 2-1-port2: Cannot enable. Maybe the USB cable is bad? [ 1627.383026][T26622] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1627.508004][T26622] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1627.534397][T26622] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1628.034999][T26694] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1628.045702][T26694] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1628.204443][T26694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1628.221827][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5805'. [ 1628.718754][T26622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.777405][T26622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.822019][ T9194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.829142][ T9194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.855574][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.862708][ T9194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.895842][T26714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1629.122513][T13698] Bluetooth: hci7: command tx timeout [ 1629.690547][T26622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.341089][ T6894] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1630.565882][T16084] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1630.578485][T26622] veth0_vlan: entered promiscuous mode [ 1630.594108][T26622] veth1_vlan: entered promiscuous mode [ 1630.598726][ T6894] usb 2-1: Using ep0 maxpacket: 16 [ 1630.607212][ T6894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1630.623741][ T6894] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1630.625389][T26622] veth0_macvtap: entered promiscuous mode [ 1630.633082][ T6894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.642391][T26622] veth1_macvtap: entered promiscuous mode [ 1630.647341][ T6894] usb 2-1: Product: syz [ 1630.656719][ T6894] usb 2-1: Manufacturer: syz [ 1630.661577][ T6894] usb 2-1: SerialNumber: syz [ 1630.674790][ T6894] usb 2-1: config 0 descriptor?? [ 1630.680625][T26622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.698552][T26622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.705657][ T6894] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1630.713068][T17020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.715188][ T6894] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1630.730599][T16084] usb 8-1: Using ep0 maxpacket: 16 [ 1630.794459][T17020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.801032][T16084] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1630.823573][T17020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.837742][T16084] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1630.838228][T17020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.857699][T16084] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1630.880183][T16084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1630.924332][T16084] usb 8-1: SerialNumber: syz [ 1630.943099][T26740] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1630.994701][T26740] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1631.038095][ T7990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.045962][ T7990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.099129][ T7984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.110556][ T7984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.346611][T13698] Bluetooth: hci7: command tx timeout [ 1631.399211][T26743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.601621][T16084] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1631.620531][T26743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.640888][T16084] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1631.651964][ T6894] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1631.667039][T16084] usb 8-1: USB disconnect, device number 5 [ 1632.255643][T16084] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1632.461538][T16084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.477557][T16084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.488173][T16084] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1632.497349][T16084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.985102][ T6894] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1632.997339][T16084] usb 4-1: config 0 descriptor?? [ 1633.007476][ T6894] em28xx 2-1:0.0: board has no eeprom [ 1633.085323][T26791] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1633.097258][ T6894] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1633.109109][T26791] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1633.132471][ T6894] em28xx 2-1:0.0: dvb set to bulk mode. [ 1633.145647][ T44] em28xx 2-1:0.0: Binding DVB extension [ 1633.164265][ T6894] usb 2-1: USB disconnect, device number 11 [ 1633.193449][ T6894] em28xx 2-1:0.0: Disconnecting em28xx [ 1633.318010][T26793] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1633.342923][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5828'. [ 1634.397543][T16084] hid (null): report_id 0 is invalid [ 1634.486897][ T44] em28xx 2-1:0.0: Registering input extension [ 1634.495218][T16084] logitech-hidpp-device 0003:046D:C086.0027: report_id 0 is invalid [ 1634.544627][ T6894] em28xx 2-1:0.0: Closing input extension [ 1634.556541][T16084] logitech-hidpp-device 0003:046D:C086.0027: item 0 0 1 8 parsing failed [ 1634.626618][T16084] logitech-hidpp-device 0003:046D:C086.0027: hidpp_probe:parse failed [ 1634.643628][ T6894] em28xx 2-1:0.0: Freeing device [ 1634.670797][T16084] logitech-hidpp-device 0003:046D:C086.0027: probe with driver logitech-hidpp-device failed with error -22 [ 1634.830996][T16998] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1634.875078][T16998] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1636.004162][T16998] usb 4-1: USB disconnect, device number 68 [ 1638.071634][T26860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1638.844162][T20669] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1639.041509][T20669] usb 2-1: Using ep0 maxpacket: 16 [ 1639.114784][T20669] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1639.210273][T20669] usb 2-1: config 1 has no interface number 0 [ 1639.231019][T20669] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1639.243272][T20669] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1639.258643][T20669] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1639.272130][ T6894] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1639.351114][T20669] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1639.363053][T20669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.372788][T20669] usb 2-1: Product: syz [ 1639.377139][T20669] usb 2-1: Manufacturer: syz [ 1639.382078][T20669] usb 2-1: SerialNumber: syz [ 1639.390392][T26862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1639.397657][T26862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1639.432398][ T6894] usb 9-1: Using ep0 maxpacket: 16 [ 1639.443264][ T6894] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.455295][ T6894] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.467523][ T6894] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.478431][ T6894] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1639.496203][ T6894] usb 9-1: config 7 interface 0 has no altsetting 0 [ 1639.505694][ T6894] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1639.524886][ T6894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.419281][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1640.425866][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1640.432524][T26862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1640.439800][T26862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1640.488002][ T6894] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.0029/input/input104 [ 1640.698614][T26877] fuse: Unknown parameter 'å' [ 1640.798190][ T6894] kye 0003:0458:5010.0029: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 1641.279967][ T30] audit: type=1400 audit(525834.379:850): avc: denied { mounton } for pid=26861 comm="syz.1.5845" path="/515/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1641.541456][T26910] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1641.883004][ T6894] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 1642.095692][ T6894] usb 9-1: device descriptor read/64, error -32 [ 1642.124892][T26915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.132267][T26915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.247169][T26915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1642.266590][T26915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1642.363054][ T6894] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 1642.483757][T21509] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.493358][T21509] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.507148][T21509] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.517037][ T6894] usb 9-1: device descriptor read/64, error -32 [ 1642.526816][T21509] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.690328][T26863] orangefs_mount: mount request failed with -4 [ 1642.780720][ T6894] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 1642.845097][ T6894] usb 9-1: device descriptor read/8, error -32 [ 1643.296706][T20669] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1643.348136][T20669] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1643.368583][ T6894] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 1643.390054][ T6894] usb 9-1: device descriptor read/8, error -32 [ 1643.392523][T20669] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1643.445594][T20669] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e6:17:6b:b6:3b:99 [ 1643.482130][T20669] usb 2-1: USB disconnect, device number 12 [ 1643.505049][T20669] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1643.533758][ T6894] raw-gadget.1 gadget.8: failed to queue suspend event [ 1643.580058][T16084] usb 9-1: USB disconnect, device number 2 [ 1643.639951][T26931] veth0_to_bridge: entered promiscuous mode [ 1643.653284][T26918] raw-gadget.1 gadget.8: failed to queue disconnect event [ 1643.669135][T20669] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1643.758687][T20669] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1643.788338][T20669] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1643.854667][T26938] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1643.908437][T26937] delete_channel: no stack [ 1643.948261][T26943] netlink: 'syz.7.5862': attribute type 1 has an invalid length. [ 1644.085342][T26943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1644.195644][T26946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1644.217007][T26946] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1644.231649][T26946] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1644.305122][T26929] veth0_to_bridge: left promiscuous mode [ 1644.457388][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5865'. [ 1645.587978][T26967] futex_wake_op: syz.6.5865 tries to shift op by -1; fix this program [ 1646.012912][T26979] syzkaller0: entered promiscuous mode [ 1646.064732][T26979] syzkaller0: entered allmulticast mode [ 1646.994980][T15125] IPVS: starting estimator thread 0... [ 1647.111952][T26996] IPVS: using max 46 ests per chain, 110400 per kthread [ 1647.167826][T16084] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1647.351372][T16084] usb 4-1: Using ep0 maxpacket: 32 [ 1647.359627][T16084] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1647.566075][T16084] usb 4-1: config 0 has no interface number 0 [ 1647.626511][T27007] veth0_to_bridge: entered promiscuous mode [ 1647.643320][T16084] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1648.725489][T16084] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1648.784105][T27006] veth0_to_bridge: left promiscuous mode [ 1648.800283][T16084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.857121][T16084] usb 4-1: Product: syz [ 1648.874419][T16084] usb 4-1: Manufacturer: syz [ 1648.896000][T16084] usb 4-1: SerialNumber: syz [ 1649.005984][T16084] usb 4-1: config 0 descriptor?? [ 1649.032706][T16084] smsc75xx v1.0.0 [ 1649.054002][T27023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1649.133707][ T89] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1649.347571][ T89] usb 8-1: Using ep0 maxpacket: 8 [ 1649.654908][ T89] usb 8-1: config 0 has an invalid interface number: 14 but max is 0 [ 1649.674316][ T89] usb 8-1: config 0 has no interface number 0 [ 1649.690984][ T89] usb 8-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=8e.87 [ 1649.710712][ T89] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.719509][ T89] usb 8-1: Product: syz [ 1649.723808][ T89] usb 8-1: Manufacturer: syz [ 1649.729460][T16084] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1649.740368][ T89] usb 8-1: SerialNumber: syz [ 1649.748765][ T89] usb 8-1: config 0 descriptor?? [ 1649.757632][T16084] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1649.773183][ T89] uvcvideo 8-1:0.14: Found UVC 0.00 device syz (06f8:300c) [ 1649.781923][ T89] uvcvideo 8-1:0.14: No valid video chain found. [ 1650.287733][ T30] audit: type=1400 audit(525842.794:851): avc: denied { watch } for pid=27031 comm="syz.1.5880" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1650.343125][ T30] audit: type=1400 audit(525842.794:852): avc: denied { watch_sb watch_reads } for pid=27031 comm="syz.1.5880" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 1650.873088][T16084] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1650.896062][T16084] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1650.917089][T16084] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1650.938382][T16084] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1650.969283][T16084] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1651.008391][T16084] usb 4-1: USB disconnect, device number 69 [ 1652.114243][ T5979] usb 8-1: USB disconnect, device number 6 [ 1652.943662][T27062] veth0_to_bridge: entered promiscuous mode [ 1652.961500][ T5979] IPVS: starting estimator thread 0... [ 1653.022560][T27061] veth0_to_bridge: left promiscuous mode [ 1653.193253][T27067] IPVS: using max 84 ests per chain, 201600 per kthread [ 1655.674824][ T56] block nbd4: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 120 seconds [ 1655.686689][ T56] block nbd4: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 120 seconds [ 1655.698451][ T56] block nbd4: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 120 seconds [ 1655.709519][ T56] block nbd4: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 120 seconds [ 1655.841523][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5896'. [ 1655.850573][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5896'. [ 1656.651449][T27109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5902'. [ 1657.487634][T27121] comedi comedi3: comedi_config --init_data is deprecated [ 1657.716442][T27130] fuse: Bad value for 'fd' [ 1657.733166][T27131] sit0: entered promiscuous mode [ 1657.755198][T27131] netlink: 'syz.3.5908': attribute type 1 has an invalid length. [ 1657.762957][T27131] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5908'. [ 1662.916283][T27175] lo: entered allmulticast mode [ 1663.020723][T27175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1664.206083][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5923'. [ 1664.214998][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5923'. [ 1665.121470][T27211] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1665.271668][T27211] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1665.385293][T27214] 8021q: VLANs not supported on ip6_vti0 [ 1665.401279][T27211] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1665.444308][T27211] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1665.772203][ T6894] IPVS: starting estimator thread 0... [ 1665.819634][T15125] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1665.893414][T27224] IPVS: using max 48 ests per chain, 115200 per kthread [ 1666.004564][T15125] usb 4-1: Using ep0 maxpacket: 16 [ 1666.054622][ T6894] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1666.054715][T15125] usb 4-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 1666.255310][T27235] comedi comedi3: comedi_config --init_data is deprecated [ 1666.299895][T15125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1666.333098][T15125] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 1666.372204][T15125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 240, changing to 11 [ 1666.375506][ T6894] usb 9-1: Using ep0 maxpacket: 8 [ 1666.394342][T15125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 49986, setting to 1024 [ 1666.408748][T15125] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1666.449231][T15125] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1666.453215][ T6894] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1666.467746][ T6894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.469382][T15125] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1666.477399][ T6894] usb 9-1: Product: syz [ 1666.488569][ T6894] usb 9-1: Manufacturer: syz [ 1666.494079][ T6894] usb 9-1: SerialNumber: syz [ 1666.501280][T15125] usb 4-1: Manufacturer: syz [ 1666.510131][ T6894] usb 9-1: config 0 descriptor?? [ 1666.517104][T15125] usb 4-1: config 0 descriptor?? [ 1666.634139][ T6894] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1666.645115][ T6894] dvb-usb: bulk message failed: -22 (2/0) [ 1666.650867][ T6894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1666.660850][ T6894] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1666.670722][ T6894] usb 9-1: media controller created [ 1666.688575][ T6894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1667.198686][ T6894] dvb-usb: bulk message failed: -22 (1/0) [ 1667.217812][ T6894] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1667.255160][ T6894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input106 [ 1667.274051][ T6894] dvb-usb: schedule remote query interval to 50 msecs. [ 1667.281229][ T6894] dvb-usb: bulk message failed: -22 (2/0) [ 1667.294394][ T6894] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1667.344359][ T6894] dvb-usb: bulk message failed: -22 (1/0) [ 1667.353698][ T6894] dvb-usb: error while querying for an remote control event. [ 1667.428493][ T6894] dvb-usb: bulk message failed: -22 (1/0) [ 1667.442497][T15125] rc_core: IR keymap rc-hauppauge not found [ 1667.448531][T15125] Registered IR keymap rc-empty [ 1667.466246][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.469482][ T6894] dvb-usb: error while querying for an remote control event. [ 1667.489727][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.589814][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1667.599992][ T89] dvb-usb: error while querying for an remote control event. [ 1667.619960][T15125] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1667.668865][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1667.669014][T15125] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input105 [ 1667.679881][ T89] dvb-usb: error while querying for an remote control event. [ 1667.716136][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.746898][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.775912][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1667.776385][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.781649][ T89] dvb-usb: error while querying for an remote control event. [ 1667.831571][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.841750][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1667.857293][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.872331][ T89] dvb-usb: error while querying for an remote control event. [ 1667.885680][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.915223][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.962440][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1667.990305][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1668.022767][T15125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1668.038957][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1668.045447][ T89] dvb-usb: error while querying for an remote control event. [ 1668.055431][T15125] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1668.068049][T15125] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1668.096328][T15125] usb 4-1: USB disconnect, device number 70 [ 1668.117137][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1668.164525][T27261] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5943'. [ 1668.191711][ T89] dvb-usb: error while querying for an remote control event. [ 1668.310853][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1668.378571][ T89] dvb-usb: error while querying for an remote control event. [ 1668.535213][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1668.541476][ T89] dvb-usb: error while querying for an remote control event. [ 1668.752215][ T89] dvb-usb: bulk message failed: -22 (1/0) [ 1668.758766][ T89] dvb-usb: error while querying for an remote control event. [ 1669.474150][ T6894] dvb-usb: bulk message failed: -22 (1/0) [ 1669.564642][ T6894] dvb-usb: error while querying for an remote control event. [ 1669.574994][T19810] usb 9-1: USB disconnect, device number 4 [ 1669.907637][T19810] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1672.182643][ T30] audit: type=1400 audit(525863.269:853): avc: denied { read } for pid=27303 comm="syz.3.5958" path="socket:[95779]" dev="sockfs" ino=95779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1672.738126][T27318] ubi: mtd0 is already attached to ubi31 [ 1675.544125][T27339] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1675.590673][T27339] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1675.684739][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5965'. [ 1675.873590][T20669] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1675.895279][T20669] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1675.974360][T27352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1677.758815][ T30] audit: type=1400 audit(525868.486:854): avc: denied { mounton } for pid=27391 comm="syz.7.5981" path="/68/file0" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1678.484884][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5985'. [ 1679.028750][T16998] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1679.230892][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1679.241426][T16998] usb 8-1: Using ep0 maxpacket: 32 [ 1679.261367][T16998] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.301206][T16998] usb 8-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1679.328298][T16998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.358728][T16998] usb 8-1: config 0 descriptor?? [ 1679.382271][T16998] dvb-usb: found a 'TeVii S662' in warm state. [ 1679.399927][T16998] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1679.412532][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1679.440170][T16998] dvb-usb: bulk message failed: -22 (2/0) [ 1679.447257][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1679.474930][T16998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1679.495973][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1679.508023][T16998] dvbdev: DVB: registering new adapter (TeVii S662) [ 1679.528931][T16998] usb 8-1: media controller created [ 1679.540606][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1679.566469][T16998] dvb-usb: bulk message failed: -22 (6/0) [ 1679.582524][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.593546][T16998] dw2102: i2c transfer failed. [ 1679.609126][T16998] dvb-usb: bulk message failed: -22 (6/0) [ 1679.618499][ T5922] usb 2-1: Product: syz [ 1679.622896][ T5922] usb 2-1: Manufacturer: syz [ 1679.632785][T16998] dw2102: i2c transfer failed. [ 1679.640171][ T5922] usb 2-1: SerialNumber: syz [ 1679.706621][T27418] tipc: Enabled bearer , priority 0 [ 1679.791047][ T5922] usb 2-1: config 0 descriptor?? [ 1679.802712][T16998] dvb-usb: bulk message failed: -22 (6/0) [ 1679.810736][ T5922] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1679.826752][T16998] dw2102: i2c transfer failed. [ 1679.833910][T16998] dvb-usb: bulk message failed: -22 (6/0) [ 1679.839646][T16998] dw2102: i2c transfer failed. [ 1680.302525][T27407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5986'. [ 1680.333500][ T5922] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1680.353949][T16998] dvb-usb: bulk message failed: -22 (6/0) [ 1680.360052][T27407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5986'. [ 1680.372742][T27418] tipc: Disabling bearer [ 1680.381205][T16998] dw2102: i2c transfer failed. [ 1680.397266][T27407] netlink: 'syz.7.5986': attribute type 6 has an invalid length. [ 1680.417978][T16998] dvb-usb: bulk message failed: -22 (6/0) [ 1680.424174][T16998] dw2102: i2c transfer failed. [ 1680.431914][T16998] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1680.471306][T16998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1680.515681][T16998] dvb-usb: bulk message failed: -22 (3/0) [ 1680.543250][T16998] dw2102: command 0x0e transfer failed. [ 1680.552307][T16998] dvb-usb: bulk message failed: -22 (3/0) [ 1680.584047][T27412] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1680.602769][T16998] dw2102: command 0x0e transfer failed. [ 1680.620161][T27412] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1680.649221][T27412] veth0_to_bridge: entered allmulticast mode [ 1680.655461][ T30] audit: type=1400 audit(525871.198:855): avc: denied { read } for pid=27411 comm="syz.1.5987" name="file0" dev="tmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1680.687463][T27430] serio: Serial port ttyS3 [ 1680.715787][T27412] veth0_to_bridge: entered promiscuous mode [ 1680.727031][T27412] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1680.734269][T27412] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1680.894859][ T5922] em28xx 2-1:0.0: unknown em28xx chip ID (151) [ 1680.963402][T16998] dvb-usb: bulk message failed: -22 (3/0) [ 1680.970483][T16998] dw2102: command 0x0e transfer failed. [ 1680.982393][T16998] dvb-usb: bulk message failed: -22 (3/0) [ 1680.997949][T16998] dw2102: command 0x0e transfer failed. [ 1681.014485][T16998] dvb-usb: bulk message failed: -22 (1/0) [ 1681.035776][T16998] dw2102: command 0x51 transfer failed. [ 1681.061056][T16998] dvb-usb: bulk message failed: -22 (5/0) [ 1681.102826][T16998] dw2102: i2c probe for address 0x68 failed. [ 1681.132946][T16998] dvb-usb: bulk message failed: -22 (5/0) [ 1681.140634][ T5922] em28xx 2-1:0.0: Config register raw data: 0x97 [ 1681.153120][T16998] dw2102: i2c probe for address 0x69 failed. [ 1681.167405][T16998] dvb-usb: bulk message failed: -22 (5/0) [ 1681.181390][T16998] dw2102: i2c probe for address 0x6a failed. [ 1681.194889][T16998] dw2102: probing for demodulator failed. Is the external power switched on? [ 1681.216736][T16998] dvb-usb: no frontend was attached by 'TeVii S662' [ 1681.383170][T27437] comedi comedi3: comedi_config --init_data is deprecated [ 1681.521123][T27412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.573696][T27412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.663857][T27431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.715978][T27431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.733515][T16998] rc_core: IR keymap rc-tt-1500 not found [ 1681.740608][T16998] Registered IR keymap rc-empty [ 1681.778944][ T5922] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1681.813011][T16998] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1681.813833][T16998] input: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input107 [ 1681.839562][T16998] dvb-usb: schedule remote query interval to 250 msecs. [ 1681.839578][T16998] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1681.839586][T16998] dvb-usb: TeVii S662 successfully initialized and connected. [ 1681.852884][ T5922] em28xx 2-1:0.0: No AC97 audio processor [ 1681.876160][T16998] usb 8-1: USB disconnect, device number 7 [ 1681.879621][ T5922] usb 2-1: USB disconnect, device number 13 [ 1681.900532][ T5922] em28xx 2-1:0.0: Disconnecting em28xx [ 1682.015519][ T5922] em28xx 2-1:0.0: Freeing device [ 1682.605664][T16998] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1682.984954][ T5922] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1683.176807][ T5922] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1683.221499][T27462] ubi: mtd0 is already attached to ubi31 [ 1683.227194][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.263219][ T5922] usb 2-1: Product: syz [ 1683.282958][ T5922] usb 2-1: Manufacturer: syz [ 1683.306401][T16998] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1683.328106][ T5922] usb 2-1: SerialNumber: syz [ 1683.372211][T16998] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1683.382893][ T5922] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1683.418018][T20669] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1684.233207][T27467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1052 sclass=netlink_route_socket pid=27467 comm=syz.1.5996 [ 1685.093025][T20669] usb 2-1: Service connection timeout for: 256 [ 1685.104026][T20669] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1685.119688][T27476] comedi comedi3: comedi_config --init_data is deprecated [ 1685.375056][T20669] ath9k_htc: Failed to initialize the device [ 1685.416962][T20669] usb 2-1: ath9k_htc: USB layer deinitialized [ 1685.743139][T27484] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6004'. [ 1685.943501][ T5923] usb 2-1: USB disconnect, device number 14 [ 1686.081116][T27498] nft_compat: unsupported protocol 177 [ 1686.099618][ T30] audit: type=1400 audit(525876.284:856): avc: denied { setattr } for pid=27495 comm="syz.6.6008" path="socket:[97180]" dev="sockfs" ino=97180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1686.161553][T27498] netlink: set zone limit has 4 unknown bytes [ 1686.168052][ T30] audit: type=1400 audit(525876.312:857): avc: denied { create } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 1686.363116][ T30] audit: type=1400 audit(525876.312:858): avc: denied { create } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1686.492981][ T5923] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1686.525587][ T30] audit: type=1400 audit(525876.312:859): avc: denied { create } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 1686.610431][ T30] audit: type=1400 audit(525876.312:860): avc: denied { create } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1686.674932][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 1686.705502][ T5923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 1686.718212][ T30] audit: type=1400 audit(525876.312:861): avc: denied { getopt } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1686.746795][ T5923] usb 2-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1686.772121][ T30] audit: type=1400 audit(525876.312:862): avc: denied { connect } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1686.806954][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1686.814311][ T5923] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.00 [ 1686.826616][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.834838][ T30] audit: type=1400 audit(525876.312:863): avc: denied { name_connect } for pid=27494 comm="syz.1.6007" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:port_t tclass=tcp_socket permissive=1 [ 1686.866999][ T5923] usb 2-1: config 0 descriptor?? [ 1687.094927][ T30] audit: type=1400 audit(525877.219:864): avc: denied { write } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1687.116652][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 1687.128758][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1687.144762][ T5923] usb 2-1: USB disconnect, device number 15 [ 1687.150828][ T30] audit: type=1400 audit(525877.228:865): avc: denied { read } for pid=27494 comm="syz.1.6007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1688.140446][T27533] netlink: 'syz.8.6017': attribute type 4 has an invalid length. [ 1688.208051][T27525] openvswitch: netlink: IP tunnel dst address not specified [ 1688.220771][T27536] netlink: 'syz.8.6017': attribute type 4 has an invalid length. [ 1688.311328][ T56] block nbd4: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 150 seconds [ 1688.322094][ T56] block nbd4: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 150 seconds [ 1688.334359][ T56] block nbd4: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 150 seconds [ 1688.345435][ T56] block nbd4: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 150 seconds [ 1690.286098][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6016'. [ 1690.550984][T27538] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6016'. [ 1691.180884][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6026'. [ 1691.343535][ T973] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1691.386698][ T973] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1692.208028][T27573] comedi comedi3: comedi_config --init_data is deprecated [ 1692.958162][T17668] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1693.040599][T27586] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6029'. [ 1693.059753][T17668] hid-generic 0000:0000:0000.002D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1693.368489][T27592] 9p: Bad value for 'rfdno' [ 1693.673749][T27594] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 1693.801020][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1693.801060][ T30] audit: type=1400 audit(525883.483:867): avc: denied { ioctl } for pid=27593 comm="syz.7.6031" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1694.052907][T27598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6032'. [ 1694.228200][T27602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1694.588905][T27608] CIFS mount error: No usable UNC path provided in device string! [ 1694.588905][T27608] [ 1694.600132][T27608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1695.428545][ T30] audit: type=1326 audit(525884.493:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27606 comm="syz.1.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b438f749 code=0x7ffc0000 [ 1695.487963][ T30] audit: type=1326 audit(525884.493:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27606 comm="syz.1.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b438f749 code=0x7ffc0000 [ 1695.711760][T27612] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1696.161844][ T30] audit: type=1326 audit(525884.493:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27606 comm="syz.1.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f55b438f749 code=0x7ffc0000 [ 1697.681096][ T5186] udevd[5186]: worker [25209] /devices/virtual/block/nbd4 is taking a long time [ 1697.695781][T27633] ubi: mtd0 is already attached to ubi31 [ 1698.023893][T27639] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6044'. [ 1698.151475][T27640] fuse: Unknown parameter 'group_idG00000000000000000000' [ 1698.326815][T27645] netlink: 'syz.3.6046': attribute type 5 has an invalid length. [ 1699.881506][T27660] ucma_write: process 293 (syz.7.6048) changed security contexts after opening file descriptor, this is not allowed. [ 1700.408253][T27668] SELinux: policydb magic number 0xb65 does not match expected magic number 0xf97cff8c [ 1700.420605][T27668] SELinux: failed to load policy [ 1700.727258][T27675] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6055'. [ 1700.860182][T27677] netlink: 'syz.7.6056': attribute type 4 has an invalid length. [ 1700.883581][T27677] netlink: 'syz.7.6056': attribute type 4 has an invalid length. [ 1702.012409][ T973] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1702.184468][ T973] usb 9-1: Using ep0 maxpacket: 16 [ 1702.193464][ T973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1702.207941][ T973] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1702.219062][ T973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.227760][ T973] usb 9-1: Product: syz [ 1702.232104][ T973] usb 9-1: Manufacturer: syz [ 1702.238276][ T973] usb 9-1: SerialNumber: syz [ 1702.254050][ T973] usb 9-1: config 0 descriptor?? [ 1702.267839][ T973] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1702.285451][ T973] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1702.771744][T16998] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1702.792836][ T5137] Bluetooth: hci5: command 0x0406 tx timeout [ 1702.908347][ T973] em28xx 9-1:0.0: chip ID is em28178 [ 1702.966227][T16998] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 1702.976248][T16998] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1702.985504][T16998] usb 2-1: config 0 has no interface number 0 [ 1702.992401][T16998] usb 2-1: config 0 interface 147 altsetting 157 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1703.005915][T16998] usb 2-1: config 0 interface 147 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1703.021567][T16998] usb 2-1: config 0 interface 147 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 1703.033732][T16998] usb 2-1: config 0 interface 147 has no altsetting 0 [ 1703.044184][T16998] usb 2-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice= 2.ac [ 1703.053956][T16998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.062631][T16998] usb 2-1: Product: syz [ 1703.067170][T16998] usb 2-1: Manufacturer: syz [ 1703.073437][T16998] usb 2-1: SerialNumber: syz [ 1703.126221][T16998] usb 2-1: config 0 descriptor?? [ 1703.133844][T27688] IPv6: NLM_F_CREATE should be specified when creating new route [ 1703.157173][T27709] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1703.213021][ T973] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1703.221374][ T973] em28xx 9-1:0.0: board has no eeprom [ 1703.284834][ T973] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1703.292786][ T973] em28xx 9-1:0.0: dvb set to bulk mode. [ 1703.298694][T13326] em28xx 9-1:0.0: Binding DVB extension [ 1703.316902][ T973] usb 9-1: USB disconnect, device number 6 [ 1703.364687][T13326] em28xx 9-1:0.0: Registering input extension [ 1703.393105][ T973] em28xx 9-1:0.0: Disconnecting em28xx [ 1703.409566][T16998] qmi_wwan 2-1:0.147: skipping garbage [ 1703.421956][T16998] qmi_wwan 2-1:0.147: bogus CDC Union: master=0, slave=0 [ 1703.447040][T16998] qmi_wwan 2-1:0.147: probe with driver qmi_wwan failed with error -22 [ 1703.489228][T13326] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1703.501997][T16998] usb 2-1: USB disconnect, device number 16 [ 1703.508073][T13326] Registered IR keymap rc-empty [ 1703.531587][T13326] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1703.556758][T13326] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input108 [ 1703.601906][T13326] em28xx 9-1:0.0: Input extension successfully initialized [ 1703.632412][ T973] em28xx 9-1:0.0: Closing input extension [ 1703.663531][ T973] em28xx 9-1:0.0: Freeing device [ 1703.879474][T27729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6073'. [ 1703.888418][T27729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6073'. [ 1703.909426][T27731] x_tables: duplicate underflow at hook 1 [ 1704.492411][T27750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6078'. [ 1705.115152][T27755] lo: entered allmulticast mode [ 1705.126976][T27755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1705.976164][T27761] overlayfs: failed to clone lowerpath [ 1706.161467][T27760] overlayfs: failed to clone lowerpath [ 1706.174869][T27763] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1706.193694][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1706.457723][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1710.550511][T20669] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1710.616349][T27805] fuse: root generation should be zero [ 1711.296930][T20669] usb 4-1: Using ep0 maxpacket: 32 [ 1711.320598][T20669] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 1711.343256][T20669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.362620][T20669] usb 4-1: Product: syz [ 1711.376393][T20669] usb 4-1: Manufacturer: syz [ 1711.403090][T20669] usb 4-1: SerialNumber: syz [ 1711.419355][T20669] usb 4-1: config 0 descriptor?? [ 1711.455257][T20669] option 4-1:0.0: GSM modem (1-port) converter detected [ 1711.521239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.533641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.545908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.558142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.570396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.582906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.595124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.607325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.619541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.632096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1711.917524][T27823] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6097'. [ 1714.262430][T16084] usb 4-1: USB disconnect, device number 71 [ 1715.065546][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6101'. [ 1715.096267][T27840] netlink: 'syz.7.6101': attribute type 5 has an invalid length. [ 1715.138039][T16084] option 4-1:0.0: device disconnected [ 1715.346284][T27840] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6101'. [ 1715.492792][T27848] atomic_op ffff88804e170198 conn xmit_atomic 0000000000000000 [ 1716.275056][ C1] sched: DL replenish lagged too much [ 1716.878870][ C1] net_ratelimit: 13288 callbacks suppressed [ 1716.884888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1716.899565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1716.912309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1716.927243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1716.941300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1716.953811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1716.971786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1716.985587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1717.001207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1717.017597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1720.708266][ T56] block nbd4: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 180 seconds [ 1720.748407][ T56] block nbd4: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 180 seconds [ 1720.904830][ T56] block nbd4: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 180 seconds [ 1720.926639][ T56] block nbd4: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 180 seconds [ 1721.453236][T27878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1722.054487][ T5186] udevd[5186]: worker [25209] /devices/virtual/block/nbd4 timeout; kill it [ 1722.116824][ T5186] udevd[5186]: seq 24310 '/devices/virtual/block/nbd4' killed [ 1722.237117][ C1] net_ratelimit: 19915 callbacks suppressed [ 1722.237131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.255137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.267210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.279306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.291404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.303524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.315638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.327722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.339799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1722.351893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1724.536744][ T31] INFO: task syz.4.5587:25805 blocked for more than 144 seconds. [ 1724.549491][ T31] Tainted: G L syzkaller #0 [ 1724.571551][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1724.618358][ T31] task:syz.4.5587 state:D stack:28216 pid:25805 tgid:25797 ppid:16172 task_flags:0x400140 flags:0x00080002 [ 1724.664431][ T31] Call Trace: [ 1724.674851][ T31] [ 1724.686088][ T31] ? __schedule+0x10b9/0x6150 [ 1724.805276][ T31] __schedule+0x1139/0x6150 [ 1724.826449][ T31] ? __pfx___schedule+0x10/0x10 [ 1724.839446][ T31] ? find_held_lock+0x2b/0x80 [ 1724.853452][ T31] ? schedule+0x2d7/0x3a0 [ 1724.868133][ T31] schedule+0xe7/0x3a0 [ 1724.881548][ T31] schedule_preempt_disabled+0x13/0x30 [ 1724.897703][ T31] __mutex_lock+0xc69/0x1ca0 [ 1724.917277][ T31] ? bdev_open+0xa2/0xe40 [ 1724.933180][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1724.949949][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 1724.965509][ T31] ? disk_block_events+0x21/0x140 [ 1724.981039][ T31] ? bdev_open+0xa2/0xe40 [ 1724.995857][ T31] bdev_open+0xa2/0xe40 [ 1725.009474][ T31] ? iput+0x35/0x40 [ 1725.024190][ T31] bdev_file_open_by_dev+0x182/0x210 [ 1725.046943][ T31] setup_bdev_super+0x39b/0x730 [ 1725.064154][ T31] get_tree_bdev_flags+0x363/0x620 [ 1725.079726][ T31] ? __pfx_qnx6_fill_super+0x10/0x10 [ 1725.096019][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1725.114173][ T31] ? security_capable+0x7e/0x260 [ 1725.135891][ T31] vfs_get_tree+0x8e/0x330 [ 1725.153867][ T31] path_mount+0x7bf/0x23a0 [ 1725.171531][ T31] ? rcu_is_watching+0x12/0xc0 [ 1725.191831][ T31] ? __pfx_path_mount+0x10/0x10 [ 1725.203742][ T31] ? kmem_cache_free+0x2d8/0x770 [ 1725.218818][ T31] ? putname+0xf5/0x1a0 [ 1725.233596][ T31] ? putname+0xf5/0x1a0 [ 1725.248521][ T31] ? putname+0xf5/0x1a0 [ 1725.263172][ T31] ? __x64_sys_mount+0x293/0x310 [ 1725.282750][ T31] __x64_sys_mount+0x293/0x310 [ 1725.300591][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1725.316353][ T31] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1725.334068][ T31] do_syscall_64+0xcd/0xf80 [ 1725.351110][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.372620][ T31] RIP: 0033:0x7f6f34d8f749 [ 1725.387657][ T31] RSP: 002b:00007f6f35c0c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1725.416841][ T31] RAX: ffffffffffffffda RBX: 00007f6f34fe6180 RCX: 00007f6f34d8f749 [ 1725.433357][ T31] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 1725.450428][ T31] RBP: 00007f6f34e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1725.469404][ T31] R10: 0000000000208800 R11: 0000000000000246 R12: 0000000000000000 [ 1725.486265][ T31] R13: 00007f6f34fe6218 R14: 00007f6f34fe6180 R15: 00007ffdc22435e8 [ 1725.506995][ T31] [ 1725.514916][ T31] [ 1725.514916][ T31] Showing all locks held in the system: [ 1725.540281][ T31] 1 lock held by khungtaskd/31: [ 1725.549998][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1725.815227][ T31] 2 locks held by kworker/1:1/44: [ 1725.825873][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1725.847383][ T31] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 1725.865627][ T31] 3 locks held by kworker/1:2/89: [ 1725.877366][ T31] 2 locks held by getty/5572: [ 1725.887630][ T31] #0: ffff88814da8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1725.934212][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 1725.968459][ T31] 1 lock held by udevd/25209: [ 1725.998425][ T31] #0: ffff8880260f7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1726.044556][ T31] 2 locks held by syz.4.5587/25805: [ 1726.064821][ T31] #0: ffff8880436080e0 (&type->s_umount_key#97/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd00 [ 1726.093478][ T31] #1: ffff8880260f7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1726.113506][ T31] 1 lock held by syz.3.6115/27892: [ 1726.124467][ T31] #0: ffff8880832c8340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1726.144836][ T31] 7 locks held by syz.3.6115/27893: [ 1726.159658][ T31] [ 1726.175003][ T31] ============================================= [ 1726.175003][ T31] [ 1726.199454][ T31] NMI backtrace for cpu 0 [ 1726.199475][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.199499][ T31] Tainted: [L]=SOFTLOCKUP [ 1726.199505][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1726.199515][ T31] Call Trace: [ 1726.199536][ T31] [ 1726.199543][ T31] dump_stack_lvl+0x116/0x1f0 [ 1726.199569][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1726.199602][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1726.199622][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1726.199651][ T31] sys_info+0x133/0x180 [ 1726.199674][ T31] watchdog+0xe66/0x1180 [ 1726.199698][ T31] ? rcu_is_watching+0x12/0xc0 [ 1726.199716][ T31] ? __pfx_watchdog+0x10/0x10 [ 1726.199732][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1726.199755][ T31] ? __kthread_parkme+0x19e/0x250 [ 1726.199774][ T31] ? __pfx_watchdog+0x10/0x10 [ 1726.199792][ T31] kthread+0x3c5/0x780 [ 1726.199812][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.199833][ T31] ? rcu_is_watching+0x12/0xc0 [ 1726.199848][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.199868][ T31] ret_from_fork+0x983/0xb10 [ 1726.199888][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.199908][ T31] ? __switch_to+0x7af/0x10d0 [ 1726.199929][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.199949][ T31] ret_from_fork_asm+0x1a/0x30 [ 1726.199985][ T31] [ 1726.199992][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1726.342617][ C1] NMI backtrace for cpu 1 [ 1726.342634][ C1] CPU: 1 UID: 0 PID: 26622 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.342653][ C1] Tainted: [L]=SOFTLOCKUP [ 1726.342658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1726.342667][ C1] RIP: 0010:unwind_next_frame+0x36/0x20b0 [ 1726.342689][ C1] Code: ff df 41 57 48 89 fa 41 56 48 c1 ea 03 41 55 49 89 fd 41 54 55 53 48 83 ec 38 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 02 0b 00 00 <41> 8b 5d 00 31 ed 85 db 75 15 48 83 c4 38 89 e8 5b 5d 41 5c 41 5d [ 1726.342702][ C1] RSP: 0018:ffffc90000a07c78 EFLAGS: 00000246 [ 1726.342713][ C1] RAX: 0000000000000000 RBX: ffffc90000a07ce8 RCX: ffffc90000a07c3c [ 1726.342722][ C1] RDX: 1ffff92000140f9d RSI: ffffffff89d8df5d RDI: ffffc90000a07ce8 [ 1726.342731][ C1] RBP: ffffc90000a07d78 R08: 0000000000000001 R09: 00000000f501fefe [ 1726.342740][ C1] R10: 0000000000000002 R11: 0000000000083d62 R12: ffffffff81a96100 [ 1726.342748][ C1] R13: ffffc90000a07ce8 R14: 0000000000000000 R15: ffff888035a68000 [ 1726.342757][ C1] FS: 0000555594e11500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1726.342771][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.342780][ C1] CR2: 00007fcbd05b7f18 CR3: 0000000045493000 CR4: 00000000003526f0 [ 1726.342788][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1726.342796][ C1] DR3: 0000000000008000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1726.342804][ C1] Call Trace: [ 1726.342809][ C1] [ 1726.342814][ C1] ? sockopt_lock_sock+0x54/0x70 [ 1726.342828][ C1] ? kasan_save_track+0x14/0x30 [ 1726.342849][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1726.342865][ C1] arch_stack_walk+0x94/0x100 [ 1726.342882][ C1] ? do_ip_getsockopt+0x1e2d/0x2750 [ 1726.342903][ C1] stack_trace_save+0x8e/0xc0 [ 1726.342916][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1726.342929][ C1] ? __lock_acquire+0x436/0x2890 [ 1726.342945][ C1] ? lock_acquire+0x179/0x330 [ 1726.342959][ C1] kasan_save_stack+0x33/0x60 [ 1726.342972][ C1] ? kasan_save_stack+0x33/0x60 [ 1726.342985][ C1] ? kasan_save_track+0x14/0x30 [ 1726.342999][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1726.343014][ C1] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1726.343026][ C1] ? skb_ext_add+0xf8/0x7b0 [ 1726.343041][ C1] ? br_nf_forward_ip.part.0+0x28/0x810 [ 1726.343057][ C1] ? br_nf_forward+0xf0f/0x1be0 [ 1726.343071][ C1] ? nf_hook_slow+0xbe/0x200 [ 1726.343084][ C1] ? nf_hook+0x45e/0x780 [ 1726.343095][ C1] ? __br_forward+0x1be/0x5b0 [ 1726.343107][ C1] ? maybe_deliver+0xf1/0x180 [ 1726.343118][ C1] ? br_flood+0x17c/0x650 [ 1726.343130][ C1] ? br_handle_frame_finish+0x1117/0x1f00 [ 1726.343144][ C1] ? br_nf_hook_thresh+0x307/0x410 [ 1726.343158][ C1] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1726.343173][ C1] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1726.343187][ C1] ? br_nf_pre_routing+0x860/0x15b0 [ 1726.343201][ C1] ? br_handle_frame+0xb28/0x14e0 [ 1726.343214][ C1] ? __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 1726.343234][ C1] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 1726.343255][ C1] ? __netif_receive_skb+0x1d/0x160 [ 1726.343271][ C1] ? process_backlog+0x4a2/0x1650 [ 1726.343287][ C1] ? __napi_poll.constprop.0+0xb3/0x540 [ 1726.343306][ C1] ? net_rx_action+0x9f9/0xfa0 [ 1726.343324][ C1] ? handle_softirqs+0x219/0x950 [ 1726.343343][ C1] ? do_softirq+0xb2/0xf0 [ 1726.343361][ C1] ? __local_bh_enable_ip+0x100/0x120 [ 1726.343381][ C1] ? sockopt_lock_sock+0x54/0x70 [ 1726.343393][ C1] ? do_ip_getsockopt+0x1e2d/0x2750 [ 1726.343422][ C1] kasan_save_track+0x14/0x30 [ 1726.343439][ C1] __kasan_slab_alloc+0x89/0x90 [ 1726.343458][ C1] kmem_cache_alloc_noprof+0x25e/0x770 [ 1726.343474][ C1] ? skb_ext_add+0xf8/0x7b0 [ 1726.343494][ C1] ? skb_ext_add+0xf8/0x7b0 [ 1726.343512][ C1] skb_ext_add+0xf8/0x7b0 [ 1726.343531][ C1] ? find_held_lock+0x2b/0x80 [ 1726.343553][ C1] br_nf_forward_ip.part.0+0x28/0x810 [ 1726.343570][ C1] br_nf_forward+0xf0f/0x1be0 [ 1726.343586][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 1726.343600][ C1] nf_hook_slow+0xbe/0x200 [ 1726.343614][ C1] nf_hook+0x45e/0x780 [ 1726.343626][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1726.343639][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1726.343652][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1726.343667][ C1] __br_forward+0x1be/0x5b0 [ 1726.343680][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1726.343694][ C1] maybe_deliver+0xf1/0x180 [ 1726.343707][ C1] br_flood+0x17c/0x650 [ 1726.343721][ C1] br_handle_frame_finish+0x1117/0x1f00 [ 1726.343737][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1726.343755][ C1] ? ip6t_do_table+0xc25/0x1c30 [ 1726.343774][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1726.343792][ C1] ? nf_hook_slow+0x132/0x200 [ 1726.343806][ C1] br_nf_hook_thresh+0x307/0x410 [ 1726.343820][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1726.343841][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1726.343857][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1726.343871][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1726.343890][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1726.343904][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1726.343918][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1726.343933][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1726.343950][ C1] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1726.343966][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1726.343981][ C1] ? lock_acquire+0x179/0x330 [ 1726.343996][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1726.344011][ C1] ? net_generic+0xea/0x2a0 [ 1726.344027][ C1] br_nf_pre_routing+0x860/0x15b0 [ 1726.344043][ C1] br_handle_frame+0xb28/0x14e0 [ 1726.344058][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1726.344074][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1726.344090][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1726.344104][ C1] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 1726.344126][ C1] ? kmem_cache_free+0x2d8/0x770 [ 1726.344139][ C1] ? find_held_lock+0x2b/0x80 [ 1726.344156][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1726.344172][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1726.344191][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1726.344205][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1726.344220][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 1726.344234][ C1] ? ip6_mc_input+0x515/0xf60 [ 1726.344248][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 1726.344261][ C1] ? __lock_acquire+0x436/0x2890 [ 1726.344277][ C1] ? process_backlog+0x450/0x1650 [ 1726.344293][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1726.344311][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1726.344329][ C1] ? lock_acquire+0x179/0x330 [ 1726.344345][ C1] ? process_backlog+0x450/0x1650 [ 1726.344362][ C1] __netif_receive_skb+0x1d/0x160 [ 1726.344379][ C1] process_backlog+0x4a2/0x1650 [ 1726.344398][ C1] __napi_poll.constprop.0+0xb3/0x540 [ 1726.344417][ C1] net_rx_action+0x9f9/0xfa0 [ 1726.344437][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1726.344455][ C1] ? mark_held_locks+0x49/0x80 [ 1726.344469][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1726.344486][ C1] ? tmigr_handle_remote+0x132/0x380 [ 1726.344502][ C1] ? run_timer_base+0x121/0x190 [ 1726.344517][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1726.344533][ C1] handle_softirqs+0x219/0x950 [ 1726.344552][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1726.344568][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 1726.344582][ C1] ? sockopt_lock_sock+0x54/0x70 [ 1726.344595][ C1] do_softirq+0xb2/0xf0 [ 1726.344611][ C1] [ 1726.344615][ C1] [ 1726.344620][ C1] __local_bh_enable_ip+0x100/0x120 [ 1726.344638][ C1] sockopt_lock_sock+0x54/0x70 [ 1726.344649][ C1] do_ip_getsockopt+0x1e2d/0x2750 [ 1726.344669][ C1] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 1726.344689][ C1] ? find_held_lock+0x2b/0x80 [ 1726.344709][ C1] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1726.344730][ C1] ? avc_has_perm+0x144/0x1f0 [ 1726.344748][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 1726.344767][ C1] ? __lock_acquire+0x436/0x2890 [ 1726.344784][ C1] ip_getsockopt+0x9b/0x1e0 [ 1726.344802][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 1726.344819][ C1] ? find_held_lock+0x2b/0x80 [ 1726.344840][ C1] ? __might_fault+0xe3/0x190 [ 1726.344851][ C1] ? __might_fault+0xe3/0x190 [ 1726.344862][ C1] ? __might_fault+0x13b/0x190 [ 1726.344875][ C1] tcp_getsockopt+0xa1/0x100 [ 1726.344890][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1726.344905][ C1] do_sock_getsockopt+0x324/0x410 [ 1726.344921][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1726.344935][ C1] ? kfree+0x27d/0x6e0 [ 1726.344948][ C1] ? do_sock_setsockopt+0x101/0x1d0 [ 1726.344963][ C1] __sys_getsockopt+0x12f/0x260 [ 1726.344977][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 1726.344988][ C1] ? do_syscall_64+0x91/0xf80 [ 1726.345003][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1726.345018][ C1] do_syscall_64+0xcd/0xf80 [ 1726.345033][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.345047][ C1] RIP: 0033:0x7fcbd039148a [ 1726.345058][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 1726.345069][ C1] RSP: 002b:00007ffd964ddbc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 1726.345082][ C1] RAX: ffffffffffffffda RBX: 00007ffd964ddc50 RCX: 00007fcbd039148a [ 1726.345090][ C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1726.345098][ C1] RBP: 0000000000000003 R08: 00007ffd964ddbec R09: 00007ffd964de007 [ 1726.345106][ C1] R10: 00007ffd964ddc50 R11: 0000000000000202 R12: 00007fcbd05b8520 [ 1726.345114][ C1] R13: 00007ffd964ddbec R14: 0000000000000000 R15: 00007fcbd05ba020 [ 1726.345127][ C1] [ 1726.350033][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1726.350050][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.350071][ T31] Tainted: [L]=SOFTLOCKUP [ 1726.350078][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1726.350087][ T31] Call Trace: [ 1726.350093][ T31] [ 1726.350100][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1726.350122][ T31] vpanic+0x640/0x6f0 [ 1726.350140][ T31] panic+0xca/0xd0 [ 1726.350155][ T31] ? __pfx_panic+0x10/0x10 [ 1726.350170][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1726.350188][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1726.350211][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1726.350234][ T31] ? watchdog+0xe83/0x1180 [ 1726.350251][ T31] ? watchdog+0xe76/0x1180 [ 1726.350268][ T31] watchdog+0xe94/0x1180 [ 1726.350288][ T31] ? rcu_is_watching+0x12/0xc0 [ 1726.350303][ T31] ? __pfx_watchdog+0x10/0x10 [ 1726.350317][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1726.350337][ T31] ? __kthread_parkme+0x19e/0x250 [ 1726.350353][ T31] ? __pfx_watchdog+0x10/0x10 [ 1726.350369][ T31] kthread+0x3c5/0x780 [ 1726.350386][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.350405][ T31] ? rcu_is_watching+0x12/0xc0 [ 1726.350419][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.350436][ T31] ret_from_fork+0x983/0xb10 [ 1726.350453][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.350471][ T31] ? __switch_to+0x7af/0x10d0 [ 1726.350489][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.350507][ T31] ret_from_fork_asm+0x1a/0x30 [ 1726.350538][ T31] [ 1727.434302][ T31] Kernel Offset: disabled [ 1727.438600][ T31] Rebooting in 86400 seconds..