last executing test programs: 15m38.36461569s ago: executing program 32 (id=978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff91, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="b10d13d9eb32f2307b3d5a34000c000000a001010006000000b370a51670"], 0x0) 13m15.503049249s ago: executing program 33 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='98', 0x15) 12m53.532618393s ago: executing program 34 (id=2037): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x40140921, 0x200000000005) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 11m7.932017294s ago: executing program 35 (id=2888): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 10m53.771991931s ago: executing program 5 (id=2950): socket$inet(0x2, 0x1, 0x6) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0), 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"/306, @ANYRES8=r1], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 10m53.443599354s ago: executing program 5 (id=2953): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/self/fail-nth\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) mknodat$loop(r0, &(0x7f00000000c0)='./proc\x00', 0x1, 0x1) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001340)="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", 0x220}, {&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b21909092ab24a155c0285968950c5d57e08533c7216e8dd6ccabae10c2", 0xb3}, {&(0x7f0000000580)="7d1455a2eefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330bba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772ad57e70daa13148536e5cfe1eec171afbbf0a99ab5e3b0658fe289beff381c455f37c2b1c71e0e98f34a344141f9996f71a6c32cd9e930f86b9aa8d31e566b300"/146, 0x92}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f0000000a80)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f8cb80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f00000003c0)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca9", 0x33}], 0x6}}], 0x2, 0x2000c044) writev(r2, &(0x7f0000002680)=[{&(0x7f0000001640)="fd4fbcc9843f5bdd1ca0576c1d2d690e03f3c4ca2fc0dc6b180ba316deb25b61a8169d4bbf5933f46b905c031b1a565854051d0598119ecbb85c9deba85837ba646495b48eb59d65f1701ac020dd8ee9aa5fa8c4a47d2415c08ac5ebd07839b361ee1005e0c097b128dce541eac1e80cfb7234b1604c20283eb7ada224528f828ad7191fb65180a7be2c30a7510a16e0548067726acbf3615bc379bd7bcb8a", 0x9f}], 0x1) write(r0, 0x0, 0x0) 10m52.45941717s ago: executing program 5 (id=2956): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0xa500014c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)) chdir(&(0x7f00000001c0)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6) socket$inet(0x2, 0x4000000000000001, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 10m52.160414899s ago: executing program 5 (id=2957): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x5c30c2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x3818c1, 0x0) readv(r0, &(0x7f0000000340)=[{0x0}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x460}, {0xffffffffffffffff, 0x5401}], 0x2, &(0x7f0000000440), &(0x7f0000000300)={[0x3ff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000180)=0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000001c0)=@secondary) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xbc9046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x19a3052, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r5, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x2}) 10m51.529551527s ago: executing program 5 (id=2960): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x10000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x1) mmap$snddsp(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x100000b, 0x100010, r2, 0x9000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) timer_create(0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0x4000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000000400)) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4}) timer_settime(r4, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000002180)) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) 10m50.980168964s ago: executing program 5 (id=2962): socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='esdfs\x00', 0x3ea60bebe7f00e78, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='1\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x200800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@version_u}], [{@dont_hash}, {@fsname={'fsname', 0x3d, '*+{@.\'^]\\:*'}}, {@obj_type={'obj_type', 0x3d, '$!'}}]}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 10m50.527552198s ago: executing program 36 (id=2962): socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='esdfs\x00', 0x3ea60bebe7f00e78, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='1\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x200800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@version_u}], [{@dont_hash}, {@fsname={'fsname', 0x3d, '*+{@.\'^]\\:*'}}, {@obj_type={'obj_type', 0x3d, '$!'}}]}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 9m9.436568227s ago: executing program 4 (id=3367): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="280320000a0014a888007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe83fdc0d6c9d3e87600b81f61b3195b2e55e0d10d5dd", 0x55, 0x400c010, &(0x7f0000000000)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) 9m9.315385634s ago: executing program 4 (id=3368): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000040) 8m59.759064348s ago: executing program 4 (id=3421): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c0008"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000108, 0x0, 0x3ff}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000047"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a0000000b000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000477ee0c9199c01c1826353f6b059b4009055c82c0fc6128c30bbbae2bd69b7cfcfe4dd718250e636a1104d1453e88896173b0baf6e0f7d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r9}, 0xc) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000280)={0xa, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0xd, 0x6, 0x48d4}, {0x40000000, 0x4, 0x1, 0x7, 0x81, 0x7, 0x5}, {0x0, 0x2005, 0x1, 0x3ff, 0x0, 0x8004, 0xffff}, {0xd, 0x20000002, 0x5, 0x7, 0xdf1, 0x7, 0x80000001}, {0x6, 0x2be, 0x1, 0xd, 0x3, 0x7ff, 0xc}, {0xd, 0x100, 0x7, 0x6, 0x3, 0x2, 0x3}, {0x40000000, 0x1, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}, {0x80000007, 0x10, 0x1, 0x80, 0x441, 0x8, 0x6}, {0x1, 0x5, 0x5, 0x9, 0x5, 0x4, 0x4f}, {0x40000008, 0x3ac, 0x4, 0x7, 0x7, 0x1, 0x6}]}) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000380), 0x111, 0x5}}, 0xfffffffffffffc66) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x9}}, 0x20) writev(r14, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0xd9a131a242b619bd) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) 8m58.049628768s ago: executing program 4 (id=3433): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0xf0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000980)={0xffff, 0x0, "83594fe93d78b83238556b7ceae6d7f02746767f8d1f912b20e110c4d238fa9b11b3c046654b43ecbb2b5ecf1be0ac07329c3c694ccf87d484a29fc039580cfbbd44440bc9956b884417d3f4862854d9523fc8dcd03960de918f23cddd6a72074fe147cf2ee73d75be28d013d1ee5e0d83b650a59e64fbfb5fc7423d381d6a497c15f03b49ff8242c31af5b538640c9f96f7b18ca0da06aad29f824490056265d0e0d1e8f843cd0e54f0f436382ebd00223188b2a0b49cdcdba0fe68760f55505d6afc0f2749c212118821a35878d62cda26a66ce262ba121aae04c6ff272acf07c57c52224da08fe5c63dabba39df09805cc82ab8051a5ac3a622e7f0795188"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090027f38200000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x42884}, 0x10) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 8m53.714903877s ago: executing program 4 (id=3454): mknod(0x0, 0x1ffa, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000240), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x12}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sg(0x0, 0xf17, 0x100) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900210000000000030000001c140000fe04000100000000"], 0x1c}}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r8 = io_uring_setup(0x2a8a, &(0x7f0000000240)={0x0, 0xb0e3, 0x1046, 0x0, 0x33b}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r8, 0xc, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904"], 0x0) 8m49.512311535s ago: executing program 4 (id=3466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x7) fremovexattr(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="62747266732e00caee4e12029398739a5090bc6c511053d39f88d3df6f253d5742077734d8f1ac5497cc0dc9a2cc28acc1d861efd12e8d88a165b5cabea88a34316168e858d5ea4ac77cbab65a95e91f6e274e7604f396e836a24bd4ca6b1c87d4d17107cf60bcec39ded407c2fe2bec224e6e976e3ec90d168691b5691bea02f3cc86358091a13c6143307b7c800aad07e3f76f61cd66829134b3fa77ca2bcc952102935d730e2e33c062011490992d27de468d0bc308000000000000002a5f2589862ad8831151fb5a03ac0f0cc835110000000000000000"]) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7095, 0x5, 0xf461, 'pptp\x00', {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x300}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d000000000000001c0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$MEMGETOOBSEL(0xffffffffffffffff, 0x80c84d0a, &(0x7f00000006c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x60402, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) eventfd2(0xffff, 0x80800) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000480)) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000100)) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='vcan0\x00') ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 8m34.302215555s ago: executing program 37 (id=3466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x7) fremovexattr(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="62747266732e00caee4e12029398739a5090bc6c511053d39f88d3df6f253d5742077734d8f1ac5497cc0dc9a2cc28acc1d861efd12e8d88a165b5cabea88a34316168e858d5ea4ac77cbab65a95e91f6e274e7604f396e836a24bd4ca6b1c87d4d17107cf60bcec39ded407c2fe2bec224e6e976e3ec90d168691b5691bea02f3cc86358091a13c6143307b7c800aad07e3f76f61cd66829134b3fa77ca2bcc952102935d730e2e33c062011490992d27de468d0bc308000000000000002a5f2589862ad8831151fb5a03ac0f0cc835110000000000000000"]) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7095, 0x5, 0xf461, 'pptp\x00', {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x300}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d000000000000001c0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$MEMGETOOBSEL(0xffffffffffffffff, 0x80c84d0a, &(0x7f00000006c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x60402, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) eventfd2(0xffff, 0x80800) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000480)) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000100)) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='vcan0\x00') ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 4m44.155723094s ago: executing program 1 (id=4545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdb01252a", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 4m43.85909909s ago: executing program 1 (id=4549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt(r3, 0x29, 0x6, 0x0, 0x2000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290e26bd7000fbdbdf05270000000a0001007770616e3100000005003100fc000000140030"], 0x60}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f00000000c0)={0x1}) 4m42.870955855s ago: executing program 1 (id=4552): setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x5, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_io_uring_setup(0x64c4, &(0x7f0000000080)={0x0, 0xd0f8, 0x1, 0x0, 0x16b}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x85f3, 0x4, 0x3, 0x78}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1c40, 0x800, 0x1, 0x32f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1d9, 0x1, 0x0, 0x85}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e8e, 0x0, 0x0, 0x1a1}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62fc, 0x80, 0x1, 0x23a}}], 0x4, &(0x7f00000014c0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xff01}, 0x0, r2, '\x00', {0x0, 0x1000, 0x0, &(0x7f00000004c0)=@buf_1k="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"}}, &(0x7f0000001540)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a01040000000000030600000000000000010073717a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000700000100000aadf92d3df3471122d8adc1f5fb250a01cb26f67c95325255cee4c7a6f8282588dab75b47036537826354ebbd9ed9"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_io_uring_submit(r1, r3, 0x0, &(0x7f0000001580)=@IORING_OP_FSYNC={0x3, 0x24, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x1}) madvise(&(0x7f000005a000/0x2000)=nil, 0x2000, 0x66) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$OTPSELECT(r5, 0x80044d0d, &(0x7f00000016c0)=0x1) 4m42.690203701s ago: executing program 1 (id=4555): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0xfffffffd, 0xa4b2, 0x0, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x20, 0x7f, 0x2, 0xfffff024}, {0x48, 0x2, 0xff, 0x4007}, {0x2, 0x0, 0xff, 0x1}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = io_uring_setup(0x2e33, &(0x7f0000000380)={0x0, 0x53cd, 0xc000, 0x8, 0xc1}) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x29) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f00000001c0)={0xf00001, 0x381, "f23360e12c4e0100010000c4efc0418b5cae00", 0x4, 0x10001, 0x5, 0x0, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000001c0)) 4m42.017625214s ago: executing program 1 (id=4557): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x40}, &(0x7f0000000200)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x7f, 0x0, r2}}], 0x20, 0x4048800}, 0x800) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000080)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000040)=0x407fff, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x40}, &(0x7f0000000200)=0x8) (async) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x7f, 0x0, r2}}], 0x20, 0x4048800}, 0x800) (async) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000080)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000040)=0x407fff, 0x4) (async) 4m41.802175877s ago: executing program 1 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r2, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @void, @value=r1}, 0x20) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x30000000, 0x98fc, 0x6, 0x410c1, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0xf}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001640)={&(0x7f0000000500)="15fb068f69b737aeaabade69c9e32e1d60624f853e6af636715356ecac6eb97bc1280aa3f2acf234af55c4dc5b9802e6d1a487007ee8936f2d0acd2d0208df4109fe68a07618f00b7714537f1ed35519143c868b4ede159e62e9ae7b843e130dabde9f520ecb586dc709727579ba4ca46fa565d2debf2fc83195b4523a6305683e7b35ff5967c13e89f993ed50f231c67969998f7aa8bbfb97f409f4330fb1dda1200a224ff0f21ab79a3343baa7f204e7df910a03fd053c05c408986014825f1248f56beb21da38f36fac7a79836f0b397074a48f2d01b5f4349466f234de979a1b1e8b7164adeedcc1f83bb53791889c45f1de1d1a2cf3b918be203f5ce1b05af64ec4a6de85ca084dca120ad8577c5da802c20baf79576eaa54043b056f48d47e2a9de3ad481a857ee9d607d63210b118f074359befa2e94d5271c68cfa16bd46a980d27ad4d0f439de49706ba22ce16f0bd092e5a8de70429837017d2b19a87b9c4abada9e6aaa8c4b7ff86a7e2c167a8f090ac38449c645aec7b257bdab298cbea76929c3c57e7a2ad4888165ebed05f09fed294d1b191a984a4d29f82f554ee0b1cca2d4938c58b3bae9b966e497c299ba160a7547c6ac160e4bb79dab42e3aa0d37e60e671437ba773b0586cfab727aef4ec9d208d6ef878d1a0596a56e302bf9e8e71d40c5100ebfa3f131fd653c8d036788f0a810a195beefe9c9362ec760c9dd85eeccd4bcd574b5e4436fee9dd8ecba9cf1839122b4d201121b4a7ba98d64dc627b781e9b9ac011ba6e86154e84730d42bd608c89a345fb6b87785b87edbb4aa394147daa89add9ffb46b12986c6157aa2e87b38158746ea2dbb728e7ff7488c99353994eab621a2f9a8c7cf801dab4b0100fbd0178f7edb1e54054211d81b5fdf7339e8b210a5fb43e8e50b18c3c8ffd99f0cf4ba72ddd68c36fe956a667b8de35c5306d99b71da3430c6bdcd92e90e241377d3bd438f9fcc712c23715a8856f783d50392290c8975b0c51a7b688cd67ae40fcc889f5db416ec44ae172d45710075b026adcd7804bcc0f0e08c0a6a1a4e3b534ce0442cf54ced31e705fddf359a2a74344e45066e1edb016c0d163c6e3c1f391dc553588384356b7e309c30d94d5e5f23d9c2e56711d55bbf04d1d92de186fadb2028cf5f05108a233daf6d8ba309a2184c4587d8cf324bd4d660bd677974e2c3bcac809bbaf0e62615c1240dc7437d57e93634dc51f38602aa90a24012102fded53e7688a786f0ba696e488fccb968da6d87fce1fc296584596521da4a0e181f1fce8975acbfcd4fa325eb763ce8d29ae9517987f94a4def526384c60bda607c9a59b3449bdec88072693092e4cebc4c8bacca27729de8c52411f6b09b83f83ff00d4e785438598104e1fb2902c2dba279c1277402d5bca3a805ffea42c21769ab42a01787b215eefba8c487637700ee888eefc36386695b72a76e769a1695459523008038d3093c0cd094ad54ad52b4b53913b0f07efc932d3578ce09dacd479cab733ec168b86e6e93604b01fdd80bc71a57e27eeb6452f37417fc863413bb743b44146c322ec1e164490c5446b0a01b080ac4d2a9eac3a4e17af316006598a50957569109ae2ed8f866d9f7a3f9d97ae65a1d6118dbd901aa326455c571f31ecd3eb55981e1e4601e0f6b1b81d8b0a9ed6e74bc5de94415c8908e6ea810f822304ba7337bc8cde6aaf02e0b356f4b32cc0caced639e489e1db441a3e0aec3cc0a87e87b77e00a9d3f61d633d57caa509608926149437254dde1d4b81fc7962547a7a3aaf16b170a2383e33695c8f0f51d2cd4485e6fe371e4a6f89aeb5abe22081ebc448fa9eab5fb0e55fa6f1a276e91ac76310ded749499a70f915479db5412ed3a9d452d03b072a68943b9f17b1514a03fffc2494468c8bdae86553ac85fe41f94cfa0c27a40d2b9b2170a6852008aa952ff6d9e2be82dd2852b9d548603739b8f0a3e281b5fe5bab85175244f6b8a60693becb8a300a2165850f27f19f24a356f2deb3c19886f25e57e07edce4896960df79556b8451d8588d00e55956d2a891975a2740f1549c667d1dc000a2e670cad9ac97e635e88eb023e2b044489a944a423ee1e07a6e69d70fb0ccb1c5bc8ec8401e0fc496fcf19bbd44bf48c78da0ba5523e98e69840441ebd9aaaa0f79edfa0fdf8e0cd8a8ee99fbd9712634aa861c8a300ded24cb2778bc75727e66afc2f915a2d54cdfcbcbb99e9f2af1a34ad1a00be9a8ee2669fb2b9c26d06e3ac8b86e00049e8d509b06ce94b6b23accdb52c37e215a144ed3d5021258743b3573fb7731b390c4521bf4943c8bc400d75010ad225f8a9ab0c7ccb27228e4219bf17248c0df6c15540d8b3c4932ebcc0fadec931c1e44b274660fd184638fe46344a2cb44a923e2f8d905bbc2981c361f98caaf2301657482c9e19d9df90be609d67ff5bb3607628e0803cec684774a50385cd9da748e8575bc552e2b638048f3ae3b6a5bd0fb71fb1e95af3466cffd9d98a7e3605e3c55c677f2a254dad0cae79d75ec7f34b82aeaf28cea2c6de82dcd13346131cb6b6c7687abce4c52ce2452f47555f2c41597cf000f41b7c661af3e0e2d4ab093a27e20d5e82ff7f569cffb03d4f8b49f20ce3c058647ac989f32c3b542f21e17b50e2f89d93937f145c18c9ea897486420923298425eb0c704575cb75fbfc02b513b240201543b2e2e3ae9f21874bd0137d3e34b37c5c8bac69a62cac51b1c12afa71c7e751f78e8499c1d5ab0ec8f41b38b3fff40f837d70f14e2a43deec551d0c8f02375272c681e3c3ec92df9a6fde423f65ff1345673416b1e428e6f989eb7bd60eab489e519c86d03f73eef97a5febe8f9721db3d5355206c97042e490e9193f8ee7dec90b342b48607f8865db6c9c1a79ed07fa33934269d8f2e0c47a774a97e87590a08ec6d8b143edd0e0dc9b2a0540538ceb1fd9717bfe73eb893d3a4900539d71ff18377276bcdd66d68c058397b1171a574b63e305c9bbe291b9e2d8952404671205743aeacb0af52d2ac238eb71e22d513a817796c12bb33c85652455e5911fed322456a061fb0746195783006efbc9ff3651fd185bb92235d66f05d3ddf76d4ec982901621b39c51fba9f0042234d0ad62a231578701d2f0eea56015e14015350ab134488de1c6fa2551523e3e4b8b1b3f068f68c4e775059309794eac211645c3b94dd5d908b4f4f05b30ccaeb26fdbbd1e5d71bf08a5b0edc5873259f68a53ecd37b8640e6249d76cf18a6dfea93f85ace9624c51b71c88c22a4c8a893c6d79ae203dfc1c84ea434e0903b282551f8e7f37bdc37017b7829c4e285caa33643231458ac5fb519a898e45a0af9ae90c85c18015bf13b036cca5161eb06db4c57f448025ced1883d5dd3c8187cdf2b73df088511c2e011e11e3d189a1662ed6e28e2cd6a6ee267adf7dded22456e9bc8c535d183783369610804149906ee1fb3955d341ad55ab347c37e352c63c426226d8ccbecb6a50d57dcd5c9cf891c5c85fc1bebafb4210765942e7d8899a173b21a55026ffbe79ddc9bf3913925e439f3dfe22b52e8a5c3355190047bdf2288d91e22d6f7a822aca761feacd08a400b9ee6046e0331ccdc1a9dc167977266979f7c4ee21a5da2fd279aa735e1aee226d6a8a4e8272c7a4b5d1a6ce620ab7bbd92e0ba193e808b8c1d89fa0b6aed670b3b3957ed3ab50260af5d815bdebf7e8571b78751b122c9299aa81a223e8e2c8779bfc875071db8990eed9666bebc80ed57ffb36a1eb5fddecfe5d27d479fd5ea335f4c94994f9fef1fabd1de6c9f4f319e6cc0fa8d51ac9afa819c6ef35b1d8d8d4b3c5c3d504fa1d222603d8fab7794936ad48d90b69383cee5f108876ca936467ab03a779c66f7df04006481edabf2702e139558c16f54cfbce673dbe2aaa047d55fbf088eac5cff7213249729e2842c58ffb4b10d7bc9219c41ee415a55f6747248233812e1e7cc6201feeff3d84be1c8091ae6734efbeb05f3c2c6ab74b9e74b90936bf879129f7dafcb18c66694dac6119a7576a3cba48eb200d1e3bce01ace759877cf0cdadb223c07d6551465c70c1e2e082a405d6e8bb5f4807d2823c43fee40b6c0841200079aa5903d386c0d26a82ac259d5d521d117e2f147f9ed66061ff1673a3ae8211defd530c9f5f578b3970a570a675671bbf9f93b17d3b364d0b14abf88a3472389c73c1d8e4429124fcc521c5001866d77397eedfd5f3d14d7ebfa5b613fd1e1a2ae0a8566981d154fffc2fc58ae47161d1c9b7ae4da1a1a53fb7e033a291d4cada909b9497d72657ca7e3383cf80d640386ad2a86489519898d1a890bc1c38c9fd16d5105807863003e34dade2039c4a22cd1880c505d47fdb4b9cf077bb48f1a827b5c671e26d33d4dff8f539556ad930ee9f0fdff5974bcf263831b39d91c34922de0f36c96fe3ca46d40997cb33cdacf0d921761b34bcb7a215fd4075afa2ff34d67e714c89f1321089e59bdacada83c7b5372640e14b10ed0573da432ef8eb7388d6d048bce211f5e72f3c758711b2959c397d5302ecfa0d1bf596a16b4f316d8b9b99d446aec21636d89b13eef3eac06cb4915bee9dbc5d36fd5ea0f7303def73b6eeab73cc74209af583f0eb7b31ff6a95a50cb7c61e398129c48cdf3e7fb893ac9167987db4d88cfb0d5239ee81b9c65d6d60bbea1d9e43487ddca30c4411658a21adcffee171dd01d8f90a97ea858dafb3bc6f3143bb5d140d6003dc406adbe34fec18b5b930d7a3e5c4b70768e5e5d060765fb33fc558e3baf94c8c1b7a613d3812cb27370a471ffe45a755e22d38835eae1094660dd80218148163ed8be006a63427c55e66195aed0f360eef2b9f8dba0fc132fa68d01176b5d295c735542ba063ed5254c8446fb0849c1a28e881c4a4d1e5a44b9962e7ecea27aae2300afd8fc9c3c4dfea8fcffb7d8a26ae89755e2dc6183582cd823f19bb1468ae43c4303b523e49105872c44aa0ce18be6d03e345c51bd5cb9aa44ea40602ca68950c09f4fc97f146b3ba379f3b988ece136a00d7c7a4938260c1173f7f8ad6625392ba900e95a8af3f634350d4b4269432f14b8df2eb4ebe8737f0fee703257882dbf72185116f2d7380e7f88ec1d5a608192994f191486d99647a45ca9f81a8047a7db796ce2a2163492864913984f6ee12d5b689bb63f8dfaaf32c271fa46cb74d909ae4de2477b3bbba05b45eb430f61ca51c7aa40310eb5691062600de3694e2117027439602f35e0976d18f03846645241147afbc889cfa080d4247e53d06e7c88e14c5bfeb1f930aa320b7c4abbb517108b4868b76f5d7d045ab20895b74f7e69aa7c74a561ca31e19d485a820538aea712cad5f3625cc5d1779a9a98c3733e42c02a72ddba2c9d0b42b27c56004ce795cf7e991fe62b940d90a7ad9fc59aef3d52e7666b9c9396c2b1e737596cf0824168e9c41f5e63cb1e45814f21607f9dff701bf6f7f497ccbf1ea624524d32880f3e95b2f98be9d4564d7bd319e39b4aa813d6f4620fa9471dc7fa9214b7e51d7ee7370ebc864bbc705179d8d966c78348386889ce5d5e173fc26cefa29fa66f15d0a1621dfd4c7b91a1990af1f1ce95c9125206d33e89f4c65bd3d69b41c755297dfda736b6be70902b36d9a7df5937d46ec6ee6b6cfacf85db4a83a12658a46669ea93bcdc311bb1f349495509bc1f7a53079e4f19040c4df7baa0fb4fb02b1f66beab1b3263e29d3ec7a5cdd847f2b5e6e7ef2178a958cd1a383c2921e0", &(0x7f0000001500)=""/97, &(0x7f0000001580)="74e9ab6baebd609f56b024e4320ccb97c8e22a4ce6321195371a7dcc9fd53f9344bf843274f7711b95aff4", &(0x7f00000015c0)="7acaa78ba7762b260c35f29eb4f9502e78b0a138820c204a4dada20dd1d7d9bda91e342e63c710d668b44f84a8c7225c0f1a6f201c3e157560b74ee28f1d6841c202b3bb80cabb94e21c087a", 0x10, r0}, 0x38) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x80000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r10, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x20088c4) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r11}, 0x1e) 4m26.671395408s ago: executing program 38 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r2, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @void, @value=r1}, 0x20) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x30000000, 0x98fc, 0x6, 0x410c1, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0xf}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001640)={&(0x7f0000000500)="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", &(0x7f0000001500)=""/97, &(0x7f0000001580)="74e9ab6baebd609f56b024e4320ccb97c8e22a4ce6321195371a7dcc9fd53f9344bf843274f7711b95aff4", &(0x7f00000015c0)="7acaa78ba7762b260c35f29eb4f9502e78b0a138820c204a4dada20dd1d7d9bda91e342e63c710d668b44f84a8c7225c0f1a6f201c3e157560b74ee28f1d6841c202b3bb80cabb94e21c087a", 0x10, r0}, 0x38) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x80000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r10, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x20088c4) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r11}, 0x1e) 2m43.708517529s ago: executing program 8 (id=5192): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f00007fc000/0x2000)=nil, &(0x7f00005ab000/0x3000)=nil, 0x9, 0x0, 0x0, 0x3, 0x4, 0x70, 0x4}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0400014320"], 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m43.500424993s ago: executing program 8 (id=5194): syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe800000000000000100000000000000000400000000000007"], 0x0) 2m43.274459786s ago: executing program 8 (id=5196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000019c0)="80", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x4eb84b3d5f309c6c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x140, 0x0) 2m43.120094965s ago: executing program 8 (id=5198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x1f) 2m42.976048235s ago: executing program 8 (id=5200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt(r3, 0x29, 0x6, 0x0, 0x2000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290e26bd7000fbdbdf05270000000a00010077"], 0x60}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f00000000c0)={0x1}) 2m41.968460428s ago: executing program 8 (id=5206): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0xfffffff9, 0xa4b2, 0x0, "1ae34e0626788a22327bbd00", 0x1, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x121080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x5, 0x40100) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000076000d0b00410000000000000300000000000000080001000116"], 0x20}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x82, 0x48) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0xfffffffffffffff7}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r5, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0xc8600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000001c0)={0xa, 0x820d, 0xf6, 0x6, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0x200, @local, 0x44}}, 0x81, 0x1}, &(0x7f0000000500)=0x90) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) openat(r6, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x0) mknod(0x0, 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) sync() mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ext4\x00', 0x208400, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000200)=0x18}) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 2m26.886681733s ago: executing program 39 (id=5206): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0xfffffff9, 0xa4b2, 0x0, "1ae34e0626788a22327bbd00", 0x1, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x121080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x5, 0x40100) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000076000d0b00410000000000000300000000000000080001000116"], 0x20}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x82, 0x48) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0xfffffffffffffff7}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r5, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0xc8600, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000001c0)={0xa, 0x820d, 0xf6, 0x6, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0x200, @local, 0x44}}, 0x81, 0x1}, &(0x7f0000000500)=0x90) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) openat(r6, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x0) mknod(0x0, 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) sync() mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ext4\x00', 0x208400, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000200)=0x18}) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 1m23.249067593s ago: executing program 3 (id=5512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2800c201b0da6ebaf37be7fd480ee6bdff28e09b2ea7539060b84b3f8a66078f006d051ae696507ac2094dad176d7ef542c33205f66b8c3c6b6da404cecf816383f84985ab2627198402bb25db90300afd0d9e59076ebf291ed93aa5a849820c3d9ec4aa4d8ff2bd50fbe8dec7270d3e80e237efb2bedc2fdb9f9ddb6e3717523ea9da259551c503c324fe7e1c89254f1395c240f5bafa8ac57aca0613b31f3a7709eeddad46e5ff2c7fb1e82a5db345f573a3d5620bbb41f74d25a9d983995c0ff3c30e537e481ff1409be47e9d"]) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xe9) syz_open_dev$video4linux(&(0x7f0000000280), 0x60000000000000, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x200, 0x10}, 0xc) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x10, 0x2, 0x4) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x2, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x6, 0x7, 0xc72d, 0x0, 0x8000, 0x0, 0xa, 0x29, 0x72ef, 0x101, 0x50, 0x6, 0x9, 0x4, 0x6, 0x4, 0x9, 0x9, 0x8, 0x474, 0xffffff7f, 0x383, 0x8001, 0x4]}) 1m19.975185917s ago: executing program 3 (id=5523): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044044) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) fchdir(r9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x1101, 0x3}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r11}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m19.062864249s ago: executing program 3 (id=5527): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x45080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r4 = getpgrp(0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x800) sendmsg$inet_sctp(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0xffffff7f}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x40000000}}], 0x38, 0x4048800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m18.952203652s ago: executing program 3 (id=5528): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0xfffffffffffffffe) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$9p_virtio(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1000004, &(0x7f00000000c0)={'trans=virtio,', {[{@dfltgid}]}}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x300, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x7, 0xfe}, 0x0) 1m18.428574067s ago: executing program 3 (id=5531): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x2, 0x3, 0x5, 0x32, 0x9, "cdd60cf30371ef7c1f77f954064f5e5cdc8cf2", 0x2, 0xd}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) read(r0, 0x0, 0x0) mprotect(&(0x7f0000111000/0x1000)=nil, 0x1000, 0x9) inotify_init1(0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4002, 0x7, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r2, 0x9) 1m18.428375263s ago: executing program 3 (id=5532): socket$l2tp(0x2, 0x2, 0x73) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 1m3.518538385s ago: executing program 40 (id=5532): socket$l2tp(0x2, 0x2, 0x73) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) sync() socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 13.302156743s ago: executing program 9 (id=5757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f01ebbee6, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xd, 0x11, r4, 0x1fe000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x20004c00) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r5) exit(0x9) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum, 0x0, @desc3}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) syz_emit_ethernet(0xde, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xa8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x10, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0c"}]}}}}}}, 0x0) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f0000000800)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303001424060305", @ANYRES32], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 12.566930564s ago: executing program 0 (id=5759): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x43, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x3, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x801, r1, &(0x7f0000000080)="495d4df857bc1393", 0x8, 0x4}, 0x0, 0x0]) semctl$GETNCNT(0x0, 0xbb39c707d0373b65, 0xe, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d757b731540a5b1026c29897e04d98ecb6dc550012116a18fa11a6d288186dd5bde3e28d4b19d2666a0f1162c439fe612ca60fbab4215006e74d5ae8719ef1cfd8ad2184c572ecdd63"], &(0x7f0000000180)={0x0, 0x0, 0x9, 0x0, 0x4}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040f7eca4d7"], 0x40) 9.379745804s ago: executing program 9 (id=5767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt(r3, 0x29, 0x6, 0x0, 0x2000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="290e26bd7000fbdbdf05270000000a0001007770616e3100000005003100fc00"], 0x60}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r5, 0x1269, &(0x7f00000000c0)={0x1}) 8.632625272s ago: executing program 0 (id=5768): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {}, {0xf, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8.527453591s ago: executing program 0 (id=5769): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0x0}) move_pages(r3, 0x5, &(0x7f00000001c0)=[&(0x7f000054a000/0x3000)=nil, &(0x7f0000207000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00004c0000/0x3000)=nil], &(0x7f0000000600)=[0xffff, 0x2, 0x15], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) sendmmsg$unix(r2, &(0x7f0000001b00)=[{{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000006c0)="5fb72109b8b5939737b37b2db42fbbd69504b37e793cdb409b80bce01510e4edce", 0x21}, {&(0x7f0000000700)="c9b56af8b05a15144ce798273520ad6587cc447b86c09689b1287d7f7b161ed108bacacb34ba2fa20bdaa0e45719a2ee5a063fdb038a14a235f6eaf39b90255d4065ef0ce9c219a88d78bfa41254063db29cbb17c9e70e1b7b974428b37fde1876d10a1bca4659c12296ecd8bb784e5ed69513add9009146e6a421ee9aa2f427282cda7c363012d9b5dbd0dd22135355d14ebc2b3a04dc47a57364e3010452ff0795ea0e7732801f8a5a8f3ea3e96f2fd8359755d5553e727e455664dda82a4326d5a3cd9963c1097a5613c540c849b899a225b517d02cad036e3e167c03499939fe81b9d83b", 0xe6}, {&(0x7f0000000800)="7b8326f7cfac89e101411b1f0314eb22adee381b244634df1573bd69002390ed382a3f9986165a99a9d65e8ae30cd65d117deb86193513d19a30618fab7c5f8ea126336020759b23c74a77e1fa6fc8e39b7f7d756b5c25ca132787aedb6107198dd699b5db0c921c44249adeace1ea69667440675213fa4d55201e77b18b6add5d7415f085e4", 0x86}, {&(0x7f00000008c0)="be039384b39b2098c80d9c7327eea7727d3aefe63558b6427b870891cc63a618e539fa81b7b92b5bfa4c934a93b91716b316bae605dd920eb14a5a0308ca398cdebd29b0ee42d77cb36ec8a016f177e263", 0x51}, {&(0x7f0000000940)="107e92ab6c84b2583581d244ca05c583fc1235adc0e4d32bcdc8973716f7b463e8c30d027ae6885bb0fbe5b04cf87911c7542d2af582adfcfbac491bb63934b1515145f3cbd1e311a6ed", 0x4a}, {&(0x7f0000000a40)="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", 0x1000}], 0x6, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18dd7a165f9743b83f00000001000000", @ANYRES32=r2], 0x18, 0x841}}], 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000580)={&(0x7f00003f0000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/118, 0x76, 0x1, &(0x7f00000004c0)=""/163, 0xa3}, &(0x7f00000005c0)=0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, &(0x7f0000003340)=""/5, 0x88, 0x5, 0x1, 0x6abb}, 0x28) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000020000100000000000000000002"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x255}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r9, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r9, r9, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r9, 0x0, &(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x9}) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="07000000010000", 0x7) io_uring_enter(r6, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) 8.431519493s ago: executing program 9 (id=5770): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) unshare(0x1e000980) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x8001af85, &(0x7f0000001740)={0x3, 0x0, [{0x2000, 0x1000, &(0x7f0000000680)=""/4096}, {0xfec00000, 0x71, &(0x7f0000000200)=""/113}, {0x58000, 0x12, &(0x7f00000001c0)=""/18}]}) 7.306517632s ago: executing program 0 (id=5772): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000180)={0x4, 0x5}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000001400)=""/4076, 0xfffffeea) r6 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) r7 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r7, 0x0, 0x0, 0x11, 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[], 0x2c, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 7.057856435s ago: executing program 6 (id=5773): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) close(0x3) r6 = socket$kcm(0x29, 0x6e05aedcaff6c852, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0, r1}) sendto$inet(r0, &(0x7f0000000300)="bc897f304c32264a1e2e7916d134b49cb5e8c5079807fd2706ed4031fe525436c26787c897b4d18419ee5068fd1a6ec5812d36ef965f45556ccfb0c0abf696be438b18903f11fd4c270d27ddf9abc17fa2d48fcfc4d469faac0c54a05bc9145233340d5acabc5e8cc52d591240243478c5cb9b", 0x73, 0x810, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000074000300000a58000000060a010400000000000000000a0000030900010073797a31000000002c0004802800018007000100637400001c0002800800044000000017080002400000000305000300000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r12}, 0xc) 6.131618605s ago: executing program 6 (id=5775): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000040) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e5}, 0x94) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) close(0x3) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16=r3, @ANYRES16=r2, @ANYRES32=r1, @ANYRES16=r3]) syz_usb_connect(0x5, 0x2d, &(0x7f0000000500)=ANY=[@ANYRES16=0x0], 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000400)={0x807, 0x4, 0x400, 0x5, 0x37, 0x0, 0x81, 0x4}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xa26b) read$char_usb(r4, &(0x7f0000000000)=""/90, 0x5a) r5 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) read$char_usb(r4, &(0x7f00000002c0)=""/151, 0x97) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x180, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000", @ANYRESDEC, @ANYBLOB="040028fbfffffbffffffff0000000800020001000180080003007d71ee5d00000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) 5.940571387s ago: executing program 9 (id=5777): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000\"N000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x28640a0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000002f000900bd0400000000000000000045001180e7961b6dd42541af07c7ff415af85ab494df9d49a725f9f47392b70f555def596c0e860e5f1b5496ffeecbe2f5da68eb7e22475186e591e23ad38a00c0b44e3efcd743"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060108000035679fe60000000000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc1105511, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRESDEC=r4, @ANYRESOCT=r10, @ANYRES16=r9], 0x3c}, 0x1, 0x0, 0x0, 0x240048c1}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500e50226d2", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000140) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002440)=@getnexthop={0xdd9f15af6acf7137, 0x6a, 0x200, 0x70bd31, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0xfffffffe}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c081}, 0x2004c001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r8, @ANYRES16, @ANYRESHEX=r6, @ANYRESDEC=r2, @ANYBLOB="0600060000000000060004000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) 5.83938051s ago: executing program 7 (id=5780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0xfffffff5, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) 5.716780527s ago: executing program 7 (id=5782): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000000) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) r3 = gettid() getpriority(0x2, r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) chdir(&(0x7f0000000040)='./file0\x00') r4 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="9c") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000a0000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="f6b9100e76d06ec4f5618518edd7", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) move_pages(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000040), 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 4.567832412s ago: executing program 7 (id=5783): capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x7, 0x3ff, 0x962, 0x80000000, 0x4, 0x8}) socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.530901124s ago: executing program 2 (id=5784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt(r3, 0x29, 0x6, 0x0, 0x2000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="290e26bd7000fbdbdf05270000000a0001007770616e3100000005003100fc00"], 0x60}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r5, 0x1269, &(0x7f00000000c0)={0x1}) 4.366291908s ago: executing program 0 (id=5785): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000500)="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", 0x5b1}], 0x1, 0x0, 0x0, 0x3000000}}], 0x1, 0x4000001) 3.779849768s ago: executing program 0 (id=5786): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x8, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d0010400001020301090271000301061002080b0100010c200009040000000101200009240180ff0711000408240a04029505010904010000010220000904010101010220000905110910000c02090825018030ad000109040200000102200009040201010102200009058209200002fabc0825010286810900"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000}]) r7 = openat$cgroup_ro(r5, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e0, &(0x7f0000000280)={'ip6erspan0\x00', 0x3, 0x9}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2) 3.611610408s ago: executing program 2 (id=5787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004e40)=ANY=[], 0x17) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000004100000000800000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x2000000, 0x0, 0x24040880}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000000}, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)='syz', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.223182804s ago: executing program 2 (id=5788): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x20000000) listen(0xffffffffffffffff, 0x220c) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) 2.560114426s ago: executing program 6 (id=5789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3ff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x200, 0x6, 0x9, 0x5, 0x0, "ea55eea16d659f1a5c85129b27a188d9b2943a"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0xfffffff7, 0xffffffff, 0x0, 0x10000, 0x0, "fe94160000000000111300"}) truncate(&(0x7f0000000340)='./config/usb_gadget/g1/idVendor\x00', 0x5) 1.779285397s ago: executing program 7 (id=5790): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0) 1.767985415s ago: executing program 2 (id=5791): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {}, {0xf, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.748076628s ago: executing program 6 (id=5792): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000f00008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x90) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000080)={0x3, 0x1, '\x00', @zc_export={r0}}, 0x0) 1.744888649s ago: executing program 9 (id=5793): pipe2$9p(&(0x7f0000000000), 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1.563873363s ago: executing program 7 (id=5794): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x202441, 0x0) syz_emit_vhci(0x0, 0xd) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e659b2064656661756c7420757365723a303030303430393300"/35], 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f000050f000/0x1000)=nil, 0x1000, 0x200000a, 0x40010, r1, 0x2f10d000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x3a, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x73622a85, 0x7fffc, 0x0, 0x6d, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000080)={0x700, 0x28, 0x50}}, 0x2000}], 0xfffffffffffffff3, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1b) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.534014843s ago: executing program 6 (id=5795): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, 0x0, 0x5) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090024bd70000000000004e34800ef7b14988cb2e33cc36f051bf3d9fdb51ee9"], 0x14}, 0x1, 0x0, 0x0, 0x82004}, 0x80000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x18, 0x0, [0x64818f76, 0x77, 0xfff, 0x1, 0x0, 0x0, 0x7ff, 0x5f80, 0xe, 0x2, 0xffff, 0x3, 0x1a9, 0x5, 0x1000, 0xffffff21]}, {0x2, 0x0, [0x100, 0xfffffff9, 0x3ff, 0x8000, 0xed8, 0x1, 0x3, 0x5, 0x4, 0xf2b, 0x100, 0x7, 0x4, 0x8000, 0x2e49, 0xffff]}, {0x12, 0x0, [0xffff, 0x6, 0xbc, 0xe, 0x8, 0x6, 0x7fff, 0x9, 0x2, 0x0, 0x909b, 0x8, 0x4, 0x56, 0x7, 0xfff]}], r6, 0x1, 0x1, 0xd8}}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfd18}) 1.50566502s ago: executing program 2 (id=5796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="f6b9000000000000800440ffffff", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 991.63786ms ago: executing program 9 (id=5797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt(r3, 0x29, 0x6, 0x0, 0x2000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="290e26bd7000fbdbdf05270000000a0001007770616e3100000005003100fc00"], 0x60}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r5, 0x1269, &(0x7f00000000c0)={0x1}) 991.198543ms ago: executing program 2 (id=5798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000180)="000073070980ffff", 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x5760, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 390.448614ms ago: executing program 7 (id=5799): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_tcp(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@xino_auto}, {@default_permissions, 0x3a}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@measure}, {@euid_lt={'euid<', r4}}, {@context={'context', 0x3d, 'system_u'}}, {@flag='posixacl'}, {@dont_hash}], 0x2f}) 0s ago: executing program 6 (id=5800): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044044) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x1101, 0x3}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r9, 0x3b8a, &(0x7f0000000080)={0x28, 0x0, r11, 0x1004, &(0x7f0000002b40)=""/4100}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) kernel console output (not intermixed with test programs): ed disabled state [ 1174.964006][ T29] audit: type=1400 audit(2000000186.888:2622): avc: denied { write } for pid=25119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1174.966306][T13476] bridge_slave_0: left allmulticast mode [ 1175.041141][T13476] bridge_slave_0: left promiscuous mode [ 1175.066941][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.152323][ T29] audit: type=1400 audit(2000000187.078:2623): avc: denied { write } for pid=25167 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1175.254205][T25170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=25170 comm=syz.7.5401 [ 1175.268497][T13476] lo: left allmulticast mode [ 1175.890144][T13476] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1175.900523][T13476] ip6gre1 (unregistering): left promiscuous mode [ 1175.932284][ T29] audit: type=1400 audit(2000000187.858:2624): avc: denied { write } for pid=25180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1175.956308][ T189] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1176.009648][T21561] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1176.120897][ T29] audit: type=1400 audit(2000000188.028:2625): avc: denied { write } for pid=25194 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1176.158973][ T189] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1176.168439][ T189] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1176.178471][ T189] usb 4-1: Product: syz [ 1176.182767][ T189] usb 4-1: Manufacturer: syz [ 1176.191098][T21561] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1176.191781][ T189] usb 4-1: SerialNumber: syz [ 1176.215289][T21561] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1176.225716][T21561] usb 1-1: Product: syz [ 1176.229930][T21561] usb 1-1: Manufacturer: syz [ 1176.235598][T13476] team0: Port device geneve1 removed [ 1176.254976][T21561] usb 1-1: SerialNumber: syz [ 1176.256108][ T189] usb 4-1: config 0 descriptor?? [ 1176.283384][T21561] usb 1-1: config 0 descriptor?? [ 1176.304819][T13476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.324970][T13476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.347802][T13476] bond0 (unregistering): Released all slaves [ 1176.366857][T13476] bond1 (unregistering): Released all slaves [ 1176.391467][T13476] bond2 (unregistering): Released all slaves [ 1176.419597][T13476] bond3 (unregistering): Released all slaves [ 1176.441639][T13476] bond4 (unregistering): Released all slaves [ 1176.476236][T25179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.546164][T25181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.546474][T25179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.569297][T25181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.658185][T11933] Bluetooth: hci4: command 0x0406 tx timeout [ 1176.718862][ T189] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1176.754125][T21561] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1177.861230][T15984] net_ratelimit: 7 callbacks suppressed [ 1177.861245][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.875128][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.889456][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.917041][T21561] peak_usb 1-1:0.0 can1: sending command failure: -8 [ 1177.933962][T21561] peak_usb 1-1:0.0 can1: sending command failure: -8 [ 1177.936227][ T189] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1177.945760][T21561] peak_usb 1-1:0.0 can1: sending command failure: -8 [ 1177.953264][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.982990][ T189] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1178.004106][ T189] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1178.309120][T21561] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8 [ 1178.342525][ T189] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 1178.398212][ T189] usb 4-1: USB disconnect, device number 44 [ 1178.417555][T21561] usb 1-1: USB disconnect, device number 66 [ 1178.703456][ T29] audit: type=1400 audit(2000000190.628:2626): avc: denied { write } for pid=25216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.860715][T13476] batadv0: left promiscuous mode [ 1178.879309][T13476] hsr_slave_0: left promiscuous mode [ 1178.899598][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.908410][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.923036][T13476] hsr_slave_1: left promiscuous mode [ 1178.932457][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.938288][ T29] audit: type=1400 audit(2000000190.858:2627): avc: denied { write } for pid=25231 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.943730][T13476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.031111][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.049289][T13476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.134047][T13476] veth1_macvtap: left promiscuous mode [ 1179.153395][T13476] veth0_macvtap: left promiscuous mode [ 1179.168510][T13476] veth1_vlan: left promiscuous mode [ 1179.180764][T13476] veth0_vlan: left promiscuous mode [ 1179.232223][ T29] audit: type=1400 audit(2000000191.158:2628): avc: denied { accept } for pid=25237 comm="syz.7.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1179.616222][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.704280][T25246] 9p: Bad value for 'wfdno' [ 1179.941587][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.950405][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.871432][T25263] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1180.888354][T25263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1180.926553][T13476] team0 (unregistering): Port device team_slave_1 removed [ 1180.976880][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.990644][T13476] team0 (unregistering): Port device team_slave_0 removed [ 1181.114121][T25257] ip6tnl0: Caught tx_queue_len zero misconfig [ 1181.166543][T21561] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1181.326320][T25277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5425'. [ 1181.936710][T21561] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1181.955547][T21561] usb 4-1: config 0 has no interface number 0 [ 1181.961782][T21561] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.987007][T21561] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1182.012344][T21561] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1182.034796][T21561] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1182.062229][T21561] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1182.144743][T21561] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1182.186772][T21561] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1182.225352][T21561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.285427][T21561] usb 4-1: config 0 descriptor?? [ 1182.301460][T25271] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1182.334215][T25271] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1182.492967][T24928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1182.531290][T21561] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1182.535138][T24928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1182.568985][ T29] audit: type=1400 audit(2000000194.498:2629): avc: denied { write } for pid=25275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1182.655498][T25292] xt_hashlimit: size too large, truncated to 1048576 [ 1182.892858][T24928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1183.013417][ T9] net_ratelimit: 6 callbacks suppressed [ 1183.013432][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.031969][ T29] audit: type=1400 audit(2000000194.958:2630): avc: denied { map } for pid=25270 comm="syz.3.5424" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1183.071691][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.081491][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.092984][T24928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1183.100619][T13471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.109512][T21527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.121780][ T5808] usb 4-1: USB disconnect, device number 45 [ 1183.146429][T24928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1183.162357][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.166157][ T5808] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1183.262566][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.295403][T24928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1183.341692][T13476] IPVS: stop unused estimator thread 0... [ 1183.342722][T24928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1183.369327][ T29] audit: type=1400 audit(2000000195.298:2631): avc: denied { write } for pid=25296 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.407339][T24928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1183.615002][T24928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.665450][T24928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.688629][T21303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.695786][T21303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.737015][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.744148][T13476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.941227][ T1982] block nbd1: Possible stuck request ffff888027fc5080: control (read@0,1024B). Runtime 180 seconds [ 1184.090315][T25323] loop5: detected capacity change from 0 to 7 [ 1184.133515][ T1982] block nbd1: Possible stuck request ffff888027fc5240: control (read@1024,3072B). Runtime 180 seconds [ 1184.972224][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.980695][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.989285][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.831496][T25212] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1185.982282][T25323] Dev loop5: unable to read RDB block 7 [ 1185.984209][T25325] support for cryptoloop has been removed. Use dm-crypt instead. [ 1185.987942][T25323] loop5: unable to read partition table [ 1185.988098][T25323] loop5: partition table beyond EOD, truncated [ 1186.008025][T25323] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1186.087959][T25212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.158977][T25212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.194946][T25212] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1186.228728][T25212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.287431][T25212] usb 1-1: config 0 descriptor?? [ 1186.867442][T25212] usbhid 1-1:0.0: can't add hid device: -71 [ 1186.899178][T25212] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1187.022558][T25212] usb 1-1: USB disconnect, device number 67 [ 1187.369341][T24928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.485499][T21561] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1187.514173][T24928] veth0_vlan: entered promiscuous mode [ 1187.600700][T25362] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1188.097274][ T9] net_ratelimit: 6 callbacks suppressed [ 1188.097291][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.177204][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.225682][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.239740][T21561] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1188.387447][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.401132][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.603313][T21561] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1188.613792][T21561] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1188.619796][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.622989][T21561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1188.623017][T21561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1188.624268][T21561] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1188.624289][T21561] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1188.624306][T21561] usb 4-1: Product: syz [ 1188.624321][T21561] usb 4-1: Manufacturer: syz [ 1188.720814][T21561] cdc_wdm 4-1:1.0: skipping garbage [ 1188.728721][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.730529][T21561] cdc_wdm 4-1:1.0: skipping garbage [ 1188.853923][T21561] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1188.892016][T24928] veth1_vlan: entered promiscuous mode [ 1189.105448][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.334263][T21561] cdc_wdm 4-1:1.0: Unknown control protocol [ 1189.363741][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.420704][T24928] veth0_macvtap: entered promiscuous mode [ 1189.447242][T24928] veth1_macvtap: entered promiscuous mode [ 1189.486568][T24928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.494317][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 1189.496747][T21561] usb 4-1: USB disconnect, device number 46 [ 1189.501795][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1189.513600][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1189.519684][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1189.533866][T24928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.608691][T13471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.627553][T13471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.646906][T13471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.667437][T13471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.680839][T25380] netlink: 'syz.9.5446': attribute type 1 has an invalid length. [ 1189.779460][T25380] bond6: entered promiscuous mode [ 1189.795063][T25380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1189.986853][T25380] bond6: (slave bridge1): making interface the new active one [ 1189.998255][T25378] netlink: 'syz.0.5444': attribute type 10 has an invalid length. [ 1190.014375][T25380] bridge1: entered promiscuous mode [ 1190.031689][T25380] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 1190.146093][T25378] dummy0: entered promiscuous mode [ 1190.163371][T25378] team0: Port device dummy0 added [ 1190.288049][T13471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.317688][T13471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.337307][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.459232][T13470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.476181][T13470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.077849][T25410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5453'. [ 1191.089501][T25410] 0x000000000006-0x000000020000 : "" [ 1191.106491][T25410] ftl_cs: FTL header corrupt! [ 1191.584158][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5452'. [ 1192.011844][T25420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5353'. [ 1192.139230][T25403] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1192.214176][T21527] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1192.578427][T25426] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5457'. [ 1192.631413][T11933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1192.666676][T11933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1192.682620][T11933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1192.695724][T11933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1192.703474][T11933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1192.768787][T21527] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1192.798075][T25432] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5458'. [ 1192.831975][T21527] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1192.935161][T21527] usb 4-1: Product: syz [ 1192.983094][T21527] usb 4-1: Manufacturer: syz [ 1193.024201][T21527] usb 4-1: SerialNumber: syz [ 1193.142436][T21527] usb 4-1: config 0 descriptor?? [ 1193.317514][ T189] net_ratelimit: 9 callbacks suppressed [ 1193.317530][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.924737][T25419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.169355][T25419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.296172][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.304510][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.552854][T21527] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1194.575968][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.815592][T11933] Bluetooth: hci2: command tx timeout [ 1195.365797][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.377722][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.397265][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.612242][T21527] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1195.654347][T21527] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1195.688430][T21527] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 1195.712559][ T29] audit: type=1400 audit(2000000207.638:2632): avc: denied { unmount } for pid=22318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1195.789525][T25452] overlayfs: failed to resolve './cgroup': -2 [ 1195.835861][T21527] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 1195.901081][T21527] usb 4-1: USB disconnect, device number 47 [ 1195.935655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.072052][ T29] audit: type=1400 audit(2000000207.998:2633): avc: denied { write } for pid=25457 comm="syz.2.5464" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1196.510747][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.524944][ T29] audit: type=1400 audit(2000000207.998:2634): avc: denied { open } for pid=25457 comm="syz.2.5464" path="/1/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 1196.531596][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.658490][T25471] netlink: 'syz.2.5466': attribute type 4 has an invalid length. [ 1196.895572][T11933] Bluetooth: hci2: command tx timeout [ 1196.973059][T25427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.031460][T25427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.156033][T25427] bridge_slave_0: entered allmulticast mode [ 1197.171184][T25489] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1197.172160][T25427] bridge_slave_0: entered promiscuous mode [ 1197.872068][T25427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.879264][T25427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.902403][T25427] bridge_slave_1: entered allmulticast mode [ 1197.910723][T25427] bridge_slave_1: entered promiscuous mode [ 1197.994098][T25427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.020486][T25427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.083609][T25427] team0: Port device team_slave_0 added [ 1198.112639][T25427] team0: Port device team_slave_1 added [ 1198.244663][T25427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.263560][T25427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.821973][T25427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.833842][ T9] net_ratelimit: 3 callbacks suppressed [ 1198.833857][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.976133][T11933] Bluetooth: hci2: command tx timeout [ 1198.987394][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.995860][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.077219][T25511] 0x000000000006-0x000000020000 : "" [ 1199.094416][T25511] ftl_cs: FTL header corrupt! [ 1199.576616][T25427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.586054][T25427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.616803][T25427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.670005][T25427] hsr_slave_0: entered promiscuous mode [ 1199.688436][T25427] hsr_slave_1: entered promiscuous mode [ 1199.698009][T25427] debugfs: 'hsr0' already exists in 'hsr' [ 1199.723354][T25427] Cannot create hsr debugfs directory [ 1199.991881][T25522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5478'. [ 1200.001345][T25522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5478'. [ 1200.047866][T25523] 9p: Bad value for 'rfdno' [ 1200.097378][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.105961][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.895536][T25427] bond0: (slave netdevsim1): Releasing backup interface [ 1200.908037][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.948820][T25427] netdevsim netdevsim7 netdevsim1 (unregistering): left promiscuous mode [ 1201.055707][T11933] Bluetooth: hci2: command tx timeout [ 1201.132399][T21527] IPVS: starting estimator thread 0... [ 1201.151542][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.159891][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.168424][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.235666][T25532] IPVS: using max 75 ests per chain, 180000 per kthread [ 1201.601583][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5484'. [ 1201.860867][T25555] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1201.868077][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.892469][T25555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1201.937546][T25427] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1201.953947][T25427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1201.969305][T25427] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1201.984876][T25427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1201.993461][T25427] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1202.014692][T25427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1202.039030][T25427] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1202.070645][T25427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1202.214306][T25566] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1202.321403][T25427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.371103][T25427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.399676][T13413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.406824][T13413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.431600][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.438694][T13475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.485290][T21527] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1202.659745][T21527] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1202.688403][T21527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.697910][T21527] usb 3-1: Product: syz [ 1202.702295][T21527] usb 3-1: Manufacturer: syz [ 1202.709337][T21527] usb 3-1: SerialNumber: syz [ 1202.743973][T21527] usb 3-1: config 0 descriptor?? [ 1203.075859][T15984] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1203.083927][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1203.173415][T25575] vlan2: entered promiscuous mode [ 1203.180217][T25575] batadv0: entered promiscuous mode [ 1203.508861][T15984] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1203.518176][T15984] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1203.526470][T15984] usb 1-1: Product: syz [ 1203.543127][T15984] usb 1-1: Manufacturer: syz [ 1203.551892][ T189] usb 3-1: USB disconnect, device number 56 [ 1203.573529][T15984] usb 1-1: SerialNumber: syz [ 1203.601917][T15984] usb 1-1: config 0 descriptor?? [ 1203.615024][T25578] overlayfs: failed to clone upperpath [ 1203.773971][T25427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.828907][T25572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.848586][T25572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.883233][T15984] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1203.948988][ T189] net_ratelimit: 5 callbacks suppressed [ 1203.949012][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.156902][T25612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5498'. [ 1204.195139][T15984] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 1204.216887][T15984] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 1204.243578][T15984] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 1204.280741][T11933] Bluetooth: hci7: ACL packet too small [ 1204.419043][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.427423][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.895695][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.467178][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.477645][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.625783][ T189] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1205.805607][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 1205.813378][ T189] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1205.830432][ T189] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1205.847858][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1205.865261][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1205.888523][ T189] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1205.901745][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.915244][ T189] usb 3-1: Product: syz [ 1205.920891][ T189] usb 3-1: Manufacturer: syz [ 1205.927537][ T189] usb 3-1: SerialNumber: syz [ 1205.940140][ T189] usb 3-1: config 0 descriptor?? [ 1206.128805][T15984] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8 [ 1206.179234][T21527] usb 1-1: USB disconnect, device number 68 [ 1206.181975][T25623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.254909][ T189] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 1206.279516][T25623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.286720][T25427] veth0_vlan: entered promiscuous mode [ 1206.320472][ T189] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 1206.339280][T25427] veth1_vlan: entered promiscuous mode [ 1206.353650][ T189] usb 3-1: USB disconnect, device number 57 [ 1206.424343][T25427] veth0_macvtap: entered promiscuous mode [ 1206.436727][T25427] veth1_macvtap: entered promiscuous mode [ 1206.466265][T25427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.497635][T25427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.498884][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.518312][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.529253][T13472] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.553501][T13472] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.564520][T13472] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.577197][T13472] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.761047][T13475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.791464][T13475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.976058][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.051870][T25653] 0x000000000006-0x000000020000 : "" [ 1207.073232][T25653] ftl_cs: FTL header corrupt! [ 1207.235440][T13470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.338196][T13470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.557670][T25212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.581677][T25661] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1207.629760][T25658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5511'. [ 1207.755813][T25664] 9p: Bad value for 'wfdno' [ 1208.088388][T25677] 0x000000000006-0x000000020000 : "" [ 1208.178704][T25677] ftl_cs: FTL header corrupt! [ 1208.937658][T25682] netlink: 'syz.2.5516': attribute type 3 has an invalid length. [ 1209.869149][ T10] net_ratelimit: 5 callbacks suppressed [ 1209.869164][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.870108][T21162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1209.878276][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.910109][T21162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1209.919101][T21162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1209.930573][T21162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1209.940929][T21162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1210.016259][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.826314][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.834783][T13470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.877385][T21527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.922375][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.931174][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.940676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.034447][T25712] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1211.046993][T25712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5523'. [ 1211.123093][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.148570][T25716] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1211.241010][T25719] 0x000000000006-0x000000020000 : "" [ 1211.602102][T25719] ftl_cs: FTL header corrupt! [ 1211.735370][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1211.945163][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1211.964832][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.985735][ T10] usb 3-1: Product: syz [ 1211.990028][ T10] usb 3-1: Manufacturer: syz [ 1212.000117][ T10] usb 3-1: SerialNumber: syz [ 1212.031390][T11933] Bluetooth: hci3: command tx timeout [ 1212.209713][T25692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.224271][T25692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.247409][T25692] bridge_slave_0: entered allmulticast mode [ 1212.253147][T25744] vxcan0: tx address claim with different name [ 1212.279288][T25692] bridge_slave_0: entered promiscuous mode [ 1212.289415][T25692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.296672][T25692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.304951][T25692] bridge_slave_1: entered allmulticast mode [ 1212.313310][T25692] bridge_slave_1: entered promiscuous mode [ 1212.348316][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1212.367528][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1212.383109][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1212.649144][ T10] usb 3-1: USB disconnect, device number 58 [ 1212.690100][T25747] netlink: 'syz.3.5532': attribute type 1 has an invalid length. [ 1212.698479][T25747] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1212.708108][T25747] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1213.040695][ T29] audit: type=1400 audit(2000000224.968:2635): avc: denied { remount } for pid=25750 comm="syz.2.5533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1214.092016][T25692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.102090][T11933] Bluetooth: hci3: command tx timeout [ 1214.138499][T25692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.348905][T25760] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1214.382031][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1214.455319][T13030] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1214.579287][ T1982] block nbd1: Possible stuck request ffff888027fc5080: control (read@0,1024B). Runtime 210 seconds [ 1214.590041][ T1982] block nbd1: Possible stuck request ffff888027fc5240: control (read@1024,3072B). Runtime 210 seconds [ 1214.630550][T13030] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.651396][T25692] team0: Port device team_slave_0 added [ 1214.667063][T13030] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.684310][T25692] team0: Port device team_slave_1 added [ 1214.709859][T13030] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1214.750115][T13030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.791647][T13030] usb 8-1: Product: syz [ 1214.813813][T13030] usb 8-1: Manufacturer: syz [ 1214.839833][T13030] usb 8-1: SerialNumber: syz [ 1214.851147][T25746] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1214.869598][T25746] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1214.961870][T25692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.989131][T25692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.087085][T25692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.089873][T25757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.126448][ T29] audit: type=1400 audit(2000000227.048:2636): avc: denied { write } for pid=25767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.131357][T25757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.158218][ T10] net_ratelimit: 9 callbacks suppressed [ 1215.158229][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.196132][T25692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.206557][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.229164][T25692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.280681][T25757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.309974][T25757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.331744][ T29] audit: type=1400 audit(2000000227.258:2637): avc: denied { write } for pid=25781 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.354073][T25692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.414492][T13030] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1215.508232][T25746] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1215.595922][T25746] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1215.621725][T13030] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1215.727915][T13030] usb 8-1: USB disconnect, device number 7 [ 1215.821945][T25790] 0x000000000006-0x000000020000 : "" [ 1215.842131][T25790] ftl_cs: FTL header corrupt! [ 1216.215620][T11933] Bluetooth: hci3: command tx timeout [ 1216.235825][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.244621][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.260206][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.282966][T16991] udevd[16991]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1216.304939][T25692] hsr_slave_0: entered promiscuous mode [ 1216.339400][T25692] hsr_slave_1: entered promiscuous mode [ 1216.374698][T25692] debugfs: 'hsr0' already exists in 'hsr' [ 1216.412236][T25692] Cannot create hsr debugfs directory [ 1216.498942][T25367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.511028][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.520809][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.647310][T25746] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1217.134390][T25809] Cannot find del_set index 0 as target [ 1217.615727][T25746] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1217.631735][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.640288][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.660911][ T29] audit: type=1400 audit(2000000229.588:2638): avc: denied { write } for pid=25785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.801858][T25815] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1217.912445][ T29] audit: type=1400 audit(2000000229.838:2639): avc: denied { write } for pid=25816 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.944376][T25819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5546'. [ 1217.960281][T25819] unsupported nlmsg_type 40 [ 1218.047674][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5547'. [ 1218.267438][T11933] Bluetooth: hci3: command tx timeout [ 1219.337761][T25746] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1219.799737][T25692] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.837215][T25746] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1220.158931][ T29] audit: type=1400 audit(2000000232.088:2640): avc: denied { write } for pid=25828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.212952][T25858] 0x000000000006-0x000000020000 : "" [ 1220.231055][T25858] ftl_cs: FTL header corrupt! [ 1220.619890][ T9] net_ratelimit: 6 callbacks suppressed [ 1220.619908][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.652340][T25859] 9p: Bad value for 'wfdno' [ 1220.668946][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.681438][T25746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1220.772058][T25746] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1221.039980][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.054961][ T29] audit: type=1400 audit(2000000232.978:2641): avc: denied { write } for pid=25864 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.254808][T25692] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.462651][T25871] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5554'. [ 1221.748858][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.808485][T25692] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.866099][T21527] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1221.887441][T25746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1221.918511][T25746] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1221.963529][T25692] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.040933][T21527] usb 3-1: config index 0 descriptor too short (expected 65281, got 36) [ 1222.049549][T21527] usb 3-1: config 9 has too many interfaces: 144, using maximum allowed: 32 [ 1222.060263][T21527] usb 3-1: config 9 has an invalid descriptor of length 20, skipping remainder of the config [ 1222.071064][T21527] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 144 [ 1222.084922][T21527] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1222.102893][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.103894][T21527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.128880][T21527] usb 3-1: Product: syz [ 1222.143364][T21527] usb 3-1: Manufacturer: syz [ 1222.148466][T21527] usb 3-1: SerialNumber: syz [ 1222.257830][T13470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.267382][T21527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.276428][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.305586][T25692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1222.317429][T25692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.325791][T13030] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1222.345869][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.354705][T25692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1222.373368][T25692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1222.382114][T25692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1222.391791][T25692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1222.399512][T25692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1222.408896][T25692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1222.441147][T25888] kvm: apic: phys broadcast and lowest prio [ 1222.477630][T15984] usb 3-1: USB disconnect, device number 59 [ 1222.523631][T25692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.534373][T13030] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid maxpacket 46011, setting to 64 [ 1222.548831][T13030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1222.561597][T13030] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1222.581177][T25692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.590925][T13030] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1222.603139][T13030] usb 8-1: Product: syz [ 1222.604054][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.608505][T13030] usb 8-1: Manufacturer: syz [ 1222.614432][T13470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.625332][T13030] usb 8-1: SerialNumber: syz [ 1222.637377][T13030] usb 8-1: config 0 descriptor?? [ 1222.639812][T13472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.642970][T25877] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1222.649437][T13472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.662627][T13030] usb 8-1: selecting invalid altsetting 0 [ 1222.839156][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.892340][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1222.913665][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1222.929822][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1222.939365][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1222.956693][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1222.977986][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1222.987659][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1222.996862][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.004720][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.012921][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.025949][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.033823][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.041870][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.050405][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.059141][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.067300][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.075151][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.089595][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.115534][ T5808] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1223.115988][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.149065][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.170610][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.185758][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.205609][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.213553][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.222488][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.248837][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.265663][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.279684][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.289480][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.298231][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.309047][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.318064][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.323779][ T5808] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1223.335647][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.339512][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'. [ 1223.352709][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.364737][ T5808] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1223.374585][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.380388][ T5808] usb 1-1: Product: syz [ 1223.389626][ T5808] usb 1-1: Manufacturer: syz [ 1223.394379][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.394619][ T5808] usb 1-1: SerialNumber: syz [ 1223.418622][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.427700][ T5808] usb 1-1: config 0 descriptor?? [ 1223.434525][T25692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.442540][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.459449][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.483643][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.501580][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.518132][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.539906][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.558650][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.577516][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.608829][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.625060][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.646572][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.656818][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.662216][T25892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.687007][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.694873][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.699501][T25892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.727142][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.737980][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.766482][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.784106][ T5808] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1223.784857][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.823583][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.837629][T15984] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1223.854691][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.886195][T25692] veth0_vlan: entered promiscuous mode [ 1223.894099][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.908103][T25692] veth1_vlan: entered promiscuous mode [ 1223.913933][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.934422][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.958517][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.979164][T25692] veth0_macvtap: entered promiscuous mode [ 1223.989370][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1223.997070][T15984] usb 3-1: Using ep0 maxpacket: 16 [ 1224.018768][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.029016][T25692] veth1_macvtap: entered promiscuous mode [ 1224.047312][T15984] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1224.061732][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.075542][T15984] usb 3-1: config 0 has no interface number 0 [ 1224.093459][ T5808] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 1224.098239][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.102428][ T5808] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 1224.108193][T15984] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 1224.118092][ T5808] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 1224.129024][T25692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.156595][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.173939][T15984] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 1224.190785][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.203896][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.211641][T15984] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1224.221815][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.232023][T25692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.239402][T15984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.248236][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.263415][ T5808] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8 [ 1224.264280][T15984] usb 3-1: config 0 descriptor?? [ 1224.285407][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.304559][T13470] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.320031][T13470] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.330895][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.339567][ T5808] usb 1-1: USB disconnect, device number 69 [ 1224.373896][T25915] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1224.376942][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.398635][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.412992][T13470] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.422245][T13470] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.435708][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.443584][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.451952][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.459984][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.468717][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.479524][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.487698][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.508352][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.596897][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.614714][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.623487][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.633652][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.673816][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.688930][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.699778][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.707796][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.717015][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.726622][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.734570][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.744534][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.752196][T13413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.756747][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.760998][T13413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.768869][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.787065][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.797018][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.808245][T13454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.822681][T13454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.831650][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.842183][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.852356][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.861266][T25877] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 1224.994137][T25877] snd-usb-audio 8-1:0.0: Runtime PM usage count underflow! [ 1225.017188][T15984] uclogic 0003:28BD:0071.0017: pen parameters not found [ 1225.024797][T15984] uclogic 0003:28BD:0071.0017: interface is invalid, ignoring [ 1225.039692][T21648] usb 8-1: USB disconnect, device number 8 [ 1225.563543][T25930] 9p: Bad value for 'wfdno' [ 1225.590157][T25930] netlink: 'syz.7.5562': attribute type 3 has an invalid length. [ 1225.640073][T25930] batadv_slave_1: entered promiscuous mode [ 1225.935469][T15984] net_ratelimit: 7 callbacks suppressed [ 1225.935488][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.269032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.411174][T25929] batadv_slave_1: left promiscuous mode [ 1226.736345][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.850883][T25945] netlink: 'syz.9.5566': attribute type 4 has an invalid length. [ 1226.975990][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.021588][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5568'. [ 1227.297700][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.379538][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.470232][T25912] Set syz1 is full, maxelem 65536 reached [ 1227.532653][T21648] usb 3-1: USB disconnect, device number 60 [ 1227.575772][ T5740] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1227.680109][T21162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1227.696852][T21162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1227.710602][T21162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1227.718898][T21162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1227.732677][T21162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1227.808879][ T5740] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1227.858944][ T5740] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1227.898877][ T5740] usb 10-1: Product: syz [ 1227.924376][ T5740] usb 10-1: Manufacturer: syz [ 1227.957683][ T5740] usb 10-1: SerialNumber: syz [ 1227.993917][ T5740] usb 10-1: config 0 descriptor?? [ 1228.016445][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.025116][T13413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.034061][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.210811][T25956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.251948][T25956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.304893][ T5740] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1228.750725][T25977] 0x000000000006-0x000000020000 : "" [ 1228.773675][T25977] ftl_cs: FTL header corrupt! [ 1229.144893][ T5740] peak_usb 10-1:0.0 can0: sending command failure: -8 [ 1229.155553][ T5740] peak_usb 10-1:0.0 can0: sending command failure: -8 [ 1229.162394][ T5740] peak_usb 10-1:0.0 can0: sending command failure: -8 [ 1229.289598][ T5740] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -8 [ 1229.439086][ T5740] usb 10-1: USB disconnect, device number 29 [ 1229.797281][T11933] Bluetooth: hci1: command tx timeout [ 1230.465925][ T5740] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1230.482626][T25959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.511516][T25959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.536886][T25959] bridge_slave_0: entered allmulticast mode [ 1230.636747][T25959] bridge_slave_0: entered promiscuous mode [ 1230.648713][T25959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.656382][T25959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.663486][T25959] bridge_slave_1: entered allmulticast mode [ 1230.670749][T25959] bridge_slave_1: entered promiscuous mode [ 1231.108248][ T5740] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1231.137541][T15984] net_ratelimit: 8 callbacks suppressed [ 1231.137557][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.421872][ T5740] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1231.440894][ T5740] usb 3-1: string descriptor 0 read error: -22 [ 1231.447343][ T5740] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1231.456928][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.472890][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.481160][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.524274][T25959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.616759][T25959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.690217][T25959] team0: Port device team_slave_0 added [ 1231.719943][T25959] team0: Port device team_slave_1 added [ 1231.808560][T25959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.815675][T25959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.843949][T25959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.857033][T11933] Bluetooth: hci1: command tx timeout [ 1231.868992][T25959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.879139][T25959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.907187][T25959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.977967][T25959] hsr_slave_0: entered promiscuous mode [ 1231.984888][T25959] hsr_slave_1: entered promiscuous mode [ 1231.994265][T25959] debugfs: 'hsr0' already exists in 'hsr' [ 1232.000625][T25959] Cannot create hsr debugfs directory [ 1232.176403][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.258437][T21648] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1232.436286][T21648] usb 1-1: Using ep0 maxpacket: 8 [ 1232.459222][T21648] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1232.550371][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.565511][T21648] usb 1-1: config 114 has an invalid interface number: 66 but max is 0 [ 1232.604037][T21648] usb 1-1: config 114 has no interface number 0 [ 1232.653940][T21648] usb 1-1: config 114 interface 66 altsetting 232 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1232.683360][ T29] audit: type=1400 audit(2000000244.608:2642): avc: denied { read } for pid=26028 comm="syz.9.5585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1232.734833][T21648] usb 1-1: config 114 interface 66 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1232.798957][T21648] usb 1-1: config 114 interface 66 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1232.815839][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.877192][T21648] usb 1-1: config 114 interface 66 has no altsetting 0 [ 1232.911270][T21648] usb 1-1: New USB device found, idVendor=12d1, idProduct=05e3, bcdDevice=b4.37 [ 1232.971492][ T29] audit: type=1400 audit(2000000244.888:2643): avc: denied { write } for pid=26022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.985247][T21648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.038121][T21648] usb 1-1: Product: 왧랔ₔ켅 [ 1233.064004][T21648] usb 1-1: Manufacturer: È‘ [ 1233.091991][T21648] usb 1-1: SerialNumber: á Š [ 1233.118388][T26019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1233.148966][T26019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1233.216227][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.251498][ T29] audit: type=1400 audit(2000000245.178:2644): avc: denied { write } for pid=26040 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.595127][T26046] netlink: 'syz.9.5587': attribute type 23 has an invalid length. [ 1233.665694][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.782806][T13475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.793301][T21527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.805459][T21648] option 1-1:114.66: GSM modem (1-port) converter detected [ 1233.816669][T26045] comedi comedi2: comedi_config --init_data is deprecated [ 1233.853789][T21648] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1233.874106][T21648] usb 1-1: USB disconnect, device number 70 [ 1233.935762][T11933] Bluetooth: hci1: command tx timeout [ 1233.954427][T21648] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1233.994306][T21648] option 1-1:114.66: device disconnected [ 1234.472229][ T29] audit: type=1400 audit(2000000246.388:2645): avc: denied { cmd } for pid=26057 comm="syz.9.5589" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1235.425856][ T29] audit: type=1400 audit(2000000247.348:2646): avc: denied { write } for pid=26047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1235.651373][ T29] audit: type=1400 audit(2000000247.578:2647): avc: denied { write } for pid=26071 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.225782][T11933] Bluetooth: hci1: command tx timeout [ 1236.256282][T15984] net_ratelimit: 5 callbacks suppressed [ 1236.256300][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.270403][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.339098][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.565043][T25959] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1236.615384][T25959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1236.643389][T25959] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1236.688577][T25959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1236.811526][T25959] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1237.031558][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.082071][T25959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.102725][T25959] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1237.237854][ T29] audit: type=1400 audit(2000000249.168:2648): avc: denied { write } for pid=26074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.270608][T25959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.298185][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.424169][T26094] 0x000000000006-0x000000020000 : "" [ 1237.442850][T26094] ftl_cs: FTL header corrupt! [ 1237.732560][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.747088][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.807846][T25991] usb 3-1: 1:1: usb_set_interface failed (-110) [ 1237.820108][T21648] usb 3-1: USB disconnect, device number 61 [ 1238.241001][ T29] audit: type=1400 audit(2000000250.168:2649): avc: denied { write } for pid=26105 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1238.311561][T25959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.346123][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.458202][T25959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.735323][T13472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.737301][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.742491][T13472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.019059][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.026221][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.296968][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.069761][ T29] audit: type=1400 audit(2000000251.998:2650): avc: denied { write } for pid=26115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1240.429764][ T29] audit: type=1400 audit(2000000252.358:2651): avc: denied { write } for pid=26158 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1240.465350][T21648] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1240.607570][T26161] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1240.682880][T21648] usb 10-1: not running at top speed; connect to a high speed hub [ 1240.707969][T21648] usb 10-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1240.765549][T13030] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1240.784732][T21648] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1240.813722][T21648] usb 10-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 1240.844143][T21648] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.877187][T21648] usb 10-1: Product: syz [ 1240.883016][T25959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.897249][T21648] usb 10-1: Manufacturer: syz [ 1240.922233][T21648] usb 10-1: SerialNumber: syz [ 1240.936598][T13030] usb 8-1: Using ep0 maxpacket: 16 [ 1240.970964][T13030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.039641][T13030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.055696][ T5740] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1241.099337][T13030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1241.124140][T13030] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1241.164559][T13030] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.214936][T21648] usbhid 10-1:1.0: can't add hid device: -71 [ 1241.234823][T13030] usb 8-1: config 0 descriptor?? [ 1241.262697][T21648] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1241.273847][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 1241.320648][ T5740] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1241.340460][T21648] usb 10-1: USB disconnect, device number 30 [ 1241.374841][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.429687][ T5740] usb 1-1: Product: syz [ 1241.464488][ T9] net_ratelimit: 5 callbacks suppressed [ 1241.464500][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.482381][ T5740] usb 1-1: Manufacturer: syz [ 1241.504298][ T5740] usb 1-1: SerialNumber: syz [ 1241.519256][ T29] audit: type=1400 audit(2000000253.448:2652): avc: denied { write } for pid=26171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.565461][ T5740] usb 1-1: config 0 descriptor?? [ 1241.844960][ T29] audit: type=1400 audit(2000000253.768:2653): avc: denied { write } for pid=26192 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.883182][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.991456][T21648] usb 8-1: USB disconnect, device number 9 [ 1242.034298][T26196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.091009][T26196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.095381][ T5740] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1242.138379][T26199] overlayfs: conflicting lowerdir path [ 1242.156632][ T29] audit: type=1400 audit(2000000254.058:2654): avc: denied { remount } for pid=26193 comm="syz.9.5609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1242.335992][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.503786][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.627075][T26207] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5610'. [ 1242.933598][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.067583][T26213] 0x000000000006-0x000000020000 : "" [ 1243.085498][T26213] ftl_cs: FTL header corrupt! [ 1243.508084][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.570236][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.857873][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.937555][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.012091][ T29] audit: type=1400 audit(2000000255.938:2655): avc: denied { write } for pid=26198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1244.105644][T16159] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1244.190590][ T29] audit: type=1400 audit(2000000256.118:2656): avc: denied { write } for pid=26222 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1244.305740][T16159] usb 8-1: Using ep0 maxpacket: 32 [ 1244.327092][T16159] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1244.382866][T16159] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1244.404263][T16159] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1244.435313][T16159] usb 8-1: Product: syz [ 1244.459048][T16159] usb 8-1: Manufacturer: syz [ 1244.480040][T16159] usb 8-1: SerialNumber: syz [ 1244.513233][T16159] usb 8-1: config 0 descriptor?? [ 1244.534538][T26217] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1244.580332][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.658105][ T1982] block nbd1: Possible stuck request ffff888027fc5080: control (read@0,1024B). Runtime 240 seconds [ 1244.668932][ T1982] block nbd1: Possible stuck request ffff888027fc5240: control (read@1024,3072B). Runtime 240 seconds [ 1244.776260][ T29] audit: type=1400 audit(2000000256.698:2657): avc: denied { write } for pid=26224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1244.945005][ T29] audit: type=1400 audit(2000000256.868:2658): avc: denied { write } for pid=26235 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1245.552547][T16159] usb 1-1: USB disconnect, device number 71 [ 1245.560284][ T5740] usb 8-1: USB disconnect, device number 10 [ 1246.038964][T25959] veth0_vlan: entered promiscuous mode [ 1246.064044][T25959] veth1_vlan: entered promiscuous mode [ 1246.133869][T25959] veth0_macvtap: entered promiscuous mode [ 1246.180618][T25959] veth1_macvtap: entered promiscuous mode [ 1246.203031][T25959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.216324][T25959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.248224][T13470] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.288002][ T29] audit: type=1400 audit(2000000258.208:2659): avc: denied { write } for pid=26239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1246.321578][T13471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.345707][T13471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.407898][T13471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.515396][ T5740] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1246.568875][ T29] audit: type=1400 audit(2000000258.488:2660): avc: denied { write } for pid=26275 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1246.575978][T15984] net_ratelimit: 4 callbacks suppressed [ 1246.575993][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.674611][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.753415][T13474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.788640][ T5740] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1246.793594][T13474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.832340][ T5740] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1246.925172][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.964337][T13425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.995030][ T5740] usb 8-1: Product: syz [ 1247.001130][T13425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.066279][T26284] 0x000000000006-0x000000020000 : "" [ 1247.084068][T26284] ftl_cs: FTL header corrupt! [ 1247.513692][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.560226][ T5740] usb 8-1: Manufacturer: syz [ 1247.568603][ T5740] usb 8-1: SerialNumber: syz [ 1247.576050][ T5740] usb 8-1: config 0 descriptor?? [ 1247.773042][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.840795][T26271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.889548][T26271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.977227][ T5740] peak_usb 8-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1248.078006][T26297] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1248.271223][ T5740] peak_usb 8-1:0.0 can0: sending command failure: -8 [ 1248.308079][ T5740] peak_usb 8-1:0.0 can0: sending command failure: -8 [ 1248.342148][ T5740] peak_usb 8-1:0.0 can0: sending command failure: -8 [ 1248.353518][ T29] audit: type=1400 audit(2000000260.278:2661): avc: denied { write } for pid=26282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1248.416835][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.575758][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.692093][T26312] 9pnet_fd: Insufficient options for proto=fd [ 1248.702208][ T29] audit: type=1400 audit(2000000260.618:2662): avc: denied { mounton } for pid=26303 comm="syz.2.5622" path="/42/file0" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1249.119292][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.221676][ T5740] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -8 [ 1249.232742][ T29] audit: type=1400 audit(2000000261.158:2663): avc: denied { write } for pid=26310 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1249.400087][ T5740] usb 8-1: USB disconnect, device number 11 [ 1249.596081][T26321] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1249.598221][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1249.670405][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.966346][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.226953][ T29] audit: type=1400 audit(2000000262.148:2664): avc: denied { listen } for pid=26337 comm="syz.7.5629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1252.008083][T15984] net_ratelimit: 2 callbacks suppressed [ 1252.008096][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.022613][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.031401][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.093733][T26366] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5634'. [ 1252.183824][ T29] audit: type=1400 audit(2000000264.108:2665): avc: denied { read write } for pid=26361 comm="syz.7.5633" name="file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1252.230004][T26365] Bluetooth: hci0: expected 274 bytes, got 7 bytes [ 1252.316631][ T29] audit: type=1400 audit(2000000264.108:2666): avc: denied { open } for pid=26361 comm="syz.7.5633" path="/30/file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1252.496275][ T29] audit: type=1400 audit(2000000264.138:2667): avc: denied { write } for pid=26327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1252.543176][ T29] audit: type=1400 audit(2000000264.458:2668): avc: denied { write } for pid=26372 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1252.626163][T26376] 0x000000000006-0x000000020000 : "" [ 1252.645845][T26376] ftl_cs: FTL header corrupt! [ 1253.038343][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.052068][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.064359][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.072905][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.104026][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.113863][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.055720][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.066681][T26396] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1255.112092][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5640'. [ 1255.374034][ T9] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1255.492008][T26421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5645'. [ 1256.002959][ T29] audit: type=1400 audit(2000000267.928:2669): avc: denied { write } for pid=26385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.054233][ T9] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 1256.083878][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.182196][ T9] usb 7-1: config 0 has no interface number 0 [ 1256.206996][ T9] usb 7-1: config 0 interface 205 has no altsetting 0 [ 1256.232634][ T9] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1256.283936][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.360886][ T9] usb 7-1: Product: syz [ 1256.422519][ T9] usb 7-1: Manufacturer: syz [ 1256.467387][ T9] usb 7-1: SerialNumber: syz [ 1256.642956][ T29] audit: type=1400 audit(2000000268.498:2670): avc: denied { write } for pid=26429 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.762577][ T9] usb 7-1: config 0 descriptor?? [ 1256.954291][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1257.120020][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1257.195283][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1257.220480][ T10] net_ratelimit: 6 callbacks suppressed [ 1257.220496][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.242777][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.256666][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1257.287410][ T9] usb 7-1: media controller created [ 1257.299481][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1257.353990][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1257.374687][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1257.414851][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51 [ 1257.497726][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1257.508837][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1257.555282][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1257.663663][ T9] usb 7-1: USB disconnect, device number 12 [ 1257.713080][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1257.720142][ T10] dvb-usb: error while querying for an remote control event. [ 1257.974652][T26463] netlink: 'syz.0.5653': attribute type 5 has an invalid length. [ 1257.982596][T26463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5653'. [ 1258.097408][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.255868][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.385815][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.440418][T26447] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1258.637148][T26470] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1258.678041][T26460] dvb-usb: bulk message failed: -22 (7/0) [ 1258.766169][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1258.908417][T26481] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1258.948980][T26481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1259.003706][ T29] audit: type=1400 audit(2000000270.928:2671): avc: denied { write } for pid=26444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.137109][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.219900][ T29] audit: type=1400 audit(2000000271.148:2672): avc: denied { write } for pid=26495 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.382110][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.461655][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.505602][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1259.516488][T16159] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1259.656537][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1259.667547][ T29] audit: type=1400 audit(2000000271.588:2673): avc: denied { write } for pid=26503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.701755][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1259.713522][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1259.723907][T16159] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1259.734068][T16159] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1259.749816][ T29] audit: type=1400 audit(2000000271.668:2674): avc: denied { write } for pid=26525 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.769028][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.774570][T16159] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1259.790700][T16159] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1259.806682][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1259.815256][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.816656][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.825318][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.832260][ T9] usb 1-1: Product: syz [ 1259.844594][T16159] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1259.862188][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.871580][ T9] usb 1-1: Manufacturer: syz [ 1259.875142][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.878604][ T9] usb 1-1: SerialNumber: syz [ 1259.892110][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.906914][T16159] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1259.907108][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.927514][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.927788][T16159] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1259.934990][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1259.947292][ T9] usb 1-1: config 0 descriptor?? [ 1259.962559][T16159] usb 10-1: Product: syz [ 1259.969818][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1259.979503][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1260.014481][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input52 [ 1260.026212][T16159] usb 10-1: Manufacturer: syz [ 1260.045084][ T5808] hid-generic 0006:0008:0001.0019: unknown main item tag 0x0 [ 1260.332141][ T29] audit: type=1326 audit(2000000272.238:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1260.427869][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.499121][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.558043][ T5808] hid-generic 0006:0008:0001.0019: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1260.731136][ T29] audit: type=1326 audit(2000000272.248:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1261.188930][ T29] audit: type=1326 audit(2000000272.308:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1261.408684][T16159] cdc_wdm 10-1:1.0: skipping garbage [ 1261.414441][T16159] cdc_wdm 10-1:1.0: skipping garbage [ 1261.426691][T16159] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1261.436201][T16159] cdc_wdm 10-1:1.0: Unknown control protocol [ 1261.451790][T16159] usb 10-1: USB disconnect, device number 31 [ 1261.460947][ T9] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1261.501523][ T29] audit: type=1326 audit(2000000272.338:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1261.607218][T26541] fido_id[26541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1261.644076][T26499] netlink: 'syz.0.5660': attribute type 1 has an invalid length. [ 1261.660429][ T9] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1261.711920][ T29] audit: type=1326 audit(2000000272.348:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1261.855537][T26499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1261.896136][ T29] audit: type=1326 audit(2000000272.368:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1261.991511][ T29] audit: type=1326 audit(2000000272.368:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1262.037210][T26499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.048945][T26499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.060577][ T29] audit: type=1326 audit(2000000272.368:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1262.092153][ T29] audit: type=1326 audit(2000000272.408:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1262.120668][ T29] audit: type=1326 audit(2000000272.408:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1262.172453][ T29] audit: type=1326 audit(2000000272.408:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1262.199305][T21527] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1262.210296][ T29] audit: type=1326 audit(2000000272.418:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.9.5659" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f839179de99 code=0x7ffc0000 [ 1262.225545][T16159] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1262.357292][T21527] usb 8-1: Using ep0 maxpacket: 8 [ 1262.363788][T21527] usb 8-1: config index 0 descriptor too short (expected 128, got 36) [ 1262.375107][T21527] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1262.400672][T21527] usb 8-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1262.415973][T16159] usb 7-1: Using ep0 maxpacket: 32 [ 1262.419660][T21527] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.425926][T16159] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1262.441152][T21527] usb 8-1: config 0 descriptor?? [ 1262.447204][ T5740] usb 1-1: USB disconnect, device number 72 [ 1262.451233][T16159] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.483658][T16159] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1262.497937][ T9] net_ratelimit: 4 callbacks suppressed [ 1262.497951][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.519251][T16159] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1262.529597][T16159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.543079][T16159] usb 7-1: config 0 descriptor?? [ 1262.582130][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.829407][T26580] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1262.915353][T26580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1263.015918][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.210809][T16159] pyra 0003:1E7D:2C24.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.6-1/input0 [ 1263.536554][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.051551][T21527] usb 8-1: USB disconnect, device number 12 [ 1264.177341][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.185867][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.198110][T16159] usb 7-1: USB disconnect, device number 13 [ 1264.542701][T26596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5682'. [ 1264.813826][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.846191][T26602] batman_adv: batadv0: Adding interface: dummy0 [ 1264.852510][T26602] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.891331][T26602] batman_adv: batadv0: Interface activated: dummy0 [ 1264.950852][T26607] batadv0: mtu less than device minimum [ 1264.968326][T26607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1264.982396][T26607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1266.360305][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1266.360321][ T29] audit: type=1400 audit(2000000278.288:2713): avc: denied { write } for pid=26641 comm="syz.7.5694" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1266.651792][T26649] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1266.673723][ T189] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1266.846652][ T189] usb 8-1: Using ep0 maxpacket: 8 [ 1266.869721][ T189] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.899329][ T189] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 15 [ 1266.933891][ T189] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1266.984537][ T189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.022025][ T189] usb 8-1: Product: syz [ 1267.040698][ T189] usb 8-1: Manufacturer: syz [ 1267.052032][ T189] usb 8-1: SerialNumber: syz [ 1267.127723][ T189] usb 8-1: config 0 descriptor?? [ 1267.605670][ T10] net_ratelimit: 26 callbacks suppressed [ 1267.605698][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.625475][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.662654][T13472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.673511][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.937463][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.007063][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.062275][ T5808] usb 8-1: USB disconnect, device number 13 [ 1268.190941][T26659] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1268.254749][T26659] block device autoloading is deprecated and will be removed. [ 1268.268289][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.392956][ T29] audit: type=1400 audit(2000000280.318:2714): avc: denied { listen } for pid=26665 comm="syz.0.5704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1268.434212][T26668] binder: 26667:26668 ioctl 4048587b 200000000340 returned -22 [ 1268.660860][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.976904][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.193519][ T29] audit: type=1400 audit(2000000281.118:2715): avc: denied { associate } for pid=26680 comm="syz.7.5708" name="proc" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1269.224056][T26673] netlink: 'syz.0.5707': attribute type 10 has an invalid length. [ 1269.231969][T26673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5707'. [ 1269.243742][T26673] geneve1: entered promiscuous mode [ 1269.249582][T26673] team0: Port device geneve1 added [ 1269.612369][T26701] Set syz1 is full, maxelem 2 reached [ 1269.868261][T26708] 9p: Unknown uid 00000000004294967295 [ 1269.881041][T26708] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1270.278737][T13030] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1270.465412][T13030] usb 1-1: Using ep0 maxpacket: 16 [ 1270.476840][T13030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.501128][T13030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.628568][T13030] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1271.673763][T13030] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1271.688299][T13030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.699424][T13030] usb 1-1: config 0 descriptor?? [ 1272.196594][T13030] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 1272.304456][T13030] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001B/input/input54 [ 1272.369028][ T29] audit: type=1400 audit(2000000284.298:2716): avc: denied { read } for pid=26735 comm="syz.7.5723" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1272.413570][T26736] netlink: 'syz.7.5723': attribute type 11 has an invalid length. [ 1272.423873][T13030] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1272.442530][T13030] usb 1-1: USB disconnect, device number 73 [ 1272.451609][ T29] audit: type=1400 audit(2000000284.298:2717): avc: denied { open } for pid=26735 comm="syz.7.5723" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1272.501495][ T29] audit: type=1400 audit(2000000284.338:2718): avc: denied { ioctl } for pid=26735 comm="syz.7.5723" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1272.659985][ T189] net_ratelimit: 9 callbacks suppressed [ 1272.660002][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.766556][T26742] fido_id[26742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1272.816878][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.869537][ T5740] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1273.020738][T26759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5731'. [ 1273.036233][ T5740] usb 10-1: Using ep0 maxpacket: 32 [ 1273.046415][ T5740] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1273.060511][ T5740] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 156, changing to 7 [ 1273.087734][ T5740] usb 10-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1273.102605][ T5740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.124182][ T5740] usb 10-1: Product: syz [ 1273.129996][ T5740] usb 10-1: Manufacturer: syz [ 1273.137908][ T5740] usb 10-1: SerialNumber: syz [ 1273.226993][T26763] binder: 26762:26763 ioctl c0306201 200000000640 returned -22 [ 1273.245394][ T5808] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1273.415274][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 1273.434477][ T5740] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1273.443243][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.458433][T13472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.462375][ T5740] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1273.476089][T24862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.485102][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.489592][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.521983][ T5808] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1273.531431][ T5740] usb 10-1: USB disconnect, device number 32 [ 1273.545921][T13030] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1273.548897][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.581874][ T5808] usb 3-1: config 0 descriptor?? [ 1273.700082][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.745435][T13030] usb 1-1: Using ep0 maxpacket: 32 [ 1273.751492][T26769] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1273.763605][T13030] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1273.773372][T26769] bond1 (unregistering): Released all slaves [ 1273.783672][T13030] usb 1-1: config 0 has no interface number 0 [ 1273.794021][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5735'. [ 1273.811757][T13030] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1273.827881][T26771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5735'. [ 1273.845381][T13030] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1273.856556][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.875332][T13030] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1273.902060][T13030] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1273.928308][T13030] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1273.945583][T13030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.961846][T13030] usb 1-1: Product: syz [ 1273.966613][T13030] usb 1-1: Manufacturer: syz [ 1273.972239][T13030] usb 1-1: SerialNumber: syz [ 1273.982851][T13030] usb 1-1: config 0 descriptor?? [ 1274.003164][T26765] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1274.086613][T26776] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5737'. [ 1274.276819][ T5808] usbhid 3-1:0.0: can't add hid device: -71 [ 1274.294266][ T5808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1274.335579][ T5808] usb 3-1: USB disconnect, device number 62 [ 1274.379772][T26780] No source specified [ 1274.622703][T13030] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1274.655623][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.683601][T13030] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 1274.732114][T26780] veth3: entered promiscuous mode [ 1274.742212][ T1982] block nbd1: Possible stuck request ffff888027fc5080: control (read@0,1024B). Runtime 270 seconds [ 1274.753244][ T1982] block nbd1: Possible stuck request ffff888027fc5240: control (read@1024,3072B). Runtime 270 seconds [ 1274.755408][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.773078][T26780] veth3: entered allmulticast mode [ 1274.860483][T13030] usb 1-1: USB disconnect, device number 74 [ 1274.911241][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.066064][T13030] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1275.384665][T26809] nbd: must specify a size in bytes for the device [ 1275.391593][ T5808] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1275.631876][ T5808] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.644891][ T29] audit: type=1400 audit(2000000287.578:2719): avc: denied { write } for pid=26790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.662710][ T5808] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1275.695598][ T5808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.835569][ T5808] usb 10-1: config 0 descriptor?? [ 1276.291352][ T5808] pwc: Askey VC010 type 2 USB webcam detected. [ 1276.349465][ T29] audit: type=1400 audit(2000000288.278:2720): avc: denied { write } for pid=26819 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.543989][ T5808] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1276.603205][ T5808] pwc: recv_control_msg error -32 req 02 val 2700 [ 1276.823236][ T29] audit: type=1800 audit(2000000288.738:2721): pid=26836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5753" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1276.892204][ T5808] pwc: recv_control_msg error -71 req 04 val 1000 [ 1276.924946][ T5808] pwc: recv_control_msg error -71 req 04 val 1300 [ 1276.949882][T26838] Bluetooth: MGMT ver 1.23 [ 1276.965628][ T5808] pwc: recv_control_msg error -71 req 04 val 1400 [ 1276.996754][ T5808] pwc: recv_control_msg error -71 req 02 val 2000 [ 1277.022880][ T5808] pwc: recv_control_msg error -71 req 02 val 2100 [ 1277.048566][ T5808] pwc: recv_control_msg error -71 req 04 val 1500 [ 1277.092406][ T5808] pwc: recv_control_msg error -71 req 02 val 2500 [ 1277.114746][ T5808] pwc: recv_control_msg error -71 req 02 val 2400 [ 1277.139413][ T5808] pwc: recv_control_msg error -71 req 02 val 2600 [ 1277.170739][ T5808] pwc: recv_control_msg error -71 req 02 val 2900 [ 1277.184824][ T5808] pwc: recv_control_msg error -71 req 02 val 2800 [ 1277.218871][ T5808] pwc: recv_control_msg error -71 req 04 val 1100 [ 1277.248517][ T5808] pwc: recv_control_msg error -71 req 04 val 1200 [ 1277.285754][ T5808] pwc: Registered as video103. [ 1277.316865][ T5808] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input55 [ 1277.381147][ T5808] usb 10-1: USB disconnect, device number 33 [ 1277.546776][T16159] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1277.605285][T24862] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1277.631172][T26860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1277.646500][ T29] audit: type=1400 audit(2000000289.578:2722): avc: denied { write } for pid=26834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.695482][ T189] net_ratelimit: 6 callbacks suppressed [ 1277.695497][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.776372][T16159] usb 8-1: Using ep0 maxpacket: 8 [ 1277.788140][T16159] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1277.799328][T24862] usb 7-1: not running at top speed; connect to a high speed hub [ 1277.812667][T24862] usb 7-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1277.836446][T24862] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1277.863009][T24862] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1277.889496][T24862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.910395][ T29] audit: type=1400 audit(2000000289.828:2723): avc: denied { write } for pid=26863 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.941003][T24862] usb 7-1: Product: syz [ 1277.947524][T24862] usb 7-1: Manufacturer: syz [ 1277.948397][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.952142][T24862] usb 7-1: SerialNumber: syz [ 1277.972562][T16159] usb 8-1: config 0 has an invalid interface number: 49 but max is 0 [ 1278.022144][T16159] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.076887][T16159] usb 8-1: config 0 has no interface number 0 [ 1278.096016][T16159] usb 8-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.110007][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.128053][T16159] usb 8-1: config 0 interface 49 has no altsetting 0 [ 1278.140256][T16159] usb 8-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 1278.150768][T16159] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.159744][T16159] usb 8-1: Product: syz [ 1278.165043][T16159] usb 8-1: Manufacturer: syz [ 1278.171649][T16159] usb 8-1: SerialNumber: syz [ 1278.184636][T16159] usb 8-1: config 0 descriptor?? [ 1278.277231][T24862] usbhid 7-1:1.0: can't add hid device: -71 [ 1278.306507][T24862] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1278.342545][T24862] usb 7-1: USB disconnect, device number 14 [ 1278.508133][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.524076][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.537782][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.606359][ T189] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1278.695793][T16159] rtsx_usb 8-1:0.49: probe with driver rtsx_usb failed with error -22 [ 1278.732047][T16159] usb 8-1: USB disconnect, device number 14 [ 1278.778661][ T189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1278.813397][ T189] usb 1-1: not running at top speed; connect to a high speed hub [ 1278.857364][ T189] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 1279.779111][ T189] usb 1-1: config 0 has no interface number 0 [ 1279.793570][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.804168][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.814028][ T189] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 1279.826144][ T189] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1279.836819][ T189] usb 1-1: string descriptor 0 read error: -22 [ 1279.844296][ T189] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1279.855779][ T189] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1279.871414][ T189] usb 1-1: config 0 descriptor?? [ 1279.877559][T26870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1279.928742][ T189] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input56 [ 1280.035346][T24862] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 1280.094777][ C1] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 1280.159146][ T189] usb 1-1: USB disconnect, device number 75 [ 1280.165443][T15147] udevd[15147]: Error opening device "/dev/input/event4": Input/output error [ 1280.199796][T15147] udevd[15147]: Unable to EVIOCGABS device "/dev/input/event4" [ 1280.228881][T24862] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1280.237067][T15147] udevd[15147]: Unable to EVIOCGABS device "/dev/input/event4" [ 1281.120898][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.129158][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.224024][T24862] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1281.263537][T24862] usb 10-1: can't read configurations, error -71 [ 1281.654114][T26909] 0x000000000006-0x000000020000 : "" [ 1281.673074][T26909] ftl_cs: FTL header corrupt! [ 1283.227469][ T189] net_ratelimit: 8 callbacks suppressed [ 1283.227483][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.241303][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.678400][T26936] 0x000000000006-0x000000020000 : "" [ 1283.738834][T26936] ftl_cs: FTL header corrupt! [ 1284.094433][T25367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.103508][T24862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.218104][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.264171][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.272417][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.280809][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.982759][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.992847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.995307][T24862] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1285.048086][T26960] fuse: Bad value for 'rootmode' [ 1285.166336][T24862] usb 7-1: device descriptor read/64, error -71 [ 1285.465679][ T5740] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1285.480158][T24862] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1285.728329][T24862] usb 7-1: device descriptor read/64, error -71 [ 1285.746608][ T5740] usb 10-1: Using ep0 maxpacket: 16 [ 1285.765281][ T5740] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.812877][ T5740] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1285.856115][T24862] usb usb7-port1: attempt power cycle [ 1285.913192][ T5740] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1286.011567][ T5740] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1286.105921][ T5740] usb 10-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1286.133403][ T5740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.168553][ T5740] usb 10-1: Product: syz [ 1286.196924][ T5740] usb 10-1: Manufacturer: syz [ 1286.221668][ T5740] usb 10-1: SerialNumber: syz [ 1286.305821][T24862] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1286.388066][T24862] usb 7-1: device descriptor read/8, error -71 [ 1286.492589][T26977] 0x000000000006-0x000000020000 : "" [ 1286.884841][T26977] ftl_cs: FTL header corrupt! [ 1287.009167][T26960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5777'. [ 1287.045374][T24862] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1287.065768][T24862] usb 7-1: device descriptor read/8, error -71 [ 1287.185962][T24862] usb usb7-port1: unable to enumerate USB device [ 1287.265528][T21648] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1287.709981][T21648] usb 1-1: Using ep0 maxpacket: 32 [ 1287.765962][T21648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1287.815147][T21648] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1287.953709][T21648] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1288.013858][T21648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.088324][T21648] usb 1-1: Product: syz [ 1288.127793][T21648] usb 1-1: Manufacturer: syz [ 1288.203006][T21648] usb 1-1: SerialNumber: syz [ 1288.524355][T21648] usb 1-1: config 0 descriptor?? [ 1288.977082][ T9] net_ratelimit: 7 callbacks suppressed [ 1288.977100][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.991592][T13030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.036764][T21648] hub 1-1:0.0: bad descriptor, ignoring hub [ 1289.042855][T21648] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1289.050988][ T5740] usb 10-1: selecting invalid altsetting 0 [ 1289.099127][T21648] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input57 [ 1289.157051][T21648] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1289.301489][ T5740] usb 10-1: USB disconnect, device number 36 [ 1289.481775][T21648] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1290.231569][T27018] 0x000000000006-0x000000020000 : "" [ 1290.243635][T27018] ftl_cs: FTL header corrupt! [ 1290.259552][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.268045][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.278960][T15984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.302739][T13472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.311468][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.321416][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.342678][T16159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.445928][T21527] usb 1-1: USB disconnect, device number 76 [ 1290.456978][T15113] udevd[15113]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.537883][T27028] 9p: Unknown uid 00000000004294967295 [ 1290.544126][T27028] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1290.738567][ T30] INFO: task syz.8.5206:24297 blocked for more than 143 seconds. SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1290.824812][ T30] Tainted: G L syzkaller #0 [ 1290.875757][ T29] audit: type=1400 audit(2000000302.728:2724): avc: denied { write } for pid=5595 comm="syz-executor" path="pipe:[4564]" dev="pipefs" ino=4564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1290.980705][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1291.030199][ T30] task:syz.8.5206 state:D stack:26776 pid:24297 tgid:24296 ppid:15558 task_flags:0x400140 flags:0x00080802 [ 1291.053213][ T30] Call Trace: [ 1291.059290][ T30] [ 1291.062444][ T30] __schedule+0x125c/0x6730 [ 1291.096669][T27030] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1291.118317][ T30] ? __pfx___schedule+0x10/0x10 [ 1291.144155][ T30] ? find_held_lock+0x2b/0x80 [ 1291.161797][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5800'. [ 1291.172266][ T30] ? schedule+0x225/0x2c0 [ 1291.181503][ T30] schedule+0xdd/0x2c0 [ 1291.233160][ T30] schedule_preempt_disabled+0x13/0x30 [ 1291.245311][ T30] __mutex_lock+0xccc/0x1bd0 [ 1291.255270][ T30] ? sync_bdevs+0x153/0x480 [ 1291.265525][ T30] ? __lock_acquire+0x49f/0x1a40 [ 1291.271387][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1291.276586][ T30] ? iput.part.0+0x1a0/0x1050 [ 1291.281288][ T30] ? sync_bdevs+0xd7/0x480 [ 1291.285946][ T30] ? sync_bdevs+0x153/0x480 [ 1291.290472][ T30] sync_bdevs+0x153/0x480 [ 1291.294809][ T30] ksys_sync+0xb0/0xf0 [ 1291.300595][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.313581][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1291.318451][ T30] ? do_syscall_64+0x90/0x870 [ 1291.323131][ T30] __do_sys_sync+0xe/0x20 [ 1291.327934][ T30] do_syscall_64+0x115/0x870 [ 1291.332545][ T30] ? clear_bhb_loop+0x40/0x90 [ 1291.337287][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.343187][ T30] RIP: 0033:0x7f418799de99 [ 1291.347717][ T30] RSP: 002b:00007f41887e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1291.356472][ T30] RAX: ffffffffffffffda RBX: 00007f4187c25fa0 RCX: 00007f418799de99 [ 1291.364440][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1291.372740][ T30] RBP: 00007f4187c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.381427][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.389903][ T30] R13: 00007f4187c26038 R14: 00007f4187c25fa0 R15: 00007ffe51cb5a98 [ 1291.398111][ T30] [ 1291.565453][ T30] [ 1291.565453][ T30] Showing all locks held in the system: [ 1291.603198][ T30] 1 lock held by khungtaskd/30: [ 1291.621984][ T30] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1291.635319][ T30] 2 locks held by getty/5365: [ 1291.640035][ T30] #0: ffff888033a540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1291.650870][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1291.661745][ T30] 2 locks held by kworker/1:4/5740: [ 1291.667148][ T30] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1291.677812][ T30] #1: ffffc90004e07d08 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1291.687826][ T30] 1 lock held by udevd/16993: [ 1291.692526][ T30] #0: ffff888027eb8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1291.702193][ T30] 1 lock held by syz-executor/22318: [ 1291.708072][ T30] 1 lock held by syz.8.5206/24297: [ 1291.713207][ T30] #0: ffff888027eb8350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1291.723223][ T30] 2 locks held by syz-executor/25692: [ 1291.728985][ T30] #0: ffff888064cdcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1291.738830][ T30] #1: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1291.749382][ T30] 1 lock held by syz.3.5532/25748: [ 1291.754509][ T30] #0: ffff888027eb8350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1291.764395][ T30] 1 lock held by syz.7.5799/27025: [ 1291.777559][ T30] #0: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1291.795425][ T30] 2 locks held by syz.6.5800/27030: [ 1291.806043][ T30] #0: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x307/0xb40 [ 1291.823239][ T30] #1: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1291.862400][ T30] [ 1291.870094][ T30] ============================================= [ 1291.870094][ T30] [ 1291.896071][ T30] NMI backtrace for cpu 1 [ 1291.896089][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.896112][ T30] Tainted: [L]=SOFTLOCKUP [ 1291.896118][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1291.896128][ T30] Call Trace: [ 1291.896134][ T30] [ 1291.896141][ T30] dump_stack_lvl+0x100/0x190 [ 1291.896170][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1291.896199][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1291.896226][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1291.896256][ T30] sys_info+0x141/0x190 [ 1291.896279][ T30] watchdog+0xcb1/0x1030 [ 1291.896304][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1291.896322][ T30] ? __pfx_watchdog+0x10/0x10 [ 1291.896344][ T30] ? __kthread_parkme+0x18c/0x230 [ 1291.896372][ T30] ? kthread+0x13a/0x450 [ 1291.896387][ T30] ? __pfx_watchdog+0x10/0x10 [ 1291.896405][ T30] kthread+0x370/0x450 [ 1291.896420][ T30] ? __pfx_kthread+0x10/0x10 [ 1291.896437][ T30] ret_from_fork+0x72b/0xd50 [ 1291.896461][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1291.896485][ T30] ? __switch_to+0x800/0x10f0 [ 1291.896502][ T30] ? __pfx_kthread+0x10/0x10 [ 1291.896519][ T30] ret_from_fork_asm+0x1a/0x30 [ 1291.896554][ T30] [ 1291.896560][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1292.029351][ C0] NMI backtrace for cpu 0 [ 1292.029367][ C0] CPU: 0 UID: 0 PID: 25367 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1292.029387][ C0] Tainted: [L]=SOFTLOCKUP [ 1292.029393][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1292.029402][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1292.029424][ C0] RIP: 0010:lock_acquire+0x10/0x370 [ 1292.029442][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 89 f6 41 55 45 89 c5 <41> 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 65 4c 8b 3d e0 4d [ 1292.029455][ C0] RSP: 0018:ffffc90006747130 EFLAGS: 00000046 [ 1292.029465][ C0] RAX: 0000000000000003 RBX: ffff8880b843b508 RCX: 0000000000000000 [ 1292.029475][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b843b520 [ 1292.029484][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1292.029492][ C0] R10: ffffffff912273d7 R11: 000000000000758b R12: ffffed1017087874 [ 1292.029501][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880b843b508 [ 1292.029510][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1292.029524][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1292.029533][ C0] CR2: 00007f8f385eb580 CR3: 000000000e994000 CR4: 00000000003526f0 [ 1292.029543][ C0] Call Trace: [ 1292.029548][ C0] [ 1292.029554][ C0] _raw_spin_lock_nested+0x31/0x40 [ 1292.029574][ C0] ? raw_spin_rq_lock_nested+0x88/0x140 [ 1292.029593][ C0] raw_spin_rq_lock_nested+0x88/0x140 [ 1292.029611][ C0] ? preempt_schedule_common+0x42/0xc0 [ 1292.029625][ C0] __schedule+0x2cc/0x6730 [ 1292.029638][ C0] ? mark_held_locks+0x40/0x70 [ 1292.029654][ C0] ? ieee80211_inform_bss+0x8f5/0x1170 [ 1292.029678][ C0] ? kfree+0x22b/0x6c0 [ 1292.029699][ C0] ? __pfx___schedule+0x10/0x10 [ 1292.029713][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1292.029728][ C0] preempt_schedule_common+0x42/0xc0 [ 1292.029743][ C0] preempt_schedule_thunk+0x16/0x40 [ 1292.029758][ C0] ? cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 1292.029775][ C0] __local_bh_enable_ip+0xff/0x120 [ 1292.029794][ C0] cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 1292.029811][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1292.029827][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1292.029845][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1292.029870][ C0] ? stack_trace_save+0x8e/0xc0 [ 1292.029884][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1292.029900][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 1292.029917][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 1292.029935][ C0] ? __kmalloc_noprof+0x322/0x820 [ 1292.029949][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 1292.029969][ C0] ? cfg80211_wiphy_work+0x2b7/0x550 [ 1292.029986][ C0] ? process_one_work+0xa23/0x1940 [ 1292.030000][ C0] ? worker_thread+0x5ef/0xe50 [ 1292.030013][ C0] ? kthread+0x370/0x450 [ 1292.030025][ C0] ? ret_from_fork+0x72b/0xd50 [ 1292.030044][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1292.030064][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1292.030083][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1292.030100][ C0] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 1292.030121][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1292.030137][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1292.030155][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1292.030170][ C0] ? find_held_lock+0x2b/0x80 [ 1292.030189][ C0] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 1292.030207][ C0] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 1292.030228][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 1292.030247][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1292.030266][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1292.030287][ C0] ? rcu_is_watching+0x12/0xc0 [ 1292.030305][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 1292.030321][ C0] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 1292.030340][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1292.030363][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 1292.030383][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 1292.030402][ C0] process_one_work+0xa23/0x1940 [ 1292.030419][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1292.030436][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1292.030454][ C0] worker_thread+0x5ef/0xe50 [ 1292.030470][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1292.030484][ C0] ? kthread+0x13a/0x450 [ 1292.030495][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1292.030509][ C0] kthread+0x370/0x450 [ 1292.030521][ C0] ? __pfx_kthread+0x10/0x10 [ 1292.030534][ C0] ret_from_fork+0x72b/0xd50 [ 1292.030552][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1292.030569][ C0] ? rcu_is_watching+0x12/0xc0 [ 1292.030589][ C0] ? __switch_to+0x800/0x10f0 [ 1292.030602][ C0] ? __pfx_kthread+0x10/0x10 [ 1292.030616][ C0] ret_from_fork_asm+0x1a/0x30 [ 1292.030638][ C0] [ 1292.521530][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1292.528422][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1292.539081][ T30] Tainted: [L]=SOFTLOCKUP [ 1292.543382][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1292.553427][ T30] Call Trace: [ 1292.556688][ T30] [ 1292.559601][ T30] dump_stack_lvl+0x100/0x190 [ 1292.564269][ T30] vpanic+0x552/0x970 [ 1292.568231][ T30] ? __pfx_vpanic+0x10/0x10 [ 1292.572716][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1292.578863][ T30] panic+0xd1/0xe0 [ 1292.582565][ T30] ? __pfx_panic+0x10/0x10 [ 1292.586977][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1292.593118][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1292.599260][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1292.605400][ T30] ? watchdog.cold+0x1ec/0x234 [ 1292.610147][ T30] ? watchdog+0xcc1/0x1030 [ 1292.614547][ T30] watchdog.cold+0x1fd/0x234 [ 1292.619124][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1292.624922][ T30] ? __pfx_watchdog+0x10/0x10 [ 1292.629586][ T30] ? __kthread_parkme+0x18c/0x230 [ 1292.634602][ T30] ? kthread+0x13a/0x450 [ 1292.638838][ T30] ? __pfx_watchdog+0x10/0x10 [ 1292.643497][ T30] kthread+0x370/0x450 [ 1292.647550][ T30] ? __pfx_kthread+0x10/0x10 [ 1292.652123][ T30] ret_from_fork+0x72b/0xd50 [ 1292.656700][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1292.661800][ T30] ? __switch_to+0x800/0x10f0 [ 1292.666460][ T30] ? __pfx_kthread+0x10/0x10 [ 1292.671030][ T30] ret_from_fork_asm+0x1a/0x30 [ 1292.675791][ T30] [ 1292.678971][ T30] Kernel Offset: disabled [ 1292.683271][ T30] Rebooting in 86400 seconds..